September 2011 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2011:1025-1: moderate: opera: 11.51 security and bugfix update
by opensuse-security＠opensuse.org 08 Sep '11

08 Sep '11

openSUSE Security Update: opera: 11.51 security and bugfix update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:1025-1 Rating: moderate References: #716002 Cross-References: CVE-2011-3388 CVE-2011-3389 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. It includes one version update. Description: The Opera browser received a security and bugfix update to 11.51. More information can be found here: http://www.opera.com/docs/changelogs/unix/1151/ CVE-2011-3388 - incorrect security information display CVE-2011-3389 - unspecified "low severity issue, as reported by Thai Duong and Juliano Rizzo." Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch opera-5115 - openSUSE 11.3: zypper in -t patch opera-5115 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 11.51]: opera-11.51-0.2.1 opera-gtk-11.51-0.2.1 opera-kde4-11.51-0.2.1 - openSUSE 11.3 (i586 x86_64) [New Version: 11.51]: opera-11.51-0.2.1 opera-gtk-11.51-0.2.1 opera-kde4-11.51-0.2.1 References: http://support.novell.com/security/cve/CVE-2011-3388.html http://support.novell.com/security/cve/CVE-2011-3389.html https://bugzilla.novell.com/716002

1 0

openSUSE-SU-2011:1024-1: important: mozilla-nss: Update 3.12.11 update
by opensuse-security＠opensuse.org 08 Sep '11

08 Sep '11

openSUSE Security Update: mozilla-nss: Update 3.12.11 update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:1024-1 Rating: important References: #691669 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that contains security fixes can now be installed. It includes one version update. Description: This update updates mozilla nss to 3.12.11. It blacklists the lately compromised DigiNotar Certificate Authority. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libfreebl3-5097 - openSUSE 11.3: zypper in -t patch libfreebl3-5097 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 3.12.11]: libfreebl3-3.12.11-1.5.1 libsoftokn3-3.12.11-1.5.1 mozilla-nss-3.12.11-1.5.1 mozilla-nss-certs-3.12.11-1.5.1 mozilla-nss-devel-3.12.11-1.5.1 mozilla-nss-sysinit-3.12.11-1.5.1 mozilla-nss-tools-3.12.11-1.5.1 - openSUSE 11.4 (x86_64) [New Version: 3.12.11]: libfreebl3-32bit-3.12.11-1.5.1 libsoftokn3-32bit-3.12.11-1.5.1 mozilla-nss-32bit-3.12.11-1.5.1 mozilla-nss-certs-32bit-3.12.11-1.5.1 mozilla-nss-sysinit-32bit-3.12.11-1.5.1 - openSUSE 11.3 (i586 x86_64) [New Version: 3.12.11]: libfreebl3-3.12.11-1.4.1 libsoftokn3-3.12.11-1.4.1 mozilla-nss-3.12.11-1.4.1 mozilla-nss-certs-3.12.11-1.4.1 mozilla-nss-devel-3.12.11-1.4.1 mozilla-nss-sysinit-3.12.11-1.4.1 mozilla-nss-tools-3.12.11-1.4.1 - openSUSE 11.3 (x86_64) [New Version: 3.12.11]: libfreebl3-32bit-3.12.11-1.4.1 libsoftokn3-32bit-3.12.11-1.4.1 mozilla-nss-32bit-3.12.11-1.4.1 mozilla-nss-certs-32bit-3.12.11-1.4.1 mozilla-nss-sysinit-32bit-3.12.11-1.4.1 References: https://bugzilla.novell.com/691669

1 0

openSUSE-SU-2011:1021-1: moderate: dhcp: Fixed two denial of service flaws and some bugs
by opensuse-security＠opensuse.org 07 Sep '11

