August 2011 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2011:0982-1: moderate: minicom: fix lockdev support
by maintenance＠opensuse.org 31 Aug '11

31 Aug '11

openSUSE Recommended Update: minicom: fix lockdev support ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0982-1 Rating: moderate References: #713330 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes a regression introduced by the SUSE included lockdev patch which broke interoperability of minicom and mgetty. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch minicom-5069 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): minicom-2.5-5.8.1 References: https://bugzilla.novell.com/713330

1 0

openSUSE-RU-2011:0977-1: kdebase4-openSUSE: Fix build service search provider
by maintenance＠opensuse.org 30 Aug '11

30 Aug '11

openSUSE Recommended Update: kdebase4-openSUSE: Fix build service search provider ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0977-1 Rating: low References: #695417 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the build service search provider to search for openSUSE 11.4 packages by default (#695417) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch kdebase4-openSUSE-5043 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): kdebase4-openSUSE-11.4-33.42.1 kdebase4-runtime-branding-openSUSE-11.4-33.42.1 kdebase4-workspace-branding-openSUSE-11.4-33.42.1 kdelibs4-branding-openSUSE-11.4-33.42.1 kdm-branding-openSUSE-11.4-33.42.1 kio_sysinfo-11.4-33.42.1 kio_sysinfo-branding-openSUSE-11.4-33.42.1 - openSUSE 11.4 (noarch): kdebase4-openSUSE-lang-11.4-33.42.1 References: https://bugzilla.novell.com/695417

1 0

openSUSE-RU-2011:0976-1: valgrind: fix debugging of 32bit binaries
by maintenance＠opensuse.org 30 Aug '11

30 Aug '11

openSUSE Recommended Update: valgrind: fix debugging of 32bit binaries ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0976-1 Rating: low References: #705405 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: This update adds back the 32bit helpers for debugging 32bit applications on x86_64 (bnc#705405) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch valgrind-5053 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 3.6.1]: valgrind-3.6.1-1.12.1 valgrind-devel-3.6.1-1.12.1 References: https://bugzilla.novell.com/705405

1 0

openSUSE-RU-2011:0975-1: apparmor: Fix support for dovecot
by maintenance＠opensuse.org 30 Aug '11

30 Aug '11

openSUSE Recommended Update: apparmor: Fix support for dovecot ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0975-1 Rating: low References: #691072 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This profile update fixes access to the /var/mail symlink which points to /var/spool/mail Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch apache2-mod_apparmor-4985 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): apache2-mod_apparmor-2.5.1.r1445-52.61.1 apparmor-parser-2.5.1.r1445-52.63.1 libapparmor-devel-2.5.1.r1445-52.61.1 libapparmor1-2.5.1.r1445-52.61.1 pam_apparmor-2.5.1.r1445-52.61.1 perl-apparmor-2.5.1.r1445-52.61.1 tomcat_apparmor-2.5.1.r1445-52.61.1 - openSUSE 11.4 (x86_64): libapparmor1-32bit-2.5.1.r1445-52.61.1 pam_apparmor-32bit-2.5.1.r1445-52.61.1 - openSUSE 11.4 (noarch): apparmor-docs-2.5.1.r1445-52.63.1 apparmor-parser-lang-2.5.1.r1445-52.63.1 apparmor-profiles-2.5.1.r1445-52.63.1 apparmor-utils-2.5.1.r1445-52.63.1 apparmor-utils-lang-2.5.1.r1445-52.63.1 References: https://bugzilla.novell.com/691072

1 0

openSUSE-SU-2011:0972-1: moderate: libxcrypt update
by opensuse-security＠opensuse.org 30 Aug '11

30 Aug '11

openSUSE Security Update: libxcrypt update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0972-1 Rating: moderate References: #713727 Cross-References: CVE-2011-2483 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The security update for CVE-2011-2483 broke changing blowfish passwords if compat mode was turned on (default). This update fixes the regression. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libxcrypt-5049 - openSUSE 11.3: zypper in -t patch libxcrypt-5049 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libxcrypt-3.0.3-9.12.1 libxcrypt-devel-3.0.3-9.12.1 - openSUSE 11.4 (x86_64): libxcrypt-32bit-3.0.3-9.12.1 - openSUSE 11.3 (i586 x86_64): libxcrypt-3.0.3-5.11.1 libxcrypt-devel-3.0.3-5.11.1 - openSUSE 11.3 (x86_64): libxcrypt-32bit-3.0.3-5.11.1 References: http://support.novell.com/security/cve/CVE-2011-2483.html https://bugzilla.novell.com/713727

1 0

openSUSE-SU-2011:0970-1: moderate: man-pages update
by opensuse-security＠opensuse.org 30 Aug '11

30 Aug '11

openSUSE Security Update: man-pages update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0970-1 Rating: moderate References: #713389 Cross-References: CVE-2011-2483 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The crypt(3) manpage was updated to also list the 2y prefix. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch man-pages-5032 - openSUSE 11.3: zypper in -t patch man-pages-5032 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (noarch): man-pages-3.32-4.5.1 - openSUSE 11.3 (noarch): man-pages-3.25-2.3.1 References: http://support.novell.com/security/cve/CVE-2011-2483.html https://bugzilla.novell.com/713389

1 0

openSUSE-SU-2011:0957-2: important: MozillaFirefox: Update to Firefox 6
by opensuse-security＠opensuse.org 29 Aug '11

29 Aug '11

openSUSE Security Update: MozillaFirefox: Update to Firefox 6 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0957-2 Rating: important References: #712224 Cross-References: CVE-2011-0084 CVE-2011-2985 CVE-2011-2986 CVE-2011-2987 CVE-2011-2988 CVE-2011-2989 CVE-2011-2990 CVE-2011-2991 CVE-2011-2992 CVE-2011-2993 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes 10 vulnerabilities is now available. It includes one version update. Description: Mozilla Firefox was updated to version 6. It brings new features, fixes bugs and security issues. Following security issues were fixed: http://www.mozilla.org/security/announce/2011/mfsa2011-29.ht ml Mozilla Foundation Security Advisory 2011-29 (MFSA 2011-29) * Miscellaneous memory safety hazards: Mozilla identified and fixed several memory safety bugs in the browser engine used in Firefox 4, Firefox 5 and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code. Aral Yaman reported a WebGL crash which affected Firefox 4 and Firefox 5. (CVE-2011-2989) Vivekanand Bolajwar reported a JavaScript crash which affected Firefox 4 and Firefox 5. (CVE-2011-2991) Bert Hubert and Theo Snelleman of Fox-IT reported a crash in the Ogg reader which affected Firefox 4 and Firefox 5. (CVE-2011-2992) Mozilla developers and community members Robert Kaiser, Jesse Ruderman, moz_bug_r_a4, Mardeg, Gary Kwong, Christoph Diehl, Martijn Wargers, Travis Emmitt, Bob Clary and Jonathan Watt reported memory safety issues which affected Firefox 4 and Firefox 5. (CVE-2011-2985) * Unsigned scripts can call script inside signed JAR Rafael Gieschke reported that unsigned JavaScript could call into script inside a signed JAR thereby inheriting the identity of the site that signed the JAR as well as any permissions that a user had granted the signed JAR. (CVE-2011-2993) * String crash using WebGL shaders Michael Jordon of Context IS reported that an overly long shader program could cause a buffer overrun and crash in a string class used to store the shader source code. (CVE-2011-2988) * Heap overflow in ANGLE library Michael Jordon of Context IS reported a potentially exploitable heap overflow in the ANGLE library used by Mozilla's WebGL implementation. (CVE-2011-2987) * Crash in SVGTextElement.getCharNumAtPosition() Security researcher regenrecht reported via TippingPoint's Zero Day Initiative that a SVG text manipulation routine contained a dangling pointer vulnerability. (CVE-2011-0084) * Credential leakage using Content Security Policy reports Mike Cardwell reported that Content Security Policy violation reports failed to strip out proxy authorization credentials from the list of request headers. Daniel Veditz reported that redirecting to a website with Content Security Policy resulted in the incorrect resolution of hosts in the constructed policy. (CVE-2011-2990) * Cross-origin data theft using canvas and Windows D2D nasalislarvatus3000 reported that when using Windows D2D hardware acceleration, image data from one domain could be inserted into a canvas and read by a different domain. (CVE-2011-2986) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch MozillaFirefox-5020 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 6.0]: MozillaFirefox-6.0-2.2.1 MozillaFirefox-branding-upstream-6.0-2.2.1 MozillaFirefox-buildsymbols-6.0-2.2.1 MozillaFirefox-devel-6.0-2.2.1 MozillaFirefox-translations-common-6.0-2.2.1 MozillaFirefox-translations-other-6.0-2.2.1 References: http://support.novell.com/security/cve/CVE-2011-0084.html http://support.novell.com/security/cve/CVE-2011-2985.html http://support.novell.com/security/cve/CVE-2011-2986.html http://support.novell.com/security/cve/CVE-2011-2987.html http://support.novell.com/security/cve/CVE-2011-2988.html http://support.novell.com/security/cve/CVE-2011-2989.html http://support.novell.com/security/cve/CVE-2011-2990.html http://support.novell.com/security/cve/CVE-2011-2991.html http://support.novell.com/security/cve/CVE-2011-2992.html http://support.novell.com/security/cve/CVE-2011-2993.html https://bugzilla.novell.com/712224

1 0

openSUSE-SU-2011:0935-2: important: MozillaThunderbird: Update to 3.1.12
by opensuse-security＠opensuse.org 29 Aug '11

29 Aug '11

openSUSE Security Update: MozillaThunderbird: Update to 3.1.12 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0935-2 Rating: important References: #712224 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that contains security fixes can now be installed. It includes three new package versions. Description: Mozilla Thunderbird was updated to 3.1.12 fixing various bugs and security issues: Mozilla Foundation Security Advisory 2011-32 (MFSA 2011-32) http://www.mozilla.org/security/announce/2011/mfsa2011-32.ht ml Many of the issues listed below are not exploitable through mail since JavaScript is disabled by default in Thunderbird. These particular issues may be triggered while viewing RSS feeds and displaying full remote content rather than the feed summary. Addons that expose browser functionality may also enable such issues to be exploited. * Miscellaneous memory safety hazards (rv:1.9.2.20) Mozilla developers and community members identified and fixed several memory safety bugs in the browser engine used in Thunderbird 3.1 and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code. Gary Kwong, Igor Bukanov, Nils and Bob Clary reported memory safety issues which affected Thunderbird 3.1. (CVE-2011-2982) * Crash in SVGTextElement.getCharNumAtPosition() Security researcher regenrecht reported via TippingPoint's Zero Day Initiative that a SVG text manipulation routine contained a dangling pointer vulnerability. (CVE-2011-0084) * Privilege escalation using event handlers Mozilla security researcher moz_bug_r_a_4 reported a vulnerability in event management code that would permit JavaScript to be run in the wrong context, including that of a different website or potentially in a chrome-privileged context. (CVE-2011-2981) * Dangling pointer vulnerability in appendChild Security researcher regenrecht reported via TippingPoint's Zero Day Initiative that appendChild did not correctly account for DOM objects it operated upon and could be exploited to dereference an invalid pointer. (CVE-2011-2378) * Privilege escalation dropping a tab element in content area Mozilla security researcher moz_bug_r_a4 reported that web content could receive chrome privileges if it registered for drop events and a browser tab element was dropped into the content area. (CVE-2011-2984) * Binary planting vulnerability in ThinkPadSensor::Startup Security researcher Mitja Kolsek of Acros Security reported that ThinkPadSensor::Startup could potentially be exploited to load a malicious DLL into the running process. (CVE-2011-2980) * Private data leakage using RegExp.input Security researcher shutdown reported that data from other domains could be read when RegExp.input was set. (CVE-2011-2983) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch MozillaThunderbird-5050 mozilla-js192-5010 - openSUSE 11.3: zypper in -t patch MozillaThunderbird-5050 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 1.9.2.20 and 3.1.12]: MozillaThunderbird-3.1.12-0.11.1 MozillaThunderbird-buildsymbols-3.1.12-0.11.1 MozillaThunderbird-devel-3.1.12-0.11.1 MozillaThunderbird-translations-common-3.1.12-0.11.1 MozillaThunderbird-translations-other-3.1.12-0.11.1 enigmail-1.1.2+3.1.12-0.11.1 mozilla-js192-1.9.2.20-1.2.1 mozilla-xulrunner192-1.9.2.20-1.2.1 mozilla-xulrunner192-buildsymbols-1.9.2.20-1.2.1 mozilla-xulrunner192-devel-1.9.2.20-1.2.1 mozilla-xulrunner192-gnome-1.9.2.20-1.2.1 mozilla-xulrunner192-translations-common-1.9.2.20-1.2.1 mozilla-xulrunner192-translations-other-1.9.2.20-1.2.1 - openSUSE 11.4 (x86_64) [New Version: 1.9.2.20]: mozilla-js192-32bit-1.9.2.20-1.2.1 mozilla-xulrunner192-32bit-1.9.2.20-1.2.1 mozilla-xulrunner192-gnome-32bit-1.9.2.20-1.2.1 mozilla-xulrunner192-translations-common-32bit-1.9.2.20-1.2.1 mozilla-xulrunner192-translations-other-32bit-1.9.2.20-1.2.1 - openSUSE 11.3 (i586 x86_64) [New Version: 3.1.12]: MozillaThunderbird-3.1.12-0.15.1 MozillaThunderbird-devel-3.1.12-0.15.1 MozillaThunderbird-translations-common-3.1.12-0.15.1 MozillaThunderbird-translations-other-3.1.12-0.15.1 enigmail-1.1.2+3.1.12-0.15.1 References: https://bugzilla.novell.com/712224

