- openSUSE Updates

openSUSE-SU-2010:0627-1 (low): rpm: Fix security problem where we miss to clear the SUID/SGID bits during package updates.
by opensuse-security＠opensuse.org 16 Sep '10

16 Sep '10

openSUSE Security Update: rpm: Fix security problem where we miss to clear the SUID/SGID bits during package updates. ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0627-1 Rating: low References: #536256 #558475 #572280 #610941 Cross-References: CVE-2010-2059 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that solves one vulnerability and has three fixes is now available. Description: This update fixes the problem where RPM misses to clear the SUID/SGID bit of old files during package updates. (CVE-2010-2059) Also following bugs were fixed: - backport nosource/nopatch srpm tag generation fix - backport spurious tar message fix [bnc#558475] - do not use glibc for passwd/group lookups when --root is used [bnc#536256] - disable cpio md5 checking for repackaged rpms [bnc#572280] - fix endless loop when rpm database lock fails Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch rpm-2528 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 x86_64): rpm-4.7.1-6.8.1 rpm-devel-4.7.1-6.8.1 - openSUSE 11.2 (x86_64): rpm-32bit-4.7.1-6.8.1 References: http://support.novell.com/security/cve/CVE-2010-2059.html https://bugzilla.novell.com/536256 https://bugzilla.novell.com/558475 https://bugzilla.novell.com/572280 https://bugzilla.novell.com/610941

1 0

openSUSE-SU-2010:0625-1 (important): libvirt security update
by opensuse-security＠opensuse.org 16 Sep '10

16 Sep '10

openSUSE Security Update: libvirt security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0625-1 Rating: important References: #618155 #619991 Cross-References: CVE-2010-2237 CVE-2010-2238 CVE-2010-2239 CVE-2010-2242 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: libvirt did not properly handle configured disk formats which potenially allowed users to read arbitrary files (CVE-2010-2237, CVE-2010-2238, CVE-2010-2239) Improperly mapped source privileged ports in guests may allow obtaining privileged resources on the host (CVE-2010-2242). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch libvirt-2903 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): libvirt-0.8.1-4.2.1 libvirt-client-0.8.1-4.2.1 libvirt-devel-0.8.1-4.2.1 libvirt-doc-0.8.1-4.2.1 libvirt-python-0.8.1-4.2.1 References: http://support.novell.com/security/cve/CVE-2010-2237.html http://support.novell.com/security/cve/CVE-2010-2238.html http://support.novell.com/security/cve/CVE-2010-2239.html http://support.novell.com/security/cve/CVE-2010-2242.html https://bugzilla.novell.com/618155 https://bugzilla.novell.com/619991

1 0

openSUSE-SU-2010:0621-1 (important): VUL-0: multiple issues in libvirt
by opensuse-security＠opensuse.org 16 Sep '10

16 Sep '10

openSUSE Security Update: VUL-0: multiple issues in libvirt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0621-1 Rating: important References: #618155 Cross-References: CVE-2010-2242 Affected Products: openSUSE 11.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Improperly mapped source privileged ports in guests may allow obtaining privileged resources on the host (CVE-2010-2242). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.1: zypper in -t patch libvirt-2783 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.1 (i586 ppc x86_64): libvirt-0.4.6-11.17.1 libvirt-devel-0.4.6-11.17.1 libvirt-doc-0.4.6-11.17.1 libvirt-python-0.4.6-11.17.1 References: http://support.novell.com/security/cve/CVE-2010-2242.html https://bugzilla.novell.com/618155

1 0

openSUSE-SU-2010:0620-1 (important): libvirt: security fix for multiple issues
by opensuse-security＠opensuse.org 16 Sep '10

16 Sep '10

openSUSE Security Update: libvirt: security fix for multiple issues ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0620-1 Rating: important References: #618155 Cross-References: CVE-2010-2237 CVE-2010-2238 CVE-2010-2239 CVE-2010-2242 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: libvirt did not properly handle configured disk formats which potenially allowed users to read arbitrary files (CVE-2010-2237, CVE-2010-2238, CVE-2010-2239) Improperly mapped source privileged ports in guests may allow obtaining privileged resources on the host (CVE-2010-2242). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch libvirt-2892 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 x86_64): libvirt-0.7.2-1.1.3.5 libvirt-devel-0.7.2-1.1.3.5 libvirt-doc-0.7.2-1.1.3.5 libvirt-python-0.7.2-1.1.3.5 References: http://support.novell.com/security/cve/CVE-2010-2237.html http://support.novell.com/security/cve/CVE-2010-2238.html http://support.novell.com/security/cve/CVE-2010-2239.html http://support.novell.com/security/cve/CVE-2010-2242.html https://bugzilla.novell.com/618155

1 0

openSUSE-SU-2010:0619-1 (important): libtiff security update
by opensuse-security＠opensuse.org 16 Sep '10

16 Sep '10

openSUSE Security Update: libtiff security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0619-1 Rating: important References: #624215 Cross-References: CVE-2010-3087 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: specially crafted tiff files could cause a memory corruption in libtiff. Attackers could potentially exploit that to execute arbitrary code in applications that use libtiff for processing tiff files (CVE-2010-3087). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch libtiff-devel-3117 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): libtiff-devel-3.9.2-5.2.1 libtiff3-3.9.2-5.2.1 tiff-3.9.2-5.2.1 - openSUSE 11.3 (x86_64): libtiff-devel-32bit-3.9.2-5.2.1 libtiff3-32bit-3.9.2-5.2.1 References: http://support.novell.com/security/cve/CVE-2010-3087.html https://bugzilla.novell.com/624215

1 0

openSUSE-SU-2010:0616-1 (moderate): tomcat security update
by opensuse-security＠opensuse.org 15 Sep '10

15 Sep '10

openSUSE Security Update: tomcat security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0616-1 Rating: moderate References: #622188 Cross-References: CVE-2010-1157 CVE-2010-2227 Affected Products: openSUSE 11.3 openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update of tomcat fixes denial of service and information disclosure vulnerabilities which could potentially be exploited by remote attackers to crash tomcat or to obtain sensitive information (CVE-2010-2227, CVE-2010-1157). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch tomcat6-2739 - openSUSE 11.2: zypper in -t patch tomcat6-2739 - openSUSE 11.1: zypper in -t patch tomcat6-2739 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (noarch): tomcat6-6.0.24-5.1.1 tomcat6-admin-webapps-6.0.24-5.1.1 tomcat6-docs-webapp-6.0.24-5.1.1 tomcat6-el-1_0-api-6.0.24-5.1.1 tomcat6-javadoc-6.0.24-5.1.1 tomcat6-jsp-2_1-api-6.0.24-5.1.1 tomcat6-lib-6.0.24-5.1.1 tomcat6-servlet-2_5-api-6.0.24-5.1.1 tomcat6-webapps-6.0.24-5.1.1 - openSUSE 11.2 (noarch): tomcat6-6.0.20-24.7.1 tomcat6-admin-webapps-6.0.20-24.7.1 tomcat6-docs-webapp-6.0.20-24.7.1 tomcat6-javadoc-6.0.20-24.7.1 tomcat6-jsp-2_1-api-6.0.20-24.7.1 tomcat6-lib-6.0.20-24.7.1 tomcat6-servlet-2_5-api-6.0.20-24.7.1 tomcat6-webapps-6.0.20-24.7.1 - openSUSE 11.1 (noarch): tomcat6-6.0.18-16.4.1 tomcat6-admin-webapps-6.0.18-16.4.1 tomcat6-docs-webapp-6.0.18-16.4.1 tomcat6-javadoc-6.0.18-16.4.1 tomcat6-jsp-2_1-api-6.0.18-16.4.1 tomcat6-lib-6.0.18-16.4.1 tomcat6-servlet-2_5-api-6.0.18-16.4.1 tomcat6-webapps-6.0.18-16.4.1 References: http://support.novell.com/security/cve/CVE-2010-1157.html http://support.novell.com/security/cve/CVE-2010-2227.html https://bugzilla.novell.com/622188

1 0

openSUSE-SU-2010:0615-1 (important): lvm2-clvm: security update to fix a local privilege escalation
by opensuse-security＠opensuse.org 15 Sep '10

15 Sep '10

openSUSE Security Update: lvm2-clvm: security update to fix a local privilege escalation ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0615-1 Rating: important References: #622537 Cross-References: CVE-2010-2526 Affected Products: openSUSE 11.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: clvmd allowed unprivileged users to issue arbitrary lvm commands (CVE-2010-2526). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.1: zypper in -t patch lvm2-2920 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.1 (i586 ppc x86_64): lvm2-2.02.39-8.14.1 lvm2-clvm-2.02.39-8.14.1 References: http://support.novell.com/security/cve/CVE-2010-2526.html https://bugzilla.novell.com/622537

1 0

openSUSE-SU-2010:0612-1 (moderate): pcsc-lite: fixed pcscd local root exploit (CVE-2010-0407)
by opensuse-security＠opensuse.org 15 Sep '10

15 Sep '10

openSUSE Security Update: pcsc-lite: fixed pcscd local root exploit (CVE-2010-0407) ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0612-1 Rating: moderate References: #609317 Cross-References: CVE-2010-0407 Affected Products: openSUSE 11.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update of pcsc-lite fixes a local vulnerability (stack overflow) which allows every user with write-access to "/var/run/pcscd/pcscd.comm" to gain root privileges. CVE-2010-0407 has been assigned to this issue. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.1: zypper in -t patch pcsc-lite-2646 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.1 (i586 ppc x86_64): pcsc-lite-1.4.102-1.249.1 pcsc-lite-devel-1.4.102-1.249.1 - openSUSE 11.1 (x86_64): pcsc-lite-32bit-1.4.102-1.249.1 - openSUSE 11.1 (ppc): pcsc-lite-64bit-1.4.102-1.249.1 References: http://support.novell.com/security/cve/CVE-2010-0407.html https://bugzilla.novell.com/609317

1 0

openSUSE-RU-2010:0611-1 (low): python-xlib: Fixed cannot connect to display problem
by maintenance＠opensuse.org 14 Sep '10

14 Sep '10

openSUSE Recommended Update: python-xlib: Fixed cannot connect to display problem ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0611-1 Rating: low References: #623507 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: A bug where python-xlib could not connect to local displays was fixed. (bnc#623507) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch python-xlib-3082 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): python-xlib-0.14-90.1.1 References: https://bugzilla.novell.com/623507

1 0

openSUSE-SU-2010:0608-1 (moderate): iscsitarget/tgt: multiple buffer overflows fixed
by opensuse-security＠opensuse.org 13 Sep '10

13 Sep '10

openSUSE Security Update: iscsitarget/tgt: multiple buffer overflows fixed ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0608-1 Rating: moderate References: #592928 #618574 Cross-References: CVE-2010-0743 CVE-2010-2221 Affected Products: openSUSE 11.3 openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update of iscscitarget/tgt fixes multiple overflows and a format string vulnerability: - CVE-2010-2221: CVSS v2 Base Score: 5.0 (MEDIUM) (AV:N/AC:L/Au:N/C:N/I:N/A:P): Buffer Errors (CWE-119) - CVE-2010-0743: CVSS v2 Base Score: 5.0 (MEDIUM) (AV:N/AC:L/Au:N/C:N/I:N/A:P): Format String Vulnerability (CWE-134) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch tgt-2874 - openSUSE 11.2: zypper in -t patch tgt-2874 - openSUSE 11.1: zypper in -t patch tgt-2874 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): tgt-0.9.0-7.1.1 - openSUSE 11.2 (i586 x86_64): tgt-0.9.0-3.2.1 - openSUSE 11.1 (i586 ppc x86_64): tgt-0.9.0-1.19.1 References: http://support.novell.com/security/cve/CVE-2010-0743.html http://support.novell.com/security/cve/CVE-2010-2221.html https://bugzilla.novell.com/592928 https://bugzilla.novell.com/618574

1 0

openSUSE-RU-2010:0606-1 (moderate): pam_mount: Avoid useless warning output
by maintenance＠opensuse.org 13 Sep '10

13 Sep '10

openSUSE Recommended Update: pam_mount: Avoid useless warning output ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0606-1 Rating: moderate References: #626127 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Do not warn about missing fskeyhash when no fskey is specified. Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch pam_mount-3055 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): pam_mount-1.34-3.2.1 - openSUSE 11.3 (x86_64): pam_mount-32bit-1.34-3.2.1 References: https://bugzilla.novell.com/626127

1 0

openSUSE-SU-2010:0604-1 (moderate): iscsitarget/tgt: multiple buffer overflows fixed
by opensuse-security＠opensuse.org 13 Sep '10

