August 2011 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2011:0873-1: moderate: virtualbox
by opensuse-security＠opensuse.org 04 Aug '11

04 Aug '11

openSUSE Security Update: virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0873-1 Rating: moderate References: #708271 Cross-References: CVE-2011-2300 CVE-2011-2305 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. It includes one version update. Description: Two privilege escalation vulnerabilities in VirtualBox have been fixed. - CVE-2011-2300: CVSS v2 Base Score: 3.7 (AV:L/AC:H/Au:N/C:P/I:P/A:P) - CVE-2011-2305: CVSS v2 Base Score: 6.2 (AV:L/AC:H/Au:N/C:C/I:C/A:C) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch python-virtualbox-4950 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 4.0.12]: python-virtualbox-4.0.12-0.2.1 virtualbox-4.0.12-0.2.1 virtualbox-devel-4.0.12-0.2.1 virtualbox-guest-kmp-default-4.0.12_k2.6.37.6_0.7-0.2.1 virtualbox-guest-kmp-desktop-4.0.12_k2.6.37.6_0.7-0.2.1 virtualbox-guest-tools-4.0.12-0.2.1 virtualbox-guest-x11-4.0.12-0.2.1 virtualbox-host-kmp-default-4.0.12_k2.6.37.6_0.7-0.2.1 virtualbox-host-kmp-desktop-4.0.12_k2.6.37.6_0.7-0.2.1 virtualbox-qt-4.0.12-0.2.1 - openSUSE 11.4 (i586): virtualbox-guest-kmp-pae-4.0.12_k2.6.37.6_0.7-0.2.1 virtualbox-host-kmp-pae-4.0.12_k2.6.37.6_0.7-0.2.1 References: http://support.novell.com/security/cve/CVE-2011-2300.html http://support.novell.com/security/cve/CVE-2011-2305.html https://bugzilla.novell.com/708271

1 0

openSUSE-YU-2011:0872-1: softwaremgmt: Collective Update 2011/07
by maintenance＠opensuse.org 04 Aug '11

04 Aug '11

openSUSE YOU Update: softwaremgmt: Collective Update 2011/07 ______________________________________________________________________________ Announcement ID: openSUSE-YU-2011:0872-1 Rating: low References: #329635 #539159 #596089 #649925 #666422 #684466 #686261 #687529 #693576 #694427 #707839 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has 11 YOU fixes can now be installed. It includes three new package versions. Description: This update for the update stack provides the following fixes: zypper: - 539159: zypper al ignores --root parameter - 687529: zypper xml output incomplete and/or missing XML-format - 693576: zypper in -C <capability> needs fixing. libzypp: - 596089: download.max_concurrent_connections sets wrong aria option - 649925: Zypper Update repeatedly gives wrong check sum error when updating behind a firewall. - 684466: zypper ps doesn't complain if lsof isn't installed - 694427: zypper should require lsof libsatsolver: - 666422: Ponderosa:- Pre-Alpha5- OES services pattern Description is not displayed correctly in yast2. - 686261: Resolution process for an update try takes too long. - 707839: zypper dup dumps core Special Instructions and Notes: This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. Patch Instructions: To install this openSUSE YOU Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch softwaremgmt-201107-4938 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 0.16.3,1.5.7 and 8.12.6]: libsatsolver-demo-0.16.3-0.2.1 libsatsolver-devel-0.16.3-0.2.1 libzypp-8.12.6-0.2.1 libzypp-devel-8.12.6-0.2.1 perl-satsolver-0.16.3-0.2.1 python-satsolver-0.16.3-0.2.1 ruby-satsolver-0.16.3-0.2.1 satsolver-tools-0.16.3-0.2.1 zypper-1.5.7-0.4.3 References: https://bugzilla.novell.com/329635 https://bugzilla.novell.com/539159 https://bugzilla.novell.com/596089 https://bugzilla.novell.com/649925 https://bugzilla.novell.com/666422 https://bugzilla.novell.com/684466 https://bugzilla.novell.com/686261 https://bugzilla.novell.com/687529 https://bugzilla.novell.com/693576 https://bugzilla.novell.com/694427 https://bugzilla.novell.com/707839

