- openSUSE Updates

openSUSE-RU-2011:0977-1: kdebase4-openSUSE: Fix build service search provider
by maintenance＠opensuse.org 30 Aug '11

30 Aug '11

openSUSE Recommended Update: kdebase4-openSUSE: Fix build service search provider ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0977-1 Rating: low References: #695417 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the build service search provider to search for openSUSE 11.4 packages by default (#695417) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch kdebase4-openSUSE-5043 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): kdebase4-openSUSE-11.4-33.42.1 kdebase4-runtime-branding-openSUSE-11.4-33.42.1 kdebase4-workspace-branding-openSUSE-11.4-33.42.1 kdelibs4-branding-openSUSE-11.4-33.42.1 kdm-branding-openSUSE-11.4-33.42.1 kio_sysinfo-11.4-33.42.1 kio_sysinfo-branding-openSUSE-11.4-33.42.1 - openSUSE 11.4 (noarch): kdebase4-openSUSE-lang-11.4-33.42.1 References: https://bugzilla.novell.com/695417

1 0

openSUSE-RU-2011:0976-1: valgrind: fix debugging of 32bit binaries
by maintenance＠opensuse.org 30 Aug '11

30 Aug '11

openSUSE Recommended Update: valgrind: fix debugging of 32bit binaries ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0976-1 Rating: low References: #705405 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: This update adds back the 32bit helpers for debugging 32bit applications on x86_64 (bnc#705405) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch valgrind-5053 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 3.6.1]: valgrind-3.6.1-1.12.1 valgrind-devel-3.6.1-1.12.1 References: https://bugzilla.novell.com/705405

1 0

openSUSE-RU-2011:0975-1: apparmor: Fix support for dovecot
by maintenance＠opensuse.org 30 Aug '11

30 Aug '11

openSUSE Recommended Update: apparmor: Fix support for dovecot ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0975-1 Rating: low References: #691072 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This profile update fixes access to the /var/mail symlink which points to /var/spool/mail Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch apache2-mod_apparmor-4985 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): apache2-mod_apparmor-2.5.1.r1445-52.61.1 apparmor-parser-2.5.1.r1445-52.63.1 libapparmor-devel-2.5.1.r1445-52.61.1 libapparmor1-2.5.1.r1445-52.61.1 pam_apparmor-2.5.1.r1445-52.61.1 perl-apparmor-2.5.1.r1445-52.61.1 tomcat_apparmor-2.5.1.r1445-52.61.1 - openSUSE 11.4 (x86_64): libapparmor1-32bit-2.5.1.r1445-52.61.1 pam_apparmor-32bit-2.5.1.r1445-52.61.1 - openSUSE 11.4 (noarch): apparmor-docs-2.5.1.r1445-52.63.1 apparmor-parser-lang-2.5.1.r1445-52.63.1 apparmor-profiles-2.5.1.r1445-52.63.1 apparmor-utils-2.5.1.r1445-52.63.1 apparmor-utils-lang-2.5.1.r1445-52.63.1 References: https://bugzilla.novell.com/691072

1 0

openSUSE-SU-2011:0972-1: moderate: libxcrypt update
by opensuse-security＠opensuse.org 30 Aug '11

30 Aug '11

openSUSE Security Update: libxcrypt update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0972-1 Rating: moderate References: #713727 Cross-References: CVE-2011-2483 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The security update for CVE-2011-2483 broke changing blowfish passwords if compat mode was turned on (default). This update fixes the regression. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libxcrypt-5049 - openSUSE 11.3: zypper in -t patch libxcrypt-5049 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libxcrypt-3.0.3-9.12.1 libxcrypt-devel-3.0.3-9.12.1 - openSUSE 11.4 (x86_64): libxcrypt-32bit-3.0.3-9.12.1 - openSUSE 11.3 (i586 x86_64): libxcrypt-3.0.3-5.11.1 libxcrypt-devel-3.0.3-5.11.1 - openSUSE 11.3 (x86_64): libxcrypt-32bit-3.0.3-5.11.1 References: http://support.novell.com/security/cve/CVE-2011-2483.html https://bugzilla.novell.com/713727

1 0

openSUSE-SU-2011:0970-1: moderate: man-pages update
by opensuse-security＠opensuse.org 30 Aug '11

30 Aug '11

openSUSE Security Update: man-pages update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0970-1 Rating: moderate References: #713389 Cross-References: CVE-2011-2483 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The crypt(3) manpage was updated to also list the 2y prefix. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch man-pages-5032 - openSUSE 11.3: zypper in -t patch man-pages-5032 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (noarch): man-pages-3.32-4.5.1 - openSUSE 11.3 (noarch): man-pages-3.25-2.3.1 References: http://support.novell.com/security/cve/CVE-2011-2483.html https://bugzilla.novell.com/713389

1 0

openSUSE-SU-2011:0957-2: important: MozillaFirefox: Update to Firefox 6
by opensuse-security＠opensuse.org 29 Aug '11

29 Aug '11

openSUSE Security Update: MozillaFirefox: Update to Firefox 6 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0957-2 Rating: important References: #712224 Cross-References: CVE-2011-0084 CVE-2011-2985 CVE-2011-2986 CVE-2011-2987 CVE-2011-2988 CVE-2011-2989 CVE-2011-2990 CVE-2011-2991 CVE-2011-2992 CVE-2011-2993 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes 10 vulnerabilities is now available. It includes one version update. Description: Mozilla Firefox was updated to version 6. It brings new features, fixes bugs and security issues. Following security issues were fixed: http://www.mozilla.org/security/announce/2011/mfsa2011-29.ht ml Mozilla Foundation Security Advisory 2011-29 (MFSA 2011-29) * Miscellaneous memory safety hazards: Mozilla identified and fixed several memory safety bugs in the browser engine used in Firefox 4, Firefox 5 and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code. Aral Yaman reported a WebGL crash which affected Firefox 4 and Firefox 5. (CVE-2011-2989) Vivekanand Bolajwar reported a JavaScript crash which affected Firefox 4 and Firefox 5. (CVE-2011-2991) Bert Hubert and Theo Snelleman of Fox-IT reported a crash in the Ogg reader which affected Firefox 4 and Firefox 5. (CVE-2011-2992) Mozilla developers and community members Robert Kaiser, Jesse Ruderman, moz_bug_r_a4, Mardeg, Gary Kwong, Christoph Diehl, Martijn Wargers, Travis Emmitt, Bob Clary and Jonathan Watt reported memory safety issues which affected Firefox 4 and Firefox 5. (CVE-2011-2985) * Unsigned scripts can call script inside signed JAR Rafael Gieschke reported that unsigned JavaScript could call into script inside a signed JAR thereby inheriting the identity of the site that signed the JAR as well as any permissions that a user had granted the signed JAR. (CVE-2011-2993) * String crash using WebGL shaders Michael Jordon of Context IS reported that an overly long shader program could cause a buffer overrun and crash in a string class used to store the shader source code. (CVE-2011-2988) * Heap overflow in ANGLE library Michael Jordon of Context IS reported a potentially exploitable heap overflow in the ANGLE library used by Mozilla's WebGL implementation. (CVE-2011-2987) * Crash in SVGTextElement.getCharNumAtPosition() Security researcher regenrecht reported via TippingPoint's Zero Day Initiative that a SVG text manipulation routine contained a dangling pointer vulnerability. (CVE-2011-0084) * Credential leakage using Content Security Policy reports Mike Cardwell reported that Content Security Policy violation reports failed to strip out proxy authorization credentials from the list of request headers. Daniel Veditz reported that redirecting to a website with Content Security Policy resulted in the incorrect resolution of hosts in the constructed policy. (CVE-2011-2990) * Cross-origin data theft using canvas and Windows D2D nasalislarvatus3000 reported that when using Windows D2D hardware acceleration, image data from one domain could be inserted into a canvas and read by a different domain. (CVE-2011-2986) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch MozillaFirefox-5020 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 6.0]: MozillaFirefox-6.0-2.2.1 MozillaFirefox-branding-upstream-6.0-2.2.1 MozillaFirefox-buildsymbols-6.0-2.2.1 MozillaFirefox-devel-6.0-2.2.1 MozillaFirefox-translations-common-6.0-2.2.1 MozillaFirefox-translations-other-6.0-2.2.1 References: http://support.novell.com/security/cve/CVE-2011-0084.html http://support.novell.com/security/cve/CVE-2011-2985.html http://support.novell.com/security/cve/CVE-2011-2986.html http://support.novell.com/security/cve/CVE-2011-2987.html http://support.novell.com/security/cve/CVE-2011-2988.html http://support.novell.com/security/cve/CVE-2011-2989.html http://support.novell.com/security/cve/CVE-2011-2990.html http://support.novell.com/security/cve/CVE-2011-2991.html http://support.novell.com/security/cve/CVE-2011-2992.html http://support.novell.com/security/cve/CVE-2011-2993.html https://bugzilla.novell.com/712224

1 0

openSUSE-SU-2011:0935-2: important: MozillaThunderbird: Update to 3.1.12
by opensuse-security＠opensuse.org 29 Aug '11

29 Aug '11

openSUSE Security Update: MozillaThunderbird: Update to 3.1.12 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0935-2 Rating: important References: #712224 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that contains security fixes can now be installed. It includes three new package versions. Description: Mozilla Thunderbird was updated to 3.1.12 fixing various bugs and security issues: Mozilla Foundation Security Advisory 2011-32 (MFSA 2011-32) http://www.mozilla.org/security/announce/2011/mfsa2011-32.ht ml Many of the issues listed below are not exploitable through mail since JavaScript is disabled by default in Thunderbird. These particular issues may be triggered while viewing RSS feeds and displaying full remote content rather than the feed summary. Addons that expose browser functionality may also enable such issues to be exploited. * Miscellaneous memory safety hazards (rv:1.9.2.20) Mozilla developers and community members identified and fixed several memory safety bugs in the browser engine used in Thunderbird 3.1 and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code. Gary Kwong, Igor Bukanov, Nils and Bob Clary reported memory safety issues which affected Thunderbird 3.1. (CVE-2011-2982) * Crash in SVGTextElement.getCharNumAtPosition() Security researcher regenrecht reported via TippingPoint's Zero Day Initiative that a SVG text manipulation routine contained a dangling pointer vulnerability. (CVE-2011-0084) * Privilege escalation using event handlers Mozilla security researcher moz_bug_r_a_4 reported a vulnerability in event management code that would permit JavaScript to be run in the wrong context, including that of a different website or potentially in a chrome-privileged context. (CVE-2011-2981) * Dangling pointer vulnerability in appendChild Security researcher regenrecht reported via TippingPoint's Zero Day Initiative that appendChild did not correctly account for DOM objects it operated upon and could be exploited to dereference an invalid pointer. (CVE-2011-2378) * Privilege escalation dropping a tab element in content area Mozilla security researcher moz_bug_r_a4 reported that web content could receive chrome privileges if it registered for drop events and a browser tab element was dropped into the content area. (CVE-2011-2984) * Binary planting vulnerability in ThinkPadSensor::Startup Security researcher Mitja Kolsek of Acros Security reported that ThinkPadSensor::Startup could potentially be exploited to load a malicious DLL into the running process. (CVE-2011-2980) * Private data leakage using RegExp.input Security researcher shutdown reported that data from other domains could be read when RegExp.input was set. (CVE-2011-2983) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch MozillaThunderbird-5050 mozilla-js192-5010 - openSUSE 11.3: zypper in -t patch MozillaThunderbird-5050 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 1.9.2.20 and 3.1.12]: MozillaThunderbird-3.1.12-0.11.1 MozillaThunderbird-buildsymbols-3.1.12-0.11.1 MozillaThunderbird-devel-3.1.12-0.11.1 MozillaThunderbird-translations-common-3.1.12-0.11.1 MozillaThunderbird-translations-other-3.1.12-0.11.1 enigmail-1.1.2+3.1.12-0.11.1 mozilla-js192-1.9.2.20-1.2.1 mozilla-xulrunner192-1.9.2.20-1.2.1 mozilla-xulrunner192-buildsymbols-1.9.2.20-1.2.1 mozilla-xulrunner192-devel-1.9.2.20-1.2.1 mozilla-xulrunner192-gnome-1.9.2.20-1.2.1 mozilla-xulrunner192-translations-common-1.9.2.20-1.2.1 mozilla-xulrunner192-translations-other-1.9.2.20-1.2.1 - openSUSE 11.4 (x86_64) [New Version: 1.9.2.20]: mozilla-js192-32bit-1.9.2.20-1.2.1 mozilla-xulrunner192-32bit-1.9.2.20-1.2.1 mozilla-xulrunner192-gnome-32bit-1.9.2.20-1.2.1 mozilla-xulrunner192-translations-common-32bit-1.9.2.20-1.2.1 mozilla-xulrunner192-translations-other-32bit-1.9.2.20-1.2.1 - openSUSE 11.3 (i586 x86_64) [New Version: 3.1.12]: MozillaThunderbird-3.1.12-0.15.1 MozillaThunderbird-devel-3.1.12-0.15.1 MozillaThunderbird-translations-common-3.1.12-0.15.1 MozillaThunderbird-translations-other-3.1.12-0.15.1 enigmail-1.1.2+3.1.12-0.15.1 References: https://bugzilla.novell.com/712224

1 0

openSUSE-RU-2011:0963-1: important: Flash Player 10.3.183.7 released
by maintenance＠opensuse.org 26 Aug '11

26 Aug '11

openSUSE Recommended Update: Flash Player 10.3.183.7 released ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0963-1 Rating: important References: #714365 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: This update provides Flash Player 10.3.183.7: * Shared library/gotoAndPlay() or gotoAndStop() bug * Textfields are displaying text vertically in 10.3.183.5 release * Massive Animation Slowdown following install of FP 0.3.183.5 * Flash player 10.3 displays a black screen (2943064) * Sound repeating and building up bug (2941616) * Flash applications at certain websites (http://www.justin.tv, http://heylenmichel.de) now load correctly (2939645, 944081) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch flash-player-5068 - openSUSE 11.3: zypper in -t patch flash-player-5068 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586) [New Version: 10.3.183.7]: flash-player-10.3.183.7-0.2.1 - openSUSE 11.3 (i586) [New Version: 10.3.183.7]: flash-player-10.3.183.7-0.2.1 References: https://bugzilla.novell.com/714365

1 0

openSUSE-SU-2011:0958-1: important: MozillaFirefox: Update to Firefox 3.6.20
by opensuse-security＠opensuse.org 26 Aug '11

26 Aug '11

openSUSE Security Update: MozillaFirefox: Update to Firefox 3.6.20 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0958-1 Rating: important References: #712224 Cross-References: CVE-2011-0084 CVE-2011-2378 CVE-2011-2980 CVE-2011-2981 CVE-2011-2982 CVE-2011-2983 CVE-2011-2984 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. It includes two new package versions. Description: Mozilla Firefox was updated to version 3.6.20. It fixes bugs and security issues. Following security issues were fixed: http://www.mozilla.org/security/announce/2011/mfsa2011-30.ht ml Mozilla Foundation Security Advisory 2011-30 (MFSA 2011-30) * Miscellaneous memory safety hazards Mozilla developers and community members identified and fixed several memory safety bugs in the browser engine used in Firefox 3.6 and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code. Gary Kwong, Igor Bukanov, Nils and Bob Clary reported memory safety issues which affected Firefox 3.6. (CVE-2011-2982) * Crash in SVGTextElement.getCharNumAtPosition() Security researcher regenrecht reported via TippingPoint's Zero Day Initiative that a SVG text manipulation routine contained a dangling pointer vulnerability. (CVE-2011-0084) * Privilege escalation using event handlers Mozilla security researcher moz_bug_r_a_4 reported a vulnerability in event management code that would permit JavaScript to be run in the wrong context, including that of a different website or potentially in a chrome-privileged context. (CVE-2011-2981) * Dangling pointer vulnerability in appendChild Security researcher regenrecht reported via TippingPoint's Zero Day Initiative that appendChild did not correctly account for DOM objects it operated upon and could be exploited to dereference an invalid pointer. (CVE-2011-2378) * Privilege escalation dropping a tab element in content area Mozilla security researcher moz_bug_r_a4 reported that web content could receive chrome privileges if it registered for drop events and a browser tab element was dropped into the content area. (CVE-2011-2984) * Binary planting vulnerability in ThinkPadSensor::Startup Security researcher Mitja Kolsek of Acros Security reported that ThinkPadSensor::Startup could potentially be exploited to load a malicious DLL into the running process. (CVE-2011-2980) (This issue is likely Windows only) * Private data leakage using RegExp.input Security researcher shutdown reported that data from other domains could be read when RegExp.input was set. (CVE-2011-2983) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch MozillaFirefox-5013 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 1.9.2.20 and 3.6.20]: MozillaFirefox-3.6.20-0.2.1 MozillaFirefox-branding-upstream-3.6.20-0.2.1 MozillaFirefox-translations-common-3.6.20-0.2.1 MozillaFirefox-translations-other-3.6.20-0.2.1 mozilla-js192-1.9.2.20-1.2.1 mozilla-xulrunner192-1.9.2.20-1.2.1 mozilla-xulrunner192-buildsymbols-1.9.2.20-1.2.1 mozilla-xulrunner192-devel-1.9.2.20-1.2.1 mozilla-xulrunner192-gnome-1.9.2.20-1.2.1 mozilla-xulrunner192-translations-common-1.9.2.20-1.2.1 mozilla-xulrunner192-translations-other-1.9.2.20-1.2.1 - openSUSE 11.3 (x86_64) [New Version: 1.9.2.20]: mozilla-js192-32bit-1.9.2.20-1.2.1 mozilla-xulrunner192-32bit-1.9.2.20-1.2.1 mozilla-xulrunner192-gnome-32bit-1.9.2.20-1.2.1 mozilla-xulrunner192-translations-common-32bit-1.9.2.20-1.2.1 mozilla-xulrunner192-translations-other-32bit-1.9.2.20-1.2.1 References: http://support.novell.com/security/cve/CVE-2011-0084.html http://support.novell.com/security/cve/CVE-2011-2378.html http://support.novell.com/security/cve/CVE-2011-2980.html http://support.novell.com/security/cve/CVE-2011-2981.html http://support.novell.com/security/cve/CVE-2011-2982.html http://support.novell.com/security/cve/CVE-2011-2983.html http://support.novell.com/security/cve/CVE-2011-2984.html https://bugzilla.novell.com/712224

1 0

openSUSE-SU-2011:0957-1: important: seamonkey: Update to Mozilla Seamonkey 2.3
by opensuse-security＠opensuse.org 26 Aug '11

26 Aug '11

openSUSE Security Update: seamonkey: Update to Mozilla Seamonkey 2.3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0957-1 Rating: important References: #712224 Cross-References: CVE-2011-0084 CVE-2011-2985 CVE-2011-2986 CVE-2011-2987 CVE-2011-2988 CVE-2011-2989 CVE-2011-2990 CVE-2011-2991 CVE-2011-2992 CVE-2011-2993 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes 10 vulnerabilities is now available. It includes one version update. Description: Mozilla Seamonkey suite was updated to version 2.3. The update fixes bugs and security issues. Following security issues were fixed: http://www.mozilla.org/security/announce/2011/mfsa2011-33.ht ml Mozilla Foundation Security Advisory 2011-33 (MFSA 2011-33) Mozilla Foundation Security Advisory 2011-33 * Miscellaneous memory safety hazards (rv:4.0) Mozilla identified and fixed several memory safety bugs in the browser engine used in SeaMonkey 2.2 and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code. Aral Yaman reported a WebGL crash which affected SeaMonkey 2.2. (CVE-2011-2989) Vivekanand Bolajwar reported a JavaScript crash which affected SeaMonkey 2.2. (CVE-2011-2991) Bert Hubert and Theo Snelleman of Fox-IT reported a crash in the Ogg reader which affected SeaMonkey 2.2. (CVE-2011-2992) Mozilla developers and community members Robert Kaiser, Jesse Ruderman, moz_bug_r_a4, Mardeg, Gary Kwong, Christoph Diehl, Martijn Wargers, Travis Emmitt, Bob Clary and Jonathan Watt reported memory safety issues which affected SeaMonkey 2.2. (CVE-2011-2985) * Unsigned scripts can call script inside signed JAR Rafael Gieschke reported that unsigned JavaScript could call into script inside a signed JAR thereby inheriting the identity of the site that signed the JAR as well as any permissions that a user had granted the signed JAR. (CVE-2011-2993) * String crash using WebGL shaders Michael Jordon of Context IS reported that an overly long shader program could cause a buffer overrun and crash in a string class used to store the shader source code. (CVE-2011-2988) * Heap overflow in ANGLE library Michael Jordon of Context IS reported a potentially exploitable heap overflow in the ANGLE library used by Mozilla's WebGL implementation. (CVE-2011-2987) * Crash in SVGTextElement.getCharNumAtPosition() Security researcher regenrecht reported via TippingPoint's Zero Day Initiative that a SVG text manipulation routine contained a dangling pointer vulnerability. (CVE-2011-0084) * Credential leakage using Content Security Policy reports Mike Cardwell reported that Content Security Policy violation reports failed to strip out proxy authorization credentials from the list of request headers. Daniel Veditz reported that redirecting to a website with Content Security Policy resulted in the incorrect resolution of hosts in the constructed policy. (CVE-2011-2990) * Cross-origin data theft using canvas and Windows D2D nasalislarvatus3000 reported that when using Windows D2D hardware acceleration, image data from one domain could be inserted into a canvas and read by a different domain. (CVE-2011-2986) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch seamonkey-5024 - openSUSE 11.3: zypper in -t patch seamonkey-5024 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 2.3]: seamonkey-2.3-2.2.1 seamonkey-dom-inspector-2.3-2.2.1 seamonkey-irc-2.3-2.2.1 seamonkey-translations-common-2.3-2.2.1 seamonkey-translations-other-2.3-2.2.1 seamonkey-venkman-2.3-2.2.1 - openSUSE 11.3 (i586 x86_64) [New Version: 2.3]: seamonkey-2.3-2.2.1 seamonkey-dom-inspector-2.3-2.2.1 seamonkey-irc-2.3-2.2.1 seamonkey-translations-common-2.3-2.2.1 seamonkey-translations-other-2.3-2.2.1 seamonkey-venkman-2.3-2.2.1 References: http://support.novell.com/security/cve/CVE-2011-0084.html http://support.novell.com/security/cve/CVE-2011-2985.html http://support.novell.com/security/cve/CVE-2011-2986.html http://support.novell.com/security/cve/CVE-2011-2987.html http://support.novell.com/security/cve/CVE-2011-2988.html http://support.novell.com/security/cve/CVE-2011-2989.html http://support.novell.com/security/cve/CVE-2011-2990.html http://support.novell.com/security/cve/CVE-2011-2991.html http://support.novell.com/security/cve/CVE-2011-2992.html http://support.novell.com/security/cve/CVE-2011-2993.html https://bugzilla.novell.com/712224