13 Sep '10

openSUSE Security Update: iscsitarget/tgt: multiple buffer overflows fixed ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0604-1 Rating: moderate References: #618574 Cross-References: CVE-2010-2221 Affected Products: openSUSE 11.3 openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update of iscscitarget/tgt fixes multiple overflows and a format string vulnerability: - CVE-2010-2221: CVSS v2 Base Score: 5.0 (MEDIUM) (AV:N/AC:L/Au:N/C:N/I:N/A:P): Buffer Errors (CWE-119) - CVE-2010-0743: CVSS v2 Base Score: 5.0 (MEDIUM) (AV:N/AC:L/Au:N/C:N/I:N/A:P): Format String Vulnerability (CWE-134) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch iscsitarget-2877 - openSUSE 11.2: zypper in -t patch iscsitarget-2877 - openSUSE 11.1: zypper in -t patch iscsitarget-2877 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): iscsitarget-1.4.19-4.1.1 iscsitarget-kmp-default-1.4.19_k2.6.34.0_12-4.1.1 iscsitarget-kmp-desktop-1.4.19_k2.6.34.0_12-4.1.1 iscsitarget-kmp-xen-1.4.19_k2.6.34.0_12-4.1.1 - openSUSE 11.3 (i586): iscsitarget-kmp-pae-1.4.19_k2.6.34.0_12-4.1.1 - openSUSE 11.2 (i586 x86_64): iscsitarget-0.4.17-4.5.1 iscsitarget-kmp-debug-0.4.17_2.6.31.12_0.2-4.5.1 iscsitarget-kmp-default-0.4.17_2.6.31.12_0.2-4.5.1 iscsitarget-kmp-desktop-0.4.17_2.6.31.12_0.2-4.5.1 iscsitarget-kmp-xen-0.4.17_2.6.31.12_0.2-4.5.1 - openSUSE 11.2 (i586): iscsitarget-kmp-pae-0.4.17_2.6.31.12_0.2-4.5.1 - openSUSE 11.1 (i586 ppc x86_64): iscsitarget-0.4.15-89.12.1 iscsitarget-kmp-default-0.4.15_2.6.27.48_0.2-89.12.1 - openSUSE 11.1 (i586 x86_64): iscsitarget-kmp-debug-0.4.15_2.6.27.48_0.2-89.12.1 iscsitarget-kmp-trace-0.4.15_2.6.27.48_0.2-89.12.1 iscsitarget-kmp-xen-0.4.15_2.6.27.48_0.2-89.12.1 - openSUSE 11.1 (i586): iscsitarget-kmp-pae-0.4.15_2.6.27.48_0.2-89.12.1 References: http://support.novell.com/security/cve/CVE-2010-2221.html https://bugzilla.novell.com/618574

1 0

openSUSE-SU-2010:0338-2 (important): aria2 security update
by opensuse-security＠opensuse.org 13 Sep '10

13 Sep '10

openSUSE Security Update: aria2 security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0338-2 Rating: important References: #605937 Cross-References: CVE-2010-1512 Affected Products: openSUSE 11.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Specially crafted metalink files could trick aria2 into store downloaded files outside of the intended directory (CVE-2010-1512). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.1: zypper in -t patch aria2-3063 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.1 (i586 ppc x86_64): aria2-0.16.0-1.20.1 References: http://support.novell.com/security/cve/CVE-2010-1512.html https://bugzilla.novell.com/605937

1 0

openSUSE-RU-2010:0601-1 (moderate): samba: Collective bugfix update
by maintenance＠opensuse.org 13 Sep '10

13 Sep '10

openSUSE Recommended Update: samba: Collective bugfix update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0601-1 Rating: moderate References: #592198 #599873 #605935 #613459 #619787 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that solves one vulnerability and has four fixes is now available. It includes one version update. Description: - samba could run out of file descriptors when copying a large amount of files from Windows 7 (bso#6837, bnc#619787). - Interdomain trusts with Windows 2008R2 didn't work and winbind could potentially crash (bnc#613459, bnc#599873, bnc#592198, bso#6697). - clients could terminate their connection due to a NULL deref (CVE-2010-1635, bso#7229, bnc#605935). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch samba-3047 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 x86_64) [New Version: 3.4.3]: cifs-mount-3.4.3-3.5.3 ldapsmb-1.34b-3.5.3 libnetapi-devel-3.4.3-3.5.3 libnetapi0-3.4.3-3.5.3 libsmbclient-devel-3.4.3-3.5.3 libsmbclient0-3.4.3-3.5.3 libsmbsharemodes-devel-3.4.3-3.5.3 libsmbsharemodes0-3.4.3-3.5.3 libtalloc-devel-3.4.3-3.5.3 libtalloc1-3.4.3-3.5.3 libtdb-devel-3.4.3-3.5.3 libtdb1-3.4.3-3.5.3 libwbclient-devel-3.4.3-3.5.3 libwbclient0-3.4.3-3.5.3 samba-3.4.3-3.5.3 samba-client-3.4.3-3.5.3 samba-devel-3.4.3-3.5.3 samba-krb-printing-3.4.3-3.5.3 samba-winbind-3.4.3-3.5.3 - openSUSE 11.2 (x86_64) [New Version: 3.4.3]: libsmbclient0-32bit-3.4.3-3.5.3 libtalloc1-32bit-3.4.3-3.5.3 libtdb1-32bit-3.4.3-3.5.3 libwbclient0-32bit-3.4.3-3.5.3 samba-32bit-3.4.3-3.5.3 samba-client-32bit-3.4.3-3.5.3 samba-winbind-32bit-3.4.3-3.5.3 - openSUSE 11.2 (noarch) [New Version: 3.4.3]: samba-doc-3.4.3-3.5.1 References: http://support.novell.com/security/cve/CVE-2010-1635.html https://bugzilla.novell.com/592198 https://bugzilla.novell.com/599873 https://bugzilla.novell.com/605935 https://bugzilla.novell.com/613459 https://bugzilla.novell.com/619787

1 0

openSUSE-SU-2010:0599-1 (important): php5 security update.
by opensuse-security＠opensuse.org 10 Sep '10

10 Sep '10

openSUSE Security Update: php5 security update. ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0599-1 Rating: important References: #588975 #604315 #604652 #604654 #604656 #605097 #605100 #609763 #609766 #609768 #609769 #612555 #612556 #616232 #619483 #619486 #619487 #619489 #633932 #633934 #636923 Cross-References: CVE-2010-0397 CVE-2010-1860 CVE-2010-1862 CVE-2010-1864 CVE-2010-1866 CVE-2010-1914 CVE-2010-1915 CVE-2010-1917 CVE-2010-2093 CVE-2010-2094 CVE-2010-2097 CVE-2010-2100 CVE-2010-2101 CVE-2010-2190 CVE-2010-2191 CVE-2010-2225 CVE-2010-2531 CVE-2010-2950 CVE-2010-3062 CVE-2010-3063 CVE-2010-3064 CVE-2010-3065 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes 22 vulnerabilities is now available. It includes one version update. Description: PHP was updated to version 5.3.3 to fix serveral security issues. (CVE-2010-0397, CVE-2010-1860, CVE-2010-1862, CVE-2010-1864, CVE-2010-1866, CVE-2010-1914, CVE-2010-1915, CVE-2010-1917, CVE-2010-2093, CVE-2010-2094, CVE-2010-2097, CVE-2010-2100, CVE-2010-2101, CVE-2010-2190, CVE-2010-2191, CVE-2010-2225, CVE-2010-2531, CVE-2010-2950, CVE-2010-3062, CVE-2010-3063, CVE-2010-3064, CVE-2010-3065) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch apache2-mod_php5-2929 - openSUSE 11.2: zypper in -t patch apache2-mod_php5-2929 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 5.3.3]: apache2-mod_php5-5.3.3-0.1.2 php5-5.3.3-0.1.2 php5-bcmath-5.3.3-0.1.2 php5-bz2-5.3.3-0.1.2 php5-calendar-5.3.3-0.1.2 php5-ctype-5.3.3-0.1.2 php5-curl-5.3.3-0.1.2 php5-dba-5.3.3-0.1.2 php5-devel-5.3.3-0.1.2 php5-dom-5.3.3-0.1.2 php5-enchant-5.3.3-0.1.2 php5-exif-5.3.3-0.1.2 php5-fastcgi-5.3.3-0.1.2 php5-fileinfo-5.3.3-0.1.2 php5-ftp-5.3.3-0.1.2 php5-gd-5.3.3-0.1.2 php5-gettext-5.3.3-0.1.2 php5-gmp-5.3.3-0.1.2 php5-hash-5.3.3-0.1.2 php5-iconv-5.3.3-0.1.2 php5-imap-5.3.3-0.1.2 php5-intl-5.3.3-0.1.2 php5-json-5.3.3-0.1.2 php5-ldap-5.3.3-0.1.2 php5-mbstring-5.3.3-0.1.2 php5-mcrypt-5.3.3-0.1.2 php5-mysql-5.3.3-0.1.2 php5-odbc-5.3.3-0.1.2 php5-openssl-5.3.3-0.1.2 php5-pcntl-5.3.3-0.1.2 php5-pdo-5.3.3-0.1.2 php5-pgsql-5.3.3-0.1.2 php5-phar-5.3.3-0.1.2 php5-posix-5.3.3-0.1.2 php5-pspell-5.3.3-0.1.2 php5-readline-5.3.3-0.1.2 php5-shmop-5.3.3-0.1.2 php5-snmp-5.3.3-0.1.2 php5-soap-5.3.3-0.1.2 php5-sockets-5.3.3-0.1.2 php5-sqlite-5.3.3-0.1.2 php5-suhosin-5.3.3-0.1.2 php5-sysvmsg-5.3.3-0.1.2 php5-sysvsem-5.3.3-0.1.2 php5-sysvshm-5.3.3-0.1.2 php5-tidy-5.3.3-0.1.2 php5-tokenizer-5.3.3-0.1.2 php5-wddx-5.3.3-0.1.2 php5-xmlreader-5.3.3-0.1.2 php5-xmlrpc-5.3.3-0.1.2 php5-xmlwriter-5.3.3-0.1.2 php5-xsl-5.3.3-0.1.2 php5-zip-5.3.3-0.1.2 php5-zlib-5.3.3-0.1.2 - openSUSE 11.3 (noarch) [New Version: 5.3.3]: php5-pear-5.3.3-0.1.2 - openSUSE 11.2 (i586 x86_64) [New Version: 5.3.3]: apache2-mod_php5-5.3.3-0.1.1 php5-5.3.3-0.1.1 php5-bcmath-5.3.3-0.1.1 php5-bz2-5.3.3-0.1.1 php5-calendar-5.3.3-0.1.1 php5-ctype-5.3.3-0.1.1 php5-curl-5.3.3-0.1.1 php5-dba-5.3.3-0.1.1 php5-devel-5.3.3-0.1.1 php5-dom-5.3.3-0.1.1 php5-enchant-5.3.3-0.1.1 php5-exif-5.3.3-0.1.1 php5-fastcgi-5.3.3-0.1.1 php5-fileinfo-5.3.3-0.1.1 php5-ftp-5.3.3-0.1.1 php5-gd-5.3.3-0.1.1 php5-gettext-5.3.3-0.1.1 php5-gmp-5.3.3-0.1.1 php5-hash-5.3.3-0.1.1 php5-iconv-5.3.3-0.1.1 php5-imap-5.3.3-0.1.1 php5-intl-5.3.3-0.1.1 php5-json-5.3.3-0.1.1 php5-ldap-5.3.3-0.1.1 php5-mbstring-5.3.3-0.1.1 php5-mcrypt-5.3.3-0.1.1 php5-mysql-5.3.3-0.1.1 php5-odbc-5.3.3-0.1.1 php5-openssl-5.3.3-0.1.1 php5-pcntl-5.3.3-0.1.1 php5-pdo-5.3.3-0.1.1 php5-pgsql-5.3.3-0.1.1 php5-phar-5.3.3-0.1.1 php5-posix-5.3.3-0.1.1 php5-pspell-5.3.3-0.1.1 php5-readline-5.3.3-0.1.1 php5-shmop-5.3.3-0.1.1 php5-snmp-5.3.3-0.1.1 php5-soap-5.3.3-0.1.1 php5-sockets-5.3.3-0.1.1 php5-sqlite-5.3.3-0.1.1 php5-suhosin-5.3.3-0.1.1 php5-sysvmsg-5.3.3-0.1.1 php5-sysvsem-5.3.3-0.1.1 php5-sysvshm-5.3.3-0.1.1 php5-tidy-5.3.3-0.1.1 php5-tokenizer-5.3.3-0.1.1 php5-wddx-5.3.3-0.1.1 php5-xmlreader-5.3.3-0.1.1 php5-xmlrpc-5.3.3-0.1.1 php5-xmlwriter-5.3.3-0.1.1 php5-xsl-5.3.3-0.1.1 php5-zip-5.3.3-0.1.1 php5-zlib-5.3.3-0.1.1 - openSUSE 11.2 (noarch) [New Version: 5.3.3]: php5-pear-5.3.3-0.1.1 References: http://support.novell.com/security/cve/CVE-2010-0397.html http://support.novell.com/security/cve/CVE-2010-1860.html http://support.novell.com/security/cve/CVE-2010-1862.html http://support.novell.com/security/cve/CVE-2010-1864.html http://support.novell.com/security/cve/CVE-2010-1866.html http://support.novell.com/security/cve/CVE-2010-1914.html http://support.novell.com/security/cve/CVE-2010-1915.html http://support.novell.com/security/cve/CVE-2010-1917.html http://support.novell.com/security/cve/CVE-2010-2093.html http://support.novell.com/security/cve/CVE-2010-2094.html http://support.novell.com/security/cve/CVE-2010-2097.html http://support.novell.com/security/cve/CVE-2010-2100.html http://support.novell.com/security/cve/CVE-2010-2101.html http://support.novell.com/security/cve/CVE-2010-2190.html http://support.novell.com/security/cve/CVE-2010-2191.html http://support.novell.com/security/cve/CVE-2010-2225.html http://support.novell.com/security/cve/CVE-2010-2531.html http://support.novell.com/security/cve/CVE-2010-2950.html http://support.novell.com/security/cve/CVE-2010-3062.html http://support.novell.com/security/cve/CVE-2010-3063.html http://support.novell.com/security/cve/CVE-2010-3064.html http://support.novell.com/security/cve/CVE-2010-3065.html https://bugzilla.novell.com/588975 https://bugzilla.novell.com/604315 https://bugzilla.novell.com/604652 https://bugzilla.novell.com/604654 https://bugzilla.novell.com/604656 https://bugzilla.novell.com/605097 https://bugzilla.novell.com/605100 https://bugzilla.novell.com/609763 https://bugzilla.novell.com/609766 https://bugzilla.novell.com/609768 https://bugzilla.novell.com/609769 https://bugzilla.novell.com/612555 https://bugzilla.novell.com/612556 https://bugzilla.novell.com/616232 https://bugzilla.novell.com/619483 https://bugzilla.novell.com/619486 https://bugzilla.novell.com/619487 https://bugzilla.novell.com/619489 https://bugzilla.novell.com/633932 https://bugzilla.novell.com/633934 https://bugzilla.novell.com/636923