1 0

openSUSE-RU-2011:0866-1: lxde: Fixed common settings and branding
by maintenance＠opensuse.org 02 Aug '11

02 Aug '11

openSUSE Recommended Update: lxde: Fixed common settings and branding ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0866-1 Rating: low References: #681995 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: This update fix the incomplete lxde branding and common settings in openSUSE 11.4 (bnc#681995) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch lxde-common-4924 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (noarch) [New Version: 11.4]: lxde-common-0.5.0-19.20.1 lxde-common-branding-openSUSE-11.4-16.3.1 lxde-common-branding-upstream-0.5.0-19.20.1 References: https://bugzilla.novell.com/681995

1 0

openSUSE-RU-2011:0865-1: gimp: The cellspacing in pyslice plugin is broken.
by maintenance＠opensuse.org 02 Aug '11

02 Aug '11

openSUSE Recommended Update: gimp: The cellspacing in pyslice plugin is broken. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0865-1 Rating: low References: #698769 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The cellspacing in pyslice plugin is broken. Fixed by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch gimp-4927 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): gimp-2.6.11-13.16.1 gimp-branding-upstream-2.6.11-13.16.1 gimp-devel-2.6.11-13.16.1 gimp-help-browser-2.6.11-13.16.1 gimp-module-hal-2.6.11-13.16.1 gimp-plugins-python-2.6.11-13.16.1 libgimp-2_0-0-2.6.11-13.16.1 libgimpui-2_0-0-2.6.11-13.16.1 - openSUSE 11.4 (x86_64): libgimp-2_0-0-32bit-2.6.11-13.16.1 libgimpui-2_0-0-32bit-2.6.11-13.16.1 - openSUSE 11.4 (noarch): gimp-lang-2.6.11-13.16.1 References: https://bugzilla.novell.com/698769

1 0

openSUSE-RU-2011:0864-1: iproute2: "ip addr add" returns a different error codes than before
by maintenance＠opensuse.org 02 Aug '11

02 Aug '11

openSUSE Recommended Update: iproute2: "ip addr add" returns a different error codes than before ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0864-1 Rating: low References: #681952 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The following bug is fixed by this update: 681952: "ip addr add" returns a different error codes than before Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch iproute2-4923 - openSUSE 11.3: zypper in -t patch iproute2-4923 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): iproute2-2.6.37-4.5.1 libnetlink-devel-2.6.37-4.5.1 - openSUSE 11.4 (noarch): iproute2-doc-2.6.37-4.5.1 - openSUSE 11.3 (i586 x86_64): iproute2-2.6.29.1-13.3.1 libnetlink-devel-2.6.29.1-13.3.1 References: https://bugzilla.novell.com/681952

1 0

openSUSE-RU-2011:0862-1: minicom: Static buffers are too small
by maintenance＠opensuse.org 02 Aug '11

02 Aug '11

openSUSE Recommended Update: minicom: Static buffers are too small ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0862-1 Rating: low References: #707860 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The following bug is fixed with this update: - #707860: Static buffers used for storing configuration for minicom are too small; stripping everything after the 64th character Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch minicom-4928 - openSUSE 11.3: zypper in -t patch minicom-4928 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): minicom-2.5-5.6.1 - openSUSE 11.3 (i586 x86_64): minicom-2.3-38.3.1 References: https://bugzilla.novell.com/707860

1 0

openSUSE-SU-2011:0861-1: moderate: kernel: security and bugfix update.
by opensuse-security＠opensuse.org 02 Aug '11