1 0

openSUSE-SU-2011:0921-2: moderate: yast2-core: Adjust to fix crypt_blowfish 8-bit character mishandling
by opensuse-security＠opensuse.org 26 Aug '11

26 Aug '11

openSUSE Security Update: yast2-core: Adjust to fix crypt_blowfish 8-bit character mishandling ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0921-2 Rating: moderate References: #700876 Cross-References: CVE-2011-2483 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. It includes two new package versions. Description: This update contains yast2 core changes to change the hash generation of new passwords to the new secure style. Please read the general notes below: The implementation of the blowfish based password hashing method had a bug affecting passwords that contain 8bit characters (e.g. umlauts). Affected passwords are potentially faster to crack via brute force methods (CVE-2011-2483). SUSE's crypt() implementation supports the blowfish password hashing function (id $2a) and system logins by default also use this method. This update eliminates the bug in the $2a implementation. After installing the update existing $2a hashes therefore no longer match hashes generated with the new, correct implementation if the password contains 8bit characters. For system logins via PAM the pam_unix2 module activates a compat mode and keeps processing existing $2a hashes with the old algorithm. This ensures no user gets locked out. New passwords hashes are created with the id "$2y" to unambiguously identify them as generated with the correct implementation. Note: To actually migrate hashes to the new algorithm all users are advised to change passwords after the update. Services that do not use PAM but do use crypt() to store passwords using the blowfish hash do not have such a compat mode. That means users with 8bit passwords that use such services will not be able to log in anymore after the update. As workaround administrators may edit the service's password database and change stored hashes from $2a to $2x. This will result in crypt() using the old algorithm. Users should be required to change their passwords to make sure they are migrated to the correct algorithm. FAQ: Q: I only use ASCII characters in passwords, am I a affected in any way? A: No. Q: What's the meaning of the ids before and after the update? A: Before the update: $2a -> buggy algorithm After the update: $2x -> buggy algorithm $2a -> correct algorithm $2y -> correct algorithm System logins using PAM have a compat mode enabled by default: $2x -> buggy algorithm $2a -> buggy algorithm $2y -> correct algorithm Q: How do I require users to change their password on next login? A: Run the following command as root for each user: chage -d 0 <username> Q: I run an application that has $2a hashes in it's password database. Some users complain that they can not log in anymore. A: Edit the password database and change the "$2a" prefix of the affected users' hashes to "$2x". They will be able to log in again but should change their password ASAP. Q: How do I turn off the compat mode for system logins? A: Set BLOWFISH_2a2x=no in /etc/default/passwd Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch yast2-core-5028 - openSUSE 11.3: zypper in -t patch yast2-core-5028 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 2.20.1]: yast2-core-2.20.1-0.3.1 yast2-core-devel-2.20.1-0.3.1 - openSUSE 11.3 (i586 x86_64) [New Version: 2.19.4]: yast2-core-2.19.4-0.2.1 yast2-core-devel-2.19.4-0.2.1 References: http://support.novell.com/security/cve/CVE-2011-2483.html https://bugzilla.novell.com/700876

1 0

openSUSE-RU-2011:0953-1: libproxy: Update to upstream version 0.4.7
by maintenance＠opensuse.org 26 Aug '11

26 Aug '11

openSUSE Recommended Update: libproxy: Update to upstream version 0.4.7 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0953-1 Rating: low References: #679322 #701059 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. It includes one version update. Description: This update fixes the following issues: - #149: always test for the right python noarch module path - #155: Cannot compile with Firefox 4 - #156: libproxy should build against webkitgtk-3.0 - #158: Won't compile w/ xulrunner 2.0 final - #159: libproxy fails with autoconfiguration "http://proxy.domain.com" - #131: GSettings-based GNOME plugin - #150: SUSE sysconfig/proxy config support Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libproxy-5021 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 0.4.7]: libproxy-devel-0.4.7-6.3.1 libproxy-sharp-0.4.7-6.3.1 libproxy-tools-0.4.7-6.3.1 libproxy1-0.4.7-6.3.1 libproxy1-config-gnome-0.4.7-3.3.1 libproxy1-config-kde4-0.4.7-3.3.1 libproxy1-networkmanager-0.4.7-3.3.1 libproxy1-pacrunner-mozjs-0.4.7-3.3.1 libproxy1-pacrunner-webkit-0.4.7-3.3.1 perl-Net-Libproxy-0.4.7-6.3.1 - openSUSE 11.4 (x86_64) [New Version: 0.4.7]: libproxy1-32bit-0.4.7-6.3.1 libproxy1-config-gnome-32bit-0.4.7-3.3.1 libproxy1-networkmanager-32bit-0.4.7-3.3.1 libproxy1-pacrunner-mozjs-32bit-0.4.7-3.3.1 libproxy1-pacrunner-webkit-32bit-0.4.7-3.3.1 - openSUSE 11.4 (noarch) [New Version: 0.4.7]: python-libproxy-0.4.7-6.3.1 References: https://bugzilla.novell.com/679322 https://bugzilla.novell.com/701059

1 0

openSUSE-SU-2011:0950-1: moderate: hplip
by opensuse-security＠opensuse.org 25 Aug '11

25 Aug '11

openSUSE Security Update: hplip ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0950-1 Rating: moderate References: #59233 Cross-References: CVE-2004-0801 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. It includes one version update. Description: This update of hplip fixes: - CVE-2004-0801: CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P): This patch originally affected foomatic-rip in CUPS but was found to be in foomatic-rip-hplip too. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch hplip-4987 - openSUSE 11.3: zypper in -t patch hplip-4987 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 3.11.5]: hplip-3.11.5-1.5.1 hplip-hpijs-3.11.5-1.5.1 - openSUSE 11.3 (i586 x86_64): hplip-3.10.2-2.5.1 hplip-hpijs-3.10.2-2.5.1 References: http://support.novell.com/security/cve/CVE-2004-0801.html https://bugzilla.novell.com/59233

1 0

openSUSE-SU-2011:0943-1: important: libmodplug: Fixed multiple vulnerabilities reported in <= 0.8.8.3
by opensuse-security＠opensuse.org 24 Aug '11

24 Aug '11

openSUSE Security Update: libmodplug: Fixed multiple vulnerabilities reported in <= 0.8.8.3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0943-1 Rating: important References: #710726 Cross-References: CVE-2011-1761 CVE-2011-2911 CVE-2011-2912 CVE-2011-2913 CVE-2011-2914 CVE-2011-2915 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. It includes one version update. Description: This update of libmodplug0 fixes the following issues: 1) An integer overflow error exists within the "CSoundFile::ReadWav()" function (src/load_wav.cpp) when processing certain WAV files. This can be exploited to cause a heap-based buffer overflow by tricking a user into opening a specially crafted WAV file. (CVE-2011-2911) 2) Boundary errors within the "CSoundFile::ReadS3M()" function (src/load_s3m.cpp) when processing S3M files can be exploited to cause stack-based buffer overflows by tricking a user into opening a specially crafted S3M file. (CVE-2011-2912) 3) An off-by-one error within the "CSoundFile::ReadAMS()" function (src/load_ams.cpp) can be exploited to cause a stack corruption by tricking a user into opening a specially crafted AMS file. (CVE-2011-2913) 4) An off-by-one error within the "CSoundFile::ReadDSM()" function (src/load_dms.cpp) can be exploited to cause a memory corruption by tricking a user into opening a specially crafted DSM file. (CVE-2011-2914) 5) An off-by-one error within the "CSoundFile::ReadAMS2()" function (src/load_ams.cpp) can be exploited to cause a memory corruption by tricking a user into opening a specially crafted AMS file. (CVE-2011-2915) Also an overflow in the ABC loader was fixed. (CVE-2011-1761) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libmodplug-5004 - openSUSE 11.3: zypper in -t patch libmodplug-5004 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 0.8.8.4]: libmodplug-devel-0.8.8.4-2.2.1 libmodplug0-0.8.8.4-2.2.1 - openSUSE 11.4 (x86_64) [New Version: 0.8.8.4]: libmodplug0-32bit-0.8.8.4-2.2.1 - openSUSE 11.3 (i586 x86_64) [New Version: 0.8.8.4]: libmodplug-devel-0.8.8.4-2.2.1 libmodplug0-0.8.8.4-2.2.1 - openSUSE 11.3 (x86_64) [New Version: 0.8.8.4]: libmodplug0-32bit-0.8.8.4-2.2.1 References: http://support.novell.com/security/cve/CVE-2011-1761.html http://support.novell.com/security/cve/CVE-2011-2911.html http://support.novell.com/security/cve/CVE-2011-2912.html http://support.novell.com/security/cve/CVE-2011-2913.html http://support.novell.com/security/cve/CVE-2011-2914.html http://support.novell.com/security/cve/CVE-2011-2915.html https://bugzilla.novell.com/710726

1 0

openSUSE-SU-2011:0941-1: important: xen: Fixed a security bug and various other bugs
by opensuse-security＠opensuse.org 24 Aug '11

24 Aug '11

openSUSE Security Update: xen: Fixed a security bug and various other bugs ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0941-1 Rating: important References: #582265 #670465 #684297 #684305 #689954 #692625 #693472 #702025 #703924 Cross-References: CVE-2011-1898 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that solves one vulnerability and has 8 fixes is now available. It includes one version update. Description: Security / Collective Update for Xen Xen: - bnc#702025 - VUL-0: xen: VT-d (PCI passthrough) MSI trap injection (CVE-2011-1898) - bnc#703924 - update block-npiv scripts to support BFA HBA - bnc#689954 - L3: Live migrations fail when guest crashes: domain_crash_sync called from entry.S - bnc#693472 - Bridge hangs cause redundant ring failures in SLE 11 SP1 HAE + XEN - bnc#582265 - xen-scsi.ko not supported - bnc#670465 - When connecting to Xen guest through vncviewer mouse tracking is off. - bnc#684305 - on_crash is being ignored with kdump now working in HVM vm-install: - bnc#692625 - virt-manager has problems to install guest from multiple CD Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch xen-201107-4929 - openSUSE 11.3: zypper in -t patch xen-201107-4930 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 0.4.31]: vm-install-0.4.31-0.4.1 xen-4.0.2_52-0.2.1 xen-devel-4.0.2_52-0.2.1 xen-doc-html-4.0.2_52-0.2.1 xen-doc-pdf-4.0.2_52-0.2.1 xen-kmp-default-4.0.2_52_k2.6.37.6_0.7-0.2.1 xen-kmp-desktop-4.0.2_52_k2.6.37.6_0.7-0.2.1 xen-libs-4.0.2_52-0.2.1 xen-tools-4.0.2_52-0.2.1 xen-tools-domU-4.0.2_52-0.2.1 - openSUSE 11.4 (i586): xen-kmp-pae-4.0.2_52_k2.6.37.6_0.7-0.2.1 - openSUSE 11.3 (i586 x86_64) [New Version: 0.4.31]: vm-install-0.4.31-0.4.1 xen-4.0.2_21511_02-0.5.2 xen-devel-4.0.2_21511_02-0.5.2 xen-doc-html-4.0.2_21511_02-0.5.2 xen-doc-pdf-4.0.2_21511_02-0.5.2 xen-kmp-default-4.0.2_21511_02_k2.6.34.10_0.2-0.5.2 xen-kmp-desktop-4.0.2_21511_02_k2.6.34.10_0.2-0.5.2 xen-libs-4.0.2_21511_02-0.5.2 xen-tools-4.0.2_21511_02-0.5.2 xen-tools-domU-4.0.2_21511_02-0.5.2 - openSUSE 11.3 (i586): xen-kmp-pae-4.0.2_21511_02_k2.6.34.10_0.2-0.5.2 References: http://support.novell.com/security/cve/CVE-2011-1898.html https://bugzilla.novell.com/582265 https://bugzilla.novell.com/670465 https://bugzilla.novell.com/684297 https://bugzilla.novell.com/684305 https://bugzilla.novell.com/689954 https://bugzilla.novell.com/692625 https://bugzilla.novell.com/693472 https://bugzilla.novell.com/702025 https://bugzilla.novell.com/703924

1 0

openSUSE-SU-2011:0940-1: moderate: clamav
by opensuse-security＠opensuse.org 24 Aug '11

24 Aug '11

openSUSE Security Update: clamav ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0940-1 Rating: moderate References: #708263 Cross-References: CVE-2011-2721 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. It includes one version update. Description: New clamav packages fix an off-by-one vulnerability which could lead to a DoS condition. CVE-2011-2721 has been assigned to this issue. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch clamav-4940 - openSUSE 11.3: zypper in -t patch clamav-4940 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 0.97.2]: clamav-0.97.2-1.2.1 - openSUSE 11.4 (noarch) [New Version: 0.97.2]: clamav-db-0.97.2-1.2.1 - openSUSE 11.3 (i586 x86_64) [New Version: 0.97.2]: clamav-0.97.2-1.2.1 - openSUSE 11.3 (noarch) [New Version: 0.97.2]: clamav-db-0.97.2-1.2.1 References: http://support.novell.com/security/cve/CVE-2011-2721.html https://bugzilla.novell.com/708263

1 0

openSUSE-SU-2011:0935-1: important: mozilla-nss: Update to 3.12.11
by opensuse-security＠opensuse.org 23 Aug '11

23 Aug '11

openSUSE Security Update: mozilla-nss: Update to 3.12.11 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0935-1 Rating: important References: #712224 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that contains security fixes can now be installed. It includes one version update. Description: The mozilla NSS libraries were updated to 3.12.11 to align with newer Mozilla seamonkey and Firefox releases. Interesting changes are: - blacklisting malicious root certificates - several bugfixes Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libfreebl3-5023 - openSUSE 11.3: zypper in -t patch libfreebl3-5023 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 3.12.11]: libfreebl3-3.12.11-1.3.1 libsoftokn3-3.12.11-1.3.1 mozilla-nss-3.12.11-1.3.1 mozilla-nss-certs-3.12.11-1.3.1 mozilla-nss-devel-3.12.11-1.3.1 mozilla-nss-sysinit-3.12.11-1.3.1 mozilla-nss-tools-3.12.11-1.3.1 - openSUSE 11.4 (x86_64) [New Version: 3.12.11]: libfreebl3-32bit-3.12.11-1.3.1 libsoftokn3-32bit-3.12.11-1.3.1 mozilla-nss-32bit-3.12.11-1.3.1 mozilla-nss-certs-32bit-3.12.11-1.3.1 mozilla-nss-sysinit-32bit-3.12.11-1.3.1 - openSUSE 11.3 (i586 x86_64) [New Version: 3.12.11]: libfreebl3-3.12.11-1.2.1 libsoftokn3-3.12.11-1.2.1 mozilla-nss-3.12.11-1.2.1 mozilla-nss-certs-3.12.11-1.2.1 mozilla-nss-devel-3.12.11-1.2.1 mozilla-nss-sysinit-3.12.11-1.2.1 mozilla-nss-tools-3.12.11-1.2.1 - openSUSE 11.3 (x86_64) [New Version: 3.12.11]: libfreebl3-32bit-3.12.11-1.2.1 libsoftokn3-32bit-3.12.11-1.2.1 mozilla-nss-32bit-3.12.11-1.2.1 mozilla-nss-certs-32bit-3.12.11-1.2.1 mozilla-nss-sysinit-32bit-3.12.11-1.2.1 References: https://bugzilla.novell.com/712224

1 0

openSUSE-RU-2011:0934-1: kdeedu4: Fix crash when zooming in marble
by maintenance＠opensuse.org 23 Aug '11

23 Aug '11

openSUSE Recommended Update: kdeedu4: Fix crash when zooming in marble ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0934-1 Rating: low References: #695213 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes a crash when zooming in marble (bnc#695213) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch blinken-4997 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): blinken-4.6.0-4.5.1 cantor-4.6.0-4.5.1 kalgebra-4.6.0-4.5.1 kalzium-4.6.0-4.5.1 kanagram-4.6.0-4.5.1 kbruch-4.6.0-4.5.1 kdeedu4-4.6.0-4.5.1 kgeography-4.6.0-4.5.1 khangman-4.6.0-4.5.1 kig-4.6.0-4.5.1 kiten-4.6.0-4.5.1 klettres-4.6.0-4.5.1 kmplot-4.6.0-4.5.1 kstars-4.6.0-4.5.1 ktouch-4.6.0-4.5.1 kturtle-4.6.0-4.5.1 kwordquiz-4.6.0-4.5.1 libSatLib4-4.6.0-4.5.1 libkdeedu4-4.6.0-4.5.1 libkdeedu4-devel-4.6.0-4.5.1 marble-4.6.0-4.5.1 marble-devel-4.6.0-4.5.1 parley-4.6.0-4.5.1 rocs-4.6.0-4.5.1 rocs-devel-4.6.0-4.5.1 step-4.6.0-4.5.1 References: https://bugzilla.novell.com/695213

1 0

openSUSE-RU-2011:0926-2: important: mozilla-nspr: Update to 4.8.9
by maintenance＠opensuse.org 23 Aug '11

23 Aug '11

openSUSE Recommended Update: mozilla-nspr: Update to 4.8.9 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0926-2 Rating: important References: #712224 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: The mozilla NSPR libraries were updated to 4.8.9 to align with newer Mozilla seamonkey and Firefox releases. Interesting changes are: * lots of bugfixes * use AI_ADDRCONFIG for loopback hostnames (bmo#614526) * support SDP sockets (bmo#518078) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch mozilla-nspr-5022 - openSUSE 11.3: zypper in -t patch mozilla-nspr-5022 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 4.8.9]: mozilla-nspr-4.8.9-1.3.1 mozilla-nspr-devel-4.8.9-1.3.1 - openSUSE 11.4 (x86_64) [New Version: 4.8.9]: mozilla-nspr-32bit-4.8.9-1.3.1 - openSUSE 11.3 (i586 x86_64) [New Version: 4.8.9]: mozilla-nspr-4.8.9-1.2.1 mozilla-nspr-devel-4.8.9-1.2.1 - openSUSE 11.3 (x86_64) [New Version: 4.8.9]: mozilla-nspr-32bit-4.8.9-1.2.1 References: https://bugzilla.novell.com/712224

1 0

openSUSE-RU-2011:0933-1: important: libfm: pcmanfm - cut and paste a folder may causes data loss
by maintenance＠opensuse.org 23 Aug '11

