August 2011 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2011:0957-1: important: seamonkey: Update to Mozilla Seamonkey 2.3
by opensuse-security＠opensuse.org 26 Aug '11

26 Aug '11

openSUSE Security Update: seamonkey: Update to Mozilla Seamonkey 2.3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0957-1 Rating: important References: #712224 Cross-References: CVE-2011-0084 CVE-2011-2985 CVE-2011-2986 CVE-2011-2987 CVE-2011-2988 CVE-2011-2989 CVE-2011-2990 CVE-2011-2991 CVE-2011-2992 CVE-2011-2993 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes 10 vulnerabilities is now available. It includes one version update. Description: Mozilla Seamonkey suite was updated to version 2.3. The update fixes bugs and security issues. Following security issues were fixed: http://www.mozilla.org/security/announce/2011/mfsa2011-33.ht ml Mozilla Foundation Security Advisory 2011-33 (MFSA 2011-33) Mozilla Foundation Security Advisory 2011-33 * Miscellaneous memory safety hazards (rv:4.0) Mozilla identified and fixed several memory safety bugs in the browser engine used in SeaMonkey 2.2 and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code. Aral Yaman reported a WebGL crash which affected SeaMonkey 2.2. (CVE-2011-2989) Vivekanand Bolajwar reported a JavaScript crash which affected SeaMonkey 2.2. (CVE-2011-2991) Bert Hubert and Theo Snelleman of Fox-IT reported a crash in the Ogg reader which affected SeaMonkey 2.2. (CVE-2011-2992) Mozilla developers and community members Robert Kaiser, Jesse Ruderman, moz_bug_r_a4, Mardeg, Gary Kwong, Christoph Diehl, Martijn Wargers, Travis Emmitt, Bob Clary and Jonathan Watt reported memory safety issues which affected SeaMonkey 2.2. (CVE-2011-2985) * Unsigned scripts can call script inside signed JAR Rafael Gieschke reported that unsigned JavaScript could call into script inside a signed JAR thereby inheriting the identity of the site that signed the JAR as well as any permissions that a user had granted the signed JAR. (CVE-2011-2993) * String crash using WebGL shaders Michael Jordon of Context IS reported that an overly long shader program could cause a buffer overrun and crash in a string class used to store the shader source code. (CVE-2011-2988) * Heap overflow in ANGLE library Michael Jordon of Context IS reported a potentially exploitable heap overflow in the ANGLE library used by Mozilla's WebGL implementation. (CVE-2011-2987) * Crash in SVGTextElement.getCharNumAtPosition() Security researcher regenrecht reported via TippingPoint's Zero Day Initiative that a SVG text manipulation routine contained a dangling pointer vulnerability. (CVE-2011-0084) * Credential leakage using Content Security Policy reports Mike Cardwell reported that Content Security Policy violation reports failed to strip out proxy authorization credentials from the list of request headers. Daniel Veditz reported that redirecting to a website with Content Security Policy resulted in the incorrect resolution of hosts in the constructed policy. (CVE-2011-2990) * Cross-origin data theft using canvas and Windows D2D nasalislarvatus3000 reported that when using Windows D2D hardware acceleration, image data from one domain could be inserted into a canvas and read by a different domain. (CVE-2011-2986) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch seamonkey-5024 - openSUSE 11.3: zypper in -t patch seamonkey-5024 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 2.3]: seamonkey-2.3-2.2.1 seamonkey-dom-inspector-2.3-2.2.1 seamonkey-irc-2.3-2.2.1 seamonkey-translations-common-2.3-2.2.1 seamonkey-translations-other-2.3-2.2.1 seamonkey-venkman-2.3-2.2.1 - openSUSE 11.3 (i586 x86_64) [New Version: 2.3]: seamonkey-2.3-2.2.1 seamonkey-dom-inspector-2.3-2.2.1 seamonkey-irc-2.3-2.2.1 seamonkey-translations-common-2.3-2.2.1 seamonkey-translations-other-2.3-2.2.1 seamonkey-venkman-2.3-2.2.1 References: http://support.novell.com/security/cve/CVE-2011-0084.html http://support.novell.com/security/cve/CVE-2011-2985.html http://support.novell.com/security/cve/CVE-2011-2986.html http://support.novell.com/security/cve/CVE-2011-2987.html http://support.novell.com/security/cve/CVE-2011-2988.html http://support.novell.com/security/cve/CVE-2011-2989.html http://support.novell.com/security/cve/CVE-2011-2990.html http://support.novell.com/security/cve/CVE-2011-2991.html http://support.novell.com/security/cve/CVE-2011-2992.html http://support.novell.com/security/cve/CVE-2011-2993.html https://bugzilla.novell.com/712224