02 Aug '11

openSUSE Security Update: kernel: security and bugfix update. ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0861-1 Rating: moderate References: #584493 #595586 #642142 #655693 #669889 #669937 #670860 #670868 #673934 #674648 #674691 #674693 #674982 #676419 #677827 #679898 #680040 #681497 #683282 #687113 #688432 #689414 #692459 #692502 #693374 #693382 #698221 #698247 #702013 #702285 #703153 #703155 Cross-References: CVE-2011-1013 CVE-2011-1016 CVE-2011-1017 CVE-2011-1020 CVE-2011-1160 CVE-2011-1180 CVE-2011-1479 CVE-2011-1577 CVE-2011-1585 CVE-2011-1593 CVE-2011-2182 CVE-2011-2484 CVE-2011-2491 CVE-2011-2495 CVE-2011-2496 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that solves 15 vulnerabilities and has 17 fixes is now available. It includes one version update. Description: The openSUSE 11.3 kernel was updated to 2.6.34.10 to fix various bugs and security issues. Following security issues have been fixed: CVE-2011-2495: The /proc/PID/io interface could be used by local attackers to gain information on other processes like number of password characters typed or similar. CVE-2011-2484: The add_del_listener function in kernel/taskstats.c in the Linux kernel did not prevent multiple registrations of exit handlers, which allowed local users to cause a denial of service (memory and CPU consumption), and bypass the OOM Killer, via a crafted application. CVE-2011-2491: A local unprivileged user able to access a NFS filesystem could use file locking to deadlock parts of an nfs server under some circumstance. CVE-2011-2496: The normal mmap paths all avoid creating a mapping where the pgoff inside the mapping could wrap around due to overflow. However, an expanding mremap() can take such a non-wrapping mapping and make it bigger and cause a wrapping condition. CVE-2011-1017,CVE-2011-2182: The code for evaluating LDM partitions (in fs/partitions/ldm.c) contained bugs that could crash the kernel for certain corrupted LDM partitions. CVE-2011-1479: A regression in inotify fix for a memory leak could lead to a double free corruption which could crash the system. CVE-2011-1593: Multiple integer overflows in the next_pidmap function in kernel/pid.c in the Linux kernel allowed local users to cause a denial of service (system crash) via a crafted (1) getdents or (2) readdir system call. CVE-2011-1020: The proc filesystem implementation in the Linux kernel did not restrict access to the /proc directory tree of a process after this process performs an exec of a setuid program, which allowed local users to obtain sensitive information or cause a denial of service via open, lseek, read, and write system calls. CVE-2011-1585: When using a setuid root mount.cifs, local users could hijack password protected mounted CIFS shares of other local users. CVE-2011-1160: Kernel information via the TPM devices could by used by local attackers to read kernel memory. CVE-2011-1577: The Linux kernel automatically evaluated partition tables of storage devices. The code for evaluating EFI GUID partitions (in fs/partitions/efi.c) contained a bug that causes a kernel oops on certain corrupted GUID partition tables, which might be used by local attackers to crash the kernel or potentially execute code. CVE-2011-1180: In the IrDA module, length fields provided by a peer for names and attributes may be longer than the destination array sizes and were not checked, this allowed local attackers (close to the irda port) to potentially corrupt memory. CVE-2011-1016: The Radeon GPU drivers in the Linux kernel did not properly validate data related to the AA resolve registers, which allowed local users to write to arbitrary memory locations associated with (1) Video RAM (aka VRAM) or (2) the Graphics Translation Table (GTT) via crafted values. CVE-2011-1013: A signedness issue in the drm ioctl handling could be used by local attackers to potentially overflow kernel buffers and execute code. Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch kernel-4931 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 2.6.34.10]: kernel-debug-2.6.34.10-0.2.1 kernel-debug-base-2.6.34.10-0.2.1 kernel-debug-devel-2.6.34.10-0.2.1 kernel-default-2.6.34.10-0.2.1 kernel-default-base-2.6.34.10-0.2.1 kernel-default-devel-2.6.34.10-0.2.1 kernel-desktop-2.6.34.10-0.2.1 kernel-desktop-base-2.6.34.10-0.2.1 kernel-desktop-devel-2.6.34.10-0.2.1 kernel-ec2-2.6.34.10-0.2.1 kernel-ec2-base-2.6.34.10-0.2.1 kernel-ec2-devel-2.6.34.10-0.2.1 kernel-ec2-extra-2.6.34.10-0.2.1 kernel-syms-2.6.34.10-0.2.1 kernel-trace-2.6.34.10-0.2.1 kernel-trace-base-2.6.34.10-0.2.1 kernel-trace-devel-2.6.34.10-0.2.1 kernel-vanilla-2.6.34.10-0.2.1 kernel-vanilla-base-2.6.34.10-0.2.1 kernel-vanilla-devel-2.6.34.10-0.2.1 kernel-xen-2.6.34.10-0.2.1 kernel-xen-base-2.6.34.10-0.2.1 kernel-xen-devel-2.6.34.10-0.2.1 preload-kmp-default-1.1_k2.6.34.10_0.2-19.1.24 preload-kmp-desktop-1.1_k2.6.34.10_0.2-19.1.24 - openSUSE 11.3 (noarch) [New Version: 2.6.34.10]: kernel-devel-2.6.34.10-0.2.1 kernel-source-2.6.34.10-0.2.1 kernel-source-vanilla-2.6.34.10-0.2.1 - openSUSE 11.3 (i586) [New Version: 2.6.34.10]: kernel-pae-2.6.34.10-0.2.1 kernel-pae-base-2.6.34.10-0.2.1 kernel-pae-devel-2.6.34.10-0.2.1 kernel-vmi-2.6.34.10-0.2.1 kernel-vmi-base-2.6.34.10-0.2.1 kernel-vmi-devel-2.6.34.10-0.2.1 References: http://support.novell.com/security/cve/CVE-2011-1013.html http://support.novell.com/security/cve/CVE-2011-1016.html http://support.novell.com/security/cve/CVE-2011-1017.html http://support.novell.com/security/cve/CVE-2011-1020.html http://support.novell.com/security/cve/CVE-2011-1160.html http://support.novell.com/security/cve/CVE-2011-1180.html http://support.novell.com/security/cve/CVE-2011-1479.html http://support.novell.com/security/cve/CVE-2011-1577.html http://support.novell.com/security/cve/CVE-2011-1585.html http://support.novell.com/security/cve/CVE-2011-1593.html http://support.novell.com/security/cve/CVE-2011-2182.html http://support.novell.com/security/cve/CVE-2011-2484.html http://support.novell.com/security/cve/CVE-2011-2491.html http://support.novell.com/security/cve/CVE-2011-2495.html http://support.novell.com/security/cve/CVE-2011-2496.html https://bugzilla.novell.com/584493 https://bugzilla.novell.com/595586 https://bugzilla.novell.com/642142 https://bugzilla.novell.com/655693 https://bugzilla.novell.com/669889 https://bugzilla.novell.com/669937 https://bugzilla.novell.com/670860 https://bugzilla.novell.com/670868 https://bugzilla.novell.com/673934 https://bugzilla.novell.com/674648 https://bugzilla.novell.com/674691 https://bugzilla.novell.com/674693 https://bugzilla.novell.com/674982 https://bugzilla.novell.com/676419 https://bugzilla.novell.com/677827 https://bugzilla.novell.com/679898 https://bugzilla.novell.com/680040 https://bugzilla.novell.com/681497 https://bugzilla.novell.com/683282 https://bugzilla.novell.com/687113 https://bugzilla.novell.com/688432 https://bugzilla.novell.com/689414 https://bugzilla.novell.com/692459 https://bugzilla.novell.com/692502 https://bugzilla.novell.com/693374 https://bugzilla.novell.com/693382 https://bugzilla.novell.com/698221 https://bugzilla.novell.com/698247 https://bugzilla.novell.com/702013 https://bugzilla.novell.com/702285 https://bugzilla.novell.com/703153 https://bugzilla.novell.com/703155