23 Aug '11

openSUSE Recommended Update: libfm: pcmanfm - cut and paste a folder may causes data loss ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0933-1 Rating: important References: #710881 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update brings pcmanfm and libfm to rc3, fixing several bugs in both components like: - Fix bnc#710881 - "pcmanfm cut and paste a folder to a destination folder without write permission causes data loss" - Fix sf#3308324 - "~ in location bar cause pcmanfm crash" - Fix sf#3286157 - "Entering path with two initial slashes // crashes" - Fix sf#3284001 - "Crash when entering path with trailing slash" This is related to GTK+ bug #650114, which is already fixed. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libfm-4994 - openSUSE 11.3: zypper in -t patch libfm-4995 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libfm-0.1.16_rc3-0.3.1 libfm-devel-0.1.16_rc3-0.3.1 libfm-doc-0.1.16_rc3-0.3.1 libfm-gtk1-0.1.16_rc3-0.3.1 libfm1-0.1.16_rc3-0.3.1 pcmanfm-0.9.9_rc3-0.3.1 - openSUSE 11.4 (noarch): pcmanfm-lang-0.9.9_rc3-0.3.1 - openSUSE 11.3 (i586 x86_64): libfm-0.1.16_rc3-0.10.1 libfm-devel-0.1.16_rc3-0.10.1 libfm-gtk1-0.1.16_rc3-0.10.1 libfm1-0.1.16_rc3-0.10.1 pcmanfm-0.9.9_rc3-0.8.1 - openSUSE 11.3 (noarch): pcmanfm-lang-0.9.9_rc3-0.8.1 References: https://bugzilla.novell.com/710881

1 0

openSUSE-RU-2011:0926-1: important: yasm: Update to YASM 1.1.0
by maintenance＠opensuse.org 19 Aug '11

19 Aug '11

openSUSE Recommended Update: yasm: Update to YASM 1.1.0 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0926-1 Rating: important References: #712224 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: YASM was updated to 1.1.0 to ensure newer Mozilla versions still build. Changes: - update to 1.1.0 * Fix a number of issues with Win32 SAFESEH support (#139). * Fix several 32-bit Mach-O (macho32) bugs (#212 and others). * Add Intel post-32nm instructions (section 7 of AVX spec). * Add XSAVEOPT, INVEPT, INVVPID, and GETSEC instructions (#211). * Remove AMD CVT16 instructions. * Don't emit unnecessary REX.W for pinsrw instruction (#207). * Update gettext to 0.17 (#206). - update to 1.0.1 * Fix ELF32 shared object relocations (#202). * Ignore [warning] directive (#201). - update to 1.0.0 * Add GAS preprocessor (fixes #79). * Add Visual Studio 2010 special frontend, vsyasm * Add support for AMD XOP, FMA4, and CVT16 instructions (replacing SSE5). * Add support for %scope and %endscope NASM macros * Add support for %{x:y} parameter list expansion in NASM preprocessor * Fix _GLOBAL_OFFSET_TABLE_ * Add support for ELF64 PC-relative relocations and latest ELF32 relocation types. * Add support for ELF tlsdesc, tlscall, pltoff, gotplt, gotoff special symbols. * NASM preprocessor license has been changed to 2-clause BSD. * Various bugfixes in TASM syntax support. * Many other bugfixes Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch yasm-5017 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 1.1.0]: yasm-1.1.0-10.3.1 yasm-devel-1.1.0-10.3.1 References: https://bugzilla.novell.com/712224

1 0

openSUSE-SU-2011:0921-1: moderate: crypt_blowfish
by opensuse-security＠opensuse.org 18 Aug '11

18 Aug '11

openSUSE Security Update: crypt_blowfish ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0921-1 Rating: moderate References: #700876 Cross-References: CVE-2011-2483 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. It includes one version update. Description: The implementation of the blowfish based password hashing method had a bug affecting passwords that contain 8bit characters (e.g. umlauts). Affected passwords are potentially faster to crack via brute force methods (CVE-2011-2483). SUSE's crypt() implementation supports the blowfish password hashing function (id $2a) and system logins by default also use this method. This update eliminates the bug in the $2a implementation. After installing the update existing $2a hashes therefore no longer match hashes generated with the new, correct implementation if the password contains 8bit characters. For system logins via PAM the pam_unix2 module activates a compat mode and keeps processing existing $2a hashes with the old algorithm. This ensures no user gets locked out. New passwords hashes are created with the id "$2y" to unambiguously identify them as generated with the correct implementation. Note: To actually migrate hashes to the new algorithm all users are advised to change passwords after the update. Services that do not use PAM but do use crypt() to store passwords using the blowfish hash do not have such a compat mode. That means users with 8bit passwords that use such services will not be able to log in anymore after the update. As workaround administrators may edit the service's password database and change stored hashes from $2a to $2x. This will result in crypt() using the old algorithm. Users should be required to change their passwords to make sure they are migrated to the correct algorithm. FAQ: Q: I only use ASCII characters in passwords, am I a affected in any way? A: No. Q: What's the meaning of the ids before and after the update? A: Before the update: $2a -> buggy algorithm After the update: $2x -> buggy algorithm $2a -> correct algorithm $2y -> correct algorithm System logins using PAM have a compat mode enabled by default: $2x -> buggy algorithm $2a -> buggy algorithm $2y -> correct algorithm Q: How do I require users to change their password on next login? A: Run the following command as root for each user: chage -d 0 <username> Q: I run an application that has $2a hashes in it's password database. Some users complain that they can not log in anymore. A: Edit the password database and change the "$2a" prefix of the affected users' hashes to "$2x". They will be able to log in again but should change their password ASAP. Q: How do I turn off the compat mode for system logins? A: Set BLOWFISH_2a2x=no in /etc/default/passwd Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch glibc-4943 - openSUSE 11.3: zypper in -t patch glibc-4943 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 i686 x86_64): glibc-2.11.3-12.17.1 glibc-devel-2.11.3-12.17.1 - openSUSE 11.4 (i586 x86_64): glibc-html-2.11.3-12.17.1 glibc-i18ndata-2.11.3-12.17.1 glibc-info-2.11.3-12.17.1 glibc-locale-2.11.3-12.17.1 glibc-obsolete-2.11.3-12.17.1 glibc-profile-2.11.3-12.17.1 libxcrypt-3.0.3-9.10.1 libxcrypt-devel-3.0.3-9.10.1 nscd-2.11.3-12.17.1 pam-modules-11.4-3.4.1 pwdutils-3.2.14-4.5.1 pwdutils-plugin-audit-3.2.14-4.5.1 pwdutils-rpasswd-3.2.14-4.5.1 - openSUSE 11.4 (x86_64): glibc-32bit-2.11.3-12.17.1 glibc-devel-32bit-2.11.3-12.17.1 glibc-locale-32bit-2.11.3-12.17.1 glibc-profile-32bit-2.11.3-12.17.1 libxcrypt-32bit-3.0.3-9.10.1 pam-modules-32bit-11.4-3.4.1 pwdutils-rpasswd-32bit-3.2.14-4.5.1 - openSUSE 11.3 (i586 i686 x86_64): glibc-2.11.2-3.5.1 glibc-devel-2.11.2-3.5.1 - openSUSE 11.3 (i586 x86_64) [New Version: 11.3]: glibc-html-2.11.2-3.5.1 glibc-i18ndata-2.11.2-3.5.1 glibc-info-2.11.2-3.5.1 glibc-locale-2.11.2-3.5.1 glibc-obsolete-2.11.2-3.5.1 glibc-profile-2.11.2-3.5.1 libxcrypt-3.0.3-5.3.1 libxcrypt-devel-3.0.3-5.3.1 nscd-2.11.2-3.5.1 pam-modules-11.3-0.3.1 pwdutils-3.2.10-2.3.1 pwdutils-plugin-audit-3.2.10-2.3.1 pwdutils-rpasswd-3.2.10-2.3.1 - openSUSE 11.3 (x86_64) [New Version: 11.3]: glibc-32bit-2.11.2-3.5.1 glibc-devel-32bit-2.11.2-3.5.1 glibc-locale-32bit-2.11.2-3.5.1 glibc-profile-32bit-2.11.2-3.5.1 libxcrypt-32bit-3.0.3-5.3.1 pam-modules-32bit-11.3-0.3.1 pwdutils-rpasswd-32bit-3.2.10-2.3.1 References: http://support.novell.com/security/cve/CVE-2011-2483.html https://bugzilla.novell.com/700876

1 0

openSUSE-SU-2011:0915-1: moderate: libpng14-14
by opensuse-security＠opensuse.org 17 Aug '11

17 Aug '11

openSUSE Security Update: libpng14-14 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0915-1 Rating: moderate References: #702578 #706387 #706388 #706389 Cross-References: CVE-2008-6218 CVE-2009-5063 CVE-2011-2501 CVE-2011-2690 CVE-2011-2691 CVE-2011-2692 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. It includes one version update. Description: This update of libpng14-14 fixes: - CVE-2011-2501: CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P): Design Error (CWE-DesignError) - CVE-2011-2690: CVSS v2 Base Score: 5.1 (AV:N/AC:H/Au:N/C:P/I:P/A:P): Buffer Errors (CWE-119) - CVE-2011-2691: CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P): Other (CWE-Other) - CVE-2011-2692: CVSS v2 Base Score: 5.0 (AV:N/AC:M/Au:N/C:N/I:N/A:P): Buffer Errors (CWE-119) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libpng12-4947 libpng14-4949 - openSUSE 11.3: zypper in -t patch libpng12-4947 libpng14-4949 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 1.2.46]: libpng12-0-1.2.46-7.3.1 libpng12-compat-devel-1.2.46-7.3.1 libpng12-devel-1.2.46-7.3.1 libpng14-14-1.4.4-3.4.1 libpng14-compat-devel-1.4.4-3.4.1 libpng14-devel-1.4.4-3.4.1 - openSUSE 11.4 (x86_64) [New Version: 1.2.46]: libpng12-0-32bit-1.2.46-7.3.1 libpng12-compat-devel-32bit-1.2.46-7.3.1 libpng12-devel-32bit-1.2.46-7.3.1 libpng14-14-32bit-1.4.4-3.4.1 libpng14-compat-devel-32bit-1.4.4-3.4.1 libpng14-devel-32bit-1.4.4-3.4.1 - openSUSE 11.3 (i586 x86_64) [New Version: 1.2.46]: libpng12-0-1.2.46-7.3.1 libpng12-compat-devel-1.2.46-7.3.1 libpng12-devel-1.2.46-7.3.1 libpng14-14-1.4.3-3.3.1 libpng14-compat-devel-1.4.3-3.3.1 libpng14-devel-1.4.3-3.3.1 - openSUSE 11.3 (x86_64) [New Version: 1.2.46]: libpng12-0-32bit-1.2.46-7.3.1 libpng14-14-32bit-1.4.3-3.3.1 References: http://support.novell.com/security/cve/CVE-2008-6218.html http://support.novell.com/security/cve/CVE-2009-5063.html http://support.novell.com/security/cve/CVE-2011-2501.html http://support.novell.com/security/cve/CVE-2011-2690.html http://support.novell.com/security/cve/CVE-2011-2691.html http://support.novell.com/security/cve/CVE-2011-2692.html https://bugzilla.novell.com/702578 https://bugzilla.novell.com/706387 https://bugzilla.novell.com/706388 https://bugzilla.novell.com/706389

1 0

openSUSE-RU-2011:0911-1: wxGTK: Drag and drop crash in Filezilla
by maintenance＠opensuse.org 16 Aug '11

16 Aug '11

openSUSE Recommended Update: wxGTK: Drag and drop crash in Filezilla ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0911-1 Rating: low References: #708402 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes a crash at drag and drop operations, at least in Filezilla, but possibly in other applications, too. (#708402) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libwx_base-2_8-0-compat-lib-wxcontainer-4971 - openSUSE 11.3: zypper in -t patch python-wxGTK-4969 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libwx_base-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_base-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_base_net-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_base_net-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_base_xml-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_base_xml-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_baseu-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_baseu-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_baseu-2_8-0-stl-2.8.11-4.13.1 libwx_baseu-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_baseu_net-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_baseu_net-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_baseu_net-2_8-0-stl-2.8.11-4.13.1 libwx_baseu_net-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_baseu_xml-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_baseu_xml-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_baseu_xml-2_8-0-stl-2.8.11-4.13.1 libwx_baseu_xml-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2_adv-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2_adv-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2_aui-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2_aui-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2_core-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2_core-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2_fl-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2_fl-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2_gizmos-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2_gizmos-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2_gizmos_xrc-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2_gizmos_xrc-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2_gl-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2_gl-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2_html-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2_html-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2_media-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2_media-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2_mmedia-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2_mmedia-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2_ogl-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2_ogl-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2_plot-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2_plot-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2_qa-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2_qa-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2_richtext-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2_richtext-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2_stc-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2_stc-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2_svg-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2_svg-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2_xrc-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2_xrc-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_adv-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_gtk2u_adv-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_adv-2_8-0-stl-2.8.11-4.13.1 libwx_gtk2u_adv-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_aui-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_gtk2u_aui-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_aui-2_8-0-stl-2.8.11-4.13.1 libwx_gtk2u_aui-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_core-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_gtk2u_core-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_core-2_8-0-stl-2.8.11-4.13.1 libwx_gtk2u_core-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_fl-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_fl-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_gizmos-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_gtk2u_gizmos-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_gizmos-2_8-0-stl-2.8.11-4.13.1 libwx_gtk2u_gizmos-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_gizmos_xrc-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_gtk2u_gizmos_xrc-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_gizmos_xrc-2_8-0-stl-2.8.11-4.13.1 libwx_gtk2u_gizmos_xrc-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_gl-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_gtk2u_gl-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_gl-2_8-0-stl-2.8.11-4.13.1 libwx_gtk2u_gl-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_html-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_gtk2u_html-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_html-2_8-0-stl-2.8.11-4.13.1 libwx_gtk2u_html-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_media-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_gtk2u_media-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_media-2_8-0-stl-2.8.11-4.13.1 libwx_gtk2u_media-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_mmedia-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_gtk2u_mmedia-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_mmedia-2_8-0-stl-2.8.11-4.13.1 libwx_gtk2u_mmedia-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_ogl-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_ogl-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_plot-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_gtk2u_plot-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_plot-2_8-0-stl-2.8.11-4.13.1 libwx_gtk2u_plot-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_qa-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_gtk2u_qa-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_qa-2_8-0-stl-2.8.11-4.13.1 libwx_gtk2u_qa-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_richtext-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_gtk2u_richtext-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_richtext-2_8-0-stl-2.8.11-4.13.1 libwx_gtk2u_richtext-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_stc-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_gtk2u_stc-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_stc-2_8-0-stl-2.8.11-4.13.1 libwx_gtk2u_stc-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_svg-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_gtk2u_svg-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_svg-2_8-0-stl-2.8.11-4.13.1 libwx_gtk2u_svg-2_8-0-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_xrc-2_8-0-compat-lib-stl-2.8.11-4.13.1 libwx_gtk2u_xrc-2_8-0-compat-lib-wxcontainer-2.8.11-3.13.1 libwx_gtk2u_xrc-2_8-0-stl-2.8.11-4.13.1 libwx_gtk2u_xrc-2_8-0-wxcontainer-2.8.11-3.13.1 wxWidgets-ansi-compat-lib-config-2.8.11-3.13.1 wxWidgets-ansi-devel-2.8.11-3.13.1 wxWidgets-ansi-plugin-sound_sdl-2_8-wxcontainer-2.8.11-3.13.1 wxWidgets-compat-lib-config-2.8.11-4.13.1 wxWidgets-devel-2.8.11-4.13.1 wxWidgets-plugin-sound_sdlu-2_8-stl-2.8.11-4.13.1 wxWidgets-wxcontainer-compat-lib-config-2.8.11-3.13.1 wxWidgets-wxcontainer-devel-2.8.11-3.13.1 wxWidgets-wxcontainer-plugin-sound_sdlu-2_8-wxcontainer-2.8.11-3.13.1 - openSUSE 11.4 (noarch): wxWidgets-lang-2.8.11-4.13.1 - openSUSE 11.3 (i586 x86_64): python-wxGTK-2.8.10.1-12.3.1 wxGTK-2.8.10.1-12.3.1 wxGTK-compat-2.8.10.1-12.3.1 wxGTK-devel-2.8.10.1-12.3.1 wxGTK-gl-2.8.10.1-12.3.1 References: https://bugzilla.novell.com/708402

1 0

openSUSE-RU-2011:0910-1: libtool: Compiling C++ libraries using libtool fails, because the compiler isn't called
by maintenance＠opensuse.org 16 Aug '11

16 Aug '11

openSUSE Recommended Update: libtool: Compiling C++ libraries using libtool fails, because the compiler isn't called ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0910-1 Rating: low References: #708935 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Because the C++ compiler was missing when building libtool the installed libtool will not call any compiler other than the C one. This version of libtool is configured with compilers for C++, Fortran and Objective C present at build time. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libltdl7-4967 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libltdl7-2.2.6b-13.18.1 libtool-2.2.6b-13.18.1 - openSUSE 11.4 (x86_64): libltdl7-32bit-2.2.6b-13.18.1 libtool-32bit-2.2.6b-13.18.1 References: https://bugzilla.novell.com/708935

1 0

openSUSE-RU-2011:0909-1: selinux-policy: /dev files under SELinux don't have the right security context
by maintenance＠opensuse.org 16 Aug '11

16 Aug '11

openSUSE Recommended Update: selinux-policy: /dev files under SELinux don't have the right security context ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0909-1 Rating: low References: #635304 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The following bug is fixed by this update: - #635304: /dev files under SELinux don't to have the right security context Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch selinux-policy-4968 - openSUSE 11.3: zypper in -t patch selinux-policy-4968 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (noarch): selinux-policy-2.20081210-12.13.1 selinux-policy-refpolicy-mcs-2.20081210-12.13.1 selinux-policy-refpolicy-mls-2.20081210-12.13.1 selinux-policy-refpolicy-standard-2.20081210-12.13.1 - openSUSE 11.3 (noarch): selinux-policy-2.20081210-9.3.1 selinux-policy-refpolicy-mcs-2.20081210-9.3.1 selinux-policy-refpolicy-mls-2.20081210-9.3.1 selinux-policy-refpolicy-standard-2.20081210-9.3.1 References: https://bugzilla.novell.com/635304

1 0

openSUSE-RU-2011:0908-1: gnome-games: Fix crashes of glchess
by maintenance＠opensuse.org 16 Aug '11

16 Aug '11

openSUSE Recommended Update: gnome-games: Fix crashes of glchess ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0908-1 Rating: low References: #709856 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes glchess (gnome-games) crash in 3D mode (#709856). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch aisleriot-4964 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): aisleriot-2.32.1-11.12.1 glchess-2.32.1-11.12.1 glines-2.32.1-11.12.1 gnect-2.32.1-11.12.1 gnibbles-2.32.1-11.12.1 gnobots2-2.32.1-11.12.1 gnome-games-2.32.1-11.12.1 gnome-games-recommended-2.32.1-11.12.1 gnome-games-support-2.32.1-11.12.1 gnome-sudoku-2.32.1-11.12.1 gnomine-2.32.1-11.12.1 gnotravex-2.32.1-11.12.1 gnotski-2.32.1-11.12.1 gtali-2.32.1-11.12.1 iagno-2.32.1-11.12.1 lightsoff-2.32.1-11.12.1 mahjongg-2.32.1-11.12.1 quadrapassel-2.32.1-11.12.1 swell-foop-2.32.1-11.12.1 - openSUSE 11.4 (noarch): aisleriot-lang-2.32.1-11.12.1 glchess-lang-2.32.1-11.12.1 glines-lang-2.32.1-11.12.1 gnect-lang-2.32.1-11.12.1 gnibbles-lang-2.32.1-11.12.1 gnobots2-lang-2.32.1-11.12.1 gnome-games-support-lang-2.32.1-11.12.1 gnome-sudoku-lang-2.32.1-11.12.1 gnomine-lang-2.32.1-11.12.1 gnotravex-lang-2.32.1-11.12.1 gnotski-lang-2.32.1-11.12.1 gtali-lang-2.32.1-11.12.1 iagno-lang-2.32.1-11.12.1 lightsoff-lang-2.32.1-11.12.1 mahjongg-lang-2.32.1-11.12.1 quadrapassel-lang-2.32.1-11.12.1 swell-foop-lang-2.32.1-11.12.1 References: https://bugzilla.novell.com/709856

1 0

openSUSE-RU-2011:0906-1: glib2: gdbus aborting due to an assertion failure
by maintenance＠opensuse.org 15 Aug '11

