February 2012 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2012:0252-1: perl: missing NDBM_File module
by maintenance＠opensuse.org 09 Feb '12

09 Feb '12

openSUSE Recommended Update: perl: missing NDBM_File module ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0252-1 Rating: low References: #732929 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for perl: - 732929: The NDBM_File module was not included in the perl package due to a change in perl's Configure script. This update restores the module. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch perl-5740 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): perl-5.12.3-11.20.1 perl-base-5.12.3-11.20.1 - openSUSE 11.4 (x86_64): perl-32bit-5.12.3-11.20.1 perl-base-32bit-5.12.3-11.20.1 - openSUSE 11.4 (noarch): perl-doc-5.12.3-11.20.1 References: https://bugzilla.novell.com/732929

1 0

openSUSE-RU-2012:0251-1: moderate: autofs: Collective update
by maintenance＠opensuse.org 09 Feb '12

09 Feb '12

openSUSE Recommended Update: autofs: Collective update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0251-1 Rating: moderate References: #707715 #727392 #730245 #742846 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update fixes the following issues for AutoFS: - 742846: disable "--as-needed" to make sure automount will be linked against libtirpc - 730245: fix LDAP result leaks on error paths - 727392: fix segfault caused by an use after free in st_queue_handler() - 707715: fix result null check in read_one_map() Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch autofs-5769 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): autofs-5.0.5-14.21.1 References: https://bugzilla.novell.com/707715 https://bugzilla.novell.com/727392 https://bugzilla.novell.com/730245 https://bugzilla.novell.com/742846

1 0

openSUSE-RU-2012:0249-1: yast2-hardware-detection: smbios missing in yast hwprobe
by maintenance＠opensuse.org 09 Feb '12

09 Feb '12

openSUSE Recommended Update: yast2-hardware-detection: smbios missing in yast hwprobe ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0249-1 Rating: low References: #425059 #716081 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. It includes one version update. Description: This update fixes the following issues for yast2-hardware-detection: - 716081: smbios missing in yast hwprobe - 425059: Use pr_bios for .probe.bios so that smbios info is included Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch yast2-hardware-detection-5662 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 2.17.2]: yast2-hardware-detection-2.17.2-2.3.1 References: https://bugzilla.novell.com/425059 https://bugzilla.novell.com/716081

1 0

openSUSE-SU-2012:0248-1: moderate: apache2
by opensuse-security＠opensuse.org 09 Feb '12

09 Feb '12

openSUSE Security Update: apache2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0248-1 Rating: moderate References: #722545 #727071 #729181 Cross-References: CVE-2011-3368 CVE-2011-3607 CVE-2011-4317 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update fixes several security issues in the Apache2 webserver. CVE-2011-3368, CVE-2011-4317: This update also includes several fixes for a mod_proxy reverse exposure via RewriteRule or ProxyPassMatch directives. CVE-2011-3607: Integer overflow in ap_pregsub function resulting in a heap based buffer overflow could potentially allow local attackers to gain privileges In addition to that the following changes were made: - new template file: /etc/apache2/vhosts.d/vhost-ssl.template allow TLSv1 only, browser match stuff commented out. - rc script /etc/init.d/apache2: handle reload with deleted binaries by message to stdout only, but refrain from sending signals. - httpd-2.2.x-bnc727071-mod_authnz_ldap-utf8.diff: make non-ascii eg UTF8 passwords work with mod_authnz_ldap. [bnc#727071] Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch apache2-5519 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): apache2-2.2.15-4.9.1 apache2-devel-2.2.15-4.9.1 apache2-example-certificates-2.2.15-4.9.1 apache2-example-pages-2.2.15-4.9.1 apache2-itk-2.2.15-4.9.1 apache2-prefork-2.2.15-4.9.1 apache2-utils-2.2.15-4.9.1 apache2-worker-2.2.15-4.9.1 - openSUSE 11.3 (noarch): apache2-doc-2.2.15-4.9.1 References: http://support.novell.com/security/cve/CVE-2011-3368.html http://support.novell.com/security/cve/CVE-2011-3607.html http://support.novell.com/security/cve/CVE-2011-4317.html https://bugzilla.novell.com/722545 https://bugzilla.novell.com/727071 https://bugzilla.novell.com/729181

1 0

openSUSE-SU-2012:0247-1: moderate: opera: Release 11.61
by opensuse-security＠opensuse.org 09 Feb '12

