August 2011 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2011:0933-1: important: libfm: pcmanfm - cut and paste a folder may causes data loss
by maintenance＠opensuse.org 23 Aug '11

23 Aug '11

openSUSE Recommended Update: libfm: pcmanfm - cut and paste a folder may causes data loss ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0933-1 Rating: important References: #710881 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update brings pcmanfm and libfm to rc3, fixing several bugs in both components like: - Fix bnc#710881 - "pcmanfm cut and paste a folder to a destination folder without write permission causes data loss" - Fix sf#3308324 - "~ in location bar cause pcmanfm crash" - Fix sf#3286157 - "Entering path with two initial slashes // crashes" - Fix sf#3284001 - "Crash when entering path with trailing slash" This is related to GTK+ bug #650114, which is already fixed. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libfm-4994 - openSUSE 11.3: zypper in -t patch libfm-4995 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libfm-0.1.16_rc3-0.3.1 libfm-devel-0.1.16_rc3-0.3.1 libfm-doc-0.1.16_rc3-0.3.1 libfm-gtk1-0.1.16_rc3-0.3.1 libfm1-0.1.16_rc3-0.3.1 pcmanfm-0.9.9_rc3-0.3.1 - openSUSE 11.4 (noarch): pcmanfm-lang-0.9.9_rc3-0.3.1 - openSUSE 11.3 (i586 x86_64): libfm-0.1.16_rc3-0.10.1 libfm-devel-0.1.16_rc3-0.10.1 libfm-gtk1-0.1.16_rc3-0.10.1 libfm1-0.1.16_rc3-0.10.1 pcmanfm-0.9.9_rc3-0.8.1 - openSUSE 11.3 (noarch): pcmanfm-lang-0.9.9_rc3-0.8.1 References: https://bugzilla.novell.com/710881

1 0

openSUSE-RU-2011:0926-1: important: yasm: Update to YASM 1.1.0
by maintenance＠opensuse.org 19 Aug '11

19 Aug '11

openSUSE Recommended Update: yasm: Update to YASM 1.1.0 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0926-1 Rating: important References: #712224 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: YASM was updated to 1.1.0 to ensure newer Mozilla versions still build. Changes: - update to 1.1.0 * Fix a number of issues with Win32 SAFESEH support (#139). * Fix several 32-bit Mach-O (macho32) bugs (#212 and others). * Add Intel post-32nm instructions (section 7 of AVX spec). * Add XSAVEOPT, INVEPT, INVVPID, and GETSEC instructions (#211). * Remove AMD CVT16 instructions. * Don't emit unnecessary REX.W for pinsrw instruction (#207). * Update gettext to 0.17 (#206). - update to 1.0.1 * Fix ELF32 shared object relocations (#202). * Ignore [warning] directive (#201). - update to 1.0.0 * Add GAS preprocessor (fixes #79). * Add Visual Studio 2010 special frontend, vsyasm * Add support for AMD XOP, FMA4, and CVT16 instructions (replacing SSE5). * Add support for %scope and %endscope NASM macros * Add support for %{x:y} parameter list expansion in NASM preprocessor * Fix _GLOBAL_OFFSET_TABLE_ * Add support for ELF64 PC-relative relocations and latest ELF32 relocation types. * Add support for ELF tlsdesc, tlscall, pltoff, gotplt, gotoff special symbols. * NASM preprocessor license has been changed to 2-clause BSD. * Various bugfixes in TASM syntax support. * Many other bugfixes Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch yasm-5017 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 1.1.0]: yasm-1.1.0-10.3.1 yasm-devel-1.1.0-10.3.1 References: https://bugzilla.novell.com/712224

1 0

openSUSE-SU-2011:0921-1: moderate: crypt_blowfish
by opensuse-security＠opensuse.org 18 Aug '11