07 Sep '11

openSUSE Security Update: dhcp: Fixed two denial of service flaws and some bugs ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:1021-1 Rating: moderate References: #700771 #711420 #712438 #712653 #714004 Cross-References: CVE-2011-2748 CVE-2011-2749 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that solves two vulnerabilities and has three fixes is now available. It includes two new package versions. Description: This update of dhcp fixes two Denial of Service (CVE-2011-2748, CVE-2011-2749) vulnerabilities caused by specially crafted BOOTP packets. Also following bugs were fixed: - Moved server pid files into chroot directory even chroot is not used and create a link in /var/run, so it can write one when started as user without chroot and avoid stop problems when the chroot sysconfig setting changed (bnc#712438). - Fixed dhclient-script to not remove alias IP when it didn't changed to not wipe out iptables connmark when renewing the lease (bnc#700771). Thanks to James Carter for the patch. - Removed GPL licensed files (bind-*/contrib/dbus) from bind.tgz to ensure, they're not used to build non-GPL dhcp. - Disabled log-info level messages in dhclient(6) quiet mode to avoid excessive logging of non-critical messages (bnc#711420). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch dhcp-5081 - openSUSE 11.3: zypper in -t patch dhcp-5081 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 4.2.1]: dhcp-4.2.1-0.9.1 dhcp-client-4.2.1-0.9.1 dhcp-devel-4.2.1-0.9.1 dhcp-doc-4.2.1-0.9.1 dhcp-relay-4.2.1-0.9.1 dhcp-server-4.2.1-0.9.1 - openSUSE 11.3 (i586 x86_64) [New Version: 4.1.2.ESV.1]: dhcp-4.1.2.ESV.1-0.10.1 dhcp-client-4.1.2.ESV.1-0.10.1 dhcp-devel-4.1.2.ESV.1-0.10.1 dhcp-doc-4.1.2.ESV.1-0.10.1 dhcp-relay-4.1.2.ESV.1-0.10.1 dhcp-server-4.1.2.ESV.1-0.10.1 References: http://support.novell.com/security/cve/CVE-2011-2748.html http://support.novell.com/security/cve/CVE-2011-2749.html https://bugzilla.novell.com/700771 https://bugzilla.novell.com/711420 https://bugzilla.novell.com/712438 https://bugzilla.novell.com/712653 https://bugzilla.novell.com/714004

1 0

openSUSE-SU-2011:1020-1: moderate: rsyslog
by opensuse-security＠opensuse.org 07 Sep '11

07 Sep '11

openSUSE Security Update: rsyslog ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:1020-1 Rating: moderate References: #714658 Cross-References: CVE-2011-3200 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. It includes one version update. Description: Specially crafted log messages could crash rsyslogd (CVE-2011-3200). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch rsyslog-5099 - openSUSE 11.3: zypper in -t patch rsyslog-5099 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 5.6.5]: rsyslog-5.6.5-1.5.1 rsyslog-diag-tools-5.6.5-1.5.1 rsyslog-doc-5.6.5-1.5.1 rsyslog-module-dbi-5.6.5-1.5.1 rsyslog-module-gssapi-5.6.5-1.5.1 rsyslog-module-gtls-5.6.5-1.5.1 rsyslog-module-mysql-5.6.5-1.5.1 rsyslog-module-pgsql-5.6.5-1.5.1 rsyslog-module-relp-5.6.5-1.5.1 rsyslog-module-snmp-5.6.5-1.5.1 rsyslog-module-udpspoof-5.6.5-1.5.1 - openSUSE 11.3 (i586 x86_64): rsyslog-5.4.0-3.2.1 rsyslog-diag-tools-5.4.0-3.2.1 rsyslog-doc-5.4.0-3.2.1 rsyslog-module-gssapi-5.4.0-3.2.1 rsyslog-module-gtls-5.4.0-3.2.1 rsyslog-module-mysql-5.4.0-3.2.1 rsyslog-module-pgsql-5.4.0-3.2.1 rsyslog-module-relp-5.4.0-3.2.1 rsyslog-module-snmp-5.4.0-3.2.1 rsyslog-module-udpspoof-5.4.0-3.2.1 References: http://support.novell.com/security/cve/CVE-2011-3200.html https://bugzilla.novell.com/714658

1 0

openSUSE-SU-2011:1018-1: important: VUL-0: CVE-2011-3205: squid: buffer overflow in Gopher reply parser
by opensuse-security＠opensuse.org 07 Sep '11

07 Sep '11

openSUSE Security Update: VUL-0: CVE-2011-3205: squid: buffer overflow in Gopher reply parser ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:1018-1 Rating: important References: #715171 Cross-References: CVE-2011-3205 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update of squid3 fixes a buffer overflow vulnerability in the Gopher reply parser code (CVE-2011-3205). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch squid3-5094 - openSUSE 11.3: zypper in -t patch squid3-5094 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): squid3-3.1.11-4.7.1 - openSUSE 11.3 (i586 x86_64): squid3-3.0.STABLE25-2.3.1 References: http://support.novell.com/security/cve/CVE-2011-3205.html https://bugzilla.novell.com/715171

1 0

openSUSE-SU-2011:1017-1: moderate: otrs
by opensuse-security＠opensuse.org 07 Sep '11