1 0

openSUSE-RU-2011:0963-1: important: Flash Player 10.3.183.7 released
by maintenance＠opensuse.org 26 Aug '11

26 Aug '11

openSUSE Recommended Update: Flash Player 10.3.183.7 released ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0963-1 Rating: important References: #714365 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: This update provides Flash Player 10.3.183.7: * Shared library/gotoAndPlay() or gotoAndStop() bug * Textfields are displaying text vertically in 10.3.183.5 release * Massive Animation Slowdown following install of FP 0.3.183.5 * Flash player 10.3 displays a black screen (2943064) * Sound repeating and building up bug (2941616) * Flash applications at certain websites (http://www.justin.tv, http://heylenmichel.de) now load correctly (2939645, 944081) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch flash-player-5068 - openSUSE 11.3: zypper in -t patch flash-player-5068 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586) [New Version: 10.3.183.7]: flash-player-10.3.183.7-0.2.1 - openSUSE 11.3 (i586) [New Version: 10.3.183.7]: flash-player-10.3.183.7-0.2.1 References: https://bugzilla.novell.com/714365

1 0

openSUSE-SU-2011:0958-1: important: MozillaFirefox: Update to Firefox 3.6.20
by opensuse-security＠opensuse.org 26 Aug '11

26 Aug '11

openSUSE Security Update: MozillaFirefox: Update to Firefox 3.6.20 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0958-1 Rating: important References: #712224 Cross-References: CVE-2011-0084 CVE-2011-2378 CVE-2011-2980 CVE-2011-2981 CVE-2011-2982 CVE-2011-2983 CVE-2011-2984 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. It includes two new package versions. Description: Mozilla Firefox was updated to version 3.6.20. It fixes bugs and security issues. Following security issues were fixed: http://www.mozilla.org/security/announce/2011/mfsa2011-30.ht ml Mozilla Foundation Security Advisory 2011-30 (MFSA 2011-30) * Miscellaneous memory safety hazards Mozilla developers and community members identified and fixed several memory safety bugs in the browser engine used in Firefox 3.6 and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code. Gary Kwong, Igor Bukanov, Nils and Bob Clary reported memory safety issues which affected Firefox 3.6. (CVE-2011-2982) * Crash in SVGTextElement.getCharNumAtPosition() Security researcher regenrecht reported via TippingPoint's Zero Day Initiative that a SVG text manipulation routine contained a dangling pointer vulnerability. (CVE-2011-0084) * Privilege escalation using event handlers Mozilla security researcher moz_bug_r_a_4 reported a vulnerability in event management code that would permit JavaScript to be run in the wrong context, including that of a different website or potentially in a chrome-privileged context. (CVE-2011-2981) * Dangling pointer vulnerability in appendChild Security researcher regenrecht reported via TippingPoint's Zero Day Initiative that appendChild did not correctly account for DOM objects it operated upon and could be exploited to dereference an invalid pointer. (CVE-2011-2378) * Privilege escalation dropping a tab element in content area Mozilla security researcher moz_bug_r_a4 reported that web content could receive chrome privileges if it registered for drop events and a browser tab element was dropped into the content area. (CVE-2011-2984) * Binary planting vulnerability in ThinkPadSensor::Startup Security researcher Mitja Kolsek of Acros Security reported that ThinkPadSensor::Startup could potentially be exploited to load a malicious DLL into the running process. (CVE-2011-2980) (This issue is likely Windows only) * Private data leakage using RegExp.input Security researcher shutdown reported that data from other domains could be read when RegExp.input was set. (CVE-2011-2983) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch MozillaFirefox-5013 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 1.9.2.20 and 3.6.20]: MozillaFirefox-3.6.20-0.2.1 MozillaFirefox-branding-upstream-3.6.20-0.2.1 MozillaFirefox-translations-common-3.6.20-0.2.1 MozillaFirefox-translations-other-3.6.20-0.2.1 mozilla-js192-1.9.2.20-1.2.1 mozilla-xulrunner192-1.9.2.20-1.2.1 mozilla-xulrunner192-buildsymbols-1.9.2.20-1.2.1 mozilla-xulrunner192-devel-1.9.2.20-1.2.1 mozilla-xulrunner192-gnome-1.9.2.20-1.2.1 mozilla-xulrunner192-translations-common-1.9.2.20-1.2.1 mozilla-xulrunner192-translations-other-1.9.2.20-1.2.1 - openSUSE 11.3 (x86_64) [New Version: 1.9.2.20]: mozilla-js192-32bit-1.9.2.20-1.2.1 mozilla-xulrunner192-32bit-1.9.2.20-1.2.1 mozilla-xulrunner192-gnome-32bit-1.9.2.20-1.2.1 mozilla-xulrunner192-translations-common-32bit-1.9.2.20-1.2.1 mozilla-xulrunner192-translations-other-32bit-1.9.2.20-1.2.1 References: http://support.novell.com/security/cve/CVE-2011-0084.html http://support.novell.com/security/cve/CVE-2011-2378.html http://support.novell.com/security/cve/CVE-2011-2980.html http://support.novell.com/security/cve/CVE-2011-2981.html http://support.novell.com/security/cve/CVE-2011-2982.html http://support.novell.com/security/cve/CVE-2011-2983.html http://support.novell.com/security/cve/CVE-2011-2984.html https://bugzilla.novell.com/712224

1 0

openSUSE-SU-2011:0957-1: important: seamonkey: Update to Mozilla Seamonkey 2.3
by opensuse-security＠opensuse.org 26 Aug '11

26 Aug '11

openSUSE Security Update: seamonkey: Update to Mozilla Seamonkey 2.3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0957-1 Rating: important References: #712224 Cross-References: CVE-2011-0084 CVE-2011-2985 CVE-2011-2986 CVE-2011-2987 CVE-2011-2988 CVE-2011-2989 CVE-2011-2990 CVE-2011-2991 CVE-2011-2992 CVE-2011-2993 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes 10 vulnerabilities is now available. It includes one version update. Description: Mozilla Seamonkey suite was updated to version 2.3. The update fixes bugs and security issues. Following security issues were fixed: http://www.mozilla.org/security/announce/2011/mfsa2011-33.ht ml Mozilla Foundation Security Advisory 2011-33 (MFSA 2011-33) Mozilla Foundation Security Advisory 2011-33 * Miscellaneous memory safety hazards (rv:4.0) Mozilla identified and fixed several memory safety bugs in the browser engine used in SeaMonkey 2.2 and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code. Aral Yaman reported a WebGL crash which affected SeaMonkey 2.2. (CVE-2011-2989) Vivekanand Bolajwar reported a JavaScript crash which affected SeaMonkey 2.2. (CVE-2011-2991) Bert Hubert and Theo Snelleman of Fox-IT reported a crash in the Ogg reader which affected SeaMonkey 2.2. (CVE-2011-2992) Mozilla developers and community members Robert Kaiser, Jesse Ruderman, moz_bug_r_a4, Mardeg, Gary Kwong, Christoph Diehl, Martijn Wargers, Travis Emmitt, Bob Clary and Jonathan Watt reported memory safety issues which affected SeaMonkey 2.2. (CVE-2011-2985) * Unsigned scripts can call script inside signed JAR Rafael Gieschke reported that unsigned JavaScript could call into script inside a signed JAR thereby inheriting the identity of the site that signed the JAR as well as any permissions that a user had granted the signed JAR. (CVE-2011-2993) * String crash using WebGL shaders Michael Jordon of Context IS reported that an overly long shader program could cause a buffer overrun and crash in a string class used to store the shader source code. (CVE-2011-2988) * Heap overflow in ANGLE library Michael Jordon of Context IS reported a potentially exploitable heap overflow in the ANGLE library used by Mozilla's WebGL implementation. (CVE-2011-2987) * Crash in SVGTextElement.getCharNumAtPosition() Security researcher regenrecht reported via TippingPoint's Zero Day Initiative that a SVG text manipulation routine contained a dangling pointer vulnerability. (CVE-2011-0084) * Credential leakage using Content Security Policy reports Mike Cardwell reported that Content Security Policy violation reports failed to strip out proxy authorization credentials from the list of request headers. Daniel Veditz reported that redirecting to a website with Content Security Policy resulted in the incorrect resolution of hosts in the constructed policy. (CVE-2011-2990) * Cross-origin data theft using canvas and Windows D2D nasalislarvatus3000 reported that when using Windows D2D hardware acceleration, image data from one domain could be inserted into a canvas and read by a different domain. (CVE-2011-2986) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch seamonkey-5024 - openSUSE 11.3: zypper in -t patch seamonkey-5024 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 2.3]: seamonkey-2.3-2.2.1 seamonkey-dom-inspector-2.3-2.2.1 seamonkey-irc-2.3-2.2.1 seamonkey-translations-common-2.3-2.2.1 seamonkey-translations-other-2.3-2.2.1 seamonkey-venkman-2.3-2.2.1 - openSUSE 11.3 (i586 x86_64) [New Version: 2.3]: seamonkey-2.3-2.2.1 seamonkey-dom-inspector-2.3-2.2.1 seamonkey-irc-2.3-2.2.1 seamonkey-translations-common-2.3-2.2.1 seamonkey-translations-other-2.3-2.2.1 seamonkey-venkman-2.3-2.2.1 References: http://support.novell.com/security/cve/CVE-2011-0084.html http://support.novell.com/security/cve/CVE-2011-2985.html http://support.novell.com/security/cve/CVE-2011-2986.html http://support.novell.com/security/cve/CVE-2011-2987.html http://support.novell.com/security/cve/CVE-2011-2988.html http://support.novell.com/security/cve/CVE-2011-2989.html http://support.novell.com/security/cve/CVE-2011-2990.html http://support.novell.com/security/cve/CVE-2011-2991.html http://support.novell.com/security/cve/CVE-2011-2992.html http://support.novell.com/security/cve/CVE-2011-2993.html https://bugzilla.novell.com/712224

1 0

openSUSE-SU-2011:0921-2: moderate: yast2-core: Adjust to fix crypt_blowfish 8-bit character mishandling
by opensuse-security＠opensuse.org 26 Aug '11

26 Aug '11

openSUSE Security Update: yast2-core: Adjust to fix crypt_blowfish 8-bit character mishandling ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0921-2 Rating: moderate References: #700876 Cross-References: CVE-2011-2483 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. It includes two new package versions. Description: This update contains yast2 core changes to change the hash generation of new passwords to the new secure style. Please read the general notes below: The implementation of the blowfish based password hashing method had a bug affecting passwords that contain 8bit characters (e.g. umlauts). Affected passwords are potentially faster to crack via brute force methods (CVE-2011-2483). SUSE's crypt() implementation supports the blowfish password hashing function (id $2a) and system logins by default also use this method. This update eliminates the bug in the $2a implementation. After installing the update existing $2a hashes therefore no longer match hashes generated with the new, correct implementation if the password contains 8bit characters. For system logins via PAM the pam_unix2 module activates a compat mode and keeps processing existing $2a hashes with the old algorithm. This ensures no user gets locked out. New passwords hashes are created with the id "$2y" to unambiguously identify them as generated with the correct implementation. Note: To actually migrate hashes to the new algorithm all users are advised to change passwords after the update. Services that do not use PAM but do use crypt() to store passwords using the blowfish hash do not have such a compat mode. That means users with 8bit passwords that use such services will not be able to log in anymore after the update. As workaround administrators may edit the service's password database and change stored hashes from $2a to $2x. This will result in crypt() using the old algorithm. Users should be required to change their passwords to make sure they are migrated to the correct algorithm. FAQ: Q: I only use ASCII characters in passwords, am I a affected in any way? A: No. Q: What's the meaning of the ids before and after the update? A: Before the update: $2a -> buggy algorithm After the update: $2x -> buggy algorithm $2a -> correct algorithm $2y -> correct algorithm System logins using PAM have a compat mode enabled by default: $2x -> buggy algorithm $2a -> buggy algorithm $2y -> correct algorithm Q: How do I require users to change their password on next login? A: Run the following command as root for each user: chage -d 0 <username> Q: I run an application that has $2a hashes in it's password database. Some users complain that they can not log in anymore. A: Edit the password database and change the "$2a" prefix of the affected users' hashes to "$2x". They will be able to log in again but should change their password ASAP. Q: How do I turn off the compat mode for system logins? A: Set BLOWFISH_2a2x=no in /etc/default/passwd Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch yast2-core-5028 - openSUSE 11.3: zypper in -t patch yast2-core-5028 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 2.20.1]: yast2-core-2.20.1-0.3.1 yast2-core-devel-2.20.1-0.3.1 - openSUSE 11.3 (i586 x86_64) [New Version: 2.19.4]: yast2-core-2.19.4-0.2.1 yast2-core-devel-2.19.4-0.2.1 References: http://support.novell.com/security/cve/CVE-2011-2483.html https://bugzilla.novell.com/700876