1 0

openSUSE-SU-2011:0860-1: moderate: kernel: security and bugfix update.
by opensuse-security＠opensuse.org 02 Aug '11

02 Aug '11

openSUSE Security Update: kernel: security and bugfix update. ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0860-1 Rating: moderate References: #584493 #595586 #655693 #661979 #666423 #669889 #672008 #674648 #674982 #677827 #679545 #681826 #681840 #687368 #688432 #689583 #689797 #692497 #692502 #693013 #693043 #693374 #693382 #694498 #697859 #698221 #698247 #699123 #701998 #702013 #702285 #702579 #703155 #704788 Cross-References: CVE-2011-1017 CVE-2011-1020 CVE-2011-1479 CVE-2011-1593 CVE-2011-1745 CVE-2011-1927 CVE-2011-2022 CVE-2011-2182 CVE-2011-2484 CVE-2011-2491 CVE-2011-2493 CVE-2011-2495 CVE-2011-2496 CVE-2011-2498 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that solves 14 vulnerabilities and has 20 fixes is now available. It includes one version update. Description: The openSUSE 11.4 kernel was updated to 2.6.37.6 fixing lots of bugs and security issues. Following security issues have been fixed: CVE-2011-2495: The /proc/PID/io interface could be used by local attackers to gain information on other processes like number of password characters typed or similar. CVE-2011-2484: The add_del_listener function in kernel/taskstats.c in the Linux kernel did not prevent multiple registrations of exit handlers, which allowed local users to cause a denial of service (memory and CPU consumption), and bypass the OOM Killer, via a crafted application. CVE-2011-2022: The agp_generic_remove_memory function in drivers/char/agp/generic.c in the Linux kernel before 2.6.38.5 did not validate a certain start parameter, which allowed local users to gain privileges or cause a denial of service (system crash) via a crafted AGPIOC_UNBIND agp_ioctl ioctl call, a different vulnerability than CVE-2011-1745. CVE-2011-1745: Integer overflow in the agp_generic_insert_memory function in drivers/char/agp/generic.c in the Linux kernel allowed local users to gain privileges or cause a denial of service (system crash) via a crafted AGPIOC_BIND agp_ioctl ioctl call. CVE-2011-2493: A denial of service on mounting invalid ext4 filesystems was fixed. CVE-2011-2491: A local unprivileged user able to access a NFS filesystem could use file locking to deadlock parts of an nfs server under some circumstance. CVE-2011-2498: Also account PTE pages when calculating OOM scoring, which could have lead to a denial of service. CVE-2011-2496: The normal mmap paths all avoid creating a mapping where the pgoff inside the mapping could wrap around due to overflow. However, an expanding mremap() can take such a non-wrapping mapping and make it bigger and cause a wrapping condition. CVE-2011-1017,CVE-2011-2182: The code for evaluating LDM partitions (in fs/partitions/ldm.c) contained bugs that could crash the kernel for certain corrupted LDM partitions. CVE-2011-1479: A regression in inotify fix for a memory leak could lead to a double free corruption which could crash the system. CVE-2011-1927: A missing route validation issue in ip_expire() could be used by remote attackers to trigger a NULL ptr dereference, crashing parts of the kernel. CVE-2011-1593: Multiple integer overflows in the next_pidmap function in kernel/pid.c in the Linux kernel allowed local users to cause a denial of service (system crash) via a crafted (1) getdents or (2) readdir system call. CVE-2011-1020: The proc filesystem implementation in the Linux kernel did not restrict access to the /proc directory tree of a process after this process performs an exec of a setuid program, which allowed local users to obtain sensitive information or cause a denial of service via open, lseek, read, and write system calls. Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch kernel-4932 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 2.6.37.6]: kernel-debug-2.6.37.6-0.7.1 kernel-debug-base-2.6.37.6-0.7.1 kernel-debug-devel-2.6.37.6-0.7.1 kernel-default-2.6.37.6-0.7.1 kernel-default-base-2.6.37.6-0.7.1 kernel-default-devel-2.6.37.6-0.7.1 kernel-desktop-2.6.37.6-0.7.1 kernel-desktop-base-2.6.37.6-0.7.1 kernel-desktop-devel-2.6.37.6-0.7.1 kernel-ec2-2.6.37.6-0.7.1 kernel-ec2-base-2.6.37.6-0.7.1 kernel-ec2-devel-2.6.37.6-0.7.1 kernel-ec2-extra-2.6.37.6-0.7.1 kernel-syms-2.6.37.6-0.7.1 kernel-trace-2.6.37.6-0.7.1 kernel-trace-base-2.6.37.6-0.7.1 kernel-trace-devel-2.6.37.6-0.7.1 kernel-vanilla-2.6.37.6-0.7.1 kernel-vanilla-base-2.6.37.6-0.7.1 kernel-vanilla-devel-2.6.37.6-0.7.1 kernel-xen-2.6.37.6-0.7.1 kernel-xen-base-2.6.37.6-0.7.1 kernel-xen-devel-2.6.37.6-0.7.1 preload-kmp-default-1.2_k2.6.37.6_0.7-6.7.12 preload-kmp-desktop-1.2_k2.6.37.6_0.7-6.7.12 - openSUSE 11.4 (noarch) [New Version: 2.6.37.6]: kernel-devel-2.6.37.6-0.7.1 kernel-docs-2.6.37.6-0.7.1 kernel-source-2.6.37.6-0.7.1 kernel-source-vanilla-2.6.37.6-0.7.1 - openSUSE 11.4 (i586) [New Version: 2.6.37.6]: kernel-pae-2.6.37.6-0.7.1 kernel-pae-base-2.6.37.6-0.7.1 kernel-pae-devel-2.6.37.6-0.7.1 kernel-vmi-2.6.37.6-0.7.1 kernel-vmi-base-2.6.37.6-0.7.1 kernel-vmi-devel-2.6.37.6-0.7.1 References: http://support.novell.com/security/cve/CVE-2011-1017.html http://support.novell.com/security/cve/CVE-2011-1020.html http://support.novell.com/security/cve/CVE-2011-1479.html http://support.novell.com/security/cve/CVE-2011-1593.html http://support.novell.com/security/cve/CVE-2011-1745.html http://support.novell.com/security/cve/CVE-2011-1927.html http://support.novell.com/security/cve/CVE-2011-2022.html http://support.novell.com/security/cve/CVE-2011-2182.html http://support.novell.com/security/cve/CVE-2011-2484.html http://support.novell.com/security/cve/CVE-2011-2491.html http://support.novell.com/security/cve/CVE-2011-2493.html http://support.novell.com/security/cve/CVE-2011-2495.html http://support.novell.com/security/cve/CVE-2011-2496.html http://support.novell.com/security/cve/CVE-2011-2498.html https://bugzilla.novell.com/584493 https://bugzilla.novell.com/595586 https://bugzilla.novell.com/655693 https://bugzilla.novell.com/661979 https://bugzilla.novell.com/666423 https://bugzilla.novell.com/669889 https://bugzilla.novell.com/672008 https://bugzilla.novell.com/674648 https://bugzilla.novell.com/674982 https://bugzilla.novell.com/677827 https://bugzilla.novell.com/679545 https://bugzilla.novell.com/681826 https://bugzilla.novell.com/681840 https://bugzilla.novell.com/687368 https://bugzilla.novell.com/688432 https://bugzilla.novell.com/689583 https://bugzilla.novell.com/689797 https://bugzilla.novell.com/692497 https://bugzilla.novell.com/692502 https://bugzilla.novell.com/693013 https://bugzilla.novell.com/693043 https://bugzilla.novell.com/693374 https://bugzilla.novell.com/693382 https://bugzilla.novell.com/694498 https://bugzilla.novell.com/697859 https://bugzilla.novell.com/698221 https://bugzilla.novell.com/698247 https://bugzilla.novell.com/699123 https://bugzilla.novell.com/701998 https://bugzilla.novell.com/702013 https://bugzilla.novell.com/702285 https://bugzilla.novell.com/702579 https://bugzilla.novell.com/703155 https://bugzilla.novell.com/704788