1 0

openSUSE-SU-2011:0921-2: moderate: yast2-core: Adjust to fix crypt_blowfish 8-bit character mishandling
by opensuse-security＠opensuse.org 26 Aug '11

26 Aug '11

openSUSE Security Update: yast2-core: Adjust to fix crypt_blowfish 8-bit character mishandling ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0921-2 Rating: moderate References: #700876 Cross-References: CVE-2011-2483 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. It includes two new package versions. Description: This update contains yast2 core changes to change the hash generation of new passwords to the new secure style. Please read the general notes below: The implementation of the blowfish based password hashing method had a bug affecting passwords that contain 8bit characters (e.g. umlauts). Affected passwords are potentially faster to crack via brute force methods (CVE-2011-2483). SUSE's crypt() implementation supports the blowfish password hashing function (id $2a) and system logins by default also use this method. This update eliminates the bug in the $2a implementation. After installing the update existing $2a hashes therefore no longer match hashes generated with the new, correct implementation if the password contains 8bit characters. For system logins via PAM the pam_unix2 module activates a compat mode and keeps processing existing $2a hashes with the old algorithm. This ensures no user gets locked out. New passwords hashes are created with the id "$2y" to unambiguously identify them as generated with the correct implementation. Note: To actually migrate hashes to the new algorithm all users are advised to change passwords after the update. Services that do not use PAM but do use crypt() to store passwords using the blowfish hash do not have such a compat mode. That means users with 8bit passwords that use such services will not be able to log in anymore after the update. As workaround administrators may edit the service's password database and change stored hashes from $2a to $2x. This will result in crypt() using the old algorithm. Users should be required to change their passwords to make sure they are migrated to the correct algorithm. FAQ: Q: I only use ASCII characters in passwords, am I a affected in any way? A: No. Q: What's the meaning of the ids before and after the update? A: Before the update: $2a -> buggy algorithm After the update: $2x -> buggy algorithm $2a -> correct algorithm $2y -> correct algorithm System logins using PAM have a compat mode enabled by default: $2x -> buggy algorithm $2a -> buggy algorithm $2y -> correct algorithm Q: How do I require users to change their password on next login? A: Run the following command as root for each user: chage -d 0 <username> Q: I run an application that has $2a hashes in it's password database. Some users complain that they can not log in anymore. A: Edit the password database and change the "$2a" prefix of the affected users' hashes to "$2x". They will be able to log in again but should change their password ASAP. Q: How do I turn off the compat mode for system logins? A: Set BLOWFISH_2a2x=no in /etc/default/passwd Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch yast2-core-5028 - openSUSE 11.3: zypper in -t patch yast2-core-5028 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 2.20.1]: yast2-core-2.20.1-0.3.1 yast2-core-devel-2.20.1-0.3.1 - openSUSE 11.3 (i586 x86_64) [New Version: 2.19.4]: yast2-core-2.19.4-0.2.1 yast2-core-devel-2.19.4-0.2.1 References: http://support.novell.com/security/cve/CVE-2011-2483.html https://bugzilla.novell.com/700876