18 Aug '11

openSUSE Security Update: crypt_blowfish ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0921-1 Rating: moderate References: #700876 Cross-References: CVE-2011-2483 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. It includes one version update. Description: The implementation of the blowfish based password hashing method had a bug affecting passwords that contain 8bit characters (e.g. umlauts). Affected passwords are potentially faster to crack via brute force methods (CVE-2011-2483). SUSE's crypt() implementation supports the blowfish password hashing function (id $2a) and system logins by default also use this method. This update eliminates the bug in the $2a implementation. After installing the update existing $2a hashes therefore no longer match hashes generated with the new, correct implementation if the password contains 8bit characters. For system logins via PAM the pam_unix2 module activates a compat mode and keeps processing existing $2a hashes with the old algorithm. This ensures no user gets locked out. New passwords hashes are created with the id "$2y" to unambiguously identify them as generated with the correct implementation. Note: To actually migrate hashes to the new algorithm all users are advised to change passwords after the update. Services that do not use PAM but do use crypt() to store passwords using the blowfish hash do not have such a compat mode. That means users with 8bit passwords that use such services will not be able to log in anymore after the update. As workaround administrators may edit the service's password database and change stored hashes from $2a to $2x. This will result in crypt() using the old algorithm. Users should be required to change their passwords to make sure they are migrated to the correct algorithm. FAQ: Q: I only use ASCII characters in passwords, am I a affected in any way? A: No. Q: What's the meaning of the ids before and after the update? A: Before the update: $2a -> buggy algorithm After the update: $2x -> buggy algorithm $2a -> correct algorithm $2y -> correct algorithm System logins using PAM have a compat mode enabled by default: $2x -> buggy algorithm $2a -> buggy algorithm $2y -> correct algorithm Q: How do I require users to change their password on next login? A: Run the following command as root for each user: chage -d 0 <username> Q: I run an application that has $2a hashes in it's password database. Some users complain that they can not log in anymore. A: Edit the password database and change the "$2a" prefix of the affected users' hashes to "$2x". They will be able to log in again but should change their password ASAP. Q: How do I turn off the compat mode for system logins? A: Set BLOWFISH_2a2x=no in /etc/default/passwd Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch glibc-4943 - openSUSE 11.3: zypper in -t patch glibc-4943 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 i686 x86_64): glibc-2.11.3-12.17.1 glibc-devel-2.11.3-12.17.1 - openSUSE 11.4 (i586 x86_64): glibc-html-2.11.3-12.17.1 glibc-i18ndata-2.11.3-12.17.1 glibc-info-2.11.3-12.17.1 glibc-locale-2.11.3-12.17.1 glibc-obsolete-2.11.3-12.17.1 glibc-profile-2.11.3-12.17.1 libxcrypt-3.0.3-9.10.1 libxcrypt-devel-3.0.3-9.10.1 nscd-2.11.3-12.17.1 pam-modules-11.4-3.4.1 pwdutils-3.2.14-4.5.1 pwdutils-plugin-audit-3.2.14-4.5.1 pwdutils-rpasswd-3.2.14-4.5.1 - openSUSE 11.4 (x86_64): glibc-32bit-2.11.3-12.17.1 glibc-devel-32bit-2.11.3-12.17.1 glibc-locale-32bit-2.11.3-12.17.1 glibc-profile-32bit-2.11.3-12.17.1 libxcrypt-32bit-3.0.3-9.10.1 pam-modules-32bit-11.4-3.4.1 pwdutils-rpasswd-32bit-3.2.14-4.5.1 - openSUSE 11.3 (i586 i686 x86_64): glibc-2.11.2-3.5.1 glibc-devel-2.11.2-3.5.1 - openSUSE 11.3 (i586 x86_64) [New Version: 11.3]: glibc-html-2.11.2-3.5.1 glibc-i18ndata-2.11.2-3.5.1 glibc-info-2.11.2-3.5.1 glibc-locale-2.11.2-3.5.1 glibc-obsolete-2.11.2-3.5.1 glibc-profile-2.11.2-3.5.1 libxcrypt-3.0.3-5.3.1 libxcrypt-devel-3.0.3-5.3.1 nscd-2.11.2-3.5.1 pam-modules-11.3-0.3.1 pwdutils-3.2.10-2.3.1 pwdutils-plugin-audit-3.2.10-2.3.1 pwdutils-rpasswd-3.2.10-2.3.1 - openSUSE 11.3 (x86_64) [New Version: 11.3]: glibc-32bit-2.11.2-3.5.1 glibc-devel-32bit-2.11.2-3.5.1 glibc-locale-32bit-2.11.2-3.5.1 glibc-profile-32bit-2.11.2-3.5.1 libxcrypt-32bit-3.0.3-5.3.1 pam-modules-32bit-11.3-0.3.1 pwdutils-rpasswd-32bit-3.2.10-2.3.1 References: http://support.novell.com/security/cve/CVE-2011-2483.html https://bugzilla.novell.com/700876