1 0

openSUSE-RU-2010:0598-1 (important): SUN Java update
by maintenance＠opensuse.org 10 Sep '10

10 Sep '10

openSUSE Recommended Update: SUN Java update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0598-1 Rating: important References: #624569 Affected Products: openSUSE 11.3 openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: Oracle has released JRE 6 Update 21 in order to numerous defects. Please refer to Oracle's site for more information: http://java.sun.com/javase/6/webnotes/6u21.html Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch java-1_6_0-sun-2796 - openSUSE 11.2: zypper in -t patch java-1_6_0-sun-2796 - openSUSE 11.1: zypper in -t patch java-1_6_0-sun-2796 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 1.6.0.u21]: java-1_6_0-sun-1.6.0.u21-0.1.1 java-1_6_0-sun-alsa-1.6.0.u21-0.1.1 java-1_6_0-sun-devel-1.6.0.u21-0.1.1 java-1_6_0-sun-jdbc-1.6.0.u21-0.1.1 java-1_6_0-sun-plugin-1.6.0.u21-0.1.1 java-1_6_0-sun-src-1.6.0.u21-0.1.1 - openSUSE 11.2 (i586 x86_64) [New Version: 1.6.0.u21]: java-1_6_0-sun-1.6.0.u21-0.1.1 java-1_6_0-sun-alsa-1.6.0.u21-0.1.1 java-1_6_0-sun-demo-1.6.0.u21-0.1.1 java-1_6_0-sun-devel-1.6.0.u21-0.1.1 java-1_6_0-sun-jdbc-1.6.0.u21-0.1.1 java-1_6_0-sun-plugin-1.6.0.u21-0.1.1 java-1_6_0-sun-src-1.6.0.u21-0.1.1 - openSUSE 11.1 (i586 x86_64) [New Version: 1.6.0.u21]: java-1_6_0-sun-1.6.0.u21-0.1.1 java-1_6_0-sun-alsa-1.6.0.u21-0.1.1 java-1_6_0-sun-devel-1.6.0.u21-0.1.1 java-1_6_0-sun-jdbc-1.6.0.u21-0.1.1 java-1_6_0-sun-plugin-1.6.0.u21-0.1.1 java-1_6_0-sun-src-1.6.0.u21-0.1.1 References: https://bugzilla.novell.com/624569

1 0

openSUSE-RU-2010:0595-1 (low): ndiswrapper,wacom,lirc: Kernel modules needed to be rebuilt after the kernel update update
by maintenance＠opensuse.org 09 Sep '10

09 Sep '10

openSUSE Recommended Update: ndiswrapper,wacom,lirc: Kernel modules needed to be rebuilt after the kernel update update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0595-1 Rating: low References: #637880 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The ndiswrapper, wacom and lirc kernel modules needed to be rebuilt after kernel update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch liblirc_client0-3092 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): liblirc_client0-0.8.6_0.8.7pre1-0.1.1 lirc-0.8.6_0.8.7pre1-0.1.1 lirc-devel-0.8.6_0.8.7pre1-0.1.1 lirc-kmp-default-0.8.6_0.8.7pre1_k2.6.34.4_0.1-0.1.1 lirc-kmp-desktop-0.8.6_0.8.7pre1_k2.6.34.4_0.1-0.1.1 lirc-kmp-xen-0.8.6_0.8.7pre1_k2.6.34.4_0.1-0.1.1 lirc-remotes-0.8.6_0.8.7pre1-0.1.1 ndiswrapper-1.55-8.1.1 ndiswrapper-kmp-default-1.55_k2.6.34.4_0.1-8.1.1 ndiswrapper-kmp-desktop-1.55_k2.6.34.4_0.1-8.1.1 wacom-kmp-default-0.8.1_k2.6.34.4_0.1-11.1.1 wacom-kmp-desktop-0.8.1_k2.6.34.4_0.1-11.1.1 - openSUSE 11.3 (x86_64): liblirc_client0-32bit-0.8.6_0.8.7pre1-0.1.1 - openSUSE 11.3 (i586): lirc-kmp-pae-0.8.6_0.8.7pre1_k2.6.34.4_0.1-0.1.1 ndiswrapper-kmp-pae-1.55_k2.6.34.4_0.1-8.1.1 wacom-kmp-pae-0.8.1_k2.6.34.4_0.1-11.1.1 References: https://bugzilla.novell.com/637880

1 0

openSUSE-SU-2010:0594-1 (important): libpng security update
by opensuse-security＠opensuse.org 09 Sep '10

09 Sep '10

openSUSE Security Update: libpng security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0594-1 Rating: important References: #617866 Cross-References: CVE-2010-1205 CVE-2010-2249 Affected Products: openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: Specially crafted png files could cause crashes or even execution of arbitrary code in applications using libpng to process such files (CVE-2010-1205, CVE-2010-2249). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch libpng-devel-3065 - openSUSE 11.1: zypper in -t patch libpng-devel-3065 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 x86_64): libpng-devel-1.2.39-2.4.1 libpng12-0-1.2.39-2.4.1 libpng3-1.2.39-2.4.1 - openSUSE 11.2 (x86_64): libpng-devel-32bit-1.2.39-2.4.1 libpng12-0-32bit-1.2.39-2.4.1 - openSUSE 11.1 (i586 ppc x86_64): libpng-devel-1.2.31-4.40.1 libpng12-0-1.2.31-4.40.1 libpng3-1.2.31-4.40.1 - openSUSE 11.1 (x86_64): libpng-devel-32bit-1.2.31-4.40.1 libpng12-0-32bit-1.2.31-4.40.1 - openSUSE 11.1 (ppc): libpng-devel-64bit-1.2.31-4.40.1 libpng12-0-64bit-1.2.31-4.40.1 References: http://support.novell.com/security/cve/CVE-2010-1205.html http://support.novell.com/security/cve/CVE-2010-2249.html https://bugzilla.novell.com/617866

1 0

openSUSE-SU-2010:0592-1 (moderate): Linux Kernel: Security/Bugfix update to 2.6.34.4
by opensuse-security＠opensuse.org 08 Sep '10

08 Sep '10

openSUSE Security Update: Linux Kernel: Security/Bugfix update to 2.6.34.4 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0592-1 Rating: moderate References: #529535 #584720 #586643 #594362 #599671 #608300 #610362 #610828 #615656 #617530 #617912 #618678 #619021 #619416 #619440 #619727 #621598 #623005 #623472 #624118 #624587 #624606 #624814 #625339 #627212 #627310 #627386 #627447 #629908 #631066 #631185 #631319 Cross-References: CVE-2010-2524 CVE-2010-2537 CVE-2010-2538 CVE-2010-2798 CVE-2010-3110 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that solves 5 vulnerabilities and has 27 fixes is now available. It includes one version update. Description: This update of the openSUSE 11.3 kernel brings the kernel to version 2.6.34.4 and contains a lot of bug and security fixes CVE-2010-3110: Missing bounds checks in several ioctls of the Novell Client novfs /proc interface allowed unprivileged local users to crash the kernel or even execute code in kernel context. CVE-2010-2524: a malicious local user could fill the cache used by CIFS do perform dns lookups with chosen data, therefore tricking the kernel into mounting a wrong CIFS server. CVE-2010-2798: a local user could trigger a NULL derefence on a gfs2 file system CVE-2010-2537: a local user could overwrite append-only files on a btrfs file system CVE-2010-2538: a local user could read kernel memory of a btrfs file system Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch Kernel-3038 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 2.6.34.4]: kernel-debug-2.6.34.4-0.1.1 kernel-debug-base-2.6.34.4-0.1.1 kernel-debug-devel-2.6.34.4-0.1.1 kernel-default-2.6.34.4-0.1.1 kernel-default-base-2.6.34.4-0.1.1 kernel-default-devel-2.6.34.4-0.1.1 kernel-desktop-2.6.34.4-0.1.1 kernel-desktop-base-2.6.34.4-0.1.1 kernel-desktop-devel-2.6.34.4-0.1.1 kernel-ec2-devel-2.6.34.4-0.1.1 kernel-syms-2.6.34.4-0.1.1 kernel-trace-2.6.34.4-0.1.1 kernel-trace-base-2.6.34.4-0.1.1 kernel-trace-devel-2.6.34.4-0.1.1 kernel-vanilla-2.6.34.4-0.1.1 kernel-vanilla-base-2.6.34.4-0.1.1 kernel-vanilla-devel-2.6.34.4-0.1.1 kernel-xen-2.6.34.4-0.1.1 kernel-xen-base-2.6.34.4-0.1.1 kernel-xen-devel-2.6.34.4-0.1.1 preload-kmp-default-1.1_k2.6.34.4_0.1-19.1.1 preload-kmp-desktop-1.1_k2.6.34.4_0.1-19.1.1 - openSUSE 11.3 (noarch) [New Version: 2.6.34.4]: kernel-devel-2.6.34.4-0.1.1 kernel-source-2.6.34.4-0.1.1 kernel-source-vanilla-2.6.34.4-0.1.1 - openSUSE 11.3 (i586) [New Version: 2.6.34.4]: kernel-pae-2.6.34.4-0.1.1 kernel-pae-base-2.6.34.4-0.1.1 kernel-pae-devel-2.6.34.4-0.1.1 kernel-vmi-devel-2.6.34.4-0.1.1 References: http://support.novell.com/security/cve/CVE-2010-2524.html http://support.novell.com/security/cve/CVE-2010-2537.html http://support.novell.com/security/cve/CVE-2010-2538.html http://support.novell.com/security/cve/CVE-2010-2798.html http://support.novell.com/security/cve/CVE-2010-3110.html https://bugzilla.novell.com/529535 https://bugzilla.novell.com/584720 https://bugzilla.novell.com/586643 https://bugzilla.novell.com/594362 https://bugzilla.novell.com/599671 https://bugzilla.novell.com/608300 https://bugzilla.novell.com/610362 https://bugzilla.novell.com/610828 https://bugzilla.novell.com/615656 https://bugzilla.novell.com/617530 https://bugzilla.novell.com/617912 https://bugzilla.novell.com/618678 https://bugzilla.novell.com/619021 https://bugzilla.novell.com/619416 https://bugzilla.novell.com/619440 https://bugzilla.novell.com/619727 https://bugzilla.novell.com/621598 https://bugzilla.novell.com/623005 https://bugzilla.novell.com/623472 https://bugzilla.novell.com/624118 https://bugzilla.novell.com/624587 https://bugzilla.novell.com/624606 https://bugzilla.novell.com/624814 https://bugzilla.novell.com/625339 https://bugzilla.novell.com/627212 https://bugzilla.novell.com/627310 https://bugzilla.novell.com/627386 https://bugzilla.novell.com/627447 https://bugzilla.novell.com/629908 https://bugzilla.novell.com/631066 https://bugzilla.novell.com/631185 https://bugzilla.novell.com/631319

1 0

openSUSE-SU-2010:0591-1 (important): sudo security update
by opensuse-security＠opensuse.org 08 Sep '10

08 Sep '10

openSUSE Security Update: sudo security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0591-1 Rating: important References: #635843 Cross-References: CVE-2010-2956 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: sudo's handling of the -g command line option allowed to also specify -u in some cases, therefore allowing users to actually run commands as root (CVE-2010-2956). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch sudo-3083 - openSUSE 11.2: zypper in -t patch sudo-3083 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): sudo-1.7.2p7-2.1.1 - openSUSE 11.2 (i586 x86_64): sudo-1.7.2-2.3.1 References: http://support.novell.com/security/cve/CVE-2010-2956.html https://bugzilla.novell.com/635843

1 0

openSUSE-RU-2010:0590-1 (low): system-config-printer: The configure button for the printer has no effect. Fixed by this update.
by maintenance＠opensuse.org 07 Sep '10

07 Sep '10

openSUSE Recommended Update: system-config-printer: The configure button for the printer has no effect. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0590-1 Rating: low References: #596445 Affected Products: openSUSE 11.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The following bug is fixed by this update: - The configure button for the printer has no effect (bnc #596445) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.1: zypper in -t patch system-config-printer-2506 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.1 (i586 ppc x86_64): system-config-printer-1.0.8-5.10.1 system-config-printer-lang-1.0.8-5.10.1 References: https://bugzilla.novell.com/596445