15 Aug '11

openSUSE Recommended Update: glib2: gdbus aborting due to an assertion failure ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0906-1 Rating: low References: #655751 #672793 #675053 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: When DBUS_SESSION_BUS_ADDRESS is set to the valid socket of another user glib aborts due to an assertion failure if more than one connection attempt via gdbus is made, leading to Glib-Gio error messages. Fixed by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch glib2-4974 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): glib2-branding-upstream-2.28.0-3.8.1 glib2-devel-2.28.0-3.8.1 glib2-devel-static-2.28.0-3.8.1 glib2-tools-2.28.0-3.8.1 libgio-2_0-0-2.28.0-3.8.1 libgio-fam-2.28.0-3.8.1 libglib-2_0-0-2.28.0-3.8.1 libgmodule-2_0-0-2.28.0-3.8.1 libgobject-2_0-0-2.28.0-3.8.1 libgthread-2_0-0-2.28.0-3.8.1 - openSUSE 11.4 (x86_64): glib2-tools-32bit-2.28.0-3.8.1 libgio-2_0-0-32bit-2.28.0-3.8.1 libgio-fam-32bit-2.28.0-3.8.1 libglib-2_0-0-32bit-2.28.0-3.8.1 libgmodule-2_0-0-32bit-2.28.0-3.8.1 libgobject-2_0-0-32bit-2.28.0-3.8.1 libgthread-2_0-0-32bit-2.28.0-3.8.1 - openSUSE 11.4 (noarch): glib2-lang-2.28.0-3.8.1 References: https://bugzilla.novell.com/655751 https://bugzilla.novell.com/672793 https://bugzilla.novell.com/675053

1 0

openSUSE-SU-2011:0902-1: important: ecryptfs-utils: Update to fix various symlink race attacks
by opensuse-security＠opensuse.org 12 Aug '11

12 Aug '11

openSUSE Security Update: ecryptfs-utils: Update to fix various symlink race attacks ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0902-1 Rating: important References: #709771 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update of ecryptfs-utils fixes several security problems: - CVE-2011-1831 - Race condition when checking mountpoint during mount. - CVE-2011-1832 - Race condition when checking mountpoint during unmount. - CVE-2011-1833 - Race condition when checking source during mount. - CVE-2011-1834 - Improper mtab handling allowing corruption due to resource limits, signals, etc. - CVE-2011-1835 - Key poisoning in ecryptfs-setup-private due to insecure temp directory. - CVE-2011-1837 - Predictable lock counter name and associated races. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch ecryptfs-utils-4986 - openSUSE 11.3: zypper in -t patch ecryptfs-utils-4986 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): ecryptfs-utils-83-6.7.1 - openSUSE 11.4 (x86_64): ecryptfs-utils-32bit-83-6.7.1 - openSUSE 11.3 (i586 x86_64): ecryptfs-utils-83-3.3.1 - openSUSE 11.3 (x86_64): ecryptfs-utils-32bit-83-3.3.1 References: https://bugzilla.novell.com/709771

1 0

openSUSE-SU-2011:0900-1: moderate: libvirt
by opensuse-security＠opensuse.org 12 Aug '11

12 Aug '11

openSUSE Security Update: libvirt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0900-1 Rating: moderate References: #703084 Cross-References: CVE-2011-2511 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: libvirtd could crash if bogus parameters where passed to the VirDomainGetVcpus call (CVE-2011-2511). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libvirt-4836 - openSUSE 11.3: zypper in -t patch libvirt-4836 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libvirt-0.8.8-0.12.1 libvirt-client-0.8.8-0.12.1 libvirt-devel-0.8.8-0.12.1 libvirt-doc-0.8.8-0.12.1 libvirt-python-0.8.8-0.12.1 - openSUSE 11.3 (i586 x86_64): libvirt-0.8.1-4.10.1 libvirt-client-0.8.1-4.10.1 libvirt-devel-0.8.1-4.10.1 libvirt-doc-0.8.1-4.10.1 libvirt-python-0.8.1-4.10.1 References: http://support.novell.com/security/cve/CVE-2011-2511.html https://bugzilla.novell.com/703084

1 0

openSUSE-SU-2011:0897-1: critical: flash-player
by opensuse-security＠opensuse.org 12 Aug '11

12 Aug '11

openSUSE Security Update: flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0897-1 Rating: critical References: #711427 Cross-References: CVE-2011-2130 CVE-2011-2134 CVE-2011-2135 CVE-2011-2136 CVE-2011-2137 CVE-2011-2138 CVE-2011-2139 CVE-2011-2140 CVE-2011-2414 CVE-2011-2415 CVE-2011-2416 CVE-2011-2417 CVE-2011-2425 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes 13 vulnerabilities is now available. It includes one version update. Description: The update to Flash-Player 10.3.188.5 fixes various security issues: - CVE-2011-2130: CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P) - CVE-2011-2134: CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P) - CVE-2011-2135: CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P) - CVE-2011-2136: CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P) - CVE-2011-2137: CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P) - CVE-2011-2138: CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P) - CVE-2011-2139: CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P) - CVE-2011-2140: CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P) - CVE-2011-2414: CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P) - CVE-2011-2415: CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P) - CVE-2011-2416: CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P) - CVE-2011-2417: CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P) - CVE-2011-2425: CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P) This update resolves a buffer overflow vulnerability that could lead to code execution (CVE-2011-2130). This update resolves a buffer overflow vulnerability that could lead to code execution (CVE-2011-2134). This update resolves a memory corruption vulnerability that could lead to code execution (CVE-2011-2135). This update resolves an integer overflow vulnerability that could lead to code execution (CVE-2011-2136). This update resolves a buffer overflow vulnerability that could lead to code execution (CVE-2011-2137). This update resolves an integer overflow vulnerability that could lead to code execution (CVE-2011-2138). This update resolves a cross-site information disclosure vulnerability that could lead to code execution (CVE-2011-2139). This update resolves a memory corruption vulnerability that could lead to code execution (CVE-2011-2140). This update resolves a buffer overflow vulnerability that could lead to code execution (CVE-2011-2414). This update resolves a buffer overflow vulnerability that could lead to code execution (CVE-2011-2415). This update resolves an integer overflow vulnerability that could lead to code execution (CVE-2011-2416). This update resolves a memory corruption vulnerability that could lead to code execution (CVE-2011-2417). This update resolves a memory corruption vulnerability that could lead to code execution (CVE-2011-2425). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch flash-player-4976 - openSUSE 11.3: zypper in -t patch flash-player-4976 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586) [New Version: 10.3.183.5]: flash-player-10.3.183.5-0.2.1 - openSUSE 11.3 (i586) [New Version: 10.3.183.5]: flash-player-10.3.183.5-0.2.1 References: http://support.novell.com/security/cve/CVE-2011-2130.html http://support.novell.com/security/cve/CVE-2011-2134.html http://support.novell.com/security/cve/CVE-2011-2135.html http://support.novell.com/security/cve/CVE-2011-2136.html http://support.novell.com/security/cve/CVE-2011-2137.html http://support.novell.com/security/cve/CVE-2011-2138.html http://support.novell.com/security/cve/CVE-2011-2139.html http://support.novell.com/security/cve/CVE-2011-2140.html http://support.novell.com/security/cve/CVE-2011-2414.html http://support.novell.com/security/cve/CVE-2011-2415.html http://support.novell.com/security/cve/CVE-2011-2416.html http://support.novell.com/security/cve/CVE-2011-2417.html http://support.novell.com/security/cve/CVE-2011-2425.html https://bugzilla.novell.com/711427

1 0

openSUSE-SU-2011:0892-1: moderate: foomatic-filters
by opensuse-security＠opensuse.org 11 Aug '11

11 Aug '11

openSUSE Security Update: foomatic-filters ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0892-1 Rating: moderate References: #698451 Cross-References: CVE-2011-2697 CVE-2011-2964 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: The foomatic print filters of the hplip package contained a remote code execution vulnerability. Remote users, if allowed to access a print server such as CUPS, could execute arbitrary commands as lp system user. CVE-2011-2964: CVSS v2 Base Score: 6.8 (moderate) (AV:N/AC:M/Au:N/C:P/I:P/A:P): Code Injection (CWE-94) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch foomatic-filters-4979 - openSUSE 11.3: zypper in -t patch foomatic-filters-4979 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): foomatic-filters-4.0.6-7.8.1 - openSUSE 11.3 (i586 x86_64): foomatic-filters-4.0.1-7.3.1 References: http://support.novell.com/security/cve/CVE-2011-2697.html http://support.novell.com/security/cve/CVE-2011-2964.html https://bugzilla.novell.com/698451

1 0

openSUSE-SU-2011:0891-1: moderate: cgit
by opensuse-security＠opensuse.org 11 Aug '11

11 Aug '11

openSUSE Security Update: cgit ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0891-1 Rating: moderate References: #707929 Cross-References: CVE-2011-2711 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update of cgit fixes a XSS vulnerability. CVE-2011-2711: CVSS v2 Base Score: 3.3 (AV:N/AC:L/Au:M/C:N/I:P/A:N): Cross-Site Scripting (XSS) (CWE-79) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch cgit-4975 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): cgit-0.8.3.3-5.7.1 References: http://support.novell.com/security/cve/CVE-2011-2711.html https://bugzilla.novell.com/707929

1 0

openSUSE-SU-2011:0884-1: important: apache2-mod_fcgid: fixed possible stack overflow due to wrong pointer arithmetic (CVE-2010-3872)
by opensuse-security＠opensuse.org 10 Aug '11

10 Aug '11

openSUSE Security Update: apache2-mod_fcgid: fixed possible stack overflow due to wrong pointer arithmetic (CVE-2010-3872) ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0884-1 Rating: important References: #656092 Cross-References: CVE-2010-3872 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: A possible stack overflow in apache2-mod_fcgid due to wrong pointer arithmetic has been fixed. CVE-2010-3872 has been assigned to this issue. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch apache2-mod_fcgid-4933 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): apache2-mod_fcgid-2.2-101.3.1 References: http://support.novell.com/security/cve/CVE-2010-3872.html https://bugzilla.novell.com/656092

1 0

openSUSE-RU-2011:0882-1: dovecot20: Fix Dovecot20 not starting due to missing ssl_keys
by maintenance＠opensuse.org 09 Aug '11

09 Aug '11

openSUSE Recommended Update: dovecot20: Fix Dovecot20 not starting due to missing ssl_keys ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0882-1 Rating: low References: #696919 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update removes references to non-existent ssl_cert and ssl_key in Dovecot configuration. (bnc#696919) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch dovecot20-4959 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): dovecot20-2.0.13-0.5.1 dovecot20-backend-mysql-2.0.13-0.5.1 dovecot20-backend-pgsql-2.0.13-0.5.1 dovecot20-backend-sqlite-2.0.13-0.5.1 dovecot20-devel-2.0.13-0.5.1 dovecot20-fts-solr-2.0.13-0.5.1 References: https://bugzilla.novell.com/696919

1 0

openSUSE-RU-2011:0812-2: moderate: apcupsd: init check is fixed by this update
by maintenance＠opensuse.org 09 Aug '11

09 Aug '11

openSUSE Recommended Update: apcupsd: init check is fixed by this update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0812-2 Rating: moderate References: #703592 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update improves the last update for apcupsd. It fixes the init check to succeed with unmounted /usr. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch apcupsd-4958 - openSUSE 11.3: zypper in -t patch apcupsd-4958 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): apcupsd-3.14.6-13.16.1 apcupsd-gui-3.14.6-13.16.1 - openSUSE 11.3 (i586 x86_64): apcupsd-3.14.6-9.5.1 apcupsd-gui-3.14.6-9.5.1 References: https://bugzilla.novell.com/703592

1 0

openSUSE-SU-2011:0880-1: moderate: dbus-1
by opensuse-security＠opensuse.org 08 Aug '11

08 Aug '11

openSUSE Security Update: dbus-1 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0880-1 Rating: moderate References: #699712 Cross-References: CVE-2011-2200 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: local users could disconnect system daemons from the bus by sending specially crafted messages (CVE-2011-2200). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch dbus-1-4962 - openSUSE 11.3: zypper in -t patch dbus-1-4962 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): dbus-1-1.4.1-7.8.1 dbus-1-devel-1.4.1-7.8.1 - openSUSE 11.4 (x86_64): dbus-1-32bit-1.4.1-7.8.1 dbus-1-devel-32bit-1.4.1-7.8.1 - openSUSE 11.4 (noarch): dbus-1-devel-doc-1.4.1-7.8.1 - openSUSE 11.3 (i586 x86_64): dbus-1-1.2.24-2.5.1 dbus-1-devel-1.2.24-2.5.1 - openSUSE 11.3 (x86_64): dbus-1-32bit-1.2.24-2.5.1 dbus-1-devel-32bit-1.2.24-2.5.1 - openSUSE 11.3 (noarch): dbus-1-devel-doc-1.2.24-2.5.1 References: http://support.novell.com/security/cve/CVE-2011-2200.html https://bugzilla.novell.com/699712

1 0

openSUSE-SU-2011:0875-1: moderate: libsoup
by opensuse-security＠opensuse.org 05 Aug '11

05 Aug '11

openSUSE Security Update: libsoup ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0875-1 Rating: moderate References: #706630 Cross-References: CVE-2011-2524 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update of libsoup fixes a directory traversal attack that affect application using the library. CVE-2011-2524: CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libsoup-2_4-1-4941 - openSUSE 11.3: zypper in -t patch libsoup-2_4-1-4941 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libsoup-2_4-1-2.32.2-3.4.1 - openSUSE 11.4 (x86_64): libsoup-2_4-1-32bit-2.32.2-3.4.1 - openSUSE 11.3 (i586 x86_64): libsoup-2_4-1-2.30.1-2.3.1 - openSUSE 11.3 (x86_64): libsoup-2_4-1-32bit-2.30.1-2.3.1 References: http://support.novell.com/security/cve/CVE-2011-2524.html https://bugzilla.novell.com/706630

1 0

openSUSE-RU-2011:0874-1: Open Buildservice Toolchain: Release for OBS Maintenance Support
by maintenance＠opensuse.org 04 Aug '11

04 Aug '11

openSUSE Recommended Update: Open Buildservice Toolchain: Release for OBS Maintenance Support ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0874-1 Rating: low References: #704617 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes two new package versions. Description: This update brings OBS Maintenance Support and other new osc features for Factory Submissions in a roll up update. It contains new OBS service file drivers: - format_spec_file: format a spec file according to openSUSE rules - source_validator: source and patch and spec validation before check-in Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch obstools-201107-4878 - openSUSE 11.3: zypper in -t patch obstools-201107-4878 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (noarch) [New Version: 2011.07.01]: build-2011.07.01-2.2.1 build-mkbaselibs-2011.07.01-2.2.1 build-mkdrpms-2011.07.01-2.2.1 obs-service-download_files-0.1-4.2.1 obs-service-format_spec_file-0.1-8.8.1 obs-service-source_validator-0.1-2.2.1 osc-0.132.5-1.3.1 osc-source_validator-0.1-4.5.1 - openSUSE 11.3 (noarch) [New Version: 0.132.5 and 2011.07.01]: build-2011.07.01-2.2.1 build-mkbaselibs-2011.07.01-2.2.1 obs-service-download_files-0.1-4.2.1 obs-service-format_spec_file-0.1-8.8.1 obs-service-source_validator-0.1-2.2.1 osc-0.132.5-1.3.2 osc-source_validator-0.1-19.17.1 References: https://bugzilla.novell.com/704617

1 0

openSUSE-SU-2011:0873-1: moderate: virtualbox
by opensuse-security＠opensuse.org 04 Aug '11

04 Aug '11

openSUSE Security Update: virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0873-1 Rating: moderate References: #708271 Cross-References: CVE-2011-2300 CVE-2011-2305 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. It includes one version update. Description: Two privilege escalation vulnerabilities in VirtualBox have been fixed. - CVE-2011-2300: CVSS v2 Base Score: 3.7 (AV:L/AC:H/Au:N/C:P/I:P/A:P) - CVE-2011-2305: CVSS v2 Base Score: 6.2 (AV:L/AC:H/Au:N/C:C/I:C/A:C) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch python-virtualbox-4950 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 4.0.12]: python-virtualbox-4.0.12-0.2.1 virtualbox-4.0.12-0.2.1 virtualbox-devel-4.0.12-0.2.1 virtualbox-guest-kmp-default-4.0.12_k2.6.37.6_0.7-0.2.1 virtualbox-guest-kmp-desktop-4.0.12_k2.6.37.6_0.7-0.2.1 virtualbox-guest-tools-4.0.12-0.2.1 virtualbox-guest-x11-4.0.12-0.2.1 virtualbox-host-kmp-default-4.0.12_k2.6.37.6_0.7-0.2.1 virtualbox-host-kmp-desktop-4.0.12_k2.6.37.6_0.7-0.2.1 virtualbox-qt-4.0.12-0.2.1 - openSUSE 11.4 (i586): virtualbox-guest-kmp-pae-4.0.12_k2.6.37.6_0.7-0.2.1 virtualbox-host-kmp-pae-4.0.12_k2.6.37.6_0.7-0.2.1 References: http://support.novell.com/security/cve/CVE-2011-2300.html http://support.novell.com/security/cve/CVE-2011-2305.html https://bugzilla.novell.com/708271

1 0

openSUSE-YU-2011:0872-1: softwaremgmt: Collective Update 2011/07
by maintenance＠opensuse.org 04 Aug '11

04 Aug '11

openSUSE YOU Update: softwaremgmt: Collective Update 2011/07 ______________________________________________________________________________ Announcement ID: openSUSE-YU-2011:0872-1 Rating: low References: #329635 #539159 #596089 #649925 #666422 #684466 #686261 #687529 #693576 #694427 #707839 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has 11 YOU fixes can now be installed. It includes three new package versions. Description: This update for the update stack provides the following fixes: zypper: - 539159: zypper al ignores --root parameter - 687529: zypper xml output incomplete and/or missing XML-format - 693576: zypper in -C <capability> needs fixing. libzypp: - 596089: download.max_concurrent_connections sets wrong aria option - 649925: Zypper Update repeatedly gives wrong check sum error when updating behind a firewall. - 684466: zypper ps doesn't complain if lsof isn't installed - 694427: zypper should require lsof libsatsolver: - 666422: Ponderosa:- Pre-Alpha5- OES services pattern Description is not displayed correctly in yast2. - 686261: Resolution process for an update try takes too long. - 707839: zypper dup dumps core Special Instructions and Notes: This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. Patch Instructions: To install this openSUSE YOU Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch softwaremgmt-201107-4938 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 0.16.3,1.5.7 and 8.12.6]: libsatsolver-demo-0.16.3-0.2.1 libsatsolver-devel-0.16.3-0.2.1 libzypp-8.12.6-0.2.1 libzypp-devel-8.12.6-0.2.1 perl-satsolver-0.16.3-0.2.1 python-satsolver-0.16.3-0.2.1 ruby-satsolver-0.16.3-0.2.1 satsolver-tools-0.16.3-0.2.1 zypper-1.5.7-0.4.3 References: https://bugzilla.novell.com/329635 https://bugzilla.novell.com/539159 https://bugzilla.novell.com/596089 https://bugzilla.novell.com/649925 https://bugzilla.novell.com/666422 https://bugzilla.novell.com/684466 https://bugzilla.novell.com/686261 https://bugzilla.novell.com/687529 https://bugzilla.novell.com/693576 https://bugzilla.novell.com/694427 https://bugzilla.novell.com/707839

1 0

openSUSE-RU-2011:0866-1: lxde: Fixed common settings and branding
by maintenance＠opensuse.org 02 Aug '11

02 Aug '11

openSUSE Recommended Update: lxde: Fixed common settings and branding ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0866-1 Rating: low References: #681995 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: This update fix the incomplete lxde branding and common settings in openSUSE 11.4 (bnc#681995) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch lxde-common-4924 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (noarch) [New Version: 11.4]: lxde-common-0.5.0-19.20.1 lxde-common-branding-openSUSE-11.4-16.3.1 lxde-common-branding-upstream-0.5.0-19.20.1 References: https://bugzilla.novell.com/681995

1 0

openSUSE-RU-2011:0865-1: gimp: The cellspacing in pyslice plugin is broken.
by maintenance＠opensuse.org 02 Aug '11

02 Aug '11

openSUSE Recommended Update: gimp: The cellspacing in pyslice plugin is broken. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0865-1 Rating: low References: #698769 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The cellspacing in pyslice plugin is broken. Fixed by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch gimp-4927 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): gimp-2.6.11-13.16.1 gimp-branding-upstream-2.6.11-13.16.1 gimp-devel-2.6.11-13.16.1 gimp-help-browser-2.6.11-13.16.1 gimp-module-hal-2.6.11-13.16.1 gimp-plugins-python-2.6.11-13.16.1 libgimp-2_0-0-2.6.11-13.16.1 libgimpui-2_0-0-2.6.11-13.16.1 - openSUSE 11.4 (x86_64): libgimp-2_0-0-32bit-2.6.11-13.16.1 libgimpui-2_0-0-32bit-2.6.11-13.16.1 - openSUSE 11.4 (noarch): gimp-lang-2.6.11-13.16.1 References: https://bugzilla.novell.com/698769