1 0

openSUSE-RU-2011:0953-1: libproxy: Update to upstream version 0.4.7
by maintenance＠opensuse.org 26 Aug '11

26 Aug '11

openSUSE Recommended Update: libproxy: Update to upstream version 0.4.7 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0953-1 Rating: low References: #679322 #701059 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. It includes one version update. Description: This update fixes the following issues: - #149: always test for the right python noarch module path - #155: Cannot compile with Firefox 4 - #156: libproxy should build against webkitgtk-3.0 - #158: Won't compile w/ xulrunner 2.0 final - #159: libproxy fails with autoconfiguration "http://proxy.domain.com" - #131: GSettings-based GNOME plugin - #150: SUSE sysconfig/proxy config support Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libproxy-5021 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 0.4.7]: libproxy-devel-0.4.7-6.3.1 libproxy-sharp-0.4.7-6.3.1 libproxy-tools-0.4.7-6.3.1 libproxy1-0.4.7-6.3.1 libproxy1-config-gnome-0.4.7-3.3.1 libproxy1-config-kde4-0.4.7-3.3.1 libproxy1-networkmanager-0.4.7-3.3.1 libproxy1-pacrunner-mozjs-0.4.7-3.3.1 libproxy1-pacrunner-webkit-0.4.7-3.3.1 perl-Net-Libproxy-0.4.7-6.3.1 - openSUSE 11.4 (x86_64) [New Version: 0.4.7]: libproxy1-32bit-0.4.7-6.3.1 libproxy1-config-gnome-32bit-0.4.7-3.3.1 libproxy1-networkmanager-32bit-0.4.7-3.3.1 libproxy1-pacrunner-mozjs-32bit-0.4.7-3.3.1 libproxy1-pacrunner-webkit-32bit-0.4.7-3.3.1 - openSUSE 11.4 (noarch) [New Version: 0.4.7]: python-libproxy-0.4.7-6.3.1 References: https://bugzilla.novell.com/679322 https://bugzilla.novell.com/701059

1 0

openSUSE-SU-2011:0950-1: moderate: hplip
by opensuse-security＠opensuse.org 25 Aug '11

25 Aug '11

openSUSE Security Update: hplip ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0950-1 Rating: moderate References: #59233 Cross-References: CVE-2004-0801 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. It includes one version update. Description: This update of hplip fixes: - CVE-2004-0801: CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P): This patch originally affected foomatic-rip in CUPS but was found to be in foomatic-rip-hplip too. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch hplip-4987 - openSUSE 11.3: zypper in -t patch hplip-4987 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 3.11.5]: hplip-3.11.5-1.5.1 hplip-hpijs-3.11.5-1.5.1 - openSUSE 11.3 (i586 x86_64): hplip-3.10.2-2.5.1 hplip-hpijs-3.10.2-2.5.1 References: http://support.novell.com/security/cve/CVE-2004-0801.html https://bugzilla.novell.com/59233

1 0

openSUSE-SU-2011:0943-1: important: libmodplug: Fixed multiple vulnerabilities reported in <= 0.8.8.3
by opensuse-security＠opensuse.org 24 Aug '11

24 Aug '11

openSUSE Security Update: libmodplug: Fixed multiple vulnerabilities reported in <= 0.8.8.3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0943-1 Rating: important References: #710726 Cross-References: CVE-2011-1761 CVE-2011-2911 CVE-2011-2912 CVE-2011-2913 CVE-2011-2914 CVE-2011-2915 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. It includes one version update. Description: This update of libmodplug0 fixes the following issues: 1) An integer overflow error exists within the "CSoundFile::ReadWav()" function (src/load_wav.cpp) when processing certain WAV files. This can be exploited to cause a heap-based buffer overflow by tricking a user into opening a specially crafted WAV file. (CVE-2011-2911) 2) Boundary errors within the "CSoundFile::ReadS3M()" function (src/load_s3m.cpp) when processing S3M files can be exploited to cause stack-based buffer overflows by tricking a user into opening a specially crafted S3M file. (CVE-2011-2912) 3) An off-by-one error within the "CSoundFile::ReadAMS()" function (src/load_ams.cpp) can be exploited to cause a stack corruption by tricking a user into opening a specially crafted AMS file. (CVE-2011-2913) 4) An off-by-one error within the "CSoundFile::ReadDSM()" function (src/load_dms.cpp) can be exploited to cause a memory corruption by tricking a user into opening a specially crafted DSM file. (CVE-2011-2914) 5) An off-by-one error within the "CSoundFile::ReadAMS2()" function (src/load_ams.cpp) can be exploited to cause a memory corruption by tricking a user into opening a specially crafted AMS file. (CVE-2011-2915) Also an overflow in the ABC loader was fixed. (CVE-2011-1761) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libmodplug-5004 - openSUSE 11.3: zypper in -t patch libmodplug-5004 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 0.8.8.4]: libmodplug-devel-0.8.8.4-2.2.1 libmodplug0-0.8.8.4-2.2.1 - openSUSE 11.4 (x86_64) [New Version: 0.8.8.4]: libmodplug0-32bit-0.8.8.4-2.2.1 - openSUSE 11.3 (i586 x86_64) [New Version: 0.8.8.4]: libmodplug-devel-0.8.8.4-2.2.1 libmodplug0-0.8.8.4-2.2.1 - openSUSE 11.3 (x86_64) [New Version: 0.8.8.4]: libmodplug0-32bit-0.8.8.4-2.2.1 References: http://support.novell.com/security/cve/CVE-2011-1761.html http://support.novell.com/security/cve/CVE-2011-2911.html http://support.novell.com/security/cve/CVE-2011-2912.html http://support.novell.com/security/cve/CVE-2011-2913.html http://support.novell.com/security/cve/CVE-2011-2914.html http://support.novell.com/security/cve/CVE-2011-2915.html https://bugzilla.novell.com/710726

1 0

openSUSE-SU-2011:0941-1: important: xen: Fixed a security bug and various other bugs
by opensuse-security＠opensuse.org 24 Aug '11

24 Aug '11

openSUSE Security Update: xen: Fixed a security bug and various other bugs ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0941-1 Rating: important References: #582265 #670465 #684297 #684305 #689954 #692625 #693472 #702025 #703924 Cross-References: CVE-2011-1898 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that solves one vulnerability and has 8 fixes is now available. It includes one version update. Description: Security / Collective Update for Xen Xen: - bnc#702025 - VUL-0: xen: VT-d (PCI passthrough) MSI trap injection (CVE-2011-1898) - bnc#703924 - update block-npiv scripts to support BFA HBA - bnc#689954 - L3: Live migrations fail when guest crashes: domain_crash_sync called from entry.S - bnc#693472 - Bridge hangs cause redundant ring failures in SLE 11 SP1 HAE + XEN - bnc#582265 - xen-scsi.ko not supported - bnc#670465 - When connecting to Xen guest through vncviewer mouse tracking is off. - bnc#684305 - on_crash is being ignored with kdump now working in HVM vm-install: - bnc#692625 - virt-manager has problems to install guest from multiple CD Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch xen-201107-4929 - openSUSE 11.3: zypper in -t patch xen-201107-4930 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 0.4.31]: vm-install-0.4.31-0.4.1 xen-4.0.2_52-0.2.1 xen-devel-4.0.2_52-0.2.1 xen-doc-html-4.0.2_52-0.2.1 xen-doc-pdf-4.0.2_52-0.2.1 xen-kmp-default-4.0.2_52_k2.6.37.6_0.7-0.2.1 xen-kmp-desktop-4.0.2_52_k2.6.37.6_0.7-0.2.1 xen-libs-4.0.2_52-0.2.1 xen-tools-4.0.2_52-0.2.1 xen-tools-domU-4.0.2_52-0.2.1 - openSUSE 11.4 (i586): xen-kmp-pae-4.0.2_52_k2.6.37.6_0.7-0.2.1 - openSUSE 11.3 (i586 x86_64) [New Version: 0.4.31]: vm-install-0.4.31-0.4.1 xen-4.0.2_21511_02-0.5.2 xen-devel-4.0.2_21511_02-0.5.2 xen-doc-html-4.0.2_21511_02-0.5.2 xen-doc-pdf-4.0.2_21511_02-0.5.2 xen-kmp-default-4.0.2_21511_02_k2.6.34.10_0.2-0.5.2 xen-kmp-desktop-4.0.2_21511_02_k2.6.34.10_0.2-0.5.2 xen-libs-4.0.2_21511_02-0.5.2 xen-tools-4.0.2_21511_02-0.5.2 xen-tools-domU-4.0.2_21511_02-0.5.2 - openSUSE 11.3 (i586): xen-kmp-pae-4.0.2_21511_02_k2.6.34.10_0.2-0.5.2 References: http://support.novell.com/security/cve/CVE-2011-1898.html https://bugzilla.novell.com/582265 https://bugzilla.novell.com/670465 https://bugzilla.novell.com/684297 https://bugzilla.novell.com/684305 https://bugzilla.novell.com/689954 https://bugzilla.novell.com/692625 https://bugzilla.novell.com/693472 https://bugzilla.novell.com/702025 https://bugzilla.novell.com/703924

1 0

openSUSE-SU-2011:0940-1: moderate: clamav
by opensuse-security＠opensuse.org 24 Aug '11

24 Aug '11

openSUSE Security Update: clamav ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0940-1 Rating: moderate References: #708263 Cross-References: CVE-2011-2721 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. It includes one version update. Description: New clamav packages fix an off-by-one vulnerability which could lead to a DoS condition. CVE-2011-2721 has been assigned to this issue. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch clamav-4940 - openSUSE 11.3: zypper in -t patch clamav-4940 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 0.97.2]: clamav-0.97.2-1.2.1 - openSUSE 11.4 (noarch) [New Version: 0.97.2]: clamav-db-0.97.2-1.2.1 - openSUSE 11.3 (i586 x86_64) [New Version: 0.97.2]: clamav-0.97.2-1.2.1 - openSUSE 11.3 (noarch) [New Version: 0.97.2]: clamav-db-0.97.2-1.2.1 References: http://support.novell.com/security/cve/CVE-2011-2721.html https://bugzilla.novell.com/708263

1 0

openSUSE-SU-2011:0935-1: important: mozilla-nss: Update to 3.12.11
by opensuse-security＠opensuse.org 23 Aug '11

23 Aug '11

openSUSE Security Update: mozilla-nss: Update to 3.12.11 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0935-1 Rating: important References: #712224 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that contains security fixes can now be installed. It includes one version update. Description: The mozilla NSS libraries were updated to 3.12.11 to align with newer Mozilla seamonkey and Firefox releases. Interesting changes are: - blacklisting malicious root certificates - several bugfixes Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libfreebl3-5023 - openSUSE 11.3: zypper in -t patch libfreebl3-5023 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 3.12.11]: libfreebl3-3.12.11-1.3.1 libsoftokn3-3.12.11-1.3.1 mozilla-nss-3.12.11-1.3.1 mozilla-nss-certs-3.12.11-1.3.1 mozilla-nss-devel-3.12.11-1.3.1 mozilla-nss-sysinit-3.12.11-1.3.1 mozilla-nss-tools-3.12.11-1.3.1 - openSUSE 11.4 (x86_64) [New Version: 3.12.11]: libfreebl3-32bit-3.12.11-1.3.1 libsoftokn3-32bit-3.12.11-1.3.1 mozilla-nss-32bit-3.12.11-1.3.1 mozilla-nss-certs-32bit-3.12.11-1.3.1 mozilla-nss-sysinit-32bit-3.12.11-1.3.1 - openSUSE 11.3 (i586 x86_64) [New Version: 3.12.11]: libfreebl3-3.12.11-1.2.1 libsoftokn3-3.12.11-1.2.1 mozilla-nss-3.12.11-1.2.1 mozilla-nss-certs-3.12.11-1.2.1 mozilla-nss-devel-3.12.11-1.2.1 mozilla-nss-sysinit-3.12.11-1.2.1 mozilla-nss-tools-3.12.11-1.2.1 - openSUSE 11.3 (x86_64) [New Version: 3.12.11]: libfreebl3-32bit-3.12.11-1.2.1 libsoftokn3-32bit-3.12.11-1.2.1 mozilla-nss-32bit-3.12.11-1.2.1 mozilla-nss-certs-32bit-3.12.11-1.2.1 mozilla-nss-sysinit-32bit-3.12.11-1.2.1 References: https://bugzilla.novell.com/712224

1 0

openSUSE-RU-2011:0934-1: kdeedu4: Fix crash when zooming in marble
by maintenance＠opensuse.org 23 Aug '11