1 0

openSUSE-RU-2010:0587-1 (moderate): MozillaFirefox: Update from 3.5.11 to 3.6.8
by maintenance＠opensuse.org 07 Sep '10

07 Sep '10

openSUSE Recommended Update: MozillaFirefox: Update from 3.5.11 to 3.6.8 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0587-1 Rating: moderate References: #624697 Affected Products: openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes two new package versions. Description: This update brings the Mozilla Firefox browser from the stable branch version 3.5.x to the 3.6.8 version, as the 3.5 branch is soon to be discontinued. It brings lots of new features and enhancements, please see http://www.mozilla.org/ Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch firefox36upgrade-2937 - openSUSE 11.1: zypper in -t patch firefox36upgrade-2937 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 x86_64) [New Version: 3.6.8]: MozillaFirefox-3.6.8-1.1.1 MozillaFirefox-branding-openSUSE-3.5-8.10.1 MozillaFirefox-branding-upstream-3.6.8-1.1.1 MozillaFirefox-translations-common-3.6.8-1.1.1 MozillaFirefox-translations-other-3.6.8-1.1.1 beagle-0.3.9-9.11.1 beagle-devel-0.3.9-9.11.1 beagle-evolution-0.3.9-9.11.1 beagle-firefox-0.3.9-9.11.1 beagle-google-0.3.9-9.11.1 beagle-gui-0.3.9-9.11.1 beagle-thunderbird-0.3.9-9.11.1 mozilla-js192-1.9.2.8-1.1.1 mozilla-xulrunner192-1.9.2.8-1.1.1 mozilla-xulrunner192-buildsymbols-1.9.2.8-1.1.1 mozilla-xulrunner192-devel-1.9.2.8-1.1.1 mozilla-xulrunner192-gnome-1.9.2.8-1.1.1 mozilla-xulrunner192-translations-common-1.9.2.8-1.1.1 mozilla-xulrunner192-translations-other-1.9.2.8-1.1.1 - openSUSE 11.2 (x86_64): mozilla-js192-32bit-1.9.2.8-1.1.1 mozilla-xulrunner192-32bit-1.9.2.8-1.1.1 mozilla-xulrunner192-gnome-32bit-1.9.2.8-1.1.1 mozilla-xulrunner192-translations-common-32bit-1.9.2.8-1.1.1 mozilla-xulrunner192-translations-other-32bit-1.9.2.8-1.1.1 - openSUSE 11.2 (noarch): MozillaFirefox-theme-oxygen-1.4.90-3.3.1 beagle-lang-0.3.9-9.11.1 - openSUSE 11.1 (i586 ppc x86_64) [New Version: 3.5 and 3.6.8]: MozillaFirefox-3.6.8-1.1.1 MozillaFirefox-branding-openSUSE-3.5-10.2.3 MozillaFirefox-branding-upstream-3.6.8-1.1.1 MozillaFirefox-translations-common-3.6.8-1.1.1 MozillaFirefox-translations-other-3.6.8-1.1.1 beagle-0.3.8-46.36.1 beagle-devel-0.3.8-46.36.1 beagle-epiphany-0.3.8-46.36.1 beagle-evolution-0.3.8-46.36.1 beagle-firefox-0.3.8-46.36.1 beagle-google-0.3.8-46.36.1 beagle-gui-0.3.8-46.36.1 beagle-lang-0.3.8-46.36.1 beagle-thunderbird-0.3.8-46.36.1 - openSUSE 11.1 (i586 x86_64): mozilla-js192-1.9.2.8-1.1.1 mozilla-xulrunner192-1.9.2.8-1.1.1 mozilla-xulrunner192-buildsymbols-1.9.2.8-1.1.1 mozilla-xulrunner192-devel-1.9.2.8-1.1.1 mozilla-xulrunner192-gnome-1.9.2.8-1.1.1 mozilla-xulrunner192-translations-common-1.9.2.8-1.1.1 mozilla-xulrunner192-translations-other-1.9.2.8-1.1.1 - openSUSE 11.1 (x86_64): mozilla-js192-32bit-1.9.2.8-1.1.1 mozilla-xulrunner192-32bit-1.9.2.8-1.1.1 mozilla-xulrunner192-gnome-32bit-1.9.2.8-1.1.1 mozilla-xulrunner192-translations-common-32bit-1.9.2.8-1.1.1 mozilla-xulrunner192-translations-other-32bit-1.9.2.8-1.1.1 References: https://bugzilla.novell.com/624697

1 0

openSUSE-RU-2010:0586-1 (low): yast2-country: Fix Clock at boot when using local time
by maintenance＠opensuse.org 07 Sep '10

07 Sep '10

openSUSE Recommended Update: yast2-country: Fix Clock at boot when using local time ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0586-1 Rating: low References: #627116 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: When HW clock is set to local time, clock is wrong on boot after change in YaST. mkinitrd call is needed (bnc #627116) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch yast2-country-3061 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 2.19.19]: yast2-country-2.19.19-0.1.1 yast2-country-data-2.19.19-0.1.1 References: https://bugzilla.novell.com/627116

1 0

openSUSE-RU-2010:0585-1 (low): yast2-core: Fix slow startup in some AppArmor setups
by maintenance＠opensuse.org 07 Sep '10

07 Sep '10

openSUSE Recommended Update: yast2-core: Fix slow startup in some AppArmor setups ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0585-1 Rating: low References: #629882 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: YaST read YCP include files 1 byte at a time. If its AppArmor profile is enabled, auditd logs it all, taking several minutes for a module to start (bnc#629882). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch yast2-core-3059 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 2.19.3]: yast2-core-2.19.3-1.1.1 yast2-core-devel-2.19.3-1.1.1 References: https://bugzilla.novell.com/629882

1 0

openSUSE-RU-2010:0584-1 (low): sysconfig: This update contains fixes for wireless networking with ifup + WPA/WPA2 and detection of disabled ipv6 in the dhcp script
by maintenance＠opensuse.org 07 Sep '10

07 Sep '10

openSUSE Recommended Update: sysconfig: This update contains fixes for wireless networking with ifup + WPA/WPA2 and detection of disabled ipv6 in the dhcp script ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0584-1 Rating: low References: #616765 #623340 #623676 #624182 #625403 #631283 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: The following bugs are fixed by this update: - #625403: Fixed wireless hardware to wext/nl80211 WPA driver mapping and changed to use -Dnl80211,wext by default for untested drivers to let the wpa_supplicant fallback to wext when nl80211 is not available and avoid failures with non-mac80211 based hardware drivers. Adjusted info message about untested drivers and enabled untested driver handling also in case wpa_supplicant is not required but the user prefers to use it. Fixes also bugs #623340,#623676,#624182,#631283. - #616765: Fixed check whether ipv6 is enabled or not in /sbin/ifup-dhcp to avoid dhcpv6 client start in case the interface is configured to start both, dhcpv4 and dhcpv6 clients. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch sysconfig-2987 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): sysconfig-0.73.7-2.1.1 References: https://bugzilla.novell.com/616765 https://bugzilla.novell.com/623340 https://bugzilla.novell.com/623676 https://bugzilla.novell.com/624182 https://bugzilla.novell.com/625403 https://bugzilla.novell.com/631283

1 0

openSUSE-SU-2010:0583-1 (moderate): xorg-x11-server: Fixed memory corruption in XRender
by opensuse-security＠opensuse.org 07 Sep '10

07 Sep '10

openSUSE Security Update: xorg-x11-server: Fixed memory corruption in XRender ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0583-1 Rating: moderate References: #597232 Cross-References: CVE-2010-1166 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update fixes a memory corruption in the X Render extension in the X server. CVE-2010-1166: The fbComposite function in fbpict.c in the Render extension in the X server in X.Org X11R7.1 allows remote authenticated users to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted request, related to an incorrect macro definition. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch xorg-x11-Xvnc-2875 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 x86_64): xorg-x11-Xvnc-7.4-61.64.1 xorg-x11-server-7.4-61.64.1 xorg-x11-server-extra-7.4-61.64.1 xorg-x11-server-sdk-7.4-61.64.1 References: http://support.novell.com/security/cve/CVE-2010-1166.html https://bugzilla.novell.com/597232

1 0

openSUSE-RU-2010:0580-1 (moderate): fdisk: Can't create partitions starting beyond 1TB. Fixed by this update.
by maintenance＠opensuse.org 03 Sep '10

03 Sep '10

openSUSE Recommended Update: fdisk: Can't create partitions starting beyond 1TB. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0580-1 Rating: moderate References: #590512 Affected Products: openSUSE 11.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Can't create partitions starting beyond 1TB. Fixed by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.1: zypper in -t patch util-linux-2493 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.1 (i586 ppc x86_64): util-linux-2.14.1-10.4.1 util-linux-lang-2.14.1-10.4.1 References: https://bugzilla.novell.com/590512

1 0

openSUSE-SU-2010:0573-1 (critical): acroread security update
by opensuse-security＠opensuse.org 01 Sep '10

01 Sep '10

openSUSE Security Update: acroread security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0573-1 Rating: critical References: #629134 Cross-References: CVE-2010-0209 CVE-2010-1240 CVE-2010-2188 CVE-2010-2213 CVE-2010-2214 CVE-2010-2215 CVE-2010-2216 CVE-2010-2862 Affected Products: openSUSE 11.3 openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. It includes one version update. Description: Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code (CVE-2010-1240, CVE-2010-2862). This update also incorporate the Adobe Flash Player update APSB10-16 for the bundled flash player parts (CVE-2010-0209, CVE-2010-2188, CVE-2010-2213, CVE-2010-2214, CVE-2010-2215, CVE-2010-2216). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch acroread-3036 - openSUSE 11.2: zypper in -t patch acroread-3036 - openSUSE 11.1: zypper in -t patch acroread-3036 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586) [New Version: 9.3.4]: acroread-9.3.4-0.2.1 - openSUSE 11.2 (noarch) [New Version: 9.3.4]: acroread-cmaps-9.3.4-0.3.1 acroread-fonts-ja-9.3.4-0.3.1 acroread-fonts-ko-9.3.4-0.3.1 acroread-fonts-zh_CN-9.3.4-0.3.1 acroread-fonts-zh_TW-9.3.4-0.3.1 - openSUSE 11.2 (i586) [New Version: 9.3.4]: acroread-9.3.4-0.3.1 - openSUSE 11.1 (noarch) [New Version: 9.3.4]: acroread-cmaps-9.3.4-0.3.1 acroread-fonts-ja-9.3.4-0.3.1 acroread-fonts-ko-9.3.4-0.3.1 acroread-fonts-zh_CN-9.3.4-0.3.1 acroread-fonts-zh_TW-9.3.4-0.3.1 - openSUSE 11.1 (i586) [New Version: 9.3.4]: acroread-9.3.4-0.3.1 References: http://support.novell.com/security/cve/CVE-2010-0209.html http://support.novell.com/security/cve/CVE-2010-1240.html http://support.novell.com/security/cve/CVE-2010-2188.html http://support.novell.com/security/cve/CVE-2010-2213.html http://support.novell.com/security/cve/CVE-2010-2214.html http://support.novell.com/security/cve/CVE-2010-2215.html http://support.novell.com/security/cve/CVE-2010-2216.html http://support.novell.com/security/cve/CVE-2010-2862.html https://bugzilla.novell.com/629134

1 0

openSUSE-RU-2010:0570-1 (important): timezone: glibc timezone/DST update to 2010l
by maintenance＠opensuse.org 31 Aug '10

31 Aug '10

openSUSE Recommended Update: timezone: glibc timezone/DST update to 2010l ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0570-1 Rating: important References: #615937 Affected Products: openSUSE 11.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: * DST changes: Africa/Cairo (Egypt) and Asia/Gaza (Palestine) do not use daylight saving during the month of Ramadan in order to prevent Muslims from fasting one hour longer. http://www.timeanddate.com/news/time/egypt-ends-dst-2010.htm l http://www.timeanddate.com/news/time/westbank-gaza-end-dst-2 010.html Africa/Casablanca (Marocco) has spent the period from May 2 to Aug 8 using daylight saving. Marocco adopted regular daylight saving, but the start and end dates vary every year. http://www.timeanddate.com/news/time/morocco-starts-dst-2010 .html America/Argentina/San_Luis (Argentina region) local government did not terminate its DST period as planned and instead decided to extend its use of the UTC-3 time indefinitely. http://www.worldtimezone.com/dst_news/dst_news_argentina08.h tml * New zones: America/Bahia_Banderas (Mexican state of Nayarit) has declared that it is to follow the UCT-6 time instead of UCT-7, with the aim to have the same time as the nearby city of Puerto Vallarta. http://www.worldtimezone.com/dst_news/dst_news_mexico08.html * Historical changes: Asia/Taipei information on DST usage listed 1980 as one year using DST, which should read 1979 instead according to government resources. Europe/Helsinki, before switching to Central European standard DST in 1983, trialled DST for two years. However, the database omitted to specify that in these trials of 1981 and 1982, switches have been made one hour earlier than in 1983. * Spelling changes in Micronesia: Pacific/Truk has been renamed to Pacific/Chuuk in 1989. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.1: zypper in -t patch timezone-2010l-2997 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.1 (i586 ppc x86_64) [New Version: 2010l]: timezone-2010l-0.3.1 - openSUSE 11.1 (noarch) [New Version: 2010l]: timezone-java-2010l-0.3.1 References: https://bugzilla.novell.com/615937