1 0

openSUSE-SU-2011:0915-1: moderate: libpng14-14
by opensuse-security＠opensuse.org 17 Aug '11

17 Aug '11

openSUSE Security Update: libpng14-14 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0915-1 Rating: moderate References: #702578 #706387 #706388 #706389 Cross-References: CVE-2008-6218 CVE-2009-5063 CVE-2011-2501 CVE-2011-2690 CVE-2011-2691 CVE-2011-2692 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. It includes one version update. Description: This update of libpng14-14 fixes: - CVE-2011-2501: CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P): Design Error (CWE-DesignError) - CVE-2011-2690: CVSS v2 Base Score: 5.1 (AV:N/AC:H/Au:N/C:P/I:P/A:P): Buffer Errors (CWE-119) - CVE-2011-2691: CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P): Other (CWE-Other) - CVE-2011-2692: CVSS v2 Base Score: 5.0 (AV:N/AC:M/Au:N/C:N/I:N/A:P): Buffer Errors (CWE-119) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libpng12-4947 libpng14-4949 - openSUSE 11.3: zypper in -t patch libpng12-4947 libpng14-4949 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 1.2.46]: libpng12-0-1.2.46-7.3.1 libpng12-compat-devel-1.2.46-7.3.1 libpng12-devel-1.2.46-7.3.1 libpng14-14-1.4.4-3.4.1 libpng14-compat-devel-1.4.4-3.4.1 libpng14-devel-1.4.4-3.4.1 - openSUSE 11.4 (x86_64) [New Version: 1.2.46]: libpng12-0-32bit-1.2.46-7.3.1 libpng12-compat-devel-32bit-1.2.46-7.3.1 libpng12-devel-32bit-1.2.46-7.3.1 libpng14-14-32bit-1.4.4-3.4.1 libpng14-compat-devel-32bit-1.4.4-3.4.1 libpng14-devel-32bit-1.4.4-3.4.1 - openSUSE 11.3 (i586 x86_64) [New Version: 1.2.46]: libpng12-0-1.2.46-7.3.1 libpng12-compat-devel-1.2.46-7.3.1 libpng12-devel-1.2.46-7.3.1 libpng14-14-1.4.3-3.3.1 libpng14-compat-devel-1.4.3-3.3.1 libpng14-devel-1.4.3-3.3.1 - openSUSE 11.3 (x86_64) [New Version: 1.2.46]: libpng12-0-32bit-1.2.46-7.3.1 libpng14-14-32bit-1.4.3-3.3.1 References: http://support.novell.com/security/cve/CVE-2008-6218.html http://support.novell.com/security/cve/CVE-2009-5063.html http://support.novell.com/security/cve/CVE-2011-2501.html http://support.novell.com/security/cve/CVE-2011-2690.html http://support.novell.com/security/cve/CVE-2011-2691.html http://support.novell.com/security/cve/CVE-2011-2692.html https://bugzilla.novell.com/702578 https://bugzilla.novell.com/706387 https://bugzilla.novell.com/706388 https://bugzilla.novell.com/706389

1 0

openSUSE-RU-2011:0911-1: wxGTK: Drag and drop crash in Filezilla
by maintenance＠opensuse.org 16 Aug '11