23 Aug '11

openSUSE Recommended Update: kdeedu4: Fix crash when zooming in marble ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0934-1 Rating: low References: #695213 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes a crash when zooming in marble (bnc#695213) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch blinken-4997 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): blinken-4.6.0-4.5.1 cantor-4.6.0-4.5.1 kalgebra-4.6.0-4.5.1 kalzium-4.6.0-4.5.1 kanagram-4.6.0-4.5.1 kbruch-4.6.0-4.5.1 kdeedu4-4.6.0-4.5.1 kgeography-4.6.0-4.5.1 khangman-4.6.0-4.5.1 kig-4.6.0-4.5.1 kiten-4.6.0-4.5.1 klettres-4.6.0-4.5.1 kmplot-4.6.0-4.5.1 kstars-4.6.0-4.5.1 ktouch-4.6.0-4.5.1 kturtle-4.6.0-4.5.1 kwordquiz-4.6.0-4.5.1 libSatLib4-4.6.0-4.5.1 libkdeedu4-4.6.0-4.5.1 libkdeedu4-devel-4.6.0-4.5.1 marble-4.6.0-4.5.1 marble-devel-4.6.0-4.5.1 parley-4.6.0-4.5.1 rocs-4.6.0-4.5.1 rocs-devel-4.6.0-4.5.1 step-4.6.0-4.5.1 References: https://bugzilla.novell.com/695213

1 0

openSUSE-RU-2011:0926-2: important: mozilla-nspr: Update to 4.8.9
by maintenance＠opensuse.org 23 Aug '11

23 Aug '11

openSUSE Recommended Update: mozilla-nspr: Update to 4.8.9 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0926-2 Rating: important References: #712224 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: The mozilla NSPR libraries were updated to 4.8.9 to align with newer Mozilla seamonkey and Firefox releases. Interesting changes are: * lots of bugfixes * use AI_ADDRCONFIG for loopback hostnames (bmo#614526) * support SDP sockets (bmo#518078) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch mozilla-nspr-5022 - openSUSE 11.3: zypper in -t patch mozilla-nspr-5022 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 4.8.9]: mozilla-nspr-4.8.9-1.3.1 mozilla-nspr-devel-4.8.9-1.3.1 - openSUSE 11.4 (x86_64) [New Version: 4.8.9]: mozilla-nspr-32bit-4.8.9-1.3.1 - openSUSE 11.3 (i586 x86_64) [New Version: 4.8.9]: mozilla-nspr-4.8.9-1.2.1 mozilla-nspr-devel-4.8.9-1.2.1 - openSUSE 11.3 (x86_64) [New Version: 4.8.9]: mozilla-nspr-32bit-4.8.9-1.2.1 References: https://bugzilla.novell.com/712224

1 0

openSUSE-RU-2011:0933-1: important: libfm: pcmanfm - cut and paste a folder may causes data loss
by maintenance＠opensuse.org 23 Aug '11

23 Aug '11

openSUSE Recommended Update: libfm: pcmanfm - cut and paste a folder may causes data loss ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0933-1 Rating: important References: #710881 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update brings pcmanfm and libfm to rc3, fixing several bugs in both components like: - Fix bnc#710881 - "pcmanfm cut and paste a folder to a destination folder without write permission causes data loss" - Fix sf#3308324 - "~ in location bar cause pcmanfm crash" - Fix sf#3286157 - "Entering path with two initial slashes // crashes" - Fix sf#3284001 - "Crash when entering path with trailing slash" This is related to GTK+ bug #650114, which is already fixed. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libfm-4994 - openSUSE 11.3: zypper in -t patch libfm-4995 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libfm-0.1.16_rc3-0.3.1 libfm-devel-0.1.16_rc3-0.3.1 libfm-doc-0.1.16_rc3-0.3.1 libfm-gtk1-0.1.16_rc3-0.3.1 libfm1-0.1.16_rc3-0.3.1 pcmanfm-0.9.9_rc3-0.3.1 - openSUSE 11.4 (noarch): pcmanfm-lang-0.9.9_rc3-0.3.1 - openSUSE 11.3 (i586 x86_64): libfm-0.1.16_rc3-0.10.1 libfm-devel-0.1.16_rc3-0.10.1 libfm-gtk1-0.1.16_rc3-0.10.1 libfm1-0.1.16_rc3-0.10.1 pcmanfm-0.9.9_rc3-0.8.1 - openSUSE 11.3 (noarch): pcmanfm-lang-0.9.9_rc3-0.8.1 References: https://bugzilla.novell.com/710881

1 0

openSUSE-RU-2011:0926-1: important: yasm: Update to YASM 1.1.0
by maintenance＠opensuse.org 19 Aug '11

19 Aug '11

openSUSE Recommended Update: yasm: Update to YASM 1.1.0 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0926-1 Rating: important References: #712224 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: YASM was updated to 1.1.0 to ensure newer Mozilla versions still build. Changes: - update to 1.1.0 * Fix a number of issues with Win32 SAFESEH support (#139). * Fix several 32-bit Mach-O (macho32) bugs (#212 and others). * Add Intel post-32nm instructions (section 7 of AVX spec). * Add XSAVEOPT, INVEPT, INVVPID, and GETSEC instructions (#211). * Remove AMD CVT16 instructions. * Don't emit unnecessary REX.W for pinsrw instruction (#207). * Update gettext to 0.17 (#206). - update to 1.0.1 * Fix ELF32 shared object relocations (#202). * Ignore [warning] directive (#201). - update to 1.0.0 * Add GAS preprocessor (fixes #79). * Add Visual Studio 2010 special frontend, vsyasm * Add support for AMD XOP, FMA4, and CVT16 instructions (replacing SSE5). * Add support for %scope and %endscope NASM macros * Add support for %{x:y} parameter list expansion in NASM preprocessor * Fix _GLOBAL_OFFSET_TABLE_ * Add support for ELF64 PC-relative relocations and latest ELF32 relocation types. * Add support for ELF tlsdesc, tlscall, pltoff, gotplt, gotoff special symbols. * NASM preprocessor license has been changed to 2-clause BSD. * Various bugfixes in TASM syntax support. * Many other bugfixes Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch yasm-5017 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 1.1.0]: yasm-1.1.0-10.3.1 yasm-devel-1.1.0-10.3.1 References: https://bugzilla.novell.com/712224

1 0

openSUSE-SU-2011:0921-1: moderate: crypt_blowfish
by opensuse-security＠opensuse.org 18 Aug '11

18 Aug '11

openSUSE Security Update: crypt_blowfish ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0921-1 Rating: moderate References: #700876 Cross-References: CVE-2011-2483 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. It includes one version update. Description: The implementation of the blowfish based password hashing method had a bug affecting passwords that contain 8bit characters (e.g. umlauts). Affected passwords are potentially faster to crack via brute force methods (CVE-2011-2483). SUSE's crypt() implementation supports the blowfish password hashing function (id $2a) and system logins by default also use this method. This update eliminates the bug in the $2a implementation. After installing the update existing $2a hashes therefore no longer match hashes generated with the new, correct implementation if the password contains 8bit characters. For system logins via PAM the pam_unix2 module activates a compat mode and keeps processing existing $2a hashes with the old algorithm. This ensures no user gets locked out. New passwords hashes are created with the id "$2y" to unambiguously identify them as generated with the correct implementation. Note: To actually migrate hashes to the new algorithm all users are advised to change passwords after the update. Services that do not use PAM but do use crypt() to store passwords using the blowfish hash do not have such a compat mode. That means users with 8bit passwords that use such services will not be able to log in anymore after the update. As workaround administrators may edit the service's password database and change stored hashes from $2a to $2x. This will result in crypt() using the old algorithm. Users should be required to change their passwords to make sure they are migrated to the correct algorithm. FAQ: Q: I only use ASCII characters in passwords, am I a affected in any way? A: No. Q: What's the meaning of the ids before and after the update? A: Before the update: $2a -> buggy algorithm After the update: $2x -> buggy algorithm $2a -> correct algorithm $2y -> correct algorithm System logins using PAM have a compat mode enabled by default: $2x -> buggy algorithm $2a -> buggy algorithm $2y -> correct algorithm Q: How do I require users to change their password on next login? A: Run the following command as root for each user: chage -d 0 <username> Q: I run an application that has $2a hashes in it's password database. Some users complain that they can not log in anymore. A: Edit the password database and change the "$2a" prefix of the affected users' hashes to "$2x". They will be able to log in again but should change their password ASAP. Q: How do I turn off the compat mode for system logins? A: Set BLOWFISH_2a2x=no in /etc/default/passwd Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch glibc-4943 - openSUSE 11.3: zypper in -t patch glibc-4943 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 i686 x86_64): glibc-2.11.3-12.17.1 glibc-devel-2.11.3-12.17.1 - openSUSE 11.4 (i586 x86_64): glibc-html-2.11.3-12.17.1 glibc-i18ndata-2.11.3-12.17.1 glibc-info-2.11.3-12.17.1 glibc-locale-2.11.3-12.17.1 glibc-obsolete-2.11.3-12.17.1 glibc-profile-2.11.3-12.17.1 libxcrypt-3.0.3-9.10.1 libxcrypt-devel-3.0.3-9.10.1 nscd-2.11.3-12.17.1 pam-modules-11.4-3.4.1 pwdutils-3.2.14-4.5.1 pwdutils-plugin-audit-3.2.14-4.5.1 pwdutils-rpasswd-3.2.14-4.5.1 - openSUSE 11.4 (x86_64): glibc-32bit-2.11.3-12.17.1 glibc-devel-32bit-2.11.3-12.17.1 glibc-locale-32bit-2.11.3-12.17.1 glibc-profile-32bit-2.11.3-12.17.1 libxcrypt-32bit-3.0.3-9.10.1 pam-modules-32bit-11.4-3.4.1 pwdutils-rpasswd-32bit-3.2.14-4.5.1 - openSUSE 11.3 (i586 i686 x86_64): glibc-2.11.2-3.5.1 glibc-devel-2.11.2-3.5.1 - openSUSE 11.3 (i586 x86_64) [New Version: 11.3]: glibc-html-2.11.2-3.5.1 glibc-i18ndata-2.11.2-3.5.1 glibc-info-2.11.2-3.5.1 glibc-locale-2.11.2-3.5.1 glibc-obsolete-2.11.2-3.5.1 glibc-profile-2.11.2-3.5.1 libxcrypt-3.0.3-5.3.1 libxcrypt-devel-3.0.3-5.3.1 nscd-2.11.2-3.5.1 pam-modules-11.3-0.3.1 pwdutils-3.2.10-2.3.1 pwdutils-plugin-audit-3.2.10-2.3.1 pwdutils-rpasswd-3.2.10-2.3.1 - openSUSE 11.3 (x86_64) [New Version: 11.3]: glibc-32bit-2.11.2-3.5.1 glibc-devel-32bit-2.11.2-3.5.1 glibc-locale-32bit-2.11.2-3.5.1 glibc-profile-32bit-2.11.2-3.5.1 libxcrypt-32bit-3.0.3-5.3.1 pam-modules-32bit-11.3-0.3.1 pwdutils-rpasswd-32bit-3.2.10-2.3.1 References: http://support.novell.com/security/cve/CVE-2011-2483.html https://bugzilla.novell.com/700876

1 0

openSUSE-SU-2011:0915-1: moderate: libpng14-14
by opensuse-security＠opensuse.org 17 Aug '11

17 Aug '11

openSUSE Security Update: libpng14-14 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0915-1 Rating: moderate References: #702578 #706387 #706388 #706389 Cross-References: CVE-2008-6218 CVE-2009-5063 CVE-2011-2501 CVE-2011-2690 CVE-2011-2691 CVE-2011-2692 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. It includes one version update. Description: This update of libpng14-14 fixes: - CVE-2011-2501: CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P): Design Error (CWE-DesignError) - CVE-2011-2690: CVSS v2 Base Score: 5.1 (AV:N/AC:H/Au:N/C:P/I:P/A:P): Buffer Errors (CWE-119) - CVE-2011-2691: CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P): Other (CWE-Other) - CVE-2011-2692: CVSS v2 Base Score: 5.0 (AV:N/AC:M/Au:N/C:N/I:N/A:P): Buffer Errors (CWE-119) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libpng12-4947 libpng14-4949 - openSUSE 11.3: zypper in -t patch libpng12-4947 libpng14-4949 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 1.2.46]: libpng12-0-1.2.46-7.3.1 libpng12-compat-devel-1.2.46-7.3.1 libpng12-devel-1.2.46-7.3.1 libpng14-14-1.4.4-3.4.1 libpng14-compat-devel-1.4.4-3.4.1 libpng14-devel-1.4.4-3.4.1 - openSUSE 11.4 (x86_64) [New Version: 1.2.46]: libpng12-0-32bit-1.2.46-7.3.1 libpng12-compat-devel-32bit-1.2.46-7.3.1 libpng12-devel-32bit-1.2.46-7.3.1 libpng14-14-32bit-1.4.4-3.4.1 libpng14-compat-devel-32bit-1.4.4-3.4.1 libpng14-devel-32bit-1.4.4-3.4.1 - openSUSE 11.3 (i586 x86_64) [New Version: 1.2.46]: libpng12-0-1.2.46-7.3.1 libpng12-compat-devel-1.2.46-7.3.1 libpng12-devel-1.2.46-7.3.1 libpng14-14-1.4.3-3.3.1 libpng14-compat-devel-1.4.3-3.3.1 libpng14-devel-1.4.3-3.3.1 - openSUSE 11.3 (x86_64) [New Version: 1.2.46]: libpng12-0-32bit-1.2.46-7.3.1 libpng14-14-32bit-1.4.3-3.3.1 References: http://support.novell.com/security/cve/CVE-2008-6218.html http://support.novell.com/security/cve/CVE-2009-5063.html http://support.novell.com/security/cve/CVE-2011-2501.html http://support.novell.com/security/cve/CVE-2011-2690.html http://support.novell.com/security/cve/CVE-2011-2691.html http://support.novell.com/security/cve/CVE-2011-2692.html https://bugzilla.novell.com/702578 https://bugzilla.novell.com/706387 https://bugzilla.novell.com/706388 https://bugzilla.novell.com/706389