1 0

openSUSE-RU-2011:0864-1: iproute2: "ip addr add" returns a different error codes than before
by maintenance＠opensuse.org 02 Aug '11

02 Aug '11

openSUSE Recommended Update: iproute2: "ip addr add" returns a different error codes than before ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0864-1 Rating: low References: #681952 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The following bug is fixed by this update: 681952: "ip addr add" returns a different error codes than before Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch iproute2-4923 - openSUSE 11.3: zypper in -t patch iproute2-4923 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): iproute2-2.6.37-4.5.1 libnetlink-devel-2.6.37-4.5.1 - openSUSE 11.4 (noarch): iproute2-doc-2.6.37-4.5.1 - openSUSE 11.3 (i586 x86_64): iproute2-2.6.29.1-13.3.1 libnetlink-devel-2.6.29.1-13.3.1 References: https://bugzilla.novell.com/681952

1 0

openSUSE-RU-2011:0862-1: minicom: Static buffers are too small
by maintenance＠opensuse.org 02 Aug '11

02 Aug '11

openSUSE Recommended Update: minicom: Static buffers are too small ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0862-1 Rating: low References: #707860 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The following bug is fixed with this update: - #707860: Static buffers used for storing configuration for minicom are too small; stripping everything after the 64th character Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch minicom-4928 - openSUSE 11.3: zypper in -t patch minicom-4928 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): minicom-2.5-5.6.1 - openSUSE 11.3 (i586 x86_64): minicom-2.3-38.3.1 References: https://bugzilla.novell.com/707860

1 0

openSUSE-SU-2011:0861-1: moderate: kernel: security and bugfix update.
by opensuse-security＠opensuse.org 02 Aug '11

02 Aug '11

openSUSE Security Update: kernel: security and bugfix update. ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0861-1 Rating: moderate References: #584493 #595586 #642142 #655693 #669889 #669937 #670860 #670868 #673934 #674648 #674691 #674693 #674982 #676419 #677827 #679898 #680040 #681497 #683282 #687113 #688432 #689414 #692459 #692502 #693374 #693382 #698221 #698247 #702013 #702285 #703153 #703155 Cross-References: CVE-2011-1013 CVE-2011-1016 CVE-2011-1017 CVE-2011-1020 CVE-2011-1160 CVE-2011-1180 CVE-2011-1479 CVE-2011-1577 CVE-2011-1585 CVE-2011-1593 CVE-2011-2182 CVE-2011-2484 CVE-2011-2491 CVE-2011-2495 CVE-2011-2496 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that solves 15 vulnerabilities and has 17 fixes is now available. It includes one version update. Description: The openSUSE 11.3 kernel was updated to 2.6.34.10 to fix various bugs and security issues. Following security issues have been fixed: CVE-2011-2495: The /proc/PID/io interface could be used by local attackers to gain information on other processes like number of password characters typed or similar. CVE-2011-2484: The add_del_listener function in kernel/taskstats.c in the Linux kernel did not prevent multiple registrations of exit handlers, which allowed local users to cause a denial of service (memory and CPU consumption), and bypass the OOM Killer, via a crafted application. CVE-2011-2491: A local unprivileged user able to access a NFS filesystem could use file locking to deadlock parts of an nfs server under some circumstance. CVE-2011-2496: The normal mmap paths all avoid creating a mapping where the pgoff inside the mapping could wrap around due to overflow. However, an expanding mremap() can take such a non-wrapping mapping and make it bigger and cause a wrapping condition. CVE-2011-1017,CVE-2011-2182: The code for evaluating LDM partitions (in fs/partitions/ldm.c) contained bugs that could crash the kernel for certain corrupted LDM partitions. CVE-2011-1479: A regression in inotify fix for a memory leak could lead to a double free corruption which could crash the system. CVE-2011-1593: Multiple integer overflows in the next_pidmap function in kernel/pid.c in the Linux kernel allowed local users to cause a denial of service (system crash) via a crafted (1) getdents or (2) readdir system call. CVE-2011-1020: The proc filesystem implementation in the Linux kernel did not restrict access to the /proc directory tree of a process after this process performs an exec of a setuid program, which allowed local users to obtain sensitive information or cause a denial of service via open, lseek, read, and write system calls. CVE-2011-1585: When using a setuid root mount.cifs, local users could hijack password protected mounted CIFS shares of other local users. CVE-2011-1160: Kernel information via the TPM devices could by used by local attackers to read kernel memory. CVE-2011-1577: The Linux kernel automatically evaluated partition tables of storage devices. The code for evaluating EFI GUID partitions (in fs/partitions/efi.c) contained a bug that causes a kernel oops on certain corrupted GUID partition tables, which might be used by local attackers to crash the kernel or potentially execute code. CVE-2011-1180: In the IrDA module, length fields provided by a peer for names and attributes may be longer than the destination array sizes and were not checked, this allowed local attackers (close to the irda port) to potentially corrupt memory. CVE-2011-1016: The Radeon GPU drivers in the Linux kernel did not properly validate data related to the AA resolve registers, which allowed local users to write to arbitrary memory locations associated with (1) Video RAM (aka VRAM) or (2) the Graphics Translation Table (GTT) via crafted values. CVE-2011-1013: A signedness issue in the drm ioctl handling could be used by local attackers to potentially overflow kernel buffers and execute code. Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch kernel-4931 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 2.6.34.10]: kernel-debug-2.6.34.10-0.2.1 kernel-debug-base-2.6.34.10-0.2.1 kernel-debug-devel-2.6.34.10-0.2.1 kernel-default-2.6.34.10-0.2.1 kernel-default-base-2.6.34.10-0.2.1 kernel-default-devel-2.6.34.10-0.2.1 kernel-desktop-2.6.34.10-0.2.1 kernel-desktop-base-2.6.34.10-0.2.1 kernel-desktop-devel-2.6.34.10-0.2.1 kernel-ec2-2.6.34.10-0.2.1 kernel-ec2-base-2.6.34.10-0.2.1 kernel-ec2-devel-2.6.34.10-0.2.1 kernel-ec2-extra-2.6.34.10-0.2.1 kernel-syms-2.6.34.10-0.2.1 kernel-trace-2.6.34.10-0.2.1 kernel-trace-base-2.6.34.10-0.2.1 kernel-trace-devel-2.6.34.10-0.2.1 kernel-vanilla-2.6.34.10-0.2.1 kernel-vanilla-base-2.6.34.10-0.2.1 kernel-vanilla-devel-2.6.34.10-0.2.1 kernel-xen-2.6.34.10-0.2.1 kernel-xen-base-2.6.34.10-0.2.1 kernel-xen-devel-2.6.34.10-0.2.1 preload-kmp-default-1.1_k2.6.34.10_0.2-19.1.24 preload-kmp-desktop-1.1_k2.6.34.10_0.2-19.1.24 - openSUSE 11.3 (noarch) [New Version: 2.6.34.10]: kernel-devel-2.6.34.10-0.2.1 kernel-source-2.6.34.10-0.2.1 kernel-source-vanilla-2.6.34.10-0.2.1 - openSUSE 11.3 (i586) [New Version: 2.6.34.10]: kernel-pae-2.6.34.10-0.2.1 kernel-pae-base-2.6.34.10-0.2.1 kernel-pae-devel-2.6.34.10-0.2.1 kernel-vmi-2.6.34.10-0.2.1 kernel-vmi-base-2.6.34.10-0.2.1 kernel-vmi-devel-2.6.34.10-0.2.1 References: http://support.novell.com/security/cve/CVE-2011-1013.html http://support.novell.com/security/cve/CVE-2011-1016.html http://support.novell.com/security/cve/CVE-2011-1017.html http://support.novell.com/security/cve/CVE-2011-1020.html http://support.novell.com/security/cve/CVE-2011-1160.html http://support.novell.com/security/cve/CVE-2011-1180.html http://support.novell.com/security/cve/CVE-2011-1479.html http://support.novell.com/security/cve/CVE-2011-1577.html http://support.novell.com/security/cve/CVE-2011-1585.html http://support.novell.com/security/cve/CVE-2011-1593.html http://support.novell.com/security/cve/CVE-2011-2182.html http://support.novell.com/security/cve/CVE-2011-2484.html http://support.novell.com/security/cve/CVE-2011-2491.html http://support.novell.com/security/cve/CVE-2011-2495.html http://support.novell.com/security/cve/CVE-2011-2496.html https://bugzilla.novell.com/584493 https://bugzilla.novell.com/595586 https://bugzilla.novell.com/642142 https://bugzilla.novell.com/655693 https://bugzilla.novell.com/669889 https://bugzilla.novell.com/669937 https://bugzilla.novell.com/670860 https://bugzilla.novell.com/670868 https://bugzilla.novell.com/673934 https://bugzilla.novell.com/674648 https://bugzilla.novell.com/674691 https://bugzilla.novell.com/674693 https://bugzilla.novell.com/674982 https://bugzilla.novell.com/676419 https://bugzilla.novell.com/677827 https://bugzilla.novell.com/679898 https://bugzilla.novell.com/680040 https://bugzilla.novell.com/681497 https://bugzilla.novell.com/683282 https://bugzilla.novell.com/687113 https://bugzilla.novell.com/688432 https://bugzilla.novell.com/689414 https://bugzilla.novell.com/692459 https://bugzilla.novell.com/692502 https://bugzilla.novell.com/693374 https://bugzilla.novell.com/693382 https://bugzilla.novell.com/698221 https://bugzilla.novell.com/698247 https://bugzilla.novell.com/702013 https://bugzilla.novell.com/702285 https://bugzilla.novell.com/703153 https://bugzilla.novell.com/703155

1 0

openSUSE-SU-2011:0860-1: moderate: kernel: security and bugfix update.
by opensuse-security＠opensuse.org 02 Aug '11

02 Aug '11

openSUSE Security Update: kernel: security and bugfix update. ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0860-1 Rating: moderate References: #584493 #595586 #655693 #661979 #666423 #669889 #672008 #674648 #674982 #677827 #679545 #681826 #681840 #687368 #688432 #689583 #689797 #692497 #692502 #693013 #693043 #693374 #693382 #694498 #697859 #698221 #698247 #699123 #701998 #702013 #702285 #702579 #703155 #704788 Cross-References: CVE-2011-1017 CVE-2011-1020 CVE-2011-1479 CVE-2011-1593 CVE-2011-1745 CVE-2011-1927 CVE-2011-2022 CVE-2011-2182 CVE-2011-2484 CVE-2011-2491 CVE-2011-2493 CVE-2011-2495 CVE-2011-2496 CVE-2011-2498 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that solves 14 vulnerabilities and has 20 fixes is now available. It includes one version update. Description: The openSUSE 11.4 kernel was updated to 2.6.37.6 fixing lots of bugs and security issues. Following security issues have been fixed: CVE-2011-2495: The /proc/PID/io interface could be used by local attackers to gain information on other processes like number of password characters typed or similar. CVE-2011-2484: The add_del_listener function in kernel/taskstats.c in the Linux kernel did not prevent multiple registrations of exit handlers, which allowed local users to cause a denial of service (memory and CPU consumption), and bypass the OOM Killer, via a crafted application. CVE-2011-2022: The agp_generic_remove_memory function in drivers/char/agp/generic.c in the Linux kernel before 2.6.38.5 did not validate a certain start parameter, which allowed local users to gain privileges or cause a denial of service (system crash) via a crafted AGPIOC_UNBIND agp_ioctl ioctl call, a different vulnerability than CVE-2011-1745. CVE-2011-1745: Integer overflow in the agp_generic_insert_memory function in drivers/char/agp/generic.c in the Linux kernel allowed local users to gain privileges or cause a denial of service (system crash) via a crafted AGPIOC_BIND agp_ioctl ioctl call. CVE-2011-2493: A denial of service on mounting invalid ext4 filesystems was fixed. CVE-2011-2491: A local unprivileged user able to access a NFS filesystem could use file locking to deadlock parts of an nfs server under some circumstance. CVE-2011-2498: Also account PTE pages when calculating OOM scoring, which could have lead to a denial of service. CVE-2011-2496: The normal mmap paths all avoid creating a mapping where the pgoff inside the mapping could wrap around due to overflow. However, an expanding mremap() can take such a non-wrapping mapping and make it bigger and cause a wrapping condition. CVE-2011-1017,CVE-2011-2182: The code for evaluating LDM partitions (in fs/partitions/ldm.c) contained bugs that could crash the kernel for certain corrupted LDM partitions. CVE-2011-1479: A regression in inotify fix for a memory leak could lead to a double free corruption which could crash the system. CVE-2011-1927: A missing route validation issue in ip_expire() could be used by remote attackers to trigger a NULL ptr dereference, crashing parts of the kernel. CVE-2011-1593: Multiple integer overflows in the next_pidmap function in kernel/pid.c in the Linux kernel allowed local users to cause a denial of service (system crash) via a crafted (1) getdents or (2) readdir system call. CVE-2011-1020: The proc filesystem implementation in the Linux kernel did not restrict access to the /proc directory tree of a process after this process performs an exec of a setuid program, which allowed local users to obtain sensitive information or cause a denial of service via open, lseek, read, and write system calls. Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch kernel-4932 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 2.6.37.6]: kernel-debug-2.6.37.6-0.7.1 kernel-debug-base-2.6.37.6-0.7.1 kernel-debug-devel-2.6.37.6-0.7.1 kernel-default-2.6.37.6-0.7.1 kernel-default-base-2.6.37.6-0.7.1 kernel-default-devel-2.6.37.6-0.7.1 kernel-desktop-2.6.37.6-0.7.1 kernel-desktop-base-2.6.37.6-0.7.1 kernel-desktop-devel-2.6.37.6-0.7.1 kernel-ec2-2.6.37.6-0.7.1 kernel-ec2-base-2.6.37.6-0.7.1 kernel-ec2-devel-2.6.37.6-0.7.1 kernel-ec2-extra-2.6.37.6-0.7.1 kernel-syms-2.6.37.6-0.7.1 kernel-trace-2.6.37.6-0.7.1 kernel-trace-base-2.6.37.6-0.7.1 kernel-trace-devel-2.6.37.6-0.7.1 kernel-vanilla-2.6.37.6-0.7.1 kernel-vanilla-base-2.6.37.6-0.7.1 kernel-vanilla-devel-2.6.37.6-0.7.1 kernel-xen-2.6.37.6-0.7.1 kernel-xen-base-2.6.37.6-0.7.1 kernel-xen-devel-2.6.37.6-0.7.1 preload-kmp-default-1.2_k2.6.37.6_0.7-6.7.12 preload-kmp-desktop-1.2_k2.6.37.6_0.7-6.7.12 - openSUSE 11.4 (noarch) [New Version: 2.6.37.6]: kernel-devel-2.6.37.6-0.7.1 kernel-docs-2.6.37.6-0.7.1 kernel-source-2.6.37.6-0.7.1 kernel-source-vanilla-2.6.37.6-0.7.1 - openSUSE 11.4 (i586) [New Version: 2.6.37.6]: kernel-pae-2.6.37.6-0.7.1 kernel-pae-base-2.6.37.6-0.7.1 kernel-pae-devel-2.6.37.6-0.7.1 kernel-vmi-2.6.37.6-0.7.1 kernel-vmi-base-2.6.37.6-0.7.1 kernel-vmi-devel-2.6.37.6-0.7.1 References: http://support.novell.com/security/cve/CVE-2011-1017.html http://support.novell.com/security/cve/CVE-2011-1020.html http://support.novell.com/security/cve/CVE-2011-1479.html http://support.novell.com/security/cve/CVE-2011-1593.html http://support.novell.com/security/cve/CVE-2011-1745.html http://support.novell.com/security/cve/CVE-2011-1927.html http://support.novell.com/security/cve/CVE-2011-2022.html http://support.novell.com/security/cve/CVE-2011-2182.html http://support.novell.com/security/cve/CVE-2011-2484.html http://support.novell.com/security/cve/CVE-2011-2491.html http://support.novell.com/security/cve/CVE-2011-2493.html http://support.novell.com/security/cve/CVE-2011-2495.html http://support.novell.com/security/cve/CVE-2011-2496.html http://support.novell.com/security/cve/CVE-2011-2498.html https://bugzilla.novell.com/584493 https://bugzilla.novell.com/595586 https://bugzilla.novell.com/655693 https://bugzilla.novell.com/661979 https://bugzilla.novell.com/666423 https://bugzilla.novell.com/669889 https://bugzilla.novell.com/672008 https://bugzilla.novell.com/674648 https://bugzilla.novell.com/674982 https://bugzilla.novell.com/677827 https://bugzilla.novell.com/679545 https://bugzilla.novell.com/681826 https://bugzilla.novell.com/681840 https://bugzilla.novell.com/687368 https://bugzilla.novell.com/688432 https://bugzilla.novell.com/689583 https://bugzilla.novell.com/689797 https://bugzilla.novell.com/692497 https://bugzilla.novell.com/692502 https://bugzilla.novell.com/693013 https://bugzilla.novell.com/693043 https://bugzilla.novell.com/693374 https://bugzilla.novell.com/693382 https://bugzilla.novell.com/694498 https://bugzilla.novell.com/697859 https://bugzilla.novell.com/698221 https://bugzilla.novell.com/698247 https://bugzilla.novell.com/699123 https://bugzilla.novell.com/701998 https://bugzilla.novell.com/702013 https://bugzilla.novell.com/702285 https://bugzilla.novell.com/702579 https://bugzilla.novell.com/703155 https://bugzilla.novell.com/704788

1 0

openSUSE-SU-2011:0859-1: moderate: libapr1
by opensuse-security＠opensuse.org 01 Aug '11

01 Aug '11

openSUSE Security Update: libapr1 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0859-1 Rating: moderate References: #653510 #670027 #690734 #693778 Cross-References: CVE-2010-1623 CVE-2011-0419 CVE-2011-1928 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: This update fixes: - CVE-2011-0419 and CVE-2011-1928: unconstrained recursion when processing patterns - CVE-2010-1623: a remote DoS (memory leak) in APR's reqtimeout_filter function Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch apache2-4926 - openSUSE 11.3: zypper in -t patch apache2-4926 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): apache2-2.2.17-4.5.1 apache2-devel-2.2.17-4.5.1 apache2-example-certificates-2.2.17-4.5.1 apache2-example-pages-2.2.17-4.5.1 apache2-itk-2.2.17-4.5.1 apache2-prefork-2.2.17-4.5.1 apache2-utils-2.2.17-4.5.1 apache2-worker-2.2.17-4.5.1 libapr-util1-1.3.9-10.11.1 libapr-util1-dbd-mysql-1.3.9-10.11.1 libapr-util1-dbd-pgsql-1.3.9-10.11.1 libapr-util1-dbd-sqlite3-1.3.9-10.11.1 libapr-util1-devel-1.3.9-10.11.1 libapr1-1.4.2-4.5.1 libapr1-devel-1.4.2-4.5.1 - openSUSE 11.4 (noarch): apache2-doc-2.2.17-4.5.1 - openSUSE 11.3 (i586 x86_64): apache2-2.2.15-4.3.1 apache2-devel-2.2.15-4.3.1 apache2-example-certificates-2.2.15-4.3.1 apache2-example-pages-2.2.15-4.3.1 apache2-itk-2.2.15-4.3.1 apache2-prefork-2.2.15-4.3.1 apache2-utils-2.2.15-4.3.1 apache2-worker-2.2.15-4.3.1 libapr-util1-1.3.9-7.3.1 libapr-util1-dbd-mysql-1.3.9-7.3.1 libapr-util1-dbd-pgsql-1.3.9-7.3.1 libapr-util1-dbd-sqlite3-1.3.9-7.3.1 libapr-util1-devel-1.3.9-7.3.1 libapr1-1.3.8-8.3.1 libapr1-devel-1.3.8-8.3.1 - openSUSE 11.3 (noarch): apache2-doc-2.2.15-4.3.1 References: http://support.novell.com/security/cve/CVE-2010-1623.html http://support.novell.com/security/cve/CVE-2011-0419.html http://support.novell.com/security/cve/CVE-2011-1928.html https://bugzilla.novell.com/653510 https://bugzilla.novell.com/670027 https://bugzilla.novell.com/690734 https://bugzilla.novell.com/693778

1 0

openSUSE-SU-2011:0855-1: moderate: libsndfile: fixing Integer overflow by processing certain PAF files (CVE-2011-2696)
by opensuse-security＠opensuse.org 01 Aug '11

01 Aug '11

openSUSE Security Update: libsndfile: fixing Integer overflow by processing certain PAF files (CVE-2011-2696) ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0855-1 Rating: moderate References: #705681 Cross-References: CVE-2011-2696 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: An integer overflow in libsndfile while processing certain PAF files has been fixed. CVE-2011-2696 has been assigned to this issue. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libsndfile-4900 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libsndfile-1.0.23-3.4.1 libsndfile-devel-1.0.23-3.4.1 - openSUSE 11.4 (x86_64): libsndfile-32bit-1.0.23-3.4.1 References: http://support.novell.com/security/cve/CVE-2011-2696.html https://bugzilla.novell.com/705681