1 0

openSUSE-SU-2011:0859-1: moderate: libapr1
by opensuse-security＠opensuse.org 01 Aug '11

01 Aug '11

openSUSE Security Update: libapr1 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0859-1 Rating: moderate References: #653510 #670027 #690734 #693778 Cross-References: CVE-2010-1623 CVE-2011-0419 CVE-2011-1928 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: This update fixes: - CVE-2011-0419 and CVE-2011-1928: unconstrained recursion when processing patterns - CVE-2010-1623: a remote DoS (memory leak) in APR's reqtimeout_filter function Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch apache2-4926 - openSUSE 11.3: zypper in -t patch apache2-4926 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): apache2-2.2.17-4.5.1 apache2-devel-2.2.17-4.5.1 apache2-example-certificates-2.2.17-4.5.1 apache2-example-pages-2.2.17-4.5.1 apache2-itk-2.2.17-4.5.1 apache2-prefork-2.2.17-4.5.1 apache2-utils-2.2.17-4.5.1 apache2-worker-2.2.17-4.5.1 libapr-util1-1.3.9-10.11.1 libapr-util1-dbd-mysql-1.3.9-10.11.1 libapr-util1-dbd-pgsql-1.3.9-10.11.1 libapr-util1-dbd-sqlite3-1.3.9-10.11.1 libapr-util1-devel-1.3.9-10.11.1 libapr1-1.4.2-4.5.1 libapr1-devel-1.4.2-4.5.1 - openSUSE 11.4 (noarch): apache2-doc-2.2.17-4.5.1 - openSUSE 11.3 (i586 x86_64): apache2-2.2.15-4.3.1 apache2-devel-2.2.15-4.3.1 apache2-example-certificates-2.2.15-4.3.1 apache2-example-pages-2.2.15-4.3.1 apache2-itk-2.2.15-4.3.1 apache2-prefork-2.2.15-4.3.1 apache2-utils-2.2.15-4.3.1 apache2-worker-2.2.15-4.3.1 libapr-util1-1.3.9-7.3.1 libapr-util1-dbd-mysql-1.3.9-7.3.1 libapr-util1-dbd-pgsql-1.3.9-7.3.1 libapr-util1-dbd-sqlite3-1.3.9-7.3.1 libapr-util1-devel-1.3.9-7.3.1 libapr1-1.3.8-8.3.1 libapr1-devel-1.3.8-8.3.1 - openSUSE 11.3 (noarch): apache2-doc-2.2.15-4.3.1 References: http://support.novell.com/security/cve/CVE-2010-1623.html http://support.novell.com/security/cve/CVE-2011-0419.html http://support.novell.com/security/cve/CVE-2011-1928.html https://bugzilla.novell.com/653510 https://bugzilla.novell.com/670027 https://bugzilla.novell.com/690734 https://bugzilla.novell.com/693778

1 0

openSUSE-SU-2011:0855-1: moderate: libsndfile: fixing Integer overflow by processing certain PAF files (CVE-2011-2696)
by opensuse-security＠opensuse.org 01 Aug '11

01 Aug '11

openSUSE Security Update: libsndfile: fixing Integer overflow by processing certain PAF files (CVE-2011-2696) ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0855-1 Rating: moderate References: #705681 Cross-References: CVE-2011-2696 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: An integer overflow in libsndfile while processing certain PAF files has been fixed. CVE-2011-2696 has been assigned to this issue. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libsndfile-4900 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libsndfile-1.0.23-3.4.1 libsndfile-devel-1.0.23-3.4.1 - openSUSE 11.4 (x86_64): libsndfile-32bit-1.0.23-3.4.1 References: http://support.novell.com/security/cve/CVE-2011-2696.html https://bugzilla.novell.com/705681

1 0