07 Sep '11

openSUSE Security Update: otrs ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:1017-1 Rating: moderate References: #715659 Cross-References: CVE-2011-2746 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. It includes two new package versions. Description: OTRS administrators may read arbitrary local files (CVE-2011-2746). OTRS was updated to version 2.4.11 which fixes the issue. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch otrs-5098 - openSUSE 11.3: zypper in -t patch otrs-5098 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (noarch) [New Version: 2.1.4 and 2.4.11]: otrs-2.4.11-0.7.1 otrs-doc-2.4.11-0.7.1 otrs-itsm-2.1.4-0.7.1 - openSUSE 11.3 (noarch) [New Version: 2.1.4 and 2.4.11]: otrs-2.4.11-0.7.1 otrs-doc-2.4.11-0.7.1 otrs-itsm-2.1.4-0.7.1 References: http://support.novell.com/security/cve/CVE-2011-2746.html https://bugzilla.novell.com/715659

1 0

openSUSE-RU-2011:1016-1: pam_mount: Fixed leaving stuff in /dev/mapper and not unmounting encrypted partitions
by maintenance＠opensuse.org 06 Sep '11

06 Sep '11

openSUSE Recommended Update: pam_mount: Fixed leaving stuff in /dev/mapper and not unmounting encrypted partitions ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:1016-1 Rating: low References: #671276 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: This update of libHX and pam_mount fixes: - #671276: pam_mount leaves stuff in /dev/mapper and does not unmount encrypted partitions Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libHX-5086 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 2.11]: libHX-devel-3.11-4.3.1 libHX27-3.11-4.3.1 pam_mount-2.11-2.5.1 - openSUSE 11.4 (x86_64) [New Version: 2.11]: libHX27-32bit-3.11-4.3.1 pam_mount-32bit-2.11-2.5.1 References: https://bugzilla.novell.com/671276

1 0

openSUSE-RU-2011:1015-1: moderate: okular: Fixed segfaults on computer that boots with "nomodeset"
by maintenance＠opensuse.org 06 Sep '11

06 Sep '11

openSUSE Recommended Update: okular: Fixed segfaults on computer that boots with "nomodeset" ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:1015-1 Rating: moderate References: #688262 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: - #688262: okular segfaults on computer that boots with "nomodeset" Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch gwenview-5093 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): gwenview-4.6.0-6.11.1 kcolorchooser-4.6.0-6.11.1 kdegraphics4-4.6.0-6.11.1 kgamma-4.6.0-6.11.1 kio_kamera-4.6.0-6.11.1 kolourpaint-4.6.0-6.11.1 kruler-4.6.0-6.11.1 ksnapshot-4.6.0-6.11.1 libkdcraw-devel-4.6.0-6.11.1 libkdcraw9-4.6.0-6.11.1 libkexiv2-9-4.6.0-6.11.1 libkexiv2-devel-4.6.0-6.11.1 libkipi-devel-4.6.0-6.11.1 libkipi8-4.6.0-6.11.1 libksane-devel-4.6.0-6.11.1 libksane0-4.6.0-6.11.1 okular-4.6.0-6.11.1 okular-devel-4.6.0-6.11.1 References: https://bugzilla.novell.com/688262

1 0

openSUSE-SU-2011:1014-1: moderate: coreutils
by opensuse-security＠opensuse.org 06 Sep '11

06 Sep '11

openSUSE Security Update: coreutils ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:1014-1 Rating: moderate References: #697897 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update fixes the following security issue: - 697897: coreutils: when running "su -c" to execute commands as different user the target user could inject command back into the calling user's terminal via the TIOCSTI ioctl. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch coreutils-4829 - openSUSE 11.3: zypper in -t patch coreutils-4829 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): coreutils-8.9-9.1 - openSUSE 11.4 (noarch): coreutils-lang-8.9-9.1 - openSUSE 11.3 (i586 x86_64): coreutils-7.1-11.3.1 - openSUSE 11.3 (noarch): coreutils-lang-7.1-11.3.1 References: https://bugzilla.novell.com/697897

1 0

openSUSE-RU-2011:1013-1: Unzip doesn't print multibyte characters
by maintenance＠opensuse.org 06 Sep '11

06 Sep '11

openSUSE Recommended Update: Unzip doesn't print multibyte characters ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:1013-1 Rating: low References: #620483 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for unzip: - 620483: Unzip didn't print multibyte characters in file and directory names because it used the isprint(3) function without a correctly set locale. With this update it uses a different way to determine whether a character is printable. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch unzip-5087 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): unzip-6.00-6.7.1 References: https://bugzilla.novell.com/620483

1 0