1 0

openSUSE-RU-2010:0569-1 (important): timezone: glibc timezone/DST update to 2010l
by maintenance＠opensuse.org 31 Aug '10

31 Aug '10

openSUSE Recommended Update: timezone: glibc timezone/DST update to 2010l ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0569-1 Rating: important References: #607532 #615937 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. It includes one version update. Description: This update fixes zic -l to copy the timezone also correctly when hardlinking fails (due to /usr being on a separate partition) (bnc#607532) * DST changes: Africa/Cairo (Egypt) and Asia/Gaza (Palestine) do not use daylight saving during the month of Ramadan in order to prevent Muslims from fasting one hour longer. http://www.timeanddate.com/news/time/egypt-ends-dst-2010.htm l http://www.timeanddate.com/news/time/westbank-gaza-end-dst-2 010.html Africa/Casablanca (Marocco) has spent the period from May 2 to Aug 8 using daylight saving. Marocco adopted regular daylight saving, but the start and end dates vary every year. http://www.timeanddate.com/news/time/morocco-starts-dst-2010 .html America/Argentina/San_Luis (Argentina region) local government did not terminate its DST period as planned and instead decided to extend its use of the UTC-3 time indefinitely. http://www.worldtimezone.com/dst_news/dst_news_argentina08.h tml * New zones: America/Bahia_Banderas (Mexican state of Nayarit) has declared that it is to follow the UCT-6 time instead of UCT-7, with the aim to have the same time as the nearby city of Puerto Vallarta. http://www.worldtimezone.com/dst_news/dst_news_mexico08.html * Historical changes: Asia/Taipei information on DST usage listed 1980 as one year using DST, which should read 1979 instead according to government resources. Europe/Helsinki, before switching to Central European standard DST in 1983, trialled DST for two years. However, the database omitted to specify that in these trials of 1981 and 1982, switches have been made one hour earlier than in 1983. * Spelling changes in Micronesia: Pacific/Truk has been renamed to Pacific/Chuuk in 1989. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch timezone-2010l-3011 - openSUSE 11.2: zypper in -t patch timezone-2010l-3011 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 2010l]: timezone-2010l-0.3.1 - openSUSE 11.3 (noarch) [New Version: 2010l]: timezone-java-2010l-0.3.1 - openSUSE 11.2 (i586 x86_64) [New Version: 2010l]: timezone-2010l-0.2.1 - openSUSE 11.2 (noarch) [New Version: 2010l]: timezone-java-2010l-0.2.1 References: https://bugzilla.novell.com/607532 https://bugzilla.novell.com/615937

1 0

openSUSE-RU-2010:0567-1 (low): pinentry-qt: It appears behind other windows and grabs alt+tab. Fixed by this update.
by maintenance＠opensuse.org 30 Aug '10

30 Aug '10

openSUSE Recommended Update: pinentry-qt: It appears behind other windows and grabs alt+tab. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0567-1 Rating: low References: #629502 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: pinentry-qt, when invoked e.g. by kmail, pops behind other windows and grabs focus, making it impossible to bring it on top with Alt+Tab. Fixed by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch pinentry-qt-2986 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): pinentry-qt-0.8.0-17.1.1 References: https://bugzilla.novell.com/629502

1 0

openSUSE-RU-2010:0566-1 (moderate): opensc: This update fixes opensc and packages depending on the provided macro SC_TEST_RET
by maintenance＠opensuse.org 30 Aug '10

30 Aug '10

openSUSE Recommended Update: opensc: This update fixes opensc and packages depending on the provided macro SC_TEST_RET ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0566-1 Rating: moderate References: #627619 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The following bugs are fixed by this update: - opensc and all package depending on the broken macro: SC_TEST_RET. - webkit based browsers (epiphany, midori) freezes when opensc is installed. Warning: If your third party smart card driver was compiled against openSUSE 11.3 and contains references to SC_TEST_RET, you need to recompile it as well. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch eID-belgium-2992 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): eID-belgium-2.6.0-130.1.1 libopensc2-0.11.13-2.1.1 opensc-0.11.13-2.1.1 opensc-devel-0.11.13-2.1.1 - openSUSE 11.3 (x86_64): libopensc2-32bit-0.11.13-2.1.1 opensc-32bit-0.11.13-2.1.1 References: https://bugzilla.novell.com/627619

1 0

openSUSE-RU-2010:0565-1 (low): Gwibber: Fix runtime requires
by maintenance＠opensuse.org 30 Aug '10

30 Aug '10

openSUSE Recommended Update: Gwibber: Fix runtime requires ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0565-1 Rating: low References: #633495 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update adds the previously missing gnome-python-desktop runtime requirement to Gwibber Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch gwibber-3037 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): gnome-python-desktop-2.30.0-1.13 gwibber-2.31.1+bzr720-5.1.1 - openSUSE 11.3 (noarch): gwibber-lang-2.31.1+bzr720-5.1.1 References: https://bugzilla.novell.com/633495

1 0

openSUSE-RU-2010:0564-1 (low): openais: corosync/openais fail to launch on x86_64. Fixed by this update.
by maintenance＠opensuse.org 30 Aug '10

30 Aug '10

openSUSE Recommended Update: openais: corosync/openais fail to launch on x86_64. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0564-1 Rating: low References: #623427 #628243 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: The following bugs are fixed by this update: - Install openais libraries to /usr/lib64 on x86_64 - Fixing corosync startup on x86_64 architecture (bnc#623427) - Make pacemaker conflict with libheartbeat2 < 3.0.0, to ensure the the correct libglue library is installed (bnc#628243) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch libopenais-devel-2985 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): libopenais-devel-1.1.2-2.1.1 libopenais3-1.1.2-2.1.1 libpacemaker-devel-1.1.2.1-2.1.1 libpacemaker3-1.1.2.1-2.1.1 openais-1.1.2-2.1.1 pacemaker-1.1.2.1-2.1.1 References: https://bugzilla.novell.com/623427 https://bugzilla.novell.com/628243

1 0

openSUSE-RU-2010:0562-1 (low): desktop-translations: Translation update
by maintenance＠opensuse.org 30 Aug '10

30 Aug '10

openSUSE Recommended Update: desktop-translations: Translation update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0562-1 Rating: low References: #592237 #615842 #624344 #624991 #632285 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. It includes one version update. Description: Update various translations (desktop menus and YaST texts) and release notes plus translations. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch desktop-translations-2984 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (noarch) [New Version: 11.3.8]: desktop-translations-11.3-12.1.1 release-notes-openSUSE-11.3.8-0.1.1 yast2-trans-2.19.0-16.1.1 yast2-trans-af-2.19.0-16.1.1 yast2-trans-ar-2.19.0-16.1.1 yast2-trans-ast-2.19.0-16.1.1 yast2-trans-bg-2.19.0-16.1.1 yast2-trans-bn-2.19.0-16.1.1 yast2-trans-bs-2.19.0-16.1.1 yast2-trans-ca-2.19.0-16.1.1 yast2-trans-cs-2.19.0-16.1.1 yast2-trans-cy-2.19.0-16.1.1 yast2-trans-da-2.19.0-16.1.1 yast2-trans-de-2.19.0-16.1.1 yast2-trans-el-2.19.0-16.1.1 yast2-trans-en_GB-2.19.0-16.1.1 yast2-trans-en_US-2.19.0-16.1.1 yast2-trans-es-2.19.0-16.1.1 yast2-trans-et-2.19.0-16.1.1 yast2-trans-fa-2.19.0-16.1.1 yast2-trans-fi-2.19.0-16.1.1 yast2-trans-fr-2.19.0-16.1.1 yast2-trans-gl-2.19.0-16.1.1 yast2-trans-gu-2.19.0-16.1.1 yast2-trans-hi-2.19.0-16.1.1 yast2-trans-hr-2.19.0-16.1.1 yast2-trans-hu-2.19.0-16.1.1 yast2-trans-id-2.19.0-16.1.1 yast2-trans-it-2.19.0-16.1.1 yast2-trans-ja-2.19.0-16.1.1 yast2-trans-jv-2.19.0-16.1.1 yast2-trans-ka-2.19.0-16.1.1 yast2-trans-km-2.19.0-16.1.1 yast2-trans-kn-2.19.0-16.1.1 yast2-trans-ko-2.19.0-16.1.1 yast2-trans-ku-2.19.0-16.1.1 yast2-trans-lo-2.19.0-16.1.1 yast2-trans-lt-2.19.0-16.1.1 yast2-trans-mk-2.19.0-16.1.1 yast2-trans-mr-2.19.0-16.1.1 yast2-trans-nb-2.19.0-16.1.1 yast2-trans-nl-2.19.0-16.1.1 yast2-trans-pa-2.19.0-16.1.1 yast2-trans-pl-2.19.0-16.1.1 yast2-trans-pt-2.19.0-16.1.1 yast2-trans-pt_BR-2.19.0-16.1.1 yast2-trans-ro-2.19.0-16.1.1 yast2-trans-ru-2.19.0-16.1.1 yast2-trans-si-2.19.0-16.1.1 yast2-trans-sk-2.19.0-16.1.1 yast2-trans-sl-2.19.0-16.1.1 yast2-trans-sr-2.19.0-16.1.1 yast2-trans-sv-2.19.0-16.1.1 yast2-trans-sw-2.19.0-16.1.1 yast2-trans-ta-2.19.0-16.1.1 yast2-trans-tg-2.19.0-16.1.1 yast2-trans-th-2.19.0-16.1.1 yast2-trans-tr-2.19.0-16.1.1 yast2-trans-uk-2.19.0-16.1.1 yast2-trans-vi-2.19.0-16.1.1 yast2-trans-wa-2.19.0-16.1.1 yast2-trans-xh-2.19.0-16.1.1 yast2-trans-zh_CN-2.19.0-16.1.1 yast2-trans-zh_TW-2.19.0-16.1.1 yast2-trans-zu-2.19.0-16.1.1 References: https://bugzilla.novell.com/592237 https://bugzilla.novell.com/615842 https://bugzilla.novell.com/624344 https://bugzilla.novell.com/624991 https://bugzilla.novell.com/632285

1 0

openSUSE-SU-2010:0561-1 (moderate): xorg-x11-server: Fix multiple bugs and security vulnerabilities
by opensuse-security＠opensuse.org 30 Aug '10

30 Aug '10

openSUSE Security Update: xorg-x11-server: Fix multiple bugs and security vulnerabilities ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0561-1 Rating: moderate References: #546632 #597232 #618152 #623254 #625593 Cross-References: CVE-2010-2240 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that solves one vulnerability and has four fixes is now available. Description: The X.Org X11 Server was updated to fix several bugs and 2 security issues: Two security issues were fixed: CVE-2010-2240: This fix adds a workaround for overlapping stacks and heaps in case of OOM conditions.This workaround is necessary if the kernel is not properly adding guard or gap-pages below the stack. CVE-2010-1166: The fbComposite function in fbpict.c in the Render extension in the X server in X.Org X11R7.1 allows remote authenticated users to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted request, related to an incorrect macro definition. Non-Security Bugs fixed: Fix some shortcomings in the Xdmcp implementation. It used to suppress loopback addresses from the list of potential display addresses to report to xdm, even when talking to xdm through a loopback address. Now only display addresses of the same kind as the xdm connection are reported to xdm. This most notably helps Xvnc servers contacting the local xdm, because they were severely affected by the suppression of loopback addresses. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch xorg-x11-Xvnc-2973 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): xorg-x11-Xvnc-7.5_1.8.0-10.3.1 xorg-x11-server-7.5_1.8.0-10.3.1 xorg-x11-server-extra-7.5_1.8.0-10.3.1 xorg-x11-server-sdk-7.5_1.8.0-10.3.1 References: http://support.novell.com/security/cve/CVE-2010-2240.html https://bugzilla.novell.com/546632 https://bugzilla.novell.com/597232 https://bugzilla.novell.com/618152 https://bugzilla.novell.com/623254 https://bugzilla.novell.com/625593

1 0

openSUSE-RU-2010:0555-1 (low): ivman: Fixed not receiving hal events
by maintenance＠opensuse.org 26 Aug '10

26 Aug '10

openSUSE Recommended Update: ivman: Fixed not receiving hal events ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0555-1 Rating: low References: #525844 #576567 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: ivman was updated to fix two bugs: - #525844: file descriptor leak - #576567: ivman not receiving hal events Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch ivman-2810 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 x86_64): ivman-0.6.14-203.2.1 References: https://bugzilla.novell.com/525844 https://bugzilla.novell.com/576567

1 0

openSUSE-RU-2010:0554-1 (low): ivman: Fixed not receiving hal events
by maintenance＠opensuse.org 26 Aug '10

26 Aug '10

openSUSE Recommended Update: ivman: Fixed not receiving hal events ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0554-1 Rating: low References: #576567 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update of ivman fixes: - #576567: ivman not receiving hal events Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch ivman-2817 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): ivman-0.6.14-208.1.1 References: https://bugzilla.novell.com/576567