09 Feb '12

openSUSE Security Update: opera: Release 11.61 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0247-1 Rating: moderate References: #743079 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that contains security fixes can now be installed. It includes one version update. Description: Opera was updated to release 11.61, fixing various bugs and security issues. http://www.opera.com/support/kb/view/1007/ http://www.opera.com/support/kb/view/1008/ and the changelog for 11.61 release at: http://www.opera.com/docs/changelogs/unix/1161/ Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch opera-5762 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 11.61]: opera-11.61-0.3.1 opera-gtk-11.61-0.3.1 opera-kde4-11.61-0.3.1 References: https://bugzilla.novell.com/743079

1 0

openSUSE-RU-2012:0246-1: moderate: squid3: Do not leave files named /1 behind from %post
by maintenance＠opensuse.org 09 Feb '12

09 Feb '12

openSUSE Recommended Update: squid3: Do not leave files named /1 behind from %post ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0246-1 Rating: moderate References: #737905 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for squid3: -737905: Do not leave files named /1 behind from %post Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch squid3-5581 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): squid3-3.0.STABLE25-2.5.1 References: https://bugzilla.novell.com/737905

1 0

openSUSE-RU-2012:0244-1: important: MozillaFirefox-branding-openSUSE: prevents disabling of extensions
by maintenance＠opensuse.org 09 Feb '12

09 Feb '12

openSUSE Recommended Update: MozillaFirefox-branding-openSUSE: prevents disabling of extensions ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0244-1 Rating: important References: #728520 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: This update fixes the following issue for MozillaFirefox-branding-openSUSE: - 728520: prevents disabling of extensions Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch MozillaFirefox-branding-openSUSE-5512 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 5.0]: MozillaFirefox-branding-openSUSE-5.0-2.7.1 References: https://bugzilla.novell.com/728520

1 0

openSUSE-RU-2012:0243-1: vim: Fixed crashes with "Vim: caught deadly signal ABRT" when trying to execute a python script
by maintenance＠opensuse.org 09 Feb '12

09 Feb '12

openSUSE Recommended Update: vim: Fixed crashes with "Vim: caught deadly signal ABRT" when trying to execute a python script ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0243-1 Rating: low References: #510306 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes vim aborting when executing python scripts. - #510306: vim crashes with "Vim: caught deadly signal ABRT" if i try to execute a python script Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch gvim-5576 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): gvim-7.3-6.7.1 vim-7.3-6.7.1 vim-base-7.3-6.7.1 vim-enhanced-7.3-6.7.1 - openSUSE 11.4 (noarch): vim-data-7.3-6.7.1 References: https://bugzilla.novell.com/510306

1 0

openSUSE-SU-2012:0242-1: moderate: sysconfig
by opensuse-security＠opensuse.org 09 Feb '12

09 Feb '12

openSUSE Security Update: sysconfig ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0242-1 Rating: moderate References: #559170 #580018 #697929 #735394 #739338 Cross-References: CVE-2011-4182 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that solves one vulnerability and has four fixes is now available. Description: This update for sysconfig contains the following fixes: - sysconfig hook script for NetworkManager did not properly quote shell meta characters when processing ESSIDs. Specially crafted network names could therefore lead to execution of shell code (CVE-2011-4182). - Explicitly disabled posix mode in all bash scripts as we are using several features not supported in posix mode (bnc#739338). - Fixed ipv6 dad / link ready wait time calculation (1/10 of the specified time were used), replaced useless up flag check loop with link_ready_wait to avoid send errors from dhclient6 and cleaned up link / dad wait verify flag after status update (bnc#697929). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch sysconfig-5631 - openSUSE 11.3: zypper in -t patch sysconfig-5630 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): sysconfig-0.74.5-6.13.1 - openSUSE 11.3 (i586 x86_64): sysconfig-0.73.7-2.15.1 References: http://support.novell.com/security/cve/CVE-2011-4182.html https://bugzilla.novell.com/559170 https://bugzilla.novell.com/580018 https://bugzilla.novell.com/697929 https://bugzilla.novell.com/735394 https://bugzilla.novell.com/739338

1 0

openSUSE-RU-2012:0241-1: sudo: Fix escaping of values in ldap search string
by maintenance＠opensuse.org 09 Feb '12

09 Feb '12

openSUSE Recommended Update: sudo: Fix escaping of values in ldap search string ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0241-1 Rating: low References: #724490 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: This update fixes escaping of ldap search string values in sudo (bnc#724490) Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch sudo-5613 - openSUSE 11.3: zypper in -t patch sudo-5610 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 1.7.6p2]: sudo-1.7.6p2-0.7.1 - openSUSE 11.3 (i586 x86_64) [New Version: 1.7.6p2]: sudo-1.7.6p2-0.7.1 References: https://bugzilla.novell.com/724490

1 0