1 0

openSUSE-RU-2011:0953-1: libproxy: Update to upstream version 0.4.7
by maintenance＠opensuse.org 26 Aug '11

26 Aug '11

openSUSE Recommended Update: libproxy: Update to upstream version 0.4.7 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0953-1 Rating: low References: #679322 #701059 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. It includes one version update. Description: This update fixes the following issues: - #149: always test for the right python noarch module path - #155: Cannot compile with Firefox 4 - #156: libproxy should build against webkitgtk-3.0 - #158: Won't compile w/ xulrunner 2.0 final - #159: libproxy fails with autoconfiguration "http://proxy.domain.com" - #131: GSettings-based GNOME plugin - #150: SUSE sysconfig/proxy config support Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libproxy-5021 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 0.4.7]: libproxy-devel-0.4.7-6.3.1 libproxy-sharp-0.4.7-6.3.1 libproxy-tools-0.4.7-6.3.1 libproxy1-0.4.7-6.3.1 libproxy1-config-gnome-0.4.7-3.3.1 libproxy1-config-kde4-0.4.7-3.3.1 libproxy1-networkmanager-0.4.7-3.3.1 libproxy1-pacrunner-mozjs-0.4.7-3.3.1 libproxy1-pacrunner-webkit-0.4.7-3.3.1 perl-Net-Libproxy-0.4.7-6.3.1 - openSUSE 11.4 (x86_64) [New Version: 0.4.7]: libproxy1-32bit-0.4.7-6.3.1 libproxy1-config-gnome-32bit-0.4.7-3.3.1 libproxy1-networkmanager-32bit-0.4.7-3.3.1 libproxy1-pacrunner-mozjs-32bit-0.4.7-3.3.1 libproxy1-pacrunner-webkit-32bit-0.4.7-3.3.1 - openSUSE 11.4 (noarch) [New Version: 0.4.7]: python-libproxy-0.4.7-6.3.1 References: https://bugzilla.novell.com/679322 https://bugzilla.novell.com/701059

1 0

openSUSE-SU-2011:0950-1: moderate: hplip
by opensuse-security＠opensuse.org 25 Aug '11

25 Aug '11

openSUSE Security Update: hplip ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0950-1 Rating: moderate References: #59233 Cross-References: CVE-2004-0801 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. It includes one version update. Description: This update of hplip fixes: - CVE-2004-0801: CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P): This patch originally affected foomatic-rip in CUPS but was found to be in foomatic-rip-hplip too. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch hplip-4987 - openSUSE 11.3: zypper in -t patch hplip-4987 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 3.11.5]: hplip-3.11.5-1.5.1 hplip-hpijs-3.11.5-1.5.1 - openSUSE 11.3 (i586 x86_64): hplip-3.10.2-2.5.1 hplip-hpijs-3.10.2-2.5.1 References: http://support.novell.com/security/cve/CVE-2004-0801.html https://bugzilla.novell.com/59233

1 0

openSUSE-SU-2011:0943-1: important: libmodplug: Fixed multiple vulnerabilities reported in <= 0.8.8.3
by opensuse-security＠opensuse.org 24 Aug '11