1 0

openSUSE-SU-2010:0553-1 (moderate): java-1_6_0-openjdk security update
by opensuse-security＠opensuse.org 26 Aug '10

26 Aug '10

openSUSE Security Update: java-1_6_0-openjdk security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0553-1 Rating: moderate References: #623905 Cross-References: CVE-2010-2548 CVE-2010-2783 Affected Products: openSUSE 11.3 openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: icedtea included in java-1_6_0-openjdk was updated to version 1.8.1 which fixes two security issues: CVE-2010-2783: IcedTea 'Extended JNLP Services' arbitrary file access CVE-2010-2548: IcedTea Incomplete property access check for unsigned applications The new version also fixes many non-security bugs. For details please see http://blog.fuseyism.com/index.php/2010/07/28/icedtea6-181-r eleased/ Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch java-1_6_0-openjdk-3003 - openSUSE 11.2: zypper in -t patch java-1_6_0-openjdk-3003 - openSUSE 11.1: zypper in -t patch java-1_6_0-openjdk-3003 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): java-1_6_0-openjdk-1.6.0.0_b18-1.1.5 java-1_6_0-openjdk-devel-1.6.0.0_b18-1.1.5 java-1_6_0-openjdk-plugin-1.6.0.0_b18-1.1.5 - openSUSE 11.3 (noarch): java-1_6_0-openjdk-demo-1.6.0.0_b18-1.1.5 java-1_6_0-openjdk-javadoc-1.6.0.0_b18-1.1.5 java-1_6_0-openjdk-src-1.6.0.0_b18-1.1.5 - openSUSE 11.2 (i586 x86_64): java-1_6_0-openjdk-1.6.0.0_b18-1.1.3 java-1_6_0-openjdk-devel-1.6.0.0_b18-1.1.3 java-1_6_0-openjdk-plugin-1.6.0.0_b18-1.1.3 - openSUSE 11.2 (noarch): java-1_6_0-openjdk-demo-1.6.0.0_b18-1.1.3 java-1_6_0-openjdk-javadoc-1.6.0.0_b18-1.1.3 java-1_6_0-openjdk-src-1.6.0.0_b18-1.1.3 - openSUSE 11.1 (i586 ppc x86_64): java-1_6_0-openjdk-1.6.0.0_b18-1.2.3 java-1_6_0-openjdk-demo-1.6.0.0_b18-1.2.3 java-1_6_0-openjdk-devel-1.6.0.0_b18-1.2.3 java-1_6_0-openjdk-javadoc-1.6.0.0_b18-1.2.3 java-1_6_0-openjdk-plugin-1.6.0.0_b18-1.2.3 java-1_6_0-openjdk-src-1.6.0.0_b18-1.2.3 References: http://support.novell.com/security/cve/CVE-2010-2548.html http://support.novell.com/security/cve/CVE-2010-2783.html https://bugzilla.novell.com/623905

1 0

openSUSE-SU-2010:0549-1 (critical): freetype2: security update for various bugs
by opensuse-security＠opensuse.org 25 Aug '10

25 Aug '10

openSUSE Security Update: freetype2: security update for various bugs ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0549-1 Rating: critical References: #619562 #628213 #629447 Cross-References: CVE-2010-1797 CVE-2010-2497 CVE-2010-2498 CVE-2010-2499 CVE-2010-2500 CVE-2010-2519 CVE-2010-2520 CVE-2010-2527 CVE-2010-2541 CVE-2010-2805 CVE-2010-2806 CVE-2010-2807 CVE-2010-2808 Affected Products: openSUSE 11.3 openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that fixes 13 vulnerabilities is now available. Description: This update of freetype2 fixes several vulnerabilities that could lead to remote system compromise by executing arbitrary code with user privileges: - CVE-2010-1797: stack-based buffer overflow while processing CFF opcodes - CVE-2010-2497: integer underflow - CVE-2010-2498: invalid free - CVE-2010-2499: buffer overflow - CVE-2010-2500: integer overflow - CVE-2010-2519: heap buffer overflow - CVE-2010-2520: heap buffer overflow - CVE-2010-2527: buffer overflows in the freetype demo - CVE-2010-2541: buffer overflow in ftmulti demo program - CVE-2010-2805: improper bounds checking - CVE-2010-2806: improper bounds checking - CVE-2010-2807: improper type comparisons - CVE-2010-2808: memory corruption flaw by processing certain LWFN fonts Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch libfreetype6-2918 - openSUSE 11.2: zypper in -t patch freetype2-2913 - openSUSE 11.1: zypper in -t patch freetype2-2913 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): libfreetype6-2.3.12-7.1.1 - openSUSE 11.3 (x86_64): libfreetype6-32bit-2.3.12-7.1.1 - openSUSE 11.2 (i586 x86_64): freetype2-2.3.9-2.3.1 freetype2-devel-2.3.9-2.3.1 - openSUSE 11.2 (x86_64): freetype2-32bit-2.3.9-2.3.1 freetype2-devel-32bit-2.3.9-2.3.1 - openSUSE 11.1 (i586 ppc x86_64): freetype2-2.3.7-24.4.1 freetype2-devel-2.3.7-24.4.1 - openSUSE 11.1 (x86_64): freetype2-32bit-2.3.7-24.4.1 freetype2-devel-32bit-2.3.7-24.4.1 - openSUSE 11.1 (ppc): freetype2-64bit-2.3.7-24.4.1 freetype2-devel-64bit-2.3.7-24.4.1 References: http://support.novell.com/security/cve/CVE-2010-1797.html http://support.novell.com/security/cve/CVE-2010-2497.html http://support.novell.com/security/cve/CVE-2010-2498.html http://support.novell.com/security/cve/CVE-2010-2499.html http://support.novell.com/security/cve/CVE-2010-2500.html http://support.novell.com/security/cve/CVE-2010-2519.html http://support.novell.com/security/cve/CVE-2010-2520.html http://support.novell.com/security/cve/CVE-2010-2527.html http://support.novell.com/security/cve/CVE-2010-2541.html http://support.novell.com/security/cve/CVE-2010-2805.html http://support.novell.com/security/cve/CVE-2010-2806.html http://support.novell.com/security/cve/CVE-2010-2807.html http://support.novell.com/security/cve/CVE-2010-2808.html https://bugzilla.novell.com/619562 https://bugzilla.novell.com/628213 https://bugzilla.novell.com/629447

1 0

openSUSE-RU-2010:0548-1 (low): pstoedit: This update fixes an crash of pstoedit when it is called from inkscape.
by maintenance＠opensuse.org 25 Aug '10

25 Aug '10

openSUSE Recommended Update: pstoedit: This update fixes an crash of pstoedit when it is called from inkscape. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0548-1 Rating: low References: #622977 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following bug: * pstoedit crashes in dl_close() when closing plugins. This update fixes this problem. (#622977) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch pstoedit-2952 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64): pstoedit-3.50-7.1.1 - openSUSE 11.3 (i586 x86_64): pstoedit-devel-3.50-7.1.1 References: https://bugzilla.novell.com/622977

1 0

openSUSE-SU-2010:0547-1 (moderate): openldap2: fixed MODRDN DoS, replicating inconsistencies and \0 character-DoS
by opensuse-security＠opensuse.org 25 Aug '10

25 Aug '10

openSUSE Security Update: openldap2: fixed MODRDN DoS, replicating inconsistencies and \0 character-DoS ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0547-1 Rating: moderate References: #555725 #606294 #612430 Cross-References: CVE-2010-0211 CVE-2010-0212 Affected Products: openSUSE 11.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: The following issues have been fixed in OpenLDAP: specially crafted MODRDN operations can crash the OpenLDAP server (CVE-2010-0211 and CVE-2010-0212). also fixed were following bugs: - adding a "postalAdress" Attribute with an embedded NUL value caused the LDAP server to terminate with an assertion failure (bnc#555725, ITS#6379) - Delete Operations happening during the "Refresh" phase of "refreshAndPersist" replication failed to replicate under certain circumstances (bnc#606294, ITS#6555) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.1: zypper in -t patch libldap-2_4-2-2658 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.1 (i586 ppc src x86_64): openldap2-2.4.12-5.6.1 openldap2-client-2.4.12-5.6.1 - openSUSE 11.1 (i586 ppc x86_64): libldap-2_4-2-2.4.12-5.6.1 openldap2-back-meta-2.4.12-5.6.1 openldap2-back-perl-2.4.12-5.6.1 openldap2-devel-2.4.12-5.6.1 - openSUSE 11.1 (x86_64): libldap-2_4-2-32bit-2.4.12-5.6.1 openldap2-devel-32bit-2.4.12-5.6.1 - openSUSE 11.1 (ppc): libldap-2_4-2-64bit-2.4.12-5.6.1 openldap2-devel-64bit-2.4.12-5.6.1 References: http://support.novell.com/security/cve/CVE-2010-0211.html http://support.novell.com/security/cve/CVE-2010-0212.html https://bugzilla.novell.com/555725 https://bugzilla.novell.com/606294 https://bugzilla.novell.com/612430

1 0

openSUSE-SU-2010:0546-1 (moderate): openldap2: fixed MODRDN DoS, replicating inconsistencies and \0 character-DoS
by opensuse-security＠opensuse.org 25 Aug '10

25 Aug '10

openSUSE Security Update: openldap2: fixed MODRDN DoS, replicating inconsistencies and \0 character-DoS ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0546-1 Rating: moderate References: #606294 #612430 Cross-References: CVE-2010-0211 CVE-2010-0212 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: The following issues have been fixed in OpenLDAP: specially crafted MODRDN operations can crash the OpenLDAP server (CVE-2010-0211 and CVE-2010-0212). also fixed was following bug: - Delete Operations happening during the "Refresh" phase of "refreshAndPersist" replication failed to replicate under certain circumstances (bnc#606294, ITS#6555) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch libldap-2_4-2-2657 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 src x86_64): openldap2-2.4.17-5.4.1 openldap2-client-2.4.17-5.4.1 - openSUSE 11.2 (i586 x86_64): libldap-2_4-2-2.4.17-5.4.1 openldap2-back-meta-2.4.17-5.4.1 openldap2-back-perl-2.4.17-5.4.1 openldap2-devel-2.4.17-5.4.1 - openSUSE 11.2 (x86_64): libldap-2_4-2-32bit-2.4.17-5.4.1 openldap2-devel-32bit-2.4.17-5.4.1 References: http://support.novell.com/security/cve/CVE-2010-0211.html http://support.novell.com/security/cve/CVE-2010-0212.html https://bugzilla.novell.com/606294 https://bugzilla.novell.com/612430

1 0

openSUSE-RU-2010:0545-1 (important): lxdm: Collective update for lxdm
by maintenance＠opensuse.org 25 Aug '10

25 Aug '10

openSUSE Recommended Update: lxdm: Collective update for lxdm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0545-1 Rating: important References: #619769 #629728 #630862 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update fixes the following bugs: * bnc#629728 : lxdm run greeters as root user, this update fix lxdm and add lxdm user/group * bnc#630862 : lxdm can't login when space in password * bnc#619769 : lxdm doesn't switch to tty1 and no splash screen is showed Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch lxdm-2945 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64): lxdm-0.2.97_git20100730-0.1.1 References: https://bugzilla.novell.com/619769 https://bugzilla.novell.com/629728 https://bugzilla.novell.com/630862

1 0

openSUSE-SU-2010:0540-1 (important): opera: version 10.61 fixes various vulnerabilities
by opensuse-security＠opensuse.org 25 Aug '10

25 Aug '10

openSUSE Security Update: opera: version 10.61 fixes various vulnerabilities ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0540-1 Rating: important References: #630771 Cross-References: CVE-2010-2576 CVE-2010-3019 CVE-2010-3020 CVE-2010-3021 Affected Products: openSUSE 11.3 openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. It includes one version update. Description: This update of opera fixes the following vulnerabilities: - CVE-2010-2576: CVSS v2 Base Score: 6.8 (CWE-94): unexpected changes in tab focus could be used to run programs from the Internet, as reported by Jakob Balle and Sven Krewitt of Secunia - CVE-2010-3019: CVSS v2 Base Score: 9.3 (CWE-119): heap buffer overflow in HTML5 canvas could be used to execute arbitrary code, as reported by Kuzzcc - CVE-2010-3020: CVSS v2 Base Score: 5.0 (CWE-264): news feed preview could subscribe to feeds without interaction, as reported by Alexios Fakos - CVE-2010-3021: CVSS v2 Base Score: 4.3 (CWE-399): remote attackers could trigger a remote denial of service (CPU consumption and application hang) via an animated PNG image Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch opera-2991 - openSUSE 11.2: zypper in -t patch opera-2991 - openSUSE 11.1: zypper in -t patch opera-2991 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 10.61]: opera-10.61-0.1.1 - openSUSE 11.2 (i586 x86_64) [New Version: 10.61]: opera-10.61-0.1.1 - openSUSE 11.1 (i586 ppc x86_64) [New Version: 10.61]: opera-10.61-0.1.1 References: http://support.novell.com/security/cve/CVE-2010-2576.html http://support.novell.com/security/cve/CVE-2010-3019.html http://support.novell.com/security/cve/CVE-2010-3020.html http://support.novell.com/security/cve/CVE-2010-3021.html https://bugzilla.novell.com/630771