16 Aug '11

openSUSE Recommended Update: wxGTK: Drag and drop crash in Filezilla ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0911-1 Rating: low References: #708402 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes a crash at drag and drop operations, at least in Filezilla, but possibly in other applications, too. (#708402) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libwx_base-2_8-0-compat-lib-wxcontainer-4971 - openSUSE 11.3: zypper in -t patch python-wxGTK-4969 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libwx_base-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_base-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_base_net-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_base_net-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_base_xml-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_base_xml-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_baseu-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_baseu-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_baseu-2_8-0-stl-2.8.11-4.13.1 libwx_baseu-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_baseu_net-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_baseu_net-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_baseu_net-2_8-0-stl-2.8.11-4.13.1 libwx_baseu_net-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_baseu_xml-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_baseu_xml-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_baseu_xml-2_8-0-stl-2.8.11-4.13.1 libwx_baseu_xml-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2_adv-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2_adv-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2_aui-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2_aui-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2_core-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2_core-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2_fl-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2_fl-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2_gizmos-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2_gizmos-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2_gizmos_xrc-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2_gizmos_xrc-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2_gl-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2_gl-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2_html-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2_html-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2_media-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2_media-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2_mmedia-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2_mmedia-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2_ogl-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2_ogl-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2_plot-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2_plot-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2_qa-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2_qa-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2_richtext-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2_richtext-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2_stc-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2_stc-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2_svg-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2_svg-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2_xrc-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2_xrc-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_adv-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_gtk2u_adv-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_adv-2_8-0-stl-2.8.11-4.13.1 libwx_gtk2u_adv-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_aui-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_gtk2u_aui-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_aui-2_8-0-stl-2.8.11-4.13.1 libwx_gtk2u_aui-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_core-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_gtk2u_core-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_core-2_8-0-stl-2.8.11-4.13.1 libwx_gtk2u_core-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_fl-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_fl-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_gizmos-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_gtk2u_gizmos-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_gizmos-2_8-0-stl-2.8.11-4.13.1 libwx_gtk2u_gizmos-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_gizmos_xrc-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_gtk2u_gizmos_xrc-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_gizmos_xrc-2_8-0-stl-2.8.11-4.13.1 libwx_gtk2u_gizmos_xrc-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_gl-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_gtk2u_gl-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_gl-2_8-0-stl-2.8.11-4.13.1 libwx_gtk2u_gl-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_html-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_gtk2u_html-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_html-2_8-0-stl-2.8.11-4.13.1 libwx_gtk2u_html-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_media-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_gtk2u_media-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_media-2_8-0-stl-2.8.11-4.13.1 libwx_gtk2u_media-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_mmedia-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_gtk2u_mmedia-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_mmedia-2_8-0-stl-2.8.11-4.13.1 libwx_gtk2u_mmedia-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_ogl-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_ogl-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_plot-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_gtk2u_plot-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_plot-2_8-0-stl-2.8.11-4.13.1 libwx_gtk2u_plot-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_qa-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_gtk2u_qa-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_qa-2_8-0-stl-2.8.11-4.13.1 libwx_gtk2u_qa-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_richtext-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_gtk2u_richtext-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_richtext-2_8-0-stl-2.8.11-4.13.1 libwx_gtk2u_richtext-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_stc-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_gtk2u_stc-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_stc-2_8-0-stl-2.8.11-4.13.1 libwx_gtk2u_stc-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_svg-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_gtk2u_svg-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_svg-2_8-0-stl-2.8.11-4.13.1 libwx_gtk2u_svg-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_xrc-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_gtk2u_xrc-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_xrc-2_8-0-stl-2.8.11-4.13.1 libwx_gtk2u_xrc-2_8-0-wxcontainer-2.8.11-3.13.1 wxWidgets-ansi-compat-lib-config-2.8.11-3.13.1 wxWidgets-ansi-devel-2.8.11-3.13.1 wxWidgets-ansi-plugin-sound_sdl-2_8-wxcontainer-2.8.11-3.13.1 wxWidgets-compat-lib-config-2.8.11-4.13.1 wxWidgets-devel-2.8.11-4.13.1 wxWidgets-plugin-sound_sdlu-2_8-stl-2.8.11-4.13.1 wxWidgets-wxcontainer-compat-lib-config-2.8.11-3.13.1 wxWidgets-wxcontainer-devel-2.8.11-3.13.1 wxWidgets-wxcontainer-plugin-sound_sdlu-2_8-wxcontainer-2.8.11-3.13.1 - openSUSE 11.4 (noarch): wxWidgets-lang-2.8.11-4.13.1 - openSUSE 11.3 (i586 x86_64): python-wxGTK-2.8.10.1-12.3.1 wxGTK-2.8.10.1-12.3.1 wxGTK-compat-2.8.10.1-12.3.1 wxGTK-devel-2.8.10.1-12.3.1 wxGTK-gl-2.8.10.1-12.3.1 References: https://bugzilla.novell.com/708402