24 Aug '11

openSUSE Security Update: libmodplug: Fixed multiple vulnerabilities reported in <= 0.8.8.3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0943-1 Rating: important References: #710726 Cross-References: CVE-2011-1761 CVE-2011-2911 CVE-2011-2912 CVE-2011-2913 CVE-2011-2914 CVE-2011-2915 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. It includes one version update. Description: This update of libmodplug0 fixes the following issues: 1) An integer overflow error exists within the "CSoundFile::ReadWav()" function (src/load_wav.cpp) when processing certain WAV files. This can be exploited to cause a heap-based buffer overflow by tricking a user into opening a specially crafted WAV file. (CVE-2011-2911) 2) Boundary errors within the "CSoundFile::ReadS3M()" function (src/load_s3m.cpp) when processing S3M files can be exploited to cause stack-based buffer overflows by tricking a user into opening a specially crafted S3M file. (CVE-2011-2912) 3) An off-by-one error within the "CSoundFile::ReadAMS()" function (src/load_ams.cpp) can be exploited to cause a stack corruption by tricking a user into opening a specially crafted AMS file. (CVE-2011-2913) 4) An off-by-one error within the "CSoundFile::ReadDSM()" function (src/load_dms.cpp) can be exploited to cause a memory corruption by tricking a user into opening a specially crafted DSM file. (CVE-2011-2914) 5) An off-by-one error within the "CSoundFile::ReadAMS2()" function (src/load_ams.cpp) can be exploited to cause a memory corruption by tricking a user into opening a specially crafted AMS file. (CVE-2011-2915) Also an overflow in the ABC loader was fixed. (CVE-2011-1761) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libmodplug-5004 - openSUSE 11.3: zypper in -t patch libmodplug-5004 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 0.8.8.4]: libmodplug-devel-0.8.8.4-2.2.1 libmodplug0-0.8.8.4-2.2.1 - openSUSE 11.4 (x86_64) [New Version: 0.8.8.4]: libmodplug0-32bit-0.8.8.4-2.2.1 - openSUSE 11.3 (i586 x86_64) [New Version: 0.8.8.4]: libmodplug-devel-0.8.8.4-2.2.1 libmodplug0-0.8.8.4-2.2.1 - openSUSE 11.3 (x86_64) [New Version: 0.8.8.4]: libmodplug0-32bit-0.8.8.4-2.2.1 References: http://support.novell.com/security/cve/CVE-2011-1761.html http://support.novell.com/security/cve/CVE-2011-2911.html http://support.novell.com/security/cve/CVE-2011-2912.html http://support.novell.com/security/cve/CVE-2011-2913.html http://support.novell.com/security/cve/CVE-2011-2914.html http://support.novell.com/security/cve/CVE-2011-2915.html https://bugzilla.novell.com/710726

1 0

openSUSE-SU-2011:0941-1: important: xen: Fixed a security bug and various other bugs
by opensuse-security＠opensuse.org 24 Aug '11

24 Aug '11

openSUSE Security Update: xen: Fixed a security bug and various other bugs ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0941-1 Rating: important References: #582265 #670465 #684297 #684305 #689954 #692625 #693472 #702025 #703924 Cross-References: CVE-2011-1898 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that solves one vulnerability and has 8 fixes is now available. It includes one version update. Description: Security / Collective Update for Xen Xen: - bnc#702025 - VUL-0: xen: VT-d (PCI passthrough) MSI trap injection (CVE-2011-1898) - bnc#703924 - update block-npiv scripts to support BFA HBA - bnc#689954 - L3: Live migrations fail when guest crashes: domain_crash_sync called from entry.S - bnc#693472 - Bridge hangs cause redundant ring failures in SLE 11 SP1 HAE + XEN - bnc#582265 - xen-scsi.ko not supported - bnc#670465 - When connecting to Xen guest through vncviewer mouse tracking is off. - bnc#684305 - on_crash is being ignored with kdump now working in HVM vm-install: - bnc#692625 - virt-manager has problems to install guest from multiple CD Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch xen-201107-4929 - openSUSE 11.3: zypper in -t patch xen-201107-4930 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 0.4.31]: vm-install-0.4.31-0.4.1 xen-4.0.2_52-0.2.1 xen-devel-4.0.2_52-0.2.1 xen-doc-html-4.0.2_52-0.2.1 xen-doc-pdf-4.0.2_52-0.2.1 xen-kmp-default-4.0.2_52_k2.6.37.6_0.7-0.2.1 xen-kmp-desktop-4.0.2_52_k2.6.37.6_0.7-0.2.1 xen-libs-4.0.2_52-0.2.1 xen-tools-4.0.2_52-0.2.1 xen-tools-domU-4.0.2_52-0.2.1 - openSUSE 11.4 (i586): xen-kmp-pae-4.0.2_52_k2.6.37.6_0.7-0.2.1 - openSUSE 11.3 (i586 x86_64) [New Version: 0.4.31]: vm-install-0.4.31-0.4.1 xen-4.0.2_21511_02-0.5.2 xen-devel-4.0.2_21511_02-0.5.2 xen-doc-html-4.0.2_21511_02-0.5.2 xen-doc-pdf-4.0.2_21511_02-0.5.2 xen-kmp-default-4.0.2_21511_02_k2.6.34.10_0.2-0.5.2 xen-kmp-desktop-4.0.2_21511_02_k2.6.34.10_0.2-0.5.2 xen-libs-4.0.2_21511_02-0.5.2 xen-tools-4.0.2_21511_02-0.5.2 xen-tools-domU-4.0.2_21511_02-0.5.2 - openSUSE 11.3 (i586): xen-kmp-pae-4.0.2_21511_02_k2.6.34.10_0.2-0.5.2 References: http://support.novell.com/security/cve/CVE-2011-1898.html https://bugzilla.novell.com/582265 https://bugzilla.novell.com/670465 https://bugzilla.novell.com/684297 https://bugzilla.novell.com/684305 https://bugzilla.novell.com/689954 https://bugzilla.novell.com/692625 https://bugzilla.novell.com/693472 https://bugzilla.novell.com/702025 https://bugzilla.novell.com/703924