1 0

openSUSE-RU-2011:0911-1: wxGTK: Drag and drop crash in Filezilla
by maintenance＠opensuse.org 16 Aug '11

16 Aug '11

openSUSE Recommended Update: wxGTK: Drag and drop crash in Filezilla ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0911-1 Rating: low References: #708402 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes a crash at drag and drop operations, at least in Filezilla, but possibly in other applications, too. (#708402) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libwx_base-2_8-0-compat-lib-wxcontainer-4971 - openSUSE 11.3: zypper in -t patch python-wxGTK-4969 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libwx_base-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_base-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_base_net-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_base_net-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_base_xml-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_base_xml-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_baseu-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_baseu-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_baseu-2_8-0-stl-2.8.11-4.13.1 libwx_baseu-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_baseu_net-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_baseu_net-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_baseu_net-2_8-0-stl-2.8.11-4.13.1 libwx_baseu_net-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_baseu_xml-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_baseu_xml-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_baseu_xml-2_8-0-stl-2.8.11-4.13.1 libwx_baseu_xml-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2_adv-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2_adv-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2_aui-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2_aui-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2_core-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2_core-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2_fl-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2_fl-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2_gizmos-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2_gizmos-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2_gizmos_xrc-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2_gizmos_xrc-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2_gl-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2_gl-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2_html-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2_html-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2_media-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2_media-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2_mmedia-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2_mmedia-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2_ogl-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2_ogl-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2_plot-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2_plot-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2_qa-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2_qa-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2_richtext-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2_richtext-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2_stc-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2_stc-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2_svg-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2_svg-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2_xrc-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2_xrc-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_adv-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_gtk2u_adv-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_adv-2_8-0-stl-2.8.11-4.13.1 libwx_gtk2u_adv-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_aui-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_gtk2u_aui-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_aui-2_8-0-stl-2.8.11-4.13.1 libwx_gtk2u_aui-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_core-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_gtk2u_core-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_core-2_8-0-stl-2.8.11-4.13.1 libwx_gtk2u_core-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_fl-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_fl-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_gizmos-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_gtk2u_gizmos-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_gizmos-2_8-0-stl-2.8.11-4.13.1 libwx_gtk2u_gizmos-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_gizmos_xrc-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_gtk2u_gizmos_xrc-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_gizmos_xrc-2_8-0-stl-2.8.11-4.13.1 libwx_gtk2u_gizmos_xrc-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_gl-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_gtk2u_gl-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_gl-2_8-0-stl-2.8.11-4.13.1 libwx_gtk2u_gl-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_html-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_gtk2u_html-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_html-2_8-0-stl-2.8.11-4.13.1 libwx_gtk2u_html-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_media-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_gtk2u_media-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_media-2_8-0-stl-2.8.11-4.13.1 libwx_gtk2u_media-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_mmedia-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_gtk2u_mmedia-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_mmedia-2_8-0-stl-2.8.11-4.13.1 libwx_gtk2u_mmedia-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_ogl-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_ogl-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_plot-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_gtk2u_plot-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_plot-2_8-0-stl-2.8.11-4.13.1 libwx_gtk2u_plot-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_qa-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_gtk2u_qa-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_qa-2_8-0-stl-2.8.11-4.13.1 libwx_gtk2u_qa-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_richtext-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_gtk2u_richtext-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_richtext-2_8-0-stl-2.8.11-4.13.1 libwx_gtk2u_richtext-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_stc-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_gtk2u_stc-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_stc-2_8-0-stl-2.8.11-4.13.1 libwx_gtk2u_stc-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_svg-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_gtk2u_svg-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_svg-2_8-0-stl-2.8.11-4.13.1 libwx_gtk2u_svg-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_xrc-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_gtk2u_xrc-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_xrc-2_8-0-stl-2.8.11-4.13.1 libwx_gtk2u_xrc-2_8-0-wxcontainer-2.8.11-3.13.1 wxWidgets-ansi-compat-lib-config-2.8.11-3.13.1 wxWidgets-ansi-devel-2.8.11-3.13.1 wxWidgets-ansi-plugin-sound_sdl-2_8-wxcontainer-2.8.11-3.13.1 wxWidgets-compat-lib-config-2.8.11-4.13.1 wxWidgets-devel-2.8.11-4.13.1 wxWidgets-plugin-sound_sdlu-2_8-stl-2.8.11-4.13.1 wxWidgets-wxcontainer-compat-lib-config-2.8.11-3.13.1 wxWidgets-wxcontainer-devel-2.8.11-3.13.1 wxWidgets-wxcontainer-plugin-sound_sdlu-2_8-wxcontainer-2.8.11-3.13.1 - openSUSE 11.4 (noarch): wxWidgets-lang-2.8.11-4.13.1 - openSUSE 11.3 (i586 x86_64): python-wxGTK-2.8.10.1-12.3.1 wxGTK-2.8.10.1-12.3.1 wxGTK-compat-2.8.10.1-12.3.1 wxGTK-devel-2.8.10.1-12.3.1 wxGTK-gl-2.8.10.1-12.3.1 References: https://bugzilla.novell.com/708402

1 0

openSUSE-RU-2011:0910-1: libtool: Compiling C++ libraries using libtool fails, because the compiler isn't called
by maintenance＠opensuse.org 16 Aug '11

16 Aug '11

openSUSE Recommended Update: libtool: Compiling C++ libraries using libtool fails, because the compiler isn't called ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0910-1 Rating: low References: #708935 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Because the C++ compiler was missing when building libtool the installed libtool will not call any compiler other than the C one. This version of libtool is configured with compilers for C++, Fortran and Objective C present at build time. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libltdl7-4967 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libltdl7-2.2.6b-13.18.1 libtool-2.2.6b-13.18.1 - openSUSE 11.4 (x86_64): libltdl7-32bit-2.2.6b-13.18.1 libtool-32bit-2.2.6b-13.18.1 References: https://bugzilla.novell.com/708935

1 0

openSUSE-RU-2011:0909-1: selinux-policy: /dev files under SELinux don't have the right security context
by maintenance＠opensuse.org 16 Aug '11

16 Aug '11

openSUSE Recommended Update: selinux-policy: /dev files under SELinux don't have the right security context ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0909-1 Rating: low References: #635304 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The following bug is fixed by this update: - #635304: /dev files under SELinux don't to have the right security context Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch selinux-policy-4968 - openSUSE 11.3: zypper in -t patch selinux-policy-4968 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (noarch): selinux-policy-2.20081210-12.13.1 selinux-policy-refpolicy-mcs-2.20081210-12.13.1 selinux-policy-refpolicy-mls-2.20081210-12.13.1 selinux-policy-refpolicy-standard-2.20081210-12.13.1 - openSUSE 11.3 (noarch): selinux-policy-2.20081210-9.3.1 selinux-policy-refpolicy-mcs-2.20081210-9.3.1 selinux-policy-refpolicy-mls-2.20081210-9.3.1 selinux-policy-refpolicy-standard-2.20081210-9.3.1 References: https://bugzilla.novell.com/635304

1 0

openSUSE-RU-2011:0908-1: gnome-games: Fix crashes of glchess
by maintenance＠opensuse.org 16 Aug '11

16 Aug '11

openSUSE Recommended Update: gnome-games: Fix crashes of glchess ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0908-1 Rating: low References: #709856 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes glchess (gnome-games) crash in 3D mode (#709856). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch aisleriot-4964 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): aisleriot-2.32.1-11.12.1 glchess-2.32.1-11.12.1 glines-2.32.1-11.12.1 gnect-2.32.1-11.12.1 gnibbles-2.32.1-11.12.1 gnobots2-2.32.1-11.12.1 gnome-games-2.32.1-11.12.1 gnome-games-recommended-2.32.1-11.12.1 gnome-games-support-2.32.1-11.12.1 gnome-sudoku-2.32.1-11.12.1 gnomine-2.32.1-11.12.1 gnotravex-2.32.1-11.12.1 gnotski-2.32.1-11.12.1 gtali-2.32.1-11.12.1 iagno-2.32.1-11.12.1 lightsoff-2.32.1-11.12.1 mahjongg-2.32.1-11.12.1 quadrapassel-2.32.1-11.12.1 swell-foop-2.32.1-11.12.1 - openSUSE 11.4 (noarch): aisleriot-lang-2.32.1-11.12.1 glchess-lang-2.32.1-11.12.1 glines-lang-2.32.1-11.12.1 gnect-lang-2.32.1-11.12.1 gnibbles-lang-2.32.1-11.12.1 gnobots2-lang-2.32.1-11.12.1 gnome-games-support-lang-2.32.1-11.12.1 gnome-sudoku-lang-2.32.1-11.12.1 gnomine-lang-2.32.1-11.12.1 gnotravex-lang-2.32.1-11.12.1 gnotski-lang-2.32.1-11.12.1 gtali-lang-2.32.1-11.12.1 iagno-lang-2.32.1-11.12.1 lightsoff-lang-2.32.1-11.12.1 mahjongg-lang-2.32.1-11.12.1 quadrapassel-lang-2.32.1-11.12.1 swell-foop-lang-2.32.1-11.12.1 References: https://bugzilla.novell.com/709856

1 0

openSUSE-RU-2011:0906-1: glib2: gdbus aborting due to an assertion failure
by maintenance＠opensuse.org 15 Aug '11

15 Aug '11

openSUSE Recommended Update: glib2: gdbus aborting due to an assertion failure ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0906-1 Rating: low References: #655751 #672793 #675053 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: When DBUS_SESSION_BUS_ADDRESS is set to the valid socket of another user glib aborts due to an assertion failure if more than one connection attempt via gdbus is made, leading to Glib-Gio error messages. Fixed by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch glib2-4974 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): glib2-branding-upstream-2.28.0-3.8.1 glib2-devel-2.28.0-3.8.1 glib2-devel-static-2.28.0-3.8.1 glib2-tools-2.28.0-3.8.1 libgio-2_0-0-2.28.0-3.8.1 libgio-fam-2.28.0-3.8.1 libglib-2_0-0-2.28.0-3.8.1 libgmodule-2_0-0-2.28.0-3.8.1 libgobject-2_0-0-2.28.0-3.8.1 libgthread-2_0-0-2.28.0-3.8.1 - openSUSE 11.4 (x86_64): glib2-tools-32bit-2.28.0-3.8.1 libgio-2_0-0-32bit-2.28.0-3.8.1 libgio-fam-32bit-2.28.0-3.8.1 libglib-2_0-0-32bit-2.28.0-3.8.1 libgmodule-2_0-0-32bit-2.28.0-3.8.1 libgobject-2_0-0-32bit-2.28.0-3.8.1 libgthread-2_0-0-32bit-2.28.0-3.8.1 - openSUSE 11.4 (noarch): glib2-lang-2.28.0-3.8.1 References: https://bugzilla.novell.com/655751 https://bugzilla.novell.com/672793 https://bugzilla.novell.com/675053

1 0

openSUSE-SU-2011:0902-1: important: ecryptfs-utils: Update to fix various symlink race attacks
by opensuse-security＠opensuse.org 12 Aug '11

12 Aug '11

openSUSE Security Update: ecryptfs-utils: Update to fix various symlink race attacks ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0902-1 Rating: important References: #709771 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update of ecryptfs-utils fixes several security problems: - CVE-2011-1831 - Race condition when checking mountpoint during mount. - CVE-2011-1832 - Race condition when checking mountpoint during unmount. - CVE-2011-1833 - Race condition when checking source during mount. - CVE-2011-1834 - Improper mtab handling allowing corruption due to resource limits, signals, etc. - CVE-2011-1835 - Key poisoning in ecryptfs-setup-private due to insecure temp directory. - CVE-2011-1837 - Predictable lock counter name and associated races. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch ecryptfs-utils-4986 - openSUSE 11.3: zypper in -t patch ecryptfs-utils-4986 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): ecryptfs-utils-83-6.7.1 - openSUSE 11.4 (x86_64): ecryptfs-utils-32bit-83-6.7.1 - openSUSE 11.3 (i586 x86_64): ecryptfs-utils-83-3.3.1 - openSUSE 11.3 (x86_64): ecryptfs-utils-32bit-83-3.3.1 References: https://bugzilla.novell.com/709771

1 0

openSUSE-SU-2011:0900-1: moderate: libvirt
by opensuse-security＠opensuse.org 12 Aug '11