1 0

openSUSE-RU-2010:0535-1 (moderate): mount.cifs: Does not appear to support the (documented, preferred) credentials option. Fixed by this update.
by maintenance＠opensuse.org 23 Aug '10

23 Aug '10

openSUSE Recommended Update: mount.cifs: Does not appear to support the (documented, preferred) credentials option. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0535-1 Rating: moderate References: #618877 #620856 #621525 #623763 #627243 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. It includes one version update. Description: The following bug is fixed with this update: - #618877: mount.cifs does not appear to support the (documented, preferred) credentials option Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch cifs-utils-2946 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64) [New Version: 4.6]: cifs-utils-4.6-1.1.1 References: https://bugzilla.novell.com/618877 https://bugzilla.novell.com/620856 https://bugzilla.novell.com/621525 https://bugzilla.novell.com/623763 https://bugzilla.novell.com/627243

1 0

openSUSE-RU-2010:0534-1 (important): cpio: It crashes on non existing pattern file. Fixed by this update.
by maintenance＠opensuse.org 23 Aug '10

23 Aug '10

openSUSE Recommended Update: cpio: It crashes on non existing pattern file. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0534-1 Rating: important References: #629860 Affected Products: openSUSE 11.3 openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: cpio crashes on non existing pattern file (cpio -i -E no-file) because of improper error checking. Fixed by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch cpio-2947 - openSUSE 11.2: zypper in -t patch cpio-2947 - openSUSE 11.1: zypper in -t patch cpio-2947 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64): cpio-2.11-4.1.1 - openSUSE 11.3 (noarch): cpio-lang-2.11-4.1.1 - openSUSE 11.2 (i586 src x86_64): cpio-2.10-4.3.1 - openSUSE 11.2 (noarch): cpio-lang-2.10-4.3.1 - openSUSE 11.1 (i586 ppc src x86_64): cpio-2.9-75.46.1 - openSUSE 11.1 (i586 ppc x86_64): cpio-lang-2.9-75.46.1 References: https://bugzilla.novell.com/629860

1 0

openSUSE-RU-2010:0533-1 (low): smpppd: allow to control non-dialup interfaces
by maintenance＠opensuse.org 23 Aug '10

23 Aug '10

openSUSE Recommended Update: smpppd: allow to control non-dialup interfaces ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0533-1 Rating: low References: #628138 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: smpppd ignored non-dialup interfaces even if USERCONTROL was set to "yes". This update enables support for such interfaces again. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch smpppd-2940 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64) [New Version: 1.60.46]: smpppd-1.60.46-1.1.1 References: https://bugzilla.novell.com/628138

1 0

openSUSE-RU-2010:0532-1 (low): pulseaudio: Fix setup-pulseaudio script to set up the environment variables correctly.
by maintenance＠opensuse.org 23 Aug '10

23 Aug '10

openSUSE Recommended Update: pulseaudio: Fix setup-pulseaudio script to set up the environment variables correctly. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0532-1 Rating: low References: #619859 #623837 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: The setup-pulseaudio script included in 11.3 pulseaudio package doesn't set the environment variables correctly for enabling/disabling PulseAudio support. This update fixes the script so that the variables are properly set. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch libpulse-browse0-2948 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64): pulseaudio-0.9.21-10.1.1 - openSUSE 11.3 (i586 x86_64): libpulse-browse0-0.9.21-10.1.1 libpulse-devel-0.9.21-10.1.1 libpulse-mainloop-glib0-0.9.21-10.1.1 libpulse0-0.9.21-10.1.1 pulseaudio-esound-compat-0.9.21-10.1.1 pulseaudio-gdm-hooks-0.9.21-10.1.1 pulseaudio-module-bluetooth-0.9.21-10.1.1 pulseaudio-module-gconf-0.9.21-10.1.1 pulseaudio-module-jack-0.9.21-10.1.1 pulseaudio-module-lirc-0.9.21-10.1.1 pulseaudio-module-x11-0.9.21-10.1.1 pulseaudio-module-zeroconf-0.9.21-10.1.1 pulseaudio-utils-0.9.21-10.1.1 - openSUSE 11.3 (x86_64): libpulse-mainloop-glib0-32bit-0.9.21-10.1.1 libpulse0-32bit-0.9.21-10.1.1 - openSUSE 11.3 (noarch): pulseaudio-lang-0.9.21-10.1.1 References: https://bugzilla.novell.com/619859 https://bugzilla.novell.com/623837

1 0

openSUSE-RU-2010:0531-1 (low): NetworkManager: Remove call to NFS restart
by maintenance＠opensuse.org 23 Aug '10

23 Aug '10

openSUSE Recommended Update: NetworkManager: Remove call to NFS restart ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0531-1 Rating: low References: #559021 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The NetworkManager start does no longer run NFS restart during NetworkManager startup (bnc#559021) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch NetworkManager-2941 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64): NetworkManager-0.8-8.2.1 - openSUSE 11.3 (i586 x86_64): NetworkManager-devel-0.8-8.2.1 NetworkManager-doc-0.8-8.2.1 NetworkManager-glib-0.8-8.2.1 References: https://bugzilla.novell.com/559021

1 0

openSUSE-RU-2010:0530-1 (moderate): inputattach: Fix syntax errors in the init script
by maintenance＠opensuse.org 23 Aug '10

23 Aug '10

openSUSE Recommended Update: inputattach: Fix syntax errors in the init script ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0530-1 Rating: moderate References: #629911 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes bug #629911 that causes syntax error whenever trying to run the init script. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch input-utils-2927 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64): input-utils-2007.06.22-165.1.1 References: https://bugzilla.novell.com/629911

1 0

openSUSE-SU-2010:0430-4 (important): MozillaThunderbird: Update to 3.0.6 security release
by opensuse-security＠opensuse.org 23 Aug '10

23 Aug '10

openSUSE Security Update: MozillaThunderbird: Update to 3.0.6 security release ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0430-4 Rating: important References: #622506 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. It includes two new package versions. Description: This update brings Mozilla Thunderbird to the 3.0.6 security release. It fixes following security bugs: MFSA 2010-34 / CVE-2010-1211: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code. Jesse Ruderman, Ehsan Akhgari, Mats Palmgren, Igor Bukanov, Gary Kwong, Tobias Markus and Daniel Holbert reported memory safety problems that affected Firefox 3.6 and Firefox 3.5. MFSA 2010-39 / CVE-2010-2752: Security researcher J23 reported via TippingPoint's Zero Day Initiative that an array class used to store CSS values contained an integer overflow vulnerability. The 16 bit integer value used in allocating the size of the array could overflow, resulting in too small a memory buffer being created. When the array was later populated with CSS values data would be written past the end of the buffer potentially resulting in the execution of attacker-controlled memory. MFSA 2010-40 / CVE-2010-2753: Security researcher regenrecht reported via TippingPoint's Zero Day Initiative an integer overflow vulnerability in the implementation of the XUL <tree> element's selection attribute. When the size of a new selection is sufficiently large the integer used in calculating the length of the selection can overflow, resulting in a bogus range being marked selected. When adjustSelection is then called on the bogus range the range is deleted leaving dangling references to the ranges which could be used by an attacker to call into deleted memory and run arbitrary code on a victim's computer. MFSA 2010-41 / CVE-2010-1205: OUSPG researcher Aki Helin reported a buffer overflow in Mozilla graphics code which consumes image data processed by libpng. A malformed PNG file could be created which would cause libpng to incorrectly report the size of the image to downstream consumers. When the dimensions of such images are underreported, the Mozilla code responsible for displaying the graphic will allocate too small a memory buffer to contain the image data and will wind up writing data past the end of the buffer. This could result in the execution of attacker-controlled memory. MFSA 2011-42 / CVE-2010-1213: Security researcher Yosuke Hasegawa reported that the Web Worker method importScripts can read and parse resources from other domains even when the content is not valid JavaScript. This is a violation of the same-origin policy and could be used by an attacker to steal information from other sites. MFSA 2010-46 / CVE-2010-0654: Google security researcher Chris Evans reported that data can be read across domains by injecting bogus CSS selectors into a target site and then retrieving the data using JavaScript APIs. If an attacker can inject opening and closing portions of a CSS selector into points A and B of a target page, then the region between the two injection points becomes readable to JavaScript through, for example, the getComputedStyle() API. MFSA 2010-47 / CVE-2010-2754: Security researcher Soroush Dalili reported that potentially sensitive URL parameters could be leaked across domains upon script errors when the script filename and line number is included in the error message. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch MozillaThunderbird-2755 - openSUSE 11.2: zypper in -t patch MozillaThunderbird-2755 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64) [New Version: 3.0.6]: MozillaThunderbird-3.0.6-0.1.1 - openSUSE 11.3 (i586 x86_64) [New Version: 3.0.6]: MozillaThunderbird-devel-3.0.6-0.1.1 MozillaThunderbird-translations-common-3.0.6-0.1.1 MozillaThunderbird-translations-other-3.0.6-0.1.1 enigmail-1.0.1-3.1.1 - openSUSE 11.2 (i586 src x86_64) [New Version: 3.0.6]: MozillaThunderbird-3.0.6-0.1.1 - openSUSE 11.2 (i586 x86_64) [New Version: 1.0.1 and 3.0.6]: MozillaThunderbird-devel-3.0.6-0.1.1 MozillaThunderbird-translations-common-3.0.6-0.1.1 MozillaThunderbird-translations-other-3.0.6-0.1.1 enigmail-1.0.1-1.1.1 References: https://bugzilla.novell.com/622506

1 0

openSUSE-RU-2010:0528-1 (moderate): xfig: After the last security update for ghostscript it is unable to import .eps files. Fixed by this update.
by maintenance＠opensuse.org 19 Aug '10

19 Aug '10

openSUSE Recommended Update: xfig: After the last security update for ghostscript it is unable to import .eps files. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0528-1 Rating: moderate References: #629462 Affected Products: openSUSE 11.3 openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The following bug is fixed by this update: After the last security update for ghostscript, xfig is unable to import .eps files (bnc#629462) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch xfig-2905 - openSUSE 11.2: zypper in -t patch xfig-2905 - openSUSE 11.1: zypper in -t patch xfig-2905 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64): xfig-3.2.5b-6.1.1 - openSUSE 11.2 (i586 src x86_64): xfig-3.2.5-136.2.1 - openSUSE 11.1 (i586 ppc src x86_64): xfig-3.2.5-92.60.1 References: https://bugzilla.novell.com/629462

1 0

openSUSE-RU-2010:0527-1 (low): exiv2: Add pkg-config provides
by maintenance＠opensuse.org 19 Aug '10

19 Aug '10

openSUSE Recommended Update: exiv2: Add pkg-config provides ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0527-1 Rating: low References: #625466 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update adds pkg-config provides to the package. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch exiv2-2928 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64): exiv2-0.19-5.1.1 - openSUSE 11.3 (i586 x86_64): libexiv2-6-0.19-5.1.1 libexiv2-devel-0.19-5.1.1 - openSUSE 11.3 (x86_64): libexiv2-6-32bit-0.19-5.1.1 - openSUSE 11.3 (noarch): exiv2-lang-0.19-5.1.1 References: https://bugzilla.novell.com/625466

1 0

openSUSE-RU-2010:0525-1 (low): cups-drivers-splix: splix should not contain PPDs for printers which require JBIG. Fixed by this update.
by maintenance＠opensuse.org 19 Aug '10

19 Aug '10

openSUSE Recommended Update: cups-drivers-splix: splix should not contain PPDs for printers which require JBIG. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0525-1 Rating: low References: #628698 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update remove all PPD files that require the patented JBIG library. This update also fix PPDs paths. Cups is now able to locate CMS files. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch cups-drivers-splix-2923 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64): cups-drivers-splix-2.0.0-2.1.1 References: https://bugzilla.novell.com/628698

1 0

openSUSE-RU-2010:0524-1 (low): lvm2: "lvcreate --snapshot" results in scary error messages. Fixed by this update.
by maintenance＠opensuse.org 19 Aug '10

19 Aug '10

openSUSE Recommended Update: lvm2: "lvcreate --snapshot" results in scary error messages. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0524-1 Rating: low References: #556177 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: "lvcreate --snapshot" results in scary error messages to console and /var/log/messages. This bug is fixed by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch device-mapper-2924 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64): device-mapper-1.02.49-4.1.1 lvm2-2.02.67-4.1.1 - openSUSE 11.3 (i586 x86_64): device-mapper-devel-1.02.49-4.1.1 - openSUSE 11.3 (x86_64): device-mapper-32bit-1.02.49-4.1.1 References: https://bugzilla.novell.com/556177

1 0

openSUSE-SU-2010:0519-1 (moderate): perl: Fixed two Safe.pm security issues and some bugs
by opensuse-security＠opensuse.org 18 Aug '10