1 0

openSUSE-RU-2011:0910-1: libtool: Compiling C++ libraries using libtool fails, because the compiler isn't called
by maintenance＠opensuse.org 16 Aug '11

16 Aug '11

openSUSE Recommended Update: libtool: Compiling C++ libraries using libtool fails, because the compiler isn't called ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0910-1 Rating: low References: #708935 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Because the C++ compiler was missing when building libtool the installed libtool will not call any compiler other than the C one. This version of libtool is configured with compilers for C++, Fortran and Objective C present at build time. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libltdl7-4967 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libltdl7-2.2.6b-13.18.1 libtool-2.2.6b-13.18.1 - openSUSE 11.4 (x86_64): libltdl7-32bit-2.2.6b-13.18.1 libtool-32bit-2.2.6b-13.18.1 References: https://bugzilla.novell.com/708935

1 0

openSUSE-RU-2011:0909-1: selinux-policy: /dev files under SELinux don't have the right security context
by maintenance＠opensuse.org 16 Aug '11

16 Aug '11

openSUSE Recommended Update: selinux-policy: /dev files under SELinux don't have the right security context ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0909-1 Rating: low References: #635304 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The following bug is fixed by this update: - #635304: /dev files under SELinux don't to have the right security context Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch selinux-policy-4968 - openSUSE 11.3: zypper in -t patch selinux-policy-4968 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (noarch): selinux-policy-2.20081210-12.13.1 selinux-policy-refpolicy-mcs-2.20081210-12.13.1 selinux-policy-refpolicy-mls-2.20081210-12.13.1 selinux-policy-refpolicy-standard-2.20081210-12.13.1 - openSUSE 11.3 (noarch): selinux-policy-2.20081210-9.3.1 selinux-policy-refpolicy-mcs-2.20081210-9.3.1 selinux-policy-refpolicy-mls-2.20081210-9.3.1 selinux-policy-refpolicy-standard-2.20081210-9.3.1 References: https://bugzilla.novell.com/635304

1 0

openSUSE-RU-2011:0908-1: gnome-games: Fix crashes of glchess
by maintenance＠opensuse.org 16 Aug '11

16 Aug '11

openSUSE Recommended Update: gnome-games: Fix crashes of glchess ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0908-1 Rating: low References: #709856 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes glchess (gnome-games) crash in 3D mode (#709856). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch aisleriot-4964 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): aisleriot-2.32.1-11.12.1 glchess-2.32.1-11.12.1 glines-2.32.1-11.12.1 gnect-2.32.1-11.12.1 gnibbles-2.32.1-11.12.1 gnobots2-2.32.1-11.12.1 gnome-games-2.32.1-11.12.1 gnome-games-recommended-2.32.1-11.12.1 gnome-games-support-2.32.1-11.12.1 gnome-sudoku-2.32.1-11.12.1 gnomine-2.32.1-11.12.1 gnotravex-2.32.1-11.12.1 gnotski-2.32.1-11.12.1 gtali-2.32.1-11.12.1 iagno-2.32.1-11.12.1 lightsoff-2.32.1-11.12.1 mahjongg-2.32.1-11.12.1 quadrapassel-2.32.1-11.12.1 swell-foop-2.32.1-11.12.1 - openSUSE 11.4 (noarch): aisleriot-lang-2.32.1-11.12.1 glchess-lang-2.32.1-11.12.1 glines-lang-2.32.1-11.12.1 gnect-lang-2.32.1-11.12.1 gnibbles-lang-2.32.1-11.12.1 gnobots2-lang-2.32.1-11.12.1 gnome-games-support-lang-2.32.1-11.12.1 gnome-sudoku-lang-2.32.1-11.12.1 gnomine-lang-2.32.1-11.12.1 gnotravex-lang-2.32.1-11.12.1 gnotski-lang-2.32.1-11.12.1 gtali-lang-2.32.1-11.12.1 iagno-lang-2.32.1-11.12.1 lightsoff-lang-2.32.1-11.12.1 mahjongg-lang-2.32.1-11.12.1 quadrapassel-lang-2.32.1-11.12.1 swell-foop-lang-2.32.1-11.12.1 References: https://bugzilla.novell.com/709856