1 0

openSUSE-SU-2011:0854-1: moderate: libsndfile: fixing Integer overflow (CVE-2011-2696) and divide by zero (CVE-2009-4835)
by opensuse-security＠opensuse.org 29 Jul '11

29 Jul '11

openSUSE Security Update: libsndfile: fixing Integer overflow (CVE-2011-2696) and divide by zero (CVE-2009-4835) ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0854-1 Rating: moderate References: #631379 #705681 Cross-References: CVE-2009-4835 CVE-2011-2696 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: An integer overflow in libsndfile while processing certain PAF files has been fixed. CVE-2011-2696 has been assigned to this issue. Additionally an divide by zero (CVE-2009-4835) has been fixed. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch libsndfile-4901 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): libsndfile-1.0.20-8.3.1 libsndfile-devel-1.0.20-8.3.1 - openSUSE 11.3 (x86_64): libsndfile-32bit-1.0.20-8.3.1 References: http://support.novell.com/security/cve/CVE-2009-4835.html http://support.novell.com/security/cve/CVE-2011-2696.html https://bugzilla.novell.com/631379 https://bugzilla.novell.com/705681

1 0

openSUSE-SU-2011:0852-1: important: freetype: Fixed several off-by-one / length checks missing
by opensuse-security＠opensuse.org 27 Jul '11

27 Jul '11

openSUSE Security Update: freetype: Fixed several off-by-one / length checks missing ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0852-1 Rating: important References: #704612 Cross-References: CVE-2011-0226 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This freetype2 update fixes sign extension problems and missing length checks. This issue was used in one of the last jailbreakme exploits for Apple iPhone/iPad products. (CVE-2011-0226) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch freetype2-4915 - openSUSE 11.3: zypper in -t patch freetype2-4915 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): freetype2-devel-2.4.4-7.8.1 libfreetype6-2.4.4-7.8.1 - openSUSE 11.4 (x86_64): freetype2-devel-32bit-2.4.4-7.8.1 libfreetype6-32bit-2.4.4-7.8.1 - openSUSE 11.3 (i586 x86_64): freetype2-devel-2.3.12-7.6.1 libfreetype6-2.3.12-7.6.1 - openSUSE 11.3 (x86_64): freetype2-devel-32bit-2.3.12-7.6.1 libfreetype6-32bit-2.3.12-7.6.1 References: http://support.novell.com/security/cve/CVE-2011-0226.html https://bugzilla.novell.com/704612

1 0

openSUSE-SU-2011:0848-1: moderate: opie
by opensuse-security＠opensuse.org 27 Jul '11

27 Jul '11

openSUSE Security Update: opie ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0848-1 Rating: moderate References: #698772 Cross-References: CVE-2011-2489 CVE-2011-2490 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. It includes one version update. Description: This update fixes off-by-one errors in opiesu (CVE-2011-2489) and missing setuid() return value checks in opielogin (CVE-2011-2490). This update also removes the setuid bit from opiesu program. If you rely on the setuid bit on opiesu, add the following line to /etc/permissions.local: /usr/bin/opiesu root:root 4755 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch opie-4812 - openSUSE 11.3: zypper in -t patch opie-4812 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 2011.03.07.1608]: opie-2.4-711.714.1 permissions-2011.03.07.1608-1.5.1 - openSUSE 11.4 (x86_64): opie-32bit-2.4-711.714.1 - openSUSE 11.3 (i586 x86_64): opie-2.4-706.5.1 permissions-2010.04.23.1140-2.2.1 - openSUSE 11.3 (x86_64): opie-32bit-2.4-706.5.1 References: http://support.novell.com/security/cve/CVE-2011-2489.html http://support.novell.com/security/cve/CVE-2011-2490.html https://bugzilla.novell.com/698772

1 0

openSUSE-RU-2011:0846-1: cronie: run-parts missing in cronie-anacron
by maintenance＠opensuse.org 27 Jul '11

27 Jul '11

openSUSE Recommended Update: cronie: run-parts missing in cronie-anacron ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0846-1 Rating: low References: #689494 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: run-parts was used instead of run-crons in cronie-anacron. Fixed by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch cron-4903 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 1.4.7]: cron-4.2-9.23.1 cronie-1.4.7-9.23.1 cronie-anacron-1.4.7-9.23.1 References: https://bugzilla.novell.com/689494

1 0

openSUSE-SU-2011:0845-1: important: compat-openssl097g
by opensuse-security＠opensuse.org 27 Jul '11

27 Jul '11

openSUSE Security Update: compat-openssl097g ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0845-1 Rating: important References: #707069 Cross-References: CVE-2008-5077 CVE-2009-0590 CVE-2009-0789 CVE-2009-3555 CVE-2010-4180 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update adds openssl patches since 2007 for: - CVE-2008-5077 - CVE-2009-0590 - CVE-2009-0789 - CVE-2009-3555 - CVE-2010-4180 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch compat-openssl097g-4909 - openSUSE 11.3: zypper in -t patch compat-openssl097g-4909 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): compat-openssl097g-0.9.7g-158.159.1 - openSUSE 11.4 (x86_64): compat-openssl097g-32bit-0.9.7g-158.159.1 - openSUSE 11.3 (i586 x86_64): compat-openssl097g-0.9.7g-155.3.1 - openSUSE 11.3 (x86_64): compat-openssl097g-32bit-0.9.7g-155.3.1 References: http://support.novell.com/security/cve/CVE-2008-5077.html http://support.novell.com/security/cve/CVE-2009-0590.html http://support.novell.com/security/cve/CVE-2009-0789.html http://support.novell.com/security/cve/CVE-2009-3555.html http://support.novell.com/security/cve/CVE-2010-4180.html https://bugzilla.novell.com/707069

1 0

openSUSE-RU-2011:0844-1: gimp: Cellspacing in pyslice plugin is broken
by maintenance＠opensuse.org 27 Jul '11

27 Jul '11

openSUSE Recommended Update: gimp: Cellspacing in pyslice plugin is broken ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0844-1 Rating: low References: #698769 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The cellspacing in pyslice plugin is broken. Fixed by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch gimp-4904 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): gimp-2.6.8-7.7.1 gimp-branding-upstream-2.6.8-7.7.1 gimp-devel-2.6.8-7.7.1 gimp-help-browser-2.6.8-7.7.1 gimp-module-hal-2.6.8-7.7.1 gimp-plugins-python-2.6.8-7.7.1 - openSUSE 11.3 (noarch): gimp-lang-2.6.8-7.7.1 References: https://bugzilla.novell.com/698769

1 0

openSUSE-SU-2011:0839-1: moderate: libxml2
by opensuse-security＠opensuse.org 26 Jul '11

26 Jul '11

openSUSE Security Update: libxml2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0839-1 Rating: moderate References: #697372 Cross-References: CVE-2011-1944 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Specially crafted xml files could crash applications using libxml2 (CVE-2011-1944). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libxml2-4811 - openSUSE 11.3: zypper in -t patch libxml2-4811 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libxml2-2.7.8-16.17.1 libxml2-devel-2.7.8-16.17.1 - openSUSE 11.4 (x86_64): libxml2-32bit-2.7.8-16.17.1 libxml2-devel-32bit-2.7.8-16.17.1 - openSUSE 11.4 (noarch): libxml2-doc-2.7.8-16.17.1 - openSUSE 11.3 (i586 x86_64): libxml2-2.7.7-4.7.1 libxml2-devel-2.7.7-4.7.1 - openSUSE 11.3 (x86_64): libxml2-32bit-2.7.7-4.7.1 libxml2-devel-32bit-2.7.7-4.7.1 - openSUSE 11.3 (noarch): libxml2-doc-2.7.7-4.7.1 References: http://support.novell.com/security/cve/CVE-2011-1944.html https://bugzilla.novell.com/697372

1 0

openSUSE-SU-2011:0836-1: moderate: nagios
by opensuse-security＠opensuse.org 25 Jul '11

25 Jul '11

openSUSE Security Update: nagios ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0836-1 Rating: moderate References: #682966 #697895 Cross-References: CVE-2011-1523 CVE-2011-2179 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: statusmap.cgi and config.cgi were prone to cross-site scripting (XSS) vulnerabilities (CVE-2011-1523, CVE-2011-2179). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch nagios-4839 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): nagios-3.2.3-3.4.1 nagios-devel-3.2.3-3.4.1 nagios-www-3.2.3-3.4.1 References: http://support.novell.com/security/cve/CVE-2011-1523.html http://support.novell.com/security/cve/CVE-2011-2179.html https://bugzilla.novell.com/682966 https://bugzilla.novell.com/697895

1 0

openSUSE-SU-2011:0833-1: moderate: nagios
by opensuse-security＠opensuse.org 25 Jul '11

25 Jul '11

openSUSE Security Update: nagios ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0833-1 Rating: moderate References: #682966 Cross-References: CVE-2011-1523 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: statusmap.cgi was prone to a cross-site scripting (XSS) vulnerability (CVE-2011-1523). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch nagios-4838 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): nagios-3.2.1-4.3.1 nagios-devel-3.2.1-4.3.1 nagios-www-3.2.1-4.3.1 References: http://support.novell.com/security/cve/CVE-2011-1523.html https://bugzilla.novell.com/682966

1 0

openSUSE-SU-2011:0829-1: moderate: icedtea-web
by opensuse-security＠opensuse.org 25 Jul '11

25 Jul '11

openSUSE Security Update: icedtea-web ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0829-1 Rating: moderate References: #704309 Cross-References: CVE-2011-2513 CVE-2011-2514 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update of icedtea/icedtea-web fixes two issues: - CVE-2011-2513: CVSS v2 Base Score: 4.3: An information leak allows unsigned Web Start applications to determine the path to the cache directory used to store downloaded class and jar files. - CVE-2011-2514: CVSS v2 Base Score: 5.1 An unsigned Web Start application could manipulate content of the security warning dialog message to show different file name in prompts. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch icedtea-web-4910 - openSUSE 11.3: zypper in -t patch icedtea-web-4910 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): icedtea-web-1.1-0.6.1 - openSUSE 11.4 (noarch): icedtea-web-javadoc-1.1-0.6.1 - openSUSE 11.3 (i586 x86_64): icedtea-web-1.1-0.6.1 - openSUSE 11.3 (noarch): icedtea-web-javadoc-1.1-0.6.1 References: http://support.novell.com/security/cve/CVE-2011-2513.html http://support.novell.com/security/cve/CVE-2011-2514.html https://bugzilla.novell.com/704309

1 0

openSUSE-RU-2011:0813-1: xv: It aborts if a given file name has more than 119 characters
by maintenance＠opensuse.org 19 Jul '11

19 Jul '11

openSUSE Recommended Update: xv: It aborts if a given file name has more than 119 characters ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0813-1 Rating: low References: #704230 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The following bug is fixed by this update: - #704230: xv aborts if a given file name has more than 119 characters Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch xv-4872 - openSUSE 11.3: zypper in -t patch xv-4872 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): xv-3.10a-1276.1277.1 - openSUSE 11.3 (i586 x86_64): xv-3.10a-1279.1271.1 References: https://bugzilla.novell.com/704230

1 0

openSUSE-RU-2011:0812-1: moderate: apcupsd: "/etc/init.d/apcupsd powerdown" doesn't work due a path/test issue
by maintenance＠opensuse.org 19 Jul '11

19 Jul '11

openSUSE Recommended Update: apcupsd: "/etc/init.d/apcupsd powerdown" doesn't work due a path/test issue ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0812-1 Rating: moderate References: #703592 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The following bug is fixed by this update: - #703592: "/etc/init.d/apcupsd powerdown" doesn't work due a path/test issue Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch apcupsd-4879 - openSUSE 11.3: zypper in -t patch apcupsd-4879 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): apcupsd-3.14.6-13.14.1 apcupsd-gui-3.14.6-13.14.1 - openSUSE 11.3 (i586 x86_64): apcupsd-3.14.6-9.3.1 apcupsd-gui-3.14.6-9.3.1 References: https://bugzilla.novell.com/703592

1 0

openSUSE-RU-2011:0811-1: quagga: Fix starting of zebra and ripd
by maintenance＠opensuse.org 19 Jul '11

19 Jul '11

openSUSE Recommended Update: quagga: Fix starting of zebra and ripd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0811-1 Rating: low References: #680499 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: zebro and ripd did not start due to an init script bug. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch quagga-4859 - openSUSE 11.3: zypper in -t patch quagga-4859 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): quagga-0.99.17-4.9.1 quagga-devel-0.99.17-4.9.1 - openSUSE 11.3 (i586 x86_64) [New Version: 0.99.17]: quagga-0.99.17-1.9.1 quagga-devel-0.99.17-1.9.1 References: https://bugzilla.novell.com/680499

1 0

openSUSE-RU-2011:0810-1: alsa: alsasound init script for separated /var partition
by maintenance＠opensuse.org 19 Jul '11

19 Jul '11

openSUSE Recommended Update: alsa: alsasound init script for separated /var partition ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0810-1 Rating: low References: #700781 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the alsasound init script in case /var is stored on a separated partition. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch alsa-4880 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): alsa-1.0.24.1-4.9.1 alsa-devel-1.0.24.1-4.9.1 libasound2-1.0.24.1-4.9.1 - openSUSE 11.4 (x86_64): libasound2-32bit-1.0.24.1-4.9.1 - openSUSE 11.4 (noarch): alsa-docs-1.0.24.1-4.9.1 References: https://bugzilla.novell.com/700781

1 0

openSUSE-RU-2011:0809-1: telnet: Crash if using "-b" option with incorrect argument
by maintenance＠opensuse.org 19 Jul '11

19 Jul '11

openSUSE Recommended Update: telnet: Crash if using "-b" option with incorrect argument ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0809-1 Rating: low References: #700229 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes a telnet crashes or hang if using "-b" option with invalid value (bnc#700229). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch telnet-4881 - openSUSE 11.3: zypper in -t patch telnet-4881 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): telnet-1.2-150.153.1 telnet-server-1.2-150.153.1 - openSUSE 11.3 (i586 x86_64): telnet-1.2-147.5.1 telnet-server-1.2-147.5.1 References: https://bugzilla.novell.com/700229

1 0

openSUSE-RU-2011:0808-1: moderate: udisks: Fixed 'ntfs' support
by maintenance＠opensuse.org 19 Jul '11

19 Jul '11

openSUSE Recommended Update: udisks: Fixed 'ntfs' support ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0808-1 Rating: moderate References: #691077 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This patch fixes a "ntfs" support issue in udisks. - #691077: udisks: 'ntfs' needed in /etc/filesystems because it's not properly white-listed internally Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch udisks-4873 - openSUSE 11.3: zypper in -t patch udisks-4873 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): udisks-1.0.2-3.6.1 udisks-devel-1.0.2-3.6.1 - openSUSE 11.3 (i586 x86_64): udisks-1.0.1-2.5.1 udisks-devel-1.0.1-2.5.1 References: https://bugzilla.novell.com/691077

1 0

openSUSE-SU-2011:0803-1: important: kvm
by opensuse-security＠opensuse.org 19 Jul '11

19 Jul '11

openSUSE Security Update: kvm ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0803-1 Rating: important References: #701161 #702823 Cross-References: CVE-2011-2212 CVE-2011-2512 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. It includes one version update. Description: A privileged guest user could cause a buffer overflow in the virtio subsystem of the host, therefore crashing the guest or potentially execute arbitrary code on the host (CVE-2011-2212, CVE-2011-2512). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch kvm-4863 - openSUSE 11.3: zypper in -t patch kvm-4863 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): kvm-0.14.0.0-1.10.1 - openSUSE 11.3 (i586 x86_64) [New Version: 0.12.5]: kvm-0.12.5-1.8.1 References: http://support.novell.com/security/cve/CVE-2011-2212.html http://support.novell.com/security/cve/CVE-2011-2512.html https://bugzilla.novell.com/701161 https://bugzilla.novell.com/702823

1 0

openSUSE-SU-2011:0800-1: moderate: cyrus-imapd
by opensuse-security＠opensuse.org 18 Jul '11

18 Jul '11

openSUSE Security Update: cyrus-imapd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0800-1 Rating: moderate References: #694247 Cross-References: CVE-2011-1926 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: cyrus-imapd recognized commands before switching to an encrypted channel via STARTTLS. Attackers could potentially exploit that to inject plain text commands (CVE-2011-1926). Special Instructions and Notes: This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch cyrus-imapd-4736 - openSUSE 11.3: zypper in -t patch cyrus-imapd-4736 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): cyrus-imapd-2.3.16-16.17.1 cyrus-imapd-devel-2.3.16-16.17.1 perl-Cyrus-IMAP-2.3.16-16.17.1 perl-Cyrus-SIEVE-managesieve-2.3.16-16.17.1 - openSUSE 11.3 (i586 x86_64): cyrus-imapd-2.3.16-8.5.1 cyrus-imapd-devel-2.3.16-8.5.1 perl-Cyrus-IMAP-2.3.16-8.5.1 perl-Cyrus-SIEVE-managesieve-2.3.16-8.5.1 References: http://support.novell.com/security/cve/CVE-2011-1926.html https://bugzilla.novell.com/694247

1 0

openSUSE-SU-2011:0799-1: moderate: mysql-cluster
by opensuse-security＠opensuse.org 18 Jul '11

18 Jul '11

openSUSE Security Update: mysql-cluster ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0799-1 Rating: moderate References: #676974 Cross-References: CVE-2010-3833 CVE-2010-3834 CVE-2010-3835 CVE-2010-3836 CVE-2010-3837 CVE-2010-3838 CVE-2010-3839 CVE-2010-3840 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: This update fixes the following security issue: - 676974: mysql-cluster: security issues fixed in MySQL 5.1.51 Special Instructions and Notes: This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libmysqlclusterclient16-4837 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libmysqlclusterclient16-7.1.14-0.3.1 libmysqlclusterclient_r16-7.1.14-0.3.1 mysql-cluster-7.1.14-0.3.1 mysql-cluster-bench-7.1.14-0.3.1 mysql-cluster-client-7.1.14-0.3.1 mysql-cluster-debug-7.1.14-0.3.1 mysql-cluster-ndb-extra-7.1.14-0.3.1 mysql-cluster-ndb-management-7.1.14-0.3.1 mysql-cluster-ndb-storage-7.1.14-0.3.1 mysql-cluster-ndb-tools-7.1.14-0.3.1 mysql-cluster-test-7.1.14-0.3.1 mysql-cluster-tools-7.1.14-0.3.1 References: http://support.novell.com/security/cve/CVE-2010-3833.html http://support.novell.com/security/cve/CVE-2010-3834.html http://support.novell.com/security/cve/CVE-2010-3835.html http://support.novell.com/security/cve/CVE-2010-3836.html http://support.novell.com/security/cve/CVE-2010-3837.html http://support.novell.com/security/cve/CVE-2010-3838.html http://support.novell.com/security/cve/CVE-2010-3839.html http://support.novell.com/security/cve/CVE-2010-3840.html https://bugzilla.novell.com/676974

1 0

openSUSE-RU-2011:0798-1: mlterm: Key combinations with Ctrl, Shift or Alt doesn't work with numlock switched on
by maintenance＠opensuse.org 18 Jul '11

18 Jul '11

openSUSE Recommended Update: mlterm: Key combinations with Ctrl, Shift or Alt doesn't work with numlock switched on ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0798-1 Rating: low References: #702512 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The following bug is fixed by this update: - #702512: Key combinations with Ctrl, Shift or Alt doesn't work with numlock switched on Special Instructions and Notes: This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch mlterm-4819 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): mlterm-3.0.1-14.15.1 mlterm-m17n-3.0.1-14.15.1 mlterm-scim-3.0.1-14.15.1 mlterm-uim-3.0.1-14.15.1 References: https://bugzilla.novell.com/702512

1 0

openSUSE-RU-2011:0795-1: important: mdadm: Partitions of raid arrays not handled correctly.
by maintenance＠opensuse.org 18 Jul '11

18 Jul '11

openSUSE Recommended Update: mdadm: Partitions of raid arrays not handled correctly. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0795-1 Rating: important References: #684291 #699667 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: The following bugs are fixed by this update: - #684291: Partitions of raid arrays are not handled correctly. - #699667: Incorrect error message on big-endian machines. Special Instructions and Notes: This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch mdadm-4757 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): mdadm-3.1.4-13.19.1 References: https://bugzilla.novell.com/684291 https://bugzilla.novell.com/699667

1 0

openSUSE-SU-2011:0790-1: moderate: opera: update to 11.50
by opensuse-security＠opensuse.org 18 Jul '11