12 Aug '11

openSUSE Security Update: libvirt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0900-1 Rating: moderate References: #703084 Cross-References: CVE-2011-2511 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: libvirtd could crash if bogus parameters where passed to the VirDomainGetVcpus call (CVE-2011-2511). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libvirt-4836 - openSUSE 11.3: zypper in -t patch libvirt-4836 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libvirt-0.8.8-0.12.1 libvirt-client-0.8.8-0.12.1 libvirt-devel-0.8.8-0.12.1 libvirt-doc-0.8.8-0.12.1 libvirt-python-0.8.8-0.12.1 - openSUSE 11.3 (i586 x86_64): libvirt-0.8.1-4.10.1 libvirt-client-0.8.1-4.10.1 libvirt-devel-0.8.1-4.10.1 libvirt-doc-0.8.1-4.10.1 libvirt-python-0.8.1-4.10.1 References: http://support.novell.com/security/cve/CVE-2011-2511.html https://bugzilla.novell.com/703084

1 0

openSUSE-SU-2011:0897-1: critical: flash-player
by opensuse-security＠opensuse.org 12 Aug '11

12 Aug '11

openSUSE Security Update: flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0897-1 Rating: critical References: #711427 Cross-References: CVE-2011-2130 CVE-2011-2134 CVE-2011-2135 CVE-2011-2136 CVE-2011-2137 CVE-2011-2138 CVE-2011-2139 CVE-2011-2140 CVE-2011-2414 CVE-2011-2415 CVE-2011-2416 CVE-2011-2417 CVE-2011-2425 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes 13 vulnerabilities is now available. It includes one version update. Description: The update to Flash-Player 10.3.188.5 fixes various security issues: - CVE-2011-2130: CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P) - CVE-2011-2134: CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P) - CVE-2011-2135: CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P) - CVE-2011-2136: CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P) - CVE-2011-2137: CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P) - CVE-2011-2138: CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P) - CVE-2011-2139: CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P) - CVE-2011-2140: CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P) - CVE-2011-2414: CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P) - CVE-2011-2415: CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P) - CVE-2011-2416: CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P) - CVE-2011-2417: CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P) - CVE-2011-2425: CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P) This update resolves a buffer overflow vulnerability that could lead to code execution (CVE-2011-2130). This update resolves a buffer overflow vulnerability that could lead to code execution (CVE-2011-2134). This update resolves a memory corruption vulnerability that could lead to code execution (CVE-2011-2135). This update resolves an integer overflow vulnerability that could lead to code execution (CVE-2011-2136). This update resolves a buffer overflow vulnerability that could lead to code execution (CVE-2011-2137). This update resolves an integer overflow vulnerability that could lead to code execution (CVE-2011-2138). This update resolves a cross-site information disclosure vulnerability that could lead to code execution (CVE-2011-2139). This update resolves a memory corruption vulnerability that could lead to code execution (CVE-2011-2140). This update resolves a buffer overflow vulnerability that could lead to code execution (CVE-2011-2414). This update resolves a buffer overflow vulnerability that could lead to code execution (CVE-2011-2415). This update resolves an integer overflow vulnerability that could lead to code execution (CVE-2011-2416). This update resolves a memory corruption vulnerability that could lead to code execution (CVE-2011-2417). This update resolves a memory corruption vulnerability that could lead to code execution (CVE-2011-2425). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch flash-player-4976 - openSUSE 11.3: zypper in -t patch flash-player-4976 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586) [New Version: 10.3.183.5]: flash-player-10.3.183.5-0.2.1 - openSUSE 11.3 (i586) [New Version: 10.3.183.5]: flash-player-10.3.183.5-0.2.1 References: http://support.novell.com/security/cve/CVE-2011-2130.html http://support.novell.com/security/cve/CVE-2011-2134.html http://support.novell.com/security/cve/CVE-2011-2135.html http://support.novell.com/security/cve/CVE-2011-2136.html http://support.novell.com/security/cve/CVE-2011-2137.html http://support.novell.com/security/cve/CVE-2011-2138.html http://support.novell.com/security/cve/CVE-2011-2139.html http://support.novell.com/security/cve/CVE-2011-2140.html http://support.novell.com/security/cve/CVE-2011-2414.html http://support.novell.com/security/cve/CVE-2011-2415.html http://support.novell.com/security/cve/CVE-2011-2416.html http://support.novell.com/security/cve/CVE-2011-2417.html http://support.novell.com/security/cve/CVE-2011-2425.html https://bugzilla.novell.com/711427

1 0

openSUSE-SU-2011:0892-1: moderate: foomatic-filters
by opensuse-security＠opensuse.org 11 Aug '11

11 Aug '11

openSUSE Security Update: foomatic-filters ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0892-1 Rating: moderate References: #698451 Cross-References: CVE-2011-2697 CVE-2011-2964 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: The foomatic print filters of the hplip package contained a remote code execution vulnerability. Remote users, if allowed to access a print server such as CUPS, could execute arbitrary commands as lp system user. CVE-2011-2964: CVSS v2 Base Score: 6.8 (moderate) (AV:N/AC:M/Au:N/C:P/I:P/A:P): Code Injection (CWE-94) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch foomatic-filters-4979 - openSUSE 11.3: zypper in -t patch foomatic-filters-4979 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): foomatic-filters-4.0.6-7.8.1 - openSUSE 11.3 (i586 x86_64): foomatic-filters-4.0.1-7.3.1 References: http://support.novell.com/security/cve/CVE-2011-2697.html http://support.novell.com/security/cve/CVE-2011-2964.html https://bugzilla.novell.com/698451

1 0

openSUSE-SU-2011:0891-1: moderate: cgit
by opensuse-security＠opensuse.org 11 Aug '11

11 Aug '11

openSUSE Security Update: cgit ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0891-1 Rating: moderate References: #707929 Cross-References: CVE-2011-2711 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update of cgit fixes a XSS vulnerability. CVE-2011-2711: CVSS v2 Base Score: 3.3 (AV:N/AC:L/Au:M/C:N/I:P/A:N): Cross-Site Scripting (XSS) (CWE-79) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch cgit-4975 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): cgit-0.8.3.3-5.7.1 References: http://support.novell.com/security/cve/CVE-2011-2711.html https://bugzilla.novell.com/707929

1 0

openSUSE-SU-2011:0884-1: important: apache2-mod_fcgid: fixed possible stack overflow due to wrong pointer arithmetic (CVE-2010-3872)
by opensuse-security＠opensuse.org 10 Aug '11

10 Aug '11

openSUSE Security Update: apache2-mod_fcgid: fixed possible stack overflow due to wrong pointer arithmetic (CVE-2010-3872) ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0884-1 Rating: important References: #656092 Cross-References: CVE-2010-3872 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: A possible stack overflow in apache2-mod_fcgid due to wrong pointer arithmetic has been fixed. CVE-2010-3872 has been assigned to this issue. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch apache2-mod_fcgid-4933 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): apache2-mod_fcgid-2.2-101.3.1 References: http://support.novell.com/security/cve/CVE-2010-3872.html https://bugzilla.novell.com/656092

1 0

openSUSE-RU-2011:0882-1: dovecot20: Fix Dovecot20 not starting due to missing ssl_keys
by maintenance＠opensuse.org 09 Aug '11

09 Aug '11

openSUSE Recommended Update: dovecot20: Fix Dovecot20 not starting due to missing ssl_keys ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0882-1 Rating: low References: #696919 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update removes references to non-existent ssl_cert and ssl_key in Dovecot configuration. (bnc#696919) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch dovecot20-4959 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): dovecot20-2.0.13-0.5.1 dovecot20-backend-mysql-2.0.13-0.5.1 dovecot20-backend-pgsql-2.0.13-0.5.1 dovecot20-backend-sqlite-2.0.13-0.5.1 dovecot20-devel-2.0.13-0.5.1 dovecot20-fts-solr-2.0.13-0.5.1 References: https://bugzilla.novell.com/696919

1 0

openSUSE-RU-2011:0812-2: moderate: apcupsd: init check is fixed by this update
by maintenance＠opensuse.org 09 Aug '11

09 Aug '11

openSUSE Recommended Update: apcupsd: init check is fixed by this update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0812-2 Rating: moderate References: #703592 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update improves the last update for apcupsd. It fixes the init check to succeed with unmounted /usr. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch apcupsd-4958 - openSUSE 11.3: zypper in -t patch apcupsd-4958 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): apcupsd-3.14.6-13.16.1 apcupsd-gui-3.14.6-13.16.1 - openSUSE 11.3 (i586 x86_64): apcupsd-3.14.6-9.5.1 apcupsd-gui-3.14.6-9.5.1 References: https://bugzilla.novell.com/703592

1 0

openSUSE-SU-2011:0880-1: moderate: dbus-1
by opensuse-security＠opensuse.org 08 Aug '11

08 Aug '11

openSUSE Security Update: dbus-1 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0880-1 Rating: moderate References: #699712 Cross-References: CVE-2011-2200 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: local users could disconnect system daemons from the bus by sending specially crafted messages (CVE-2011-2200). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch dbus-1-4962 - openSUSE 11.3: zypper in -t patch dbus-1-4962 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): dbus-1-1.4.1-7.8.1 dbus-1-devel-1.4.1-7.8.1 - openSUSE 11.4 (x86_64): dbus-1-32bit-1.4.1-7.8.1 dbus-1-devel-32bit-1.4.1-7.8.1 - openSUSE 11.4 (noarch): dbus-1-devel-doc-1.4.1-7.8.1 - openSUSE 11.3 (i586 x86_64): dbus-1-1.2.24-2.5.1 dbus-1-devel-1.2.24-2.5.1 - openSUSE 11.3 (x86_64): dbus-1-32bit-1.2.24-2.5.1 dbus-1-devel-32bit-1.2.24-2.5.1 - openSUSE 11.3 (noarch): dbus-1-devel-doc-1.2.24-2.5.1 References: http://support.novell.com/security/cve/CVE-2011-2200.html https://bugzilla.novell.com/699712

1 0

openSUSE-SU-2011:0875-1: moderate: libsoup
by opensuse-security＠opensuse.org 05 Aug '11

05 Aug '11

openSUSE Security Update: libsoup ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0875-1 Rating: moderate References: #706630 Cross-References: CVE-2011-2524 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update of libsoup fixes a directory traversal attack that affect application using the library. CVE-2011-2524: CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libsoup-2_4-1-4941 - openSUSE 11.3: zypper in -t patch libsoup-2_4-1-4941 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libsoup-2_4-1-2.32.2-3.4.1 - openSUSE 11.4 (x86_64): libsoup-2_4-1-32bit-2.32.2-3.4.1 - openSUSE 11.3 (i586 x86_64): libsoup-2_4-1-2.30.1-2.3.1 - openSUSE 11.3 (x86_64): libsoup-2_4-1-32bit-2.30.1-2.3.1 References: http://support.novell.com/security/cve/CVE-2011-2524.html https://bugzilla.novell.com/706630

1 0

openSUSE-RU-2011:0874-1: Open Buildservice Toolchain: Release for OBS Maintenance Support
by maintenance＠opensuse.org 04 Aug '11

04 Aug '11

openSUSE Recommended Update: Open Buildservice Toolchain: Release for OBS Maintenance Support ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0874-1 Rating: low References: #704617 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes two new package versions. Description: This update brings OBS Maintenance Support and other new osc features for Factory Submissions in a roll up update. It contains new OBS service file drivers: - format_spec_file: format a spec file according to openSUSE rules - source_validator: source and patch and spec validation before check-in Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch obstools-201107-4878 - openSUSE 11.3: zypper in -t patch obstools-201107-4878 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (noarch) [New Version: 2011.07.01]: build-2011.07.01-2.2.1 build-mkbaselibs-2011.07.01-2.2.1 build-mkdrpms-2011.07.01-2.2.1 obs-service-download_files-0.1-4.2.1 obs-service-format_spec_file-0.1-8.8.1 obs-service-source_validator-0.1-2.2.1 osc-0.132.5-1.3.1 osc-source_validator-0.1-4.5.1 - openSUSE 11.3 (noarch) [New Version: 0.132.5 and 2011.07.01]: build-2011.07.01-2.2.1 build-mkbaselibs-2011.07.01-2.2.1 obs-service-download_files-0.1-4.2.1 obs-service-format_spec_file-0.1-8.8.1 obs-service-source_validator-0.1-2.2.1 osc-0.132.5-1.3.2 osc-source_validator-0.1-19.17.1 References: https://bugzilla.novell.com/704617

1 0

openSUSE-SU-2011:0873-1: moderate: virtualbox
by opensuse-security＠opensuse.org 04 Aug '11