1 0

openSUSE-SU-2011:0940-1: moderate: clamav
by opensuse-security＠opensuse.org 24 Aug '11

24 Aug '11

openSUSE Security Update: clamav ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0940-1 Rating: moderate References: #708263 Cross-References: CVE-2011-2721 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. It includes one version update. Description: New clamav packages fix an off-by-one vulnerability which could lead to a DoS condition. CVE-2011-2721 has been assigned to this issue. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch clamav-4940 - openSUSE 11.3: zypper in -t patch clamav-4940 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 0.97.2]: clamav-0.97.2-1.2.1 - openSUSE 11.4 (noarch) [New Version: 0.97.2]: clamav-db-0.97.2-1.2.1 - openSUSE 11.3 (i586 x86_64) [New Version: 0.97.2]: clamav-0.97.2-1.2.1 - openSUSE 11.3 (noarch) [New Version: 0.97.2]: clamav-db-0.97.2-1.2.1 References: http://support.novell.com/security/cve/CVE-2011-2721.html https://bugzilla.novell.com/708263

1 0

openSUSE-SU-2011:0935-1: important: mozilla-nss: Update to 3.12.11
by opensuse-security＠opensuse.org 23 Aug '11

23 Aug '11

openSUSE Security Update: mozilla-nss: Update to 3.12.11 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0935-1 Rating: important References: #712224 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that contains security fixes can now be installed. It includes one version update. Description: The mozilla NSS libraries were updated to 3.12.11 to align with newer Mozilla seamonkey and Firefox releases. Interesting changes are: - blacklisting malicious root certificates - several bugfixes Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libfreebl3-5023 - openSUSE 11.3: zypper in -t patch libfreebl3-5023 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 3.12.11]: libfreebl3-3.12.11-1.3.1 libsoftokn3-3.12.11-1.3.1 mozilla-nss-3.12.11-1.3.1 mozilla-nss-certs-3.12.11-1.3.1 mozilla-nss-devel-3.12.11-1.3.1 mozilla-nss-sysinit-3.12.11-1.3.1 mozilla-nss-tools-3.12.11-1.3.1 - openSUSE 11.4 (x86_64) [New Version: 3.12.11]: libfreebl3-32bit-3.12.11-1.3.1 libsoftokn3-32bit-3.12.11-1.3.1 mozilla-nss-32bit-3.12.11-1.3.1 mozilla-nss-certs-32bit-3.12.11-1.3.1 mozilla-nss-sysinit-32bit-3.12.11-1.3.1 - openSUSE 11.3 (i586 x86_64) [New Version: 3.12.11]: libfreebl3-3.12.11-1.2.1 libsoftokn3-3.12.11-1.2.1 mozilla-nss-3.12.11-1.2.1 mozilla-nss-certs-3.12.11-1.2.1 mozilla-nss-devel-3.12.11-1.2.1 mozilla-nss-sysinit-3.12.11-1.2.1 mozilla-nss-tools-3.12.11-1.2.1 - openSUSE 11.3 (x86_64) [New Version: 3.12.11]: libfreebl3-32bit-3.12.11-1.2.1 libsoftokn3-32bit-3.12.11-1.2.1 mozilla-nss-32bit-3.12.11-1.2.1 mozilla-nss-certs-32bit-3.12.11-1.2.1 mozilla-nss-sysinit-32bit-3.12.11-1.2.1 References: https://bugzilla.novell.com/712224