18 Jul '11

openSUSE Security Update: opera: update to 11.50 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0790-1 Rating: moderate References: #703668 Cross-References: CVE-2011-1337 CVE-2011-2609 CVE-2011-2610 CVE-2011-2611 CVE-2011-2612 CVE-2011-2613 CVE-2011-2614 CVE-2011-2615 CVE-2011-2616 CVE-2011-2617 CVE-2011-2618 CVE-2011-2619 CVE-2011-2620 CVE-2011-2621 CVE-2011-2622 CVE-2011-2623 CVE-2011-2624 CVE-2011-2625 CVE-2011-2626 CVE-2011-2627 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes 20 vulnerabilities is now available. It includes one version update. Description: opera 11.50 has been released, fixing numerous vulnerabilities. The full changelog is available at http://www.opera.com/docs/changelogs/unix/1150/ Special Instructions and Notes: This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch opera-4853 - openSUSE 11.3: zypper in -t patch opera-4860 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 11.50]: opera-11.50-0.3.1 opera-gtk-11.50-0.3.1 opera-kde4-11.50-0.3.1 - openSUSE 11.3 (i586 x86_64) [New Version: 11.50]: opera-11.50-0.2.1 opera-gtk-11.50-0.2.1 opera-kde4-11.50-0.2.1 References: http://support.novell.com/security/cve/CVE-2011-1337.html http://support.novell.com/security/cve/CVE-2011-2609.html http://support.novell.com/security/cve/CVE-2011-2610.html http://support.novell.com/security/cve/CVE-2011-2611.html http://support.novell.com/security/cve/CVE-2011-2612.html http://support.novell.com/security/cve/CVE-2011-2613.html http://support.novell.com/security/cve/CVE-2011-2614.html http://support.novell.com/security/cve/CVE-2011-2615.html http://support.novell.com/security/cve/CVE-2011-2616.html http://support.novell.com/security/cve/CVE-2011-2617.html http://support.novell.com/security/cve/CVE-2011-2618.html http://support.novell.com/security/cve/CVE-2011-2619.html http://support.novell.com/security/cve/CVE-2011-2620.html http://support.novell.com/security/cve/CVE-2011-2621.html http://support.novell.com/security/cve/CVE-2011-2622.html http://support.novell.com/security/cve/CVE-2011-2623.html http://support.novell.com/security/cve/CVE-2011-2624.html http://support.novell.com/security/cve/CVE-2011-2625.html http://support.novell.com/security/cve/CVE-2011-2626.html http://support.novell.com/security/cve/CVE-2011-2627.html https://bugzilla.novell.com/703668

1 0

openSUSE-SU-2011:0788-1: important: bind: fixing remote Denial of Service (CVE-2011-2464)
by opensuse-security＠opensuse.org 18 Jul '11

18 Jul '11

openSUSE Security Update: bind: fixing remote Denial of Service (CVE-2011-2464) ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0788-1 Rating: important References: #703907 Cross-References: CVE-2011-2464 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. It includes one version update. Description: A remote Denial of Service vulnerability has been fixed in bind. Specially crafted packets could cause bind servers (recursive as well as authoritative) to exit. CVE-2011-2464 has been assigned to this issue. Special Instructions and Notes: This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch bind-4843 - openSUSE 11.3: zypper in -t patch bind-4843 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 9.7.3P3]: bind-9.7.3P3-0.2.1 bind-chrootenv-9.7.3P3-0.2.1 bind-devel-9.7.3P3-0.2.1 bind-libs-9.7.3P3-0.2.1 bind-utils-9.7.3P3-0.2.1 - openSUSE 11.4 (x86_64) [New Version: 9.7.3P3]: bind-libs-32bit-9.7.3P3-0.2.1 - openSUSE 11.4 (noarch) [New Version: 9.7.3P3]: bind-doc-9.7.3P3-0.2.1 - openSUSE 11.3 (i586 x86_64) [New Version: 9.7.3P3]: bind-9.7.3P3-0.2.1 bind-chrootenv-9.7.3P3-0.2.1 bind-devel-9.7.3P3-0.2.1 bind-libs-9.7.3P3-0.2.1 bind-utils-9.7.3P3-0.2.1 - openSUSE 11.3 (x86_64) [New Version: 9.7.3P3]: bind-libs-32bit-9.7.3P3-0.2.1 - openSUSE 11.3 (noarch) [New Version: 9.7.3P3]: bind-doc-9.7.3P3-0.2.1 References: http://support.novell.com/security/cve/CVE-2011-2464.html https://bugzilla.novell.com/703907

1 0

openSUSE-RU-2011:0782-1: flash-player: Update to 10.3.181.34
by maintenance＠opensuse.org 18 Jul '11

18 Jul '11

openSUSE Recommended Update: flash-player: Update to 10.3.181.34 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0782-1 Rating: low References: #703618 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: Adobe Flash Player 10.3.181.34 addresses compatibility issues with some content using cross-domain policy files. Special Instructions and Notes: This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch flash-player-4834 - openSUSE 11.3: zypper in -t patch flash-player-4834 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586) [New Version: 10.3.181.34]: flash-player-10.3.181.34-1.2.1 - openSUSE 11.3 (i586) [New Version: 10.3.181.34]: flash-player-10.3.181.34-1.2.1 References: https://bugzilla.novell.com/703618

1 0

openSUSE-RU-2011:0778-1: gnome-packagekit: Update confirmation window will not fit on the screen.
by maintenance＠opensuse.org 18 Jul '11

18 Jul '11

openSUSE Recommended Update: gnome-packagekit: Update confirmation window will not fit on the screen. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0778-1 Rating: low References: #699181 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The following bug is fixed by this update. - Pack the package lists in the dependency dialog into tabs to fit any size of the screen. (bnc#699181) Special Instructions and Notes: This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch gnome-packagekit-4854 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): gnome-packagekit-2.32.0-7.8.1 gnome-packagekit-extras-2.32.0-7.8.1 - openSUSE 11.4 (noarch): gnome-packagekit-lang-2.32.0-7.8.1 References: https://bugzilla.novell.com/699181

1 0

openSUSE-RU-2011:0777-1: apparmor: Various fixes to profiles and userspace programs
by maintenance＠opensuse.org 18 Jul '11

18 Jul '11

openSUSE Recommended Update: apparmor: Various fixes to profiles and userspace programs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0777-1 Rating: low References: #666450 #678749 #679182 #681267 #682909 #682912 #685674 #696553 #701821 #702427 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has 10 recommended fixes can now be installed. Description: The apparmor userspace code and profiles is updated to fix various issues: - Fixed building of pam_apparmor to properly link libpam (bnc#696553). - Fixed building of apache2-mod_apparmor to properly link (bnc#701821). - Added perl-File-Tail dependency for aa-eventd (bnc#666450). - Add raw network access to traceroute profile (bnc#685674). - Updated dovecot profile (bnc#681267). - Changed apparmor-docs and apparmor-profiles back to noarch (bnc#682909 bnc#682912). - Add config files to samba profiles (bnc#666450 bnc#679182). - Added /etc/ethers and /var/run/dnsmasq-forwarders to usr.sbin.dnsmasq (bnc#678749) Special Instructions and Notes: This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch apache2-mod_apparmor-4816 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): apache2-mod_apparmor-2.5.1.r1445-52.59.1 apparmor-parser-2.5.1.r1445-52.59.1 libapparmor-devel-2.5.1.r1445-52.59.1 libapparmor1-2.5.1.r1445-52.59.1 pam_apparmor-2.5.1.r1445-52.59.1 perl-apparmor-2.5.1.r1445-52.59.1 tomcat_apparmor-2.5.1.r1445-52.59.1 - openSUSE 11.4 (x86_64): libapparmor1-32bit-2.5.1.r1445-52.59.1 pam_apparmor-32bit-2.5.1.r1445-52.59.1 - openSUSE 11.4 (noarch): apparmor-docs-2.5.1.r1445-52.59.1 apparmor-profiles-2.5.1.r1445-52.59.1 apparmor-utils-2.5.1.r1445-52.59.1 References: https://bugzilla.novell.com/666450 https://bugzilla.novell.com/678749 https://bugzilla.novell.com/679182 https://bugzilla.novell.com/681267 https://bugzilla.novell.com/682909 https://bugzilla.novell.com/682912 https://bugzilla.novell.com/685674 https://bugzilla.novell.com/696553 https://bugzilla.novell.com/701821 https://bugzilla.novell.com/702427

1 0

openSUSE-SU-2011:0774-1: moderate: mysql-cluster
by opensuse-security＠opensuse.org 18 Jul '11

18 Jul '11

openSUSE Security Update: mysql-cluster ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0774-1 Rating: moderate References: #635645 #676974 Cross-References: CVE-2010-3833 CVE-2010-3834 CVE-2010-3835 CVE-2010-3836 CVE-2010-3837 CVE-2010-3838 CVE-2010-3839 CVE-2010-3840 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. It includes one version update. Description: This update fixes the following security issue: - 676974: mysql-cluster: security issues fixed in MySQL 5.1.51 This update also fixes the following non-security issue: - 635645: mysql init script fails to start when SELinux is enabled Special Instructions and Notes: This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch libmysqlclusterclient16-4844 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 7.0.25]: libmysqlclusterclient16-7.0.25-0.3.1 libmysqlclusterclient_r16-7.0.25-0.3.1 mysql-cluster-7.0.25-0.3.1 mysql-cluster-bench-7.0.25-0.3.1 mysql-cluster-client-7.0.25-0.3.1 mysql-cluster-debug-7.0.25-0.3.1 mysql-cluster-ndb-extra-7.0.25-0.3.1 mysql-cluster-ndb-management-7.0.25-0.3.1 mysql-cluster-ndb-storage-7.0.25-0.3.1 mysql-cluster-ndb-tools-7.0.25-0.3.1 mysql-cluster-test-7.0.25-0.3.1 mysql-cluster-tools-7.0.25-0.3.1 References: http://support.novell.com/security/cve/CVE-2010-3833.html http://support.novell.com/security/cve/CVE-2010-3834.html http://support.novell.com/security/cve/CVE-2010-3835.html http://support.novell.com/security/cve/CVE-2010-3836.html http://support.novell.com/security/cve/CVE-2010-3837.html http://support.novell.com/security/cve/CVE-2010-3838.html http://support.novell.com/security/cve/CVE-2010-3839.html http://support.novell.com/security/cve/CVE-2010-3840.html https://bugzilla.novell.com/635645 https://bugzilla.novell.com/676974

1 0

openSUSE-RU-2011:0765-1: sysvinit: NFS-Server is not starting.
by maintenance＠opensuse.org 18 Jul '11

18 Jul '11

openSUSE Recommended Update: sysvinit: NFS-Server is not starting. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0765-1 Rating: low References: #687547 #700342 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: The following bug is fixed by this update: - #700342: NFS-Server is not started at boot time. It is also not possible to start it manually. Special Instructions and Notes: This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch sysvinit-4842 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): sysvinit-2.88-37.47.1 sysvinit-tools-2.88-37.47.1 References: https://bugzilla.novell.com/687547 https://bugzilla.novell.com/700342

1 0

openSUSE-SU-2011:0762-1: critical: mariadb: Fixed missing innodb support after last update
by opensuse-security＠opensuse.org 18 Jul '11

18 Jul '11

openSUSE Security Update: mariadb: Fixed missing innodb support after last update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0762-1 Rating: critical References: #704811 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that contains security fixes can now be installed. It includes one version update. Description: The last security version upgrade of MariaDB (a MySQL fork) removed innodb support, breaking old databases. This update fixes this problem. - #704811: mariadb "security update" breaks database Special Instructions and Notes: This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libmariadbclient16-4864 - openSUSE 11.3: zypper in -t patch libmariadbclient16-4869 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libmariadbclient16-5.1.55-0.5.1 libmariadbclient_r16-5.1.55-0.5.1 mariadb-5.1.55-0.5.1 mariadb-bench-5.1.55-0.5.1 mariadb-client-5.1.55-0.5.1 mariadb-debug-5.1.55-0.5.1 mariadb-test-5.1.55-0.5.1 mariadb-tools-5.1.55-0.5.1 - openSUSE 11.3 (i586 x86_64) [New Version: 5.1.55]: libmariadbclient16-5.1.55-0.5.1 libmariadbclient_r16-5.1.55-0.5.1 mariadb-5.1.55-0.5.1 mariadb-bench-5.1.55-0.5.1 mariadb-client-5.1.55-0.5.1 mariadb-debug-5.1.55-0.5.1 mariadb-test-5.1.55-0.5.1 mariadb-tools-5.1.55-0.5.1 References: https://bugzilla.novell.com/704811

1 0

openSUSE-RU-2011:0760-1: MozillaFirefox: Version upgrade to 5.0
by maintenance＠opensuse.org 18 Jul '11

18 Jul '11

openSUSE Recommended Update: MozillaFirefox: Version upgrade to 5.0 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0760-1 Rating: low References: #703401 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: The Firefox 5.0 update for openSUSE 11.4 was missing the branding-upstream package, making seamless upgrade harder: bnc#703401: Can't upgrade to Firefox 5.0 Special Instructions and Notes: This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch firefox50-upgrade-4833 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 5.0]: MozillaFirefox-5.0-0.4.1 MozillaFirefox-branding-openSUSE-5.0-2.3.1 MozillaFirefox-branding-upstream-5.0-0.4.1 MozillaFirefox-buildsymbols-5.0-0.4.1 MozillaFirefox-devel-5.0-0.4.1 MozillaFirefox-translations-common-5.0-0.4.1 MozillaFirefox-translations-other-5.0-0.4.1 References: https://bugzilla.novell.com/703401

1 0

openSUSE-RU-2011:0757-1: gnome-panel: No appointments on clock applet
by maintenance＠opensuse.org 18 Jul '11

18 Jul '11

openSUSE Recommended Update: gnome-panel: No appointments on clock applet ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0757-1 Rating: low References: #648940 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Evolution appointments are not shown in the clock applet (bgo633566 also bnc648940). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch gnome-panel-4835 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): gnome-panel-2.32.1-7.12.1 gnome-panel-bonobo-support-2.32.1-7.12.1 gnome-panel-devel-2.32.1-7.12.1 gnome-panel-doc-2.32.1-7.12.1 gnome-panel-extras-2.32.1-7.12.1 libpanel-applet-2-0-2.32.1-7.12.1 libpanel-applet-3-0-2.32.1-7.12.1 - openSUSE 11.4 (x86_64): libpanel-applet-2-0-32bit-2.32.1-7.12.1 libpanel-applet-3-0-32bit-2.32.1-7.12.1 - openSUSE 11.4 (noarch): gnome-panel-lang-2.32.1-7.12.1 References: https://bugzilla.novell.com/648940

1 0

openSUSE-RU-2011:0756-1: net-snmp: Add JFS and XFS to the list of known file systems
by maintenance＠opensuse.org 18 Jul '11

18 Jul '11

openSUSE Recommended Update: net-snmp: Add JFS and XFS to the list of known file systems ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0756-1 Rating: low References: #687327 #702640 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: Update for the net-snmp package to fix the following bug(s): - net-snmp ignores XFS and JFS partitions (bnc#687327, bnc#702640) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libsnmp25-4840 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libsnmp25-5.6.1-4.5.1 net-snmp-5.6.1-4.5.1 net-snmp-devel-5.6.1-4.5.1 perl-SNMP-5.6.1-4.5.1 snmp-mibs-5.6.1-4.5.1 - openSUSE 11.4 (x86_64): libsnmp25-32bit-5.6.1-4.5.1 References: https://bugzilla.novell.com/687327 https://bugzilla.novell.com/702640

1 0

openSUSE-RU-2011:0750-1: open-iscsi: Booting with iSCSI root device fails
by maintenance＠opensuse.org 18 Jul '11

18 Jul '11

openSUSE Recommended Update: open-iscsi: Booting with iSCSI root device fails ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0750-1 Rating: low References: #656119 #683249 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: The following bug is fixed by this update: On restarting iscsid after mounting the root over iSCSI device, it tried to use CHAP authentication even when not auth was required. This was caused by treating "(null)", returned by sysfs for null strings, as a valid password. This terminated the iSCSI connection, thereby rendering the system unusable. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch open-iscsi-4855 - openSUSE 11.3: zypper in -t patch open-iscsi-4855 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): open-iscsi-2.0.870-37.38.1 - openSUSE 11.3 (i586 x86_64): open-iscsi-2.0.870-33.3.1 References: https://bugzilla.novell.com/656119 https://bugzilla.novell.com/683249

1 0

openSUSE-SU-2011:0749-1: moderate: nfs-utils
by opensuse-security＠opensuse.org 18 Jul '11

18 Jul '11

openSUSE Security Update: nfs-utils ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0749-1 Rating: moderate References: #689799 #693189 #701702 Cross-References: CVE-2011-1749 CVE-2011-2500 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update fixes the following security issues: When using wildcards in /etc/exports an attacker could gain unauthorized access to an nfs exported filesystem by creating a DNS record that resolves to the attacker's IP as well as to a trusted IP (CVE-2011-2500). mount.nfs could corrupt /etc/mtab (CVE-2011-1749). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch nfs-client-4831 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): nfs-client-1.2.3-11.16.1 nfs-doc-1.2.3-11.16.1 nfs-kernel-server-1.2.3-11.16.1 References: http://support.novell.com/security/cve/CVE-2011-1749.html http://support.novell.com/security/cve/CVE-2011-2500.html https://bugzilla.novell.com/689799 https://bugzilla.novell.com/693189 https://bugzilla.novell.com/701702

1 0

openSUSE-RU-2011:0748-1: open-iscsi: Booting with iSCSI root device fails
by maintenance＠opensuse.org 18 Jul '11

18 Jul '11

openSUSE Recommended Update: open-iscsi: Booting with iSCSI root device fails ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0748-1 Rating: low References: #656119 #683249 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: The following bug is fixed by this update: On restarting iscsid after mounting the root over iSCSI device, it tried to use CHAP authentication even when not auth was required. This was caused by treating "(null)", returned by sysfs for null strings, as a valid password. This terminated the iSCSI connection, thereby rendering the system unusable. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch open-iscsi-4855 - openSUSE 11.3: zypper in -t patch open-iscsi-4855 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): open-iscsi-2.0.870-37.38.1 - openSUSE 11.3 (i586 x86_64): open-iscsi-2.0.870-33.3.1 References: https://bugzilla.novell.com/656119 https://bugzilla.novell.com/683249

1 0

openSUSE-SU-2011:0747-1: moderate: nfs-utils
by opensuse-security＠opensuse.org 18 Jul '11

18 Jul '11

openSUSE Security Update: nfs-utils ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0747-1 Rating: moderate References: #689799 #693189 #701702 Cross-References: CVE-2011-1749 CVE-2011-2500 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update fixes the following security issues: When using wildcards in /etc/exports an attacker could gain unauthorized access to an nfs exported filesystem by creating a DNS record that resolves to the attacker's IP as well as to a trusted IP (CVE-2011-2500). mount.nfs could corrupt /etc/mtab (CVE-2011-1749). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch nfs-client-4831 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): nfs-client-1.2.3-11.16.1 nfs-doc-1.2.3-11.16.1 nfs-kernel-server-1.2.3-11.16.1 References: http://support.novell.com/security/cve/CVE-2011-1749.html http://support.novell.com/security/cve/CVE-2011-2500.html https://bugzilla.novell.com/689799 https://bugzilla.novell.com/693189 https://bugzilla.novell.com/701702

1 0

openSUSE-SU-2011:0743-1: moderate: MariaDB
by opensuse-security＠opensuse.org 06 Jul '11

06 Jul '11

openSUSE Security Update: MariaDB ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0743-1 Rating: moderate References: #676973 Cross-References: CVE-2010-3833 CVE-2010-3834 CVE-2010-3835 CVE-2010-3836 CVE-2010-3837 CVE-2010-3838 CVE-2010-3839 CVE-2010-3840 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. It includes one version update. Description: MariaDB was updated to version 5.1.55 to fix numerous bugs and security issues. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libmariadbclient16-4830 - openSUSE 11.3: zypper in -t patch libmariadbclient16-4830 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libmariadbclient16-5.1.55-0.3.1 libmariadbclient_r16-5.1.55-0.3.1 mariadb-5.1.55-0.3.1 mariadb-bench-5.1.55-0.3.1 mariadb-client-5.1.55-0.3.1 mariadb-debug-5.1.55-0.3.1 mariadb-test-5.1.55-0.3.1 mariadb-tools-5.1.55-0.3.1 - openSUSE 11.3 (i586 x86_64) [New Version: 5.1.55]: libmariadbclient16-5.1.55-0.3.1 libmariadbclient_r16-5.1.55-0.3.1 mariadb-5.1.55-0.3.1 mariadb-bench-5.1.55-0.3.1 mariadb-client-5.1.55-0.3.1 mariadb-debug-5.1.55-0.3.1 mariadb-test-5.1.55-0.3.1 mariadb-tools-5.1.55-0.3.1 References: http://support.novell.com/security/cve/CVE-2010-3833.html http://support.novell.com/security/cve/CVE-2010-3834.html http://support.novell.com/security/cve/CVE-2010-3835.html http://support.novell.com/security/cve/CVE-2010-3836.html http://support.novell.com/security/cve/CVE-2010-3837.html http://support.novell.com/security/cve/CVE-2010-3838.html http://support.novell.com/security/cve/CVE-2010-3839.html http://support.novell.com/security/cve/CVE-2010-3840.html https://bugzilla.novell.com/676973