04 Aug '11

openSUSE Security Update: virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0873-1 Rating: moderate References: #708271 Cross-References: CVE-2011-2300 CVE-2011-2305 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. It includes one version update. Description: Two privilege escalation vulnerabilities in VirtualBox have been fixed. - CVE-2011-2300: CVSS v2 Base Score: 3.7 (AV:L/AC:H/Au:N/C:P/I:P/A:P) - CVE-2011-2305: CVSS v2 Base Score: 6.2 (AV:L/AC:H/Au:N/C:C/I:C/A:C) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch python-virtualbox-4950 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 4.0.12]: python-virtualbox-4.0.12-0.2.1 virtualbox-4.0.12-0.2.1 virtualbox-devel-4.0.12-0.2.1 virtualbox-guest-kmp-default-4.0.12_k2.6.37.6_0.7-0.2.1 virtualbox-guest-kmp-desktop-4.0.12_k2.6.37.6_0.7-0.2.1 virtualbox-guest-tools-4.0.12-0.2.1 virtualbox-guest-x11-4.0.12-0.2.1 virtualbox-host-kmp-default-4.0.12_k2.6.37.6_0.7-0.2.1 virtualbox-host-kmp-desktop-4.0.12_k2.6.37.6_0.7-0.2.1 virtualbox-qt-4.0.12-0.2.1 - openSUSE 11.4 (i586): virtualbox-guest-kmp-pae-4.0.12_k2.6.37.6_0.7-0.2.1 virtualbox-host-kmp-pae-4.0.12_k2.6.37.6_0.7-0.2.1 References: http://support.novell.com/security/cve/CVE-2011-2300.html http://support.novell.com/security/cve/CVE-2011-2305.html https://bugzilla.novell.com/708271

1 0

openSUSE-YU-2011:0872-1: softwaremgmt: Collective Update 2011/07
by maintenance＠opensuse.org 04 Aug '11

04 Aug '11

openSUSE YOU Update: softwaremgmt: Collective Update 2011/07 ______________________________________________________________________________ Announcement ID: openSUSE-YU-2011:0872-1 Rating: low References: #329635 #539159 #596089 #649925 #666422 #684466 #686261 #687529 #693576 #694427 #707839 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has 11 YOU fixes can now be installed. It includes three new package versions. Description: This update for the update stack provides the following fixes: zypper: - 539159: zypper al ignores --root parameter - 687529: zypper xml output incomplete and/or missing XML-format - 693576: zypper in -C <capability> needs fixing. libzypp: - 596089: download.max_concurrent_connections sets wrong aria option - 649925: Zypper Update repeatedly gives wrong check sum error when updating behind a firewall. - 684466: zypper ps doesn't complain if lsof isn't installed - 694427: zypper should require lsof libsatsolver: - 666422: Ponderosa:- Pre-Alpha5- OES services pattern Description is not displayed correctly in yast2. - 686261: Resolution process for an update try takes too long. - 707839: zypper dup dumps core Special Instructions and Notes: This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. Patch Instructions: To install this openSUSE YOU Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch softwaremgmt-201107-4938 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 0.16.3,1.5.7 and 8.12.6]: libsatsolver-demo-0.16.3-0.2.1 libsatsolver-devel-0.16.3-0.2.1 libzypp-8.12.6-0.2.1 libzypp-devel-8.12.6-0.2.1 perl-satsolver-0.16.3-0.2.1 python-satsolver-0.16.3-0.2.1 ruby-satsolver-0.16.3-0.2.1 satsolver-tools-0.16.3-0.2.1 zypper-1.5.7-0.4.3 References: https://bugzilla.novell.com/329635 https://bugzilla.novell.com/539159 https://bugzilla.novell.com/596089 https://bugzilla.novell.com/649925 https://bugzilla.novell.com/666422 https://bugzilla.novell.com/684466 https://bugzilla.novell.com/686261 https://bugzilla.novell.com/687529 https://bugzilla.novell.com/693576 https://bugzilla.novell.com/694427 https://bugzilla.novell.com/707839

1 0

openSUSE-RU-2011:0866-1: lxde: Fixed common settings and branding
by maintenance＠opensuse.org 02 Aug '11

02 Aug '11

openSUSE Recommended Update: lxde: Fixed common settings and branding ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0866-1 Rating: low References: #681995 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: This update fix the incomplete lxde branding and common settings in openSUSE 11.4 (bnc#681995) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch lxde-common-4924 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (noarch) [New Version: 11.4]: lxde-common-0.5.0-19.20.1 lxde-common-branding-openSUSE-11.4-16.3.1 lxde-common-branding-upstream-0.5.0-19.20.1 References: https://bugzilla.novell.com/681995

1 0

openSUSE-RU-2011:0865-1: gimp: The cellspacing in pyslice plugin is broken.
by maintenance＠opensuse.org 02 Aug '11

02 Aug '11

openSUSE Recommended Update: gimp: The cellspacing in pyslice plugin is broken. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0865-1 Rating: low References: #698769 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The cellspacing in pyslice plugin is broken. Fixed by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch gimp-4927 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): gimp-2.6.11-13.16.1 gimp-branding-upstream-2.6.11-13.16.1 gimp-devel-2.6.11-13.16.1 gimp-help-browser-2.6.11-13.16.1 gimp-module-hal-2.6.11-13.16.1 gimp-plugins-python-2.6.11-13.16.1 libgimp-2_0-0-2.6.11-13.16.1 libgimpui-2_0-0-2.6.11-13.16.1 - openSUSE 11.4 (x86_64): libgimp-2_0-0-32bit-2.6.11-13.16.1 libgimpui-2_0-0-32bit-2.6.11-13.16.1 - openSUSE 11.4 (noarch): gimp-lang-2.6.11-13.16.1 References: https://bugzilla.novell.com/698769

1 0

openSUSE-RU-2011:0864-1: iproute2: "ip addr add" returns a different error codes than before
by maintenance＠opensuse.org 02 Aug '11

02 Aug '11

openSUSE Recommended Update: iproute2: "ip addr add" returns a different error codes than before ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0864-1 Rating: low References: #681952 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The following bug is fixed by this update: 681952: "ip addr add" returns a different error codes than before Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch iproute2-4923 - openSUSE 11.3: zypper in -t patch iproute2-4923 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): iproute2-2.6.37-4.5.1 libnetlink-devel-2.6.37-4.5.1 - openSUSE 11.4 (noarch): iproute2-doc-2.6.37-4.5.1 - openSUSE 11.3 (i586 x86_64): iproute2-2.6.29.1-13.3.1 libnetlink-devel-2.6.29.1-13.3.1 References: https://bugzilla.novell.com/681952

1 0

openSUSE-RU-2011:0862-1: minicom: Static buffers are too small
by maintenance＠opensuse.org 02 Aug '11

02 Aug '11

openSUSE Recommended Update: minicom: Static buffers are too small ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0862-1 Rating: low References: #707860 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The following bug is fixed with this update: - #707860: Static buffers used for storing configuration for minicom are too small; stripping everything after the 64th character Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch minicom-4928 - openSUSE 11.3: zypper in -t patch minicom-4928 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): minicom-2.5-5.6.1 - openSUSE 11.3 (i586 x86_64): minicom-2.3-38.3.1 References: https://bugzilla.novell.com/707860

1 0

openSUSE-SU-2011:0861-1: moderate: kernel: security and bugfix update.
by opensuse-security＠opensuse.org 02 Aug '11

02 Aug '11

openSUSE Security Update: kernel: security and bugfix update. ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0861-1 Rating: moderate References: #584493 #595586 #642142 #655693 #669889 #669937 #670860 #670868 #673934 #674648 #674691 #674693 #674982 #676419 #677827 #679898 #680040 #681497 #683282 #687113 #688432 #689414 #692459 #692502 #693374 #693382 #698221 #698247 #702013 #702285 #703153 #703155 Cross-References: CVE-2011-1013 CVE-2011-1016 CVE-2011-1017 CVE-2011-1020 CVE-2011-1160 CVE-2011-1180 CVE-2011-1479 CVE-2011-1577 CVE-2011-1585 CVE-2011-1593 CVE-2011-2182 CVE-2011-2484 CVE-2011-2491 CVE-2011-2495 CVE-2011-2496 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that solves 15 vulnerabilities and has 17 fixes is now available. It includes one version update. Description: The openSUSE 11.3 kernel was updated to 2.6.34.10 to fix various bugs and security issues. Following security issues have been fixed: CVE-2011-2495: The /proc/PID/io interface could be used by local attackers to gain information on other processes like number of password characters typed or similar. CVE-2011-2484: The add_del_listener function in kernel/taskstats.c in the Linux kernel did not prevent multiple registrations of exit handlers, which allowed local users to cause a denial of service (memory and CPU consumption), and bypass the OOM Killer, via a crafted application. CVE-2011-2491: A local unprivileged user able to access a NFS filesystem could use file locking to deadlock parts of an nfs server under some circumstance. CVE-2011-2496: The normal mmap paths all avoid creating a mapping where the pgoff inside the mapping could wrap around due to overflow. However, an expanding mremap() can take such a non-wrapping mapping and make it bigger and cause a wrapping condition. CVE-2011-1017,CVE-2011-2182: The code for evaluating LDM partitions (in fs/partitions/ldm.c) contained bugs that could crash the kernel for certain corrupted LDM partitions. CVE-2011-1479: A regression in inotify fix for a memory leak could lead to a double free corruption which could crash the system. CVE-2011-1593: Multiple integer overflows in the next_pidmap function in kernel/pid.c in the Linux kernel allowed local users to cause a denial of service (system crash) via a crafted (1) getdents or (2) readdir system call. CVE-2011-1020: The proc filesystem implementation in the Linux kernel did not restrict access to the /proc directory tree of a process after this process performs an exec of a setuid program, which allowed local users to obtain sensitive information or cause a denial of service via open, lseek, read, and write system calls. CVE-2011-1585: When using a setuid root mount.cifs, local users could hijack password protected mounted CIFS shares of other local users. CVE-2011-1160: Kernel information via the TPM devices could by used by local attackers to read kernel memory. CVE-2011-1577: The Linux kernel automatically evaluated partition tables of storage devices. The code for evaluating EFI GUID partitions (in fs/partitions/efi.c) contained a bug that causes a kernel oops on certain corrupted GUID partition tables, which might be used by local attackers to crash the kernel or potentially execute code. CVE-2011-1180: In the IrDA module, length fields provided by a peer for names and attributes may be longer than the destination array sizes and were not checked, this allowed local attackers (close to the irda port) to potentially corrupt memory. CVE-2011-1016: The Radeon GPU drivers in the Linux kernel did not properly validate data related to the AA resolve registers, which allowed local users to write to arbitrary memory locations associated with (1) Video RAM (aka VRAM) or (2) the Graphics Translation Table (GTT) via crafted values. CVE-2011-1013: A signedness issue in the drm ioctl handling could be used by local attackers to potentially overflow kernel buffers and execute code. Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch kernel-4931 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 2.6.34.10]: kernel-debug-2.6.34.10-0.2.1 kernel-debug-base-2.6.34.10-0.2.1 kernel-debug-devel-2.6.34.10-0.2.1 kernel-default-2.6.34.10-0.2.1 kernel-default-base-2.6.34.10-0.2.1 kernel-default-devel-2.6.34.10-0.2.1 kernel-desktop-2.6.34.10-0.2.1 kernel-desktop-base-2.6.34.10-0.2.1 kernel-desktop-devel-2.6.34.10-0.2.1 kernel-ec2-2.6.34.10-0.2.1 kernel-ec2-base-2.6.34.10-0.2.1 kernel-ec2-devel-2.6.34.10-0.2.1 kernel-ec2-extra-2.6.34.10-0.2.1 kernel-syms-2.6.34.10-0.2.1 kernel-trace-2.6.34.10-0.2.1 kernel-trace-base-2.6.34.10-0.2.1 kernel-trace-devel-2.6.34.10-0.2.1 kernel-vanilla-2.6.34.10-0.2.1 kernel-vanilla-base-2.6.34.10-0.2.1 kernel-vanilla-devel-2.6.34.10-0.2.1 kernel-xen-2.6.34.10-0.2.1 kernel-xen-base-2.6.34.10-0.2.1 kernel-xen-devel-2.6.34.10-0.2.1 preload-kmp-default-1.1_k2.6.34.10_0.2-19.1.24 preload-kmp-desktop-1.1_k2.6.34.10_0.2-19.1.24 - openSUSE 11.3 (noarch) [New Version: 2.6.34.10]: kernel-devel-2.6.34.10-0.2.1 kernel-source-2.6.34.10-0.2.1 kernel-source-vanilla-2.6.34.10-0.2.1 - openSUSE 11.3 (i586) [New Version: 2.6.34.10]: kernel-pae-2.6.34.10-0.2.1 kernel-pae-base-2.6.34.10-0.2.1 kernel-pae-devel-2.6.34.10-0.2.1 kernel-vmi-2.6.34.10-0.2.1 kernel-vmi-base-2.6.34.10-0.2.1 kernel-vmi-devel-2.6.34.10-0.2.1 References: http://support.novell.com/security/cve/CVE-2011-1013.html http://support.novell.com/security/cve/CVE-2011-1016.html http://support.novell.com/security/cve/CVE-2011-1017.html http://support.novell.com/security/cve/CVE-2011-1020.html http://support.novell.com/security/cve/CVE-2011-1160.html http://support.novell.com/security/cve/CVE-2011-1180.html http://support.novell.com/security/cve/CVE-2011-1479.html http://support.novell.com/security/cve/CVE-2011-1577.html http://support.novell.com/security/cve/CVE-2011-1585.html http://support.novell.com/security/cve/CVE-2011-1593.html http://support.novell.com/security/cve/CVE-2011-2182.html http://support.novell.com/security/cve/CVE-2011-2484.html http://support.novell.com/security/cve/CVE-2011-2491.html http://support.novell.com/security/cve/CVE-2011-2495.html http://support.novell.com/security/cve/CVE-2011-2496.html https://bugzilla.novell.com/584493 https://bugzilla.novell.com/595586 https://bugzilla.novell.com/642142 https://bugzilla.novell.com/655693 https://bugzilla.novell.com/669889 https://bugzilla.novell.com/669937 https://bugzilla.novell.com/670860 https://bugzilla.novell.com/670868 https://bugzilla.novell.com/673934 https://bugzilla.novell.com/674648 https://bugzilla.novell.com/674691 https://bugzilla.novell.com/674693 https://bugzilla.novell.com/674982 https://bugzilla.novell.com/676419 https://bugzilla.novell.com/677827 https://bugzilla.novell.com/679898 https://bugzilla.novell.com/680040 https://bugzilla.novell.com/681497 https://bugzilla.novell.com/683282 https://bugzilla.novell.com/687113 https://bugzilla.novell.com/688432 https://bugzilla.novell.com/689414 https://bugzilla.novell.com/692459 https://bugzilla.novell.com/692502 https://bugzilla.novell.com/693374 https://bugzilla.novell.com/693382 https://bugzilla.novell.com/698221 https://bugzilla.novell.com/698247 https://bugzilla.novell.com/702013 https://bugzilla.novell.com/702285 https://bugzilla.novell.com/703153 https://bugzilla.novell.com/703155