1 0

openSUSE-RU-2011:0906-1: glib2: gdbus aborting due to an assertion failure
by maintenance＠opensuse.org 15 Aug '11

15 Aug '11

openSUSE Recommended Update: glib2: gdbus aborting due to an assertion failure ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0906-1 Rating: low References: #655751 #672793 #675053 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: When DBUS_SESSION_BUS_ADDRESS is set to the valid socket of another user glib aborts due to an assertion failure if more than one connection attempt via gdbus is made, leading to Glib-Gio error messages. Fixed by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch glib2-4974 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): glib2-branding-upstream-2.28.0-3.8.1 glib2-devel-2.28.0-3.8.1 glib2-devel-static-2.28.0-3.8.1 glib2-tools-2.28.0-3.8.1 libgio-2_0-0-2.28.0-3.8.1 libgio-fam-2.28.0-3.8.1 libglib-2_0-0-2.28.0-3.8.1 libgmodule-2_0-0-2.28.0-3.8.1 libgobject-2_0-0-2.28.0-3.8.1 libgthread-2_0-0-2.28.0-3.8.1 - openSUSE 11.4 (x86_64): glib2-tools-32bit-2.28.0-3.8.1 libgio-2_0-0-32bit-2.28.0-3.8.1 libgio-fam-32bit-2.28.0-3.8.1 libglib-2_0-0-32bit-2.28.0-3.8.1 libgmodule-2_0-0-32bit-2.28.0-3.8.1 libgobject-2_0-0-32bit-2.28.0-3.8.1 libgthread-2_0-0-32bit-2.28.0-3.8.1 - openSUSE 11.4 (noarch): glib2-lang-2.28.0-3.8.1 References: https://bugzilla.novell.com/655751 https://bugzilla.novell.com/672793 https://bugzilla.novell.com/675053

1 0

openSUSE-SU-2011:0902-1: important: ecryptfs-utils: Update to fix various symlink race attacks
by opensuse-security＠opensuse.org 12 Aug '11

12 Aug '11

openSUSE Security Update: ecryptfs-utils: Update to fix various symlink race attacks ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0902-1 Rating: important References: #709771 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update of ecryptfs-utils fixes several security problems: - CVE-2011-1831 - Race condition when checking mountpoint during mount. - CVE-2011-1832 - Race condition when checking mountpoint during unmount. - CVE-2011-1833 - Race condition when checking source during mount. - CVE-2011-1834 - Improper mtab handling allowing corruption due to resource limits, signals, etc. - CVE-2011-1835 - Key poisoning in ecryptfs-setup-private due to insecure temp directory. - CVE-2011-1837 - Predictable lock counter name and associated races. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch ecryptfs-utils-4986 - openSUSE 11.3: zypper in -t patch ecryptfs-utils-4986 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): ecryptfs-utils-83-6.7.1 - openSUSE 11.4 (x86_64): ecryptfs-utils-32bit-83-6.7.1 - openSUSE 11.3 (i586 x86_64): ecryptfs-utils-83-3.3.1 - openSUSE 11.3 (x86_64): ecryptfs-utils-32bit-83-3.3.1 References: https://bugzilla.novell.com/709771

1 0