1 0

openSUSE-RU-2011:0742-1: critical: icedtea-web: Fix undefined symbol warning in icedtea-web
by maintenance＠opensuse.org 06 Jul '11

06 Jul '11

openSUSE Recommended Update: icedtea-web: Fix undefined symbol warning in icedtea-web ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0742-1 Rating: critical References: #702825 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Fix symbol clash with moonlight (bnc#702825) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch icedtea-web-4832 - openSUSE 11.3: zypper in -t patch icedtea-web-4832 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): icedtea-web-1.1-0.4.2 - openSUSE 11.4 (noarch): icedtea-web-javadoc-1.1-0.4.2 - openSUSE 11.3 (i586 x86_64): icedtea-web-1.1-0.4.2 - openSUSE 11.3 (noarch): icedtea-web-javadoc-1.1-0.4.2 References: https://bugzilla.novell.com/702825

1 0

openSUSE-RU-2011:0739-1: moderate: pure-ftpd: It fails with pam authentication
by maintenance＠opensuse.org 05 Jul '11

05 Jul '11

openSUSE Recommended Update: pure-ftpd: It fails with pam authentication ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0739-1 Rating: moderate References: #700611 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update adds the missing CAP_AUDIT_WRITE capability needed for the successful pam authentication on openSUSE. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch pure-ftpd-4803 - openSUSE 11.3: zypper in -t patch pure-ftpd-4803 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): pure-ftpd-1.0.29-8.11.1 - openSUSE 11.3 (i586 x86_64): pure-ftpd-1.0.29-2.5.1 References: https://bugzilla.novell.com/700611

1 0

openSUSE-RU-2011:0738-1: xtables-addon: Update to 1.37 to fix ipset working with current kernel
by maintenance＠opensuse.org 04 Jul '11

04 Jul '11

openSUSE Recommended Update: xtables-addon: Update to 1.37 to fix ipset working with current kernel ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0738-1 Rating: low References: #690922 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: xtables-addon was updated to release 1.37, making it work with the 11.4 included kernel. - update to new upstream release 1.37 * xt_SYSRQ: make IPv6 trigger work again * xt_SYSRQ: improve security: include host address in digest * xt_TARPIT: fix a kernel oops in --reset mode - update to new upstream release 1.36 * update to ipset 6.7 * xt_TARPIT has gained the "honeypot" and "reset" modes - Update to new upstream release 1.35 * update to ipset 6.3 * ipset-genl: handle EAGAIN return value emitted from autoloader * ipset-genl: resolve nfgenmsg remains and fix spurious protocol abort - Update to new upstream release 1.34 * xt_pknock: avoid crash when hash TFM could not be allocated * xt_pknock: avoid inversion of rule lookup that led to warnings * xt_DNETMAP: add missing module alias * xt_DNETMAP: support for kernels below 2.6.34 - Add kmp preamble file and to fix specifically: - #690922: ipset error Cannot open session to kernel Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch xtables-addons-4784 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): xtables-addons-1.37-0.3.1 xtables-addons-kmp-default-1.37_k2.6.37.6_0.5-0.3.1 xtables-addons-kmp-desktop-1.37_k2.6.37.6_0.5-0.3.1 xtables-addons-kmp-xen-1.37_k2.6.37.6_0.5-0.3.1 - openSUSE 11.4 (i586): xtables-addons-kmp-pae-1.37_k2.6.37.6_0.5-0.3.1 References: https://bugzilla.novell.com/690922

1 0

openSUSE-RU-2011:0736-1: moderate: sysconfig: various fixes
by maintenance＠opensuse.org 01 Jul '11

01 Jul '11

openSUSE Recommended Update: sysconfig: various fixes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0736-1 Rating: moderate References: #648830 #670871 #698478 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This collective update for sysconfig provides the following fixes: - Added WIRELESS_AUTH_MODE='no-encryption' option handling to ifup-wireless, because YaST sets it (bnc#648830). - Fixed get_depending_ifaces to not return bonding slaves by default as it is not required to stop the slaves before the bonding master goes down and in fact it may cause a system hang, when the slaves are infiniband child interfaces, that are deleted while ifdown (bnc#698478). - Fixed to use 600 mode in spec attr for ifcfg-lo to avoid that rpm -V report it as modified because of the chmod added to the post-install script in bnc#670871. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch sysconfig-4827 - openSUSE 11.3: zypper in -t patch sysconfig-4827 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): sysconfig-0.74.5-6.7.1 - openSUSE 11.3 (i586 x86_64): sysconfig-0.73.7-2.9.1 References: https://bugzilla.novell.com/648830 https://bugzilla.novell.com/670871 https://bugzilla.novell.com/698478

1 0

openSUSE-SU-2011:0734-1: moderate: tftp
by opensuse-security＠opensuse.org 01 Jul '11

01 Jul '11

openSUSE Security Update: tftp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0734-1 Rating: moderate References: #699714 Cross-References: CVE-2011-2199 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Malicious clients could overflow a buffer in tftpd by specifying a large value for the utimeout option (CVE-2011-2199). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch tftp-4783 - openSUSE 11.3: zypper in -t patch tftp-4783 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): tftp-5.0-113.114.1 - openSUSE 11.3 (i586 x86_64): tftp-0.48-108.3.1 References: http://support.novell.com/security/cve/CVE-2011-2199.html https://bugzilla.novell.com/699714

1 0

openSUSE-SU-2011:0724-1: important: MozillaThunderbird: Update to Thunderbird 3.1.11
by opensuse-security＠opensuse.org 30 Jun '11

30 Jun '11

openSUSE Security Update: MozillaThunderbird: Update to Thunderbird 3.1.11 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0724-1 Rating: important References: #701296 Cross-References: CVE-2011-0083 CVE-2011-0085 CVE-2011-2362 CVE-2011-2363 CVE-2011-2364 CVE-2011-2365 CVE-2011-2371 CVE-2011-2373 CVE-2011-2374 CVE-2011-2376 CVE-2011-2377 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes 11 vulnerabilities is now available. It includes 5 new package versions. Description: Mozilla Thunderbird was updated to the 3.1.11 release. It has new features, fixes lots of bugs, and also fixes the following security issues: * MFSA 2011-19/CVE-2011-2374 CVE-2011-2376 CVE-2011-2364 CVE-2011-2365 Miscellaneous memory safety hazards * MFSA 2011-20/CVE-2011-2373 (bmo#617247) Use-after-free vulnerability when viewing XUL document with script disabled * MFSA 2011-21/CVE-2011-2377 (bmo#638018, bmo#639303) Memory corruption due to multipart/x-mixed-replace images * MFSA 2011-22/CVE-2011-2371 (bmo#664009) Integer overflow and arbitrary code execution in Array.reduceRight() * MFSA 2011-23/CVE-2011-0083 CVE-2011-0085 CVE-2011-2363 Multiple dangling pointer vulnerabilities * MFSA 2011-24/CVE-2011-2362 (bmo#616264) Cookie isolation error Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch MozillaThunderbird-4800 firefox50-upgrade-4806 mozilla-js192-4771 - openSUSE 11.3: zypper in -t patch MozillaFirefox-4761 MozillaThunderbird-4800 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 1.9.2.18,3.1.11 and 5.0]: MozillaFirefox-5.0-0.2.1 MozillaFirefox-branding-openSUSE-5.0-2.3.1 MozillaFirefox-buildsymbols-5.0-0.2.1 MozillaFirefox-devel-5.0-0.2.1 MozillaFirefox-translations-common-5.0-0.2.1 MozillaFirefox-translations-other-5.0-0.2.1 MozillaThunderbird-3.1.11-0.7.1 MozillaThunderbird-buildsymbols-3.1.11-0.7.1 MozillaThunderbird-devel-3.1.11-0.7.1 MozillaThunderbird-translations-common-3.1.11-0.7.1 MozillaThunderbird-translations-other-3.1.11-0.7.1 enigmail-1.1.2-9.7.1 mozilla-js192-1.9.2.18-1.2.1 mozilla-xulrunner192-1.9.2.18-1.2.1 mozilla-xulrunner192-buildsymbols-1.9.2.18-1.2.1 mozilla-xulrunner192-devel-1.9.2.18-1.2.1 mozilla-xulrunner192-gnome-1.9.2.18-1.2.1 mozilla-xulrunner192-translations-common-1.9.2.18-1.2.1 mozilla-xulrunner192-translations-other-1.9.2.18-1.2.1 - openSUSE 11.4 (x86_64) [New Version: 1.9.2.18]: mozilla-js192-32bit-1.9.2.18-1.2.1 mozilla-xulrunner192-32bit-1.9.2.18-1.2.1 mozilla-xulrunner192-gnome-32bit-1.9.2.18-1.2.1 mozilla-xulrunner192-translations-common-32bit-1.9.2.18-1.2.1 mozilla-xulrunner192-translations-other-32bit-1.9.2.18-1.2.1 - openSUSE 11.3 (i586 x86_64) [New Version: 1.1.2,1.9.2.18,3.1.11 and 3.6.18]: MozillaFirefox-3.6.18-0.2.1 MozillaFirefox-branding-upstream-3.6.18-0.2.1 MozillaFirefox-translations-common-3.6.18-0.2.1 MozillaFirefox-translations-other-3.6.18-0.2.1 MozillaThunderbird-3.1.11-0.11.1 MozillaThunderbird-devel-3.1.11-0.11.1 MozillaThunderbird-translations-common-3.1.11-0.11.1 MozillaThunderbird-translations-other-3.1.11-0.11.1 enigmail-1.1.2-9.11.1 mozilla-js192-1.9.2.18-1.2.1 mozilla-xulrunner192-1.9.2.18-1.2.1 mozilla-xulrunner192-buildsymbols-1.9.2.18-1.2.1 mozilla-xulrunner192-devel-1.9.2.18-1.2.1 mozilla-xulrunner192-gnome-1.9.2.18-1.2.1 mozilla-xulrunner192-translations-common-1.9.2.18-1.2.1 mozilla-xulrunner192-translations-other-1.9.2.18-1.2.1 - openSUSE 11.3 (x86_64) [New Version: 1.9.2.18]: mozilla-js192-32bit-1.9.2.18-1.2.1 mozilla-xulrunner192-32bit-1.9.2.18-1.2.1 mozilla-xulrunner192-gnome-32bit-1.9.2.18-1.2.1 mozilla-xulrunner192-translations-common-32bit-1.9.2.18-1.2.1 mozilla-xulrunner192-translations-other-32bit-1.9.2.18-1.2.1 References: http://support.novell.com/security/cve/CVE-2011-0083.html http://support.novell.com/security/cve/CVE-2011-0085.html http://support.novell.com/security/cve/CVE-2011-2362.html http://support.novell.com/security/cve/CVE-2011-2363.html http://support.novell.com/security/cve/CVE-2011-2364.html http://support.novell.com/security/cve/CVE-2011-2365.html http://support.novell.com/security/cve/CVE-2011-2371.html http://support.novell.com/security/cve/CVE-2011-2373.html http://support.novell.com/security/cve/CVE-2011-2374.html http://support.novell.com/security/cve/CVE-2011-2376.html http://support.novell.com/security/cve/CVE-2011-2377.html https://bugzilla.novell.com/701296

1 0

openSUSE-RU-2011:0723-1: libopenraw: Nautilus crashes if folder contains Olympus raw (.orf) files
by maintenance＠opensuse.org 30 Jun '11

30 Jun '11

openSUSE Recommended Update: libopenraw: Nautilus crashes if folder contains Olympus raw (.orf) files ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0723-1 Rating: low References: #561232 #699678 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: The following bugs are fixed by this update: - bnc#561232: Fix nautilus crash when browsing the folder contains Olympus raw (.orf) files - bnc#699678: Load and decompress Olympus raw files to generate thumbnails Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch gdk-pixbuf-loader-libopenraw-4724 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): gdk-pixbuf-loader-libopenraw-0.0.8-11.12.1 libopenraw-devel-0.0.8-11.12.1 libopenraw1-0.0.8-11.12.1 - openSUSE 11.4 (x86_64): gdk-pixbuf-loader-libopenraw-32bit-0.0.8-11.12.1 libopenraw1-32bit-0.0.8-11.12.1 References: https://bugzilla.novell.com/561232 https://bugzilla.novell.com/699678

1 0

openSUSE-RU-2011:0722-1: yast2-network: linux-atm-lib doesn't exist anymore
by maintenance＠opensuse.org 30 Jun '11

30 Jun '11

openSUSE Recommended Update: yast2-network: linux-atm-lib doesn't exist anymore ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0722-1 Rating: low References: #655571 #668586 #675844 #694283 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. It includes one version update. Description: The DSL module wrongly required linux-atm-lib after the package had been renamed to libatm1.rpm (bnc#668586). WebYaST: also update /etc/hosts, for hostname -f (bnc#694283#c8). AutoYaST: networking/start_immediately was ignored (bnc#655571, bnc#675844). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch yast2-network-4773 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 2.20.12]: yast2-network-2.20.12-0.3.1 yast2-network-devel-doc-2.20.12-0.3.1 References: https://bugzilla.novell.com/655571 https://bugzilla.novell.com/668586 https://bugzilla.novell.com/675844 https://bugzilla.novell.com/694283

1 0

openSUSE-RU-2011:0721-1: moderate: xfig: Fails to load second eps file
by maintenance＠opensuse.org 30 Jun '11

30 Jun '11

openSUSE Recommended Update: xfig: Fails to load second eps file ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0721-1 Rating: moderate References: #696368 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: xfig fails to load the second eps file. Fixed by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch xfig-4727 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): xfig-3.2.5b-14.15.1 References: https://bugzilla.novell.com/696368

1 0

openSUSE-RU-2011:0720-1: nut-classic: This update fixes a UPS control problem during hibernation
by maintenance＠opensuse.org 30 Jun '11

30 Jun '11

openSUSE Recommended Update: nut-classic: This update fixes a UPS control problem during hibernation ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0720-1 Rating: low References: #660236 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The following bug is fixed by this update: Command order in /usr/lib/pm-utils/sleep.d/99nut is wrong, which may let system off when power is back or cause nut failures after resume. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch nut-classic-4737 - openSUSE 11.3: zypper in -t patch nut-classic-4737 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): nut-classic-2.6.0-4.5.1 - openSUSE 11.3 (i586 x86_64): nut-classic-2.4.1-6.3.1 References: https://bugzilla.novell.com/660236

1 0

openSUSE-RU-2011:0714-1: libslab: Fix segfault starting yast2
by maintenance＠opensuse.org 30 Jun '11

30 Jun '11

openSUSE Recommended Update: libslab: Fix segfault starting yast2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0714-1 Rating: low References: #650196 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes a yast2 segfault when starting yast2 in the locales cs_CZ, hu_HU and tr_TR (bnc#650196) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libslab-4675 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libslab-devel-2.30.0-12.3.1 libslab0-2.30.0-12.3.1 - openSUSE 11.4 (noarch): libslab-lang-2.30.0-12.3.1 References: https://bugzilla.novell.com/650196

1 0

openSUSE-RU-2011:0713-1: coreutils: 'cp -al' does not preserve timestamps of symlinks
by maintenance＠opensuse.org 29 Jun '11

29 Jun '11

openSUSE Recommended Update: coreutils: 'cp -al' does not preserve timestamps of symlinks ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0713-1 Rating: low References: #696389 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: cp -a --link would not create a hardlink to a symlink, instead copying the symlink and then not preserving its timestamp. Bug introduced in coreutils-8.0. Fixed by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch coreutils-4777 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): coreutils-8.9-7.1 - openSUSE 11.4 (noarch): coreutils-lang-8.9-7.1 References: https://bugzilla.novell.com/696389

1 0

openSUSE-RU-2011:0709-1: lensfun: Crash in lensfun 0.2.5
by maintenance＠opensuse.org 28 Jun '11

28 Jun '11

openSUSE Recommended Update: lensfun: Crash in lensfun 0.2.5 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0709-1 Rating: low References: #699568 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: lensfun 0.2.5 was crashing on some hardware, when lens correction are being applied on photo taken with a lens in lensfun camera database (when using either ufraw, darktable or digikam). It could also crash when incorrect lens database was used. This update fixes this issue. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch lensfun-4759 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): lensfun-0.2.5-8.9.1 lensfun-devel-0.2.5-8.9.1 lensfun-doc-0.2.5-8.9.1 liblensfun0-0.2.5-8.9.1 References: https://bugzilla.novell.com/699568

1 0

openSUSE-SU-2011:0706-1: important: java-1_6_0-openjdk
by opensuse-security＠opensuse.org 28 Jun '11

28 Jun '11

openSUSE Security Update: java-1_6_0-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0706-1 Rating: important References: #596177 #698739 Cross-References: CVE-2011-0815 CVE-2011-0822 CVE-2011-0862 CVE-2011-0864 CVE-2011-0865 CVE-2011-0867 CVE-2011-0868 CVE-2011-0869 CVE-2011-0870 CVE-2011-0871 CVE-2011-0872 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes 11 vulnerabilities is now available. Description: Icedtea as included in java-1_6_0-openjdk was updated to fix several security issues: * S6213702, CVE-2011-0872: (so) non-blocking sockets with TCP urgent disabled get still selected for read ops (win) * S6618658, CVE-2011-0865: Vulnerability in deserialization * S7012520, CVE-2011-0815: Heap overflow vulnerability in FileDialog.show() * S7013519, CVE-2011-0822, CVE-2011-0862: Integer overflows in 2D code * S7013969, CVE-2011-0867: NetworkInterface.toString can reveal bindings * S7013971, CVE-2011-0869: Vulnerability in SAAJ * S7016340, CVE-2011-0870: Vulnerability in SAAJ * S7016495, CVE-2011-0868: Crash in Java 2D transforming an image with scale close to zero * S7020198, CVE-2011-0871: ImageIcon creates Component with null acc * S7020373, CVE-2011-0864: JSR rewriting can overflow memory address size Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch icedtea-web-4788 - openSUSE 11.3: zypper in -t patch icedtea-web-4788 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): icedtea-web-1.1-0.2.1 java-1_6_0-openjdk-1.6.0.0_b22.1.10.2-4.3.1 java-1_6_0-openjdk-devel-1.6.0.0_b22.1.10.2-4.3.1 - openSUSE 11.4 (noarch): icedtea-web-javadoc-1.1-0.2.1 java-1_6_0-openjdk-demo-1.6.0.0_b22.1.10.2-4.3.1 java-1_6_0-openjdk-javadoc-1.6.0.0_b22.1.10.2-4.3.1 java-1_6_0-openjdk-src-1.6.0.0_b22.1.10.2-4.3.1 - openSUSE 11.3 (i586 x86_64): icedtea-web-1.1-0.2.1 java-1_6_0-openjdk-1.6.0.0_b22.1.10.2-4.2.1 java-1_6_0-openjdk-devel-1.6.0.0_b22.1.10.2-4.2.1 - openSUSE 11.3 (noarch): icedtea-web-javadoc-1.1-0.2.1 java-1_6_0-openjdk-demo-1.6.0.0_b22.1.10.2-4.2.1 java-1_6_0-openjdk-javadoc-1.6.0.0_b22.1.10.2-4.2.1 java-1_6_0-openjdk-src-1.6.0.0_b22.1.10.2-4.2.1 References: http://support.novell.com/security/cve/CVE-2011-0815.html http://support.novell.com/security/cve/CVE-2011-0822.html http://support.novell.com/security/cve/CVE-2011-0862.html http://support.novell.com/security/cve/CVE-2011-0864.html http://support.novell.com/security/cve/CVE-2011-0865.html http://support.novell.com/security/cve/CVE-2011-0867.html http://support.novell.com/security/cve/CVE-2011-0868.html http://support.novell.com/security/cve/CVE-2011-0869.html http://support.novell.com/security/cve/CVE-2011-0870.html http://support.novell.com/security/cve/CVE-2011-0871.html http://support.novell.com/security/cve/CVE-2011-0872.html https://bugzilla.novell.com/596177 https://bugzilla.novell.com/698739

1 0