1 0

openSUSE-SU-2011:0860-1: moderate: kernel: security and bugfix update.
by opensuse-security＠opensuse.org 02 Aug '11

02 Aug '11

openSUSE Security Update: kernel: security and bugfix update. ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0860-1 Rating: moderate References: #584493 #595586 #655693 #661979 #666423 #669889 #672008 #674648 #674982 #677827 #679545 #681826 #681840 #687368 #688432 #689583 #689797 #692497 #692502 #693013 #693043 #693374 #693382 #694498 #697859 #698221 #698247 #699123 #701998 #702013 #702285 #702579 #703155 #704788 Cross-References: CVE-2011-1017 CVE-2011-1020 CVE-2011-1479 CVE-2011-1593 CVE-2011-1745 CVE-2011-1927 CVE-2011-2022 CVE-2011-2182 CVE-2011-2484 CVE-2011-2491 CVE-2011-2493 CVE-2011-2495 CVE-2011-2496 CVE-2011-2498 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that solves 14 vulnerabilities and has 20 fixes is now available. It includes one version update. Description: The openSUSE 11.4 kernel was updated to 2.6.37.6 fixing lots of bugs and security issues. Following security issues have been fixed: CVE-2011-2495: The /proc/PID/io interface could be used by local attackers to gain information on other processes like number of password characters typed or similar. CVE-2011-2484: The add_del_listener function in kernel/taskstats.c in the Linux kernel did not prevent multiple registrations of exit handlers, which allowed local users to cause a denial of service (memory and CPU consumption), and bypass the OOM Killer, via a crafted application. CVE-2011-2022: The agp_generic_remove_memory function in drivers/char/agp/generic.c in the Linux kernel before 2.6.38.5 did not validate a certain start parameter, which allowed local users to gain privileges or cause a denial of service (system crash) via a crafted AGPIOC_UNBIND agp_ioctl ioctl call, a different vulnerability than CVE-2011-1745. CVE-2011-1745: Integer overflow in the agp_generic_insert_memory function in drivers/char/agp/generic.c in the Linux kernel allowed local users to gain privileges or cause a denial of service (system crash) via a crafted AGPIOC_BIND agp_ioctl ioctl call. CVE-2011-2493: A denial of service on mounting invalid ext4 filesystems was fixed. CVE-2011-2491: A local unprivileged user able to access a NFS filesystem could use file locking to deadlock parts of an nfs server under some circumstance. CVE-2011-2498: Also account PTE pages when calculating OOM scoring, which could have lead to a denial of service. CVE-2011-2496: The normal mmap paths all avoid creating a mapping where the pgoff inside the mapping could wrap around due to overflow. However, an expanding mremap() can take such a non-wrapping mapping and make it bigger and cause a wrapping condition. CVE-2011-1017,CVE-2011-2182: The code for evaluating LDM partitions (in fs/partitions/ldm.c) contained bugs that could crash the kernel for certain corrupted LDM partitions. CVE-2011-1479: A regression in inotify fix for a memory leak could lead to a double free corruption which could crash the system. CVE-2011-1927: A missing route validation issue in ip_expire() could be used by remote attackers to trigger a NULL ptr dereference, crashing parts of the kernel. CVE-2011-1593: Multiple integer overflows in the next_pidmap function in kernel/pid.c in the Linux kernel allowed local users to cause a denial of service (system crash) via a crafted (1) getdents or (2) readdir system call. CVE-2011-1020: The proc filesystem implementation in the Linux kernel did not restrict access to the /proc directory tree of a process after this process performs an exec of a setuid program, which allowed local users to obtain sensitive information or cause a denial of service via open, lseek, read, and write system calls. Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch kernel-4932 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 2.6.37.6]: kernel-debug-2.6.37.6-0.7.1 kernel-debug-base-2.6.37.6-0.7.1 kernel-debug-devel-2.6.37.6-0.7.1 kernel-default-2.6.37.6-0.7.1 kernel-default-base-2.6.37.6-0.7.1 kernel-default-devel-2.6.37.6-0.7.1 kernel-desktop-2.6.37.6-0.7.1 kernel-desktop-base-2.6.37.6-0.7.1 kernel-desktop-devel-2.6.37.6-0.7.1 kernel-ec2-2.6.37.6-0.7.1 kernel-ec2-base-2.6.37.6-0.7.1 kernel-ec2-devel-2.6.37.6-0.7.1 kernel-ec2-extra-2.6.37.6-0.7.1 kernel-syms-2.6.37.6-0.7.1 kernel-trace-2.6.37.6-0.7.1 kernel-trace-base-2.6.37.6-0.7.1 kernel-trace-devel-2.6.37.6-0.7.1 kernel-vanilla-2.6.37.6-0.7.1 kernel-vanilla-base-2.6.37.6-0.7.1 kernel-vanilla-devel-2.6.37.6-0.7.1 kernel-xen-2.6.37.6-0.7.1 kernel-xen-base-2.6.37.6-0.7.1 kernel-xen-devel-2.6.37.6-0.7.1 preload-kmp-default-1.2_k2.6.37.6_0.7-6.7.12 preload-kmp-desktop-1.2_k2.6.37.6_0.7-6.7.12 - openSUSE 11.4 (noarch) [New Version: 2.6.37.6]: kernel-devel-2.6.37.6-0.7.1 kernel-docs-2.6.37.6-0.7.1 kernel-source-2.6.37.6-0.7.1 kernel-source-vanilla-2.6.37.6-0.7.1 - openSUSE 11.4 (i586) [New Version: 2.6.37.6]: kernel-pae-2.6.37.6-0.7.1 kernel-pae-base-2.6.37.6-0.7.1 kernel-pae-devel-2.6.37.6-0.7.1 kernel-vmi-2.6.37.6-0.7.1 kernel-vmi-base-2.6.37.6-0.7.1 kernel-vmi-devel-2.6.37.6-0.7.1 References: http://support.novell.com/security/cve/CVE-2011-1017.html http://support.novell.com/security/cve/CVE-2011-1020.html http://support.novell.com/security/cve/CVE-2011-1479.html http://support.novell.com/security/cve/CVE-2011-1593.html http://support.novell.com/security/cve/CVE-2011-1745.html http://support.novell.com/security/cve/CVE-2011-1927.html http://support.novell.com/security/cve/CVE-2011-2022.html http://support.novell.com/security/cve/CVE-2011-2182.html http://support.novell.com/security/cve/CVE-2011-2484.html http://support.novell.com/security/cve/CVE-2011-2491.html http://support.novell.com/security/cve/CVE-2011-2493.html http://support.novell.com/security/cve/CVE-2011-2495.html http://support.novell.com/security/cve/CVE-2011-2496.html http://support.novell.com/security/cve/CVE-2011-2498.html https://bugzilla.novell.com/584493 https://bugzilla.novell.com/595586 https://bugzilla.novell.com/655693 https://bugzilla.novell.com/661979 https://bugzilla.novell.com/666423 https://bugzilla.novell.com/669889 https://bugzilla.novell.com/672008 https://bugzilla.novell.com/674648 https://bugzilla.novell.com/674982 https://bugzilla.novell.com/677827 https://bugzilla.novell.com/679545 https://bugzilla.novell.com/681826 https://bugzilla.novell.com/681840 https://bugzilla.novell.com/687368 https://bugzilla.novell.com/688432 https://bugzilla.novell.com/689583 https://bugzilla.novell.com/689797 https://bugzilla.novell.com/692497 https://bugzilla.novell.com/692502 https://bugzilla.novell.com/693013 https://bugzilla.novell.com/693043 https://bugzilla.novell.com/693374 https://bugzilla.novell.com/693382 https://bugzilla.novell.com/694498 https://bugzilla.novell.com/697859 https://bugzilla.novell.com/698221 https://bugzilla.novell.com/698247 https://bugzilla.novell.com/699123 https://bugzilla.novell.com/701998 https://bugzilla.novell.com/702013 https://bugzilla.novell.com/702285 https://bugzilla.novell.com/702579 https://bugzilla.novell.com/703155 https://bugzilla.novell.com/704788

1 0

openSUSE-SU-2011:0859-1: moderate: libapr1
by opensuse-security＠opensuse.org 01 Aug '11

01 Aug '11

openSUSE Security Update: libapr1 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0859-1 Rating: moderate References: #653510 #670027 #690734 #693778 Cross-References: CVE-2010-1623 CVE-2011-0419 CVE-2011-1928 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: This update fixes: - CVE-2011-0419 and CVE-2011-1928: unconstrained recursion when processing patterns - CVE-2010-1623: a remote DoS (memory leak) in APR's reqtimeout_filter function Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch apache2-4926 - openSUSE 11.3: zypper in -t patch apache2-4926 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): apache2-2.2.17-4.5.1 apache2-devel-2.2.17-4.5.1 apache2-example-certificates-2.2.17-4.5.1 apache2-example-pages-2.2.17-4.5.1 apache2-itk-2.2.17-4.5.1 apache2-prefork-2.2.17-4.5.1 apache2-utils-2.2.17-4.5.1 apache2-worker-2.2.17-4.5.1 libapr-util1-1.3.9-10.11.1 libapr-util1-dbd-mysql-1.3.9-10.11.1 libapr-util1-dbd-pgsql-1.3.9-10.11.1 libapr-util1-dbd-sqlite3-1.3.9-10.11.1 libapr-util1-devel-1.3.9-10.11.1 libapr1-1.4.2-4.5.1 libapr1-devel-1.4.2-4.5.1 - openSUSE 11.4 (noarch): apache2-doc-2.2.17-4.5.1 - openSUSE 11.3 (i586 x86_64): apache2-2.2.15-4.3.1 apache2-devel-2.2.15-4.3.1 apache2-example-certificates-2.2.15-4.3.1 apache2-example-pages-2.2.15-4.3.1 apache2-itk-2.2.15-4.3.1 apache2-prefork-2.2.15-4.3.1 apache2-utils-2.2.15-4.3.1 apache2-worker-2.2.15-4.3.1 libapr-util1-1.3.9-7.3.1 libapr-util1-dbd-mysql-1.3.9-7.3.1 libapr-util1-dbd-pgsql-1.3.9-7.3.1 libapr-util1-dbd-sqlite3-1.3.9-7.3.1 libapr-util1-devel-1.3.9-7.3.1 libapr1-1.3.8-8.3.1 libapr1-devel-1.3.8-8.3.1 - openSUSE 11.3 (noarch): apache2-doc-2.2.15-4.3.1 References: http://support.novell.com/security/cve/CVE-2010-1623.html http://support.novell.com/security/cve/CVE-2011-0419.html http://support.novell.com/security/cve/CVE-2011-1928.html https://bugzilla.novell.com/653510 https://bugzilla.novell.com/670027 https://bugzilla.novell.com/690734 https://bugzilla.novell.com/693778

1 0

openSUSE-SU-2011:0855-1: moderate: libsndfile: fixing Integer overflow by processing certain PAF files (CVE-2011-2696)
by opensuse-security＠opensuse.org 01 Aug '11

01 Aug '11

openSUSE Security Update: libsndfile: fixing Integer overflow by processing certain PAF files (CVE-2011-2696) ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0855-1 Rating: moderate References: #705681 Cross-References: CVE-2011-2696 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: An integer overflow in libsndfile while processing certain PAF files has been fixed. CVE-2011-2696 has been assigned to this issue. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libsndfile-4900 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libsndfile-1.0.23-3.4.1 libsndfile-devel-1.0.23-3.4.1 - openSUSE 11.4 (x86_64): libsndfile-32bit-1.0.23-3.4.1 References: http://support.novell.com/security/cve/CVE-2011-2696.html https://bugzilla.novell.com/705681

1 0