1 0

openSUSE-RU-2011:0934-1: kdeedu4: Fix crash when zooming in marble
by maintenance＠opensuse.org 23 Aug '11

23 Aug '11

openSUSE Recommended Update: kdeedu4: Fix crash when zooming in marble ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0934-1 Rating: low References: #695213 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes a crash when zooming in marble (bnc#695213) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch blinken-4997 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): blinken-4.6.0-4.5.1 cantor-4.6.0-4.5.1 kalgebra-4.6.0-4.5.1 kalzium-4.6.0-4.5.1 kanagram-4.6.0-4.5.1 kbruch-4.6.0-4.5.1 kdeedu4-4.6.0-4.5.1 kgeography-4.6.0-4.5.1 khangman-4.6.0-4.5.1 kig-4.6.0-4.5.1 kiten-4.6.0-4.5.1 klettres-4.6.0-4.5.1 kmplot-4.6.0-4.5.1 kstars-4.6.0-4.5.1 ktouch-4.6.0-4.5.1 kturtle-4.6.0-4.5.1 kwordquiz-4.6.0-4.5.1 libSatLib4-4.6.0-4.5.1 libkdeedu4-4.6.0-4.5.1 libkdeedu4-devel-4.6.0-4.5.1 marble-4.6.0-4.5.1 marble-devel-4.6.0-4.5.1 parley-4.6.0-4.5.1 rocs-4.6.0-4.5.1 rocs-devel-4.6.0-4.5.1 step-4.6.0-4.5.1 References: https://bugzilla.novell.com/695213

1 0

openSUSE-RU-2011:0926-2: important: mozilla-nspr: Update to 4.8.9
by maintenance＠opensuse.org 23 Aug '11

23 Aug '11

openSUSE Recommended Update: mozilla-nspr: Update to 4.8.9 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0926-2 Rating: important References: #712224 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: The mozilla NSPR libraries were updated to 4.8.9 to align with newer Mozilla seamonkey and Firefox releases. Interesting changes are: * lots of bugfixes * use AI_ADDRCONFIG for loopback hostnames (bmo#614526) * support SDP sockets (bmo#518078) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch mozilla-nspr-5022 - openSUSE 11.3: zypper in -t patch mozilla-nspr-5022 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 4.8.9]: mozilla-nspr-4.8.9-1.3.1 mozilla-nspr-devel-4.8.9-1.3.1 - openSUSE 11.4 (x86_64) [New Version: 4.8.9]: mozilla-nspr-32bit-4.8.9-1.3.1 - openSUSE 11.3 (i586 x86_64) [New Version: 4.8.9]: mozilla-nspr-4.8.9-1.2.1 mozilla-nspr-devel-4.8.9-1.2.1 - openSUSE 11.3 (x86_64) [New Version: 4.8.9]: mozilla-nspr-32bit-4.8.9-1.2.1 References: https://bugzilla.novell.com/712224

1 0