18 Aug '10

openSUSE Security Update: perl: Fixed two Safe.pm security issues and some bugs ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0519-1 Rating: moderate References: #446098 #515948 #528423 #557636 #588338 #596167 #601242 #603840 #605918 #605928 Affected Products: openSUSE 11.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: perl Safe.pm module was affected by two problems where attackers could break out of such a safed execution. (CVE-2010-1447 , CVE-2010-1168) This update fixes this problem. Also the following bugs were fixed: - fix tell cornercase [bnc#596167] - fix regex memory leak [bnc#557636] - also run h2ph on /usr/include/linux [bnc#603840] - backport h2ph include fix from 5.12.0 [bnc#601242] - fix segfault when using regexpes in threaded apps [bnc#588338] - backport upstream fixes for POSIX module to avoid clashes with Fcntl [bnc#446098], [bnc#515948] - backport upstream fix for ISA assertion failure [bnc#528423] - move unicode files from perl-doc to perl, otherwise some perl modules will not work Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.1: zypper in -t patch perl-2829 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.1 (i586 ppc src x86_64): perl-5.10.0-62.19.1 - openSUSE 11.1 (i586 ppc x86_64): perl-base-5.10.0-62.19.1 perl-doc-5.10.0-62.19.1 - openSUSE 11.1 (x86_64): perl-32bit-5.10.0-62.19.1 perl-base-32bit-5.10.0-62.19.1 - openSUSE 11.1 (ppc): perl-64bit-5.10.0-62.19.1 perl-base-64bit-5.10.0-62.19.1 References: https://bugzilla.novell.com/446098 https://bugzilla.novell.com/515948 https://bugzilla.novell.com/528423 https://bugzilla.novell.com/557636 https://bugzilla.novell.com/588338 https://bugzilla.novell.com/596167 https://bugzilla.novell.com/601242 https://bugzilla.novell.com/603840 https://bugzilla.novell.com/605918 https://bugzilla.novell.com/605928

1 0

openSUSE-SU-2010:0518-1 (moderate): perl: Fixed two Safe.pm security issues and some bugs
by opensuse-security＠opensuse.org 18 Aug '10

18 Aug '10

openSUSE Security Update: perl: Fixed two Safe.pm security issues and some bugs ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0518-1 Rating: moderate References: #557636 #596167 #601242 #603840 #605918 #605928 #624628 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: perl Safe.pm module was affected by two problems where attackers could break out of such a safed execution. (CVE-2010-1447 , CVE-2010-1168) This update fixes this problem. Also following non-security bugs were fixed: - fix tell cornercase [bnc#596167] - fix regex memory leak [bnc#557636] - do not add vendorlib/auto to filelist [bnc#624628] - also run h2ph on /usr/include/linux [bnc#603840] - backport h2ph include fix from 5.12.0 [bnc#601242] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch perl-2830 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 src x86_64): perl-5.10.0-72.7.1 - openSUSE 11.2 (i586 x86_64): perl-base-5.10.0-72.7.1 perl-doc-5.10.0-72.7.1 - openSUSE 11.2 (x86_64): perl-32bit-5.10.0-72.7.1 perl-base-32bit-5.10.0-72.7.1 References: https://bugzilla.novell.com/557636 https://bugzilla.novell.com/596167 https://bugzilla.novell.com/601242 https://bugzilla.novell.com/603840 https://bugzilla.novell.com/605918 https://bugzilla.novell.com/605928 https://bugzilla.novell.com/624628

1 0

openSUSE-RU-2010:0515-1 (low): xaw3d: xterm doesn't use the right xaw3d libs. This is fixed by this update.
by maintenance＠opensuse.org 17 Aug '10

17 Aug '10

openSUSE Recommended Update: xaw3d: xterm doesn't use the right xaw3d libs. This is fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0515-1 Rating: low References: #627314 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The following bug is fixed by this update: - #627314: xterm doesn't use xaw3d libs as the 3D version for libXaw7.so is missed Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch xaw3d-2911 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64): xaw3d-1.5E-417.1.1 - openSUSE 11.3 (i586 x86_64): xaw3d-devel-1.5E-417.1.1 xaw3dd-1.5E-417.1.1 - openSUSE 11.3 (x86_64): xaw3d-32bit-1.5E-417.1.1 References: https://bugzilla.novell.com/627314

1 0

openSUSE-RU-2010:0514-1 (low): dhcp: This update fixes the ldap-support for dhcp-server and fixes the NetworkManager dhcp-client classless route option compatibility.
by maintenance＠opensuse.org 17 Aug '10

17 Aug '10

openSUSE Recommended Update: dhcp: This update fixes the ldap-support for dhcp-server and fixes the NetworkManager dhcp-client classless route option compatibility. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0514-1 Rating: low References: #625358 #625770 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following bugs: - #625358: ldap option number in consistence causing a conflict with new 4.x options in the dhcp-server. - #625770: Renamed rfc3442-classless-static-routes_raw in /etc/dhclient.conf to rfc3442-classless-static-routes for compatibility with the NetworkManager making use of /etc/dhclient.conf now and adopted /sbin/dhclient-script to use the new option variable. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch dhcp-2907 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64): dhcp-4.1.1.P1-4.1.1 - openSUSE 11.3 (i586 x86_64): dhcp-client-4.1.1.P1-4.1.1 dhcp-devel-4.1.1.P1-4.1.1 dhcp-doc-4.1.1.P1-4.1.1 dhcp-relay-4.1.1.P1-4.1.1 dhcp-server-4.1.1.P1-4.1.1 References: https://bugzilla.novell.com/625358 https://bugzilla.novell.com/625770

1 0

openSUSE-RU-2010:0513-1 (low): tomoe: "Handwriting recognation" doesn't work. Fixed by this update.
by maintenance＠opensuse.org 17 Aug '10

17 Aug '10

openSUSE Recommended Update: tomoe: "Handwriting recognation" doesn't work. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0513-1 Rating: low References: #625396 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The following bug is fixed by this update: - #625396: Tomoe handwriting recognition does not work (SCIM) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch tomoe-2909 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64): tomoe-0.6.0-31.1.1 - openSUSE 11.3 (i586 x86_64): tomoe-devel-0.6.0-31.1.1 tomoe-doc-0.6.0-31.1.1 References: https://bugzilla.novell.com/625396

1 0

openSUSE-RU-2010:0512-1 (moderate): jedit: It refuses to start due wrong bsh2 version. Fixed by this update.
by maintenance＠opensuse.org 17 Aug '10

17 Aug '10

openSUSE Recommended Update: jedit: It refuses to start due wrong bsh2 version. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0512-1 Rating: moderate References: #629375 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: jedit refuses to start, because it's not compatible with bsh2 2.0.0b5 distributed with openSUSE 11.3. This update adds the older compatible bsh2 version to make jedit working again. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch jedit-2917 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (noarch src): jedit-4.2-315.1.1 - openSUSE 11.3 (noarch): jedit-javadoc-4.2-315.1.1 References: https://bugzilla.novell.com/629375

1 0

openSUSE-RU-2010:0511-1 (moderate): cheese: Starting cheese results in a segmentation fault. Fixed by this update.
by maintenance＠opensuse.org 17 Aug '10

17 Aug '10

openSUSE Recommended Update: cheese: Starting cheese results in a segmentation fault. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0511-1 Rating: moderate References: #623292 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Cheese was creating a camera device even when GStreamer initialization failed. Trying to use this device later resulted in a segmentation fault. This update resolves this problem (bnc #623292). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch cheese-2906 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64): cheese-2.30.1-2.1.1 - openSUSE 11.3 (i586 x86_64): cheese-devel-2.30.1-2.1.1 libcheese-gtk18-2.30.1-2.1.1 - openSUSE 11.3 (noarch): cheese-lang-2.30.1-2.1.1 References: https://bugzilla.novell.com/623292

1 0

openSUSE-RU-2010:0510-1 (low): mdadm: This update fixes a invalid command syntax in /etc/init.d/boot.md
by maintenance＠opensuse.org 16 Aug '10

16 Aug '10

openSUSE Recommended Update: mdadm: This update fixes a invalid command syntax in /etc/init.d/boot.md ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0510-1 Rating: low References: #565293 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: On systems with self-compiled kernels that have the md driver built as module, the /etc/init.d/boot.md script calls modprobe incorrectly. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch mdadm-2910 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 src x86_64): mdadm-3.0.2-2.3.1 References: https://bugzilla.novell.com/565293

1 0

openSUSE-RU-2010:0509-1 (moderate): lxsession: Logout doesn't work properly without hal. Fixed by this update.
by maintenance＠opensuse.org 16 Aug '10

16 Aug '10

openSUSE Recommended Update: lxsession: Logout doesn't work properly without hal. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0509-1 Rating: moderate References: #627416 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The following bug is fixed by this update: - lxsession-logout can finally fully work without HAL Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch lxsession-2921 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64): lxsession-0.4.4-3.2.1 References: https://bugzilla.novell.com/627416

1 0

openSUSE-RU-2010:0508-1 (important): anjuta: This update fixes a crash on start caused through a missing package dependency.
by maintenance＠opensuse.org 16 Aug '10

16 Aug '10

openSUSE Recommended Update: anjuta: This update fixes a crash on start caused through a missing package dependency. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0508-1 Rating: important References: #624924 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Anjuta crashes after start because of a missing dependency. The package "libgda-sqlite" was missing in the requirements. Fixed by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch anjuta-2896 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64): anjuta-2.30.1.0-3.1.1 - openSUSE 11.3 (i586 x86_64): anjuta-devel-2.30.1.0-3.1.1 anjuta-doc-2.30.1.0-3.1.1 - openSUSE 11.3 (noarch): anjuta-lang-2.30.1.0-3.1.1 References: https://bugzilla.novell.com/624924

1 0

openSUSE-RU-2010:0507-1 (low): xmms2-devel: It does not install xmms runtime libraries. Fixed by this update.
by maintenance＠opensuse.org 16 Aug '10

16 Aug '10

openSUSE Recommended Update: xmms2-devel: It does not install xmms runtime libraries. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0507-1 Rating: low References: #627610 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fix xmms2-devel missing dependencies. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch libxmmsclient++-glib1-2925 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64): xmms2-0.7-10.1.1 - openSUSE 11.3 (i586 x86_64): libxmmsclient++-glib1-0.7-10.1.1 libxmmsclient++4-0.7-10.1.1 libxmmsclient-glib1-0.7-10.1.1 libxmmsclient6-0.7-10.1.1 python-xmms2-0.7-10.1.1 xmms2-devel-0.7-10.1.1 xmms2-docs-0.7-10.1.1 xmms2-perl-0.7-10.1.1 xmms2-plugin-airplay-0.7-10.1.1 xmms2-plugin-ao-0.7-10.1.1 xmms2-plugin-apefile-0.7-10.1.1 xmms2-plugin-asf-0.7-10.1.1 xmms2-plugin-asx-0.7-10.1.1 xmms2-plugin-base-0.7-10.1.1 xmms2-plugin-cdda-0.7-10.1.1 xmms2-plugin-cue-0.7-10.1.1 xmms2-plugin-curl-0.7-10.1.1 xmms2-plugin-daap-0.7-10.1.1 xmms2-plugin-flac-0.7-10.1.1 xmms2-plugin-flv-0.7-10.1.1 xmms2-plugin-gvfs-0.7-10.1.1 xmms2-plugin-html-0.7-10.1.1 xmms2-plugin-ices-0.7-10.1.1 xmms2-plugin-icymetaint-0.7-10.1.1 xmms2-plugin-id3v2-0.7-10.1.1 xmms2-plugin-jack-0.7-10.1.1 xmms2-plugin-karaoke-0.7-10.1.1 xmms2-plugin-m3u-0.7-10.1.1 xmms2-plugin-modplug-0.7-10.1.1 xmms2-plugin-mp4-0.7-10.1.1 xmms2-plugin-musepack-0.7-10.1.1 xmms2-plugin-normalize-0.7-10.1.1 xmms2-plugin-ofa-0.7-10.1.1 xmms2-plugin-pulse-0.7-10.1.1 xmms2-plugin-samba-0.7-10.1.1 xmms2-plugin-speex-0.7-10.1.1 xmms2-plugin-tta-0.7-10.1.1 xmms2-plugin-vocoder-0.7-10.1.1 xmms2-plugin-wave-0.7-10.1.1 xmms2-plugin-wavpack-0.7-10.1.1 xmms2-ruby-0.7-10.1.1 References: https://bugzilla.novell.com/627610

1 0

openSUSE-RU-2010:0506-1 (low): release-notes-openSUSE: Enhancements and translation update
by maintenance＠opensuse.org 13 Aug '10

13 Aug '10

openSUSE Recommended Update: release-notes-openSUSE: Enhancements and translation update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0506-1 Rating: low References: #627596 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: Update to version 11.3.7: * New entry: SSH Public Key Authentication (bnc#627596). * Update translations. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch release-notes-openSUSE-2899 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (noarch src) [New Version: 11.3.7]: release-notes-openSUSE-11.3.7-0.1.1 References: https://bugzilla.novell.com/627596

1 0

openSUSE-RU-2010:0504-1 (low): hal: This update fixes a hald-probe-input crash
by maintenance＠opensuse.org 12 Aug '10

12 Aug '10

openSUSE Recommended Update: hal: This update fixes a hald-probe-input crash ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0504-1 Rating: low References: #577489 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Fixes segmentation fault in hald-probe-input. The cause was an error structure before initialization (bnc#577489). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch hal-2884 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64): hal-0.5.14-9.1.1 - openSUSE 11.3 (i586 x86_64): hal-devel-0.5.14-9.1.1 - openSUSE 11.3 (x86_64): hal-32bit-0.5.14-9.1.1 hal-devel-32bit-0.5.14-9.1.1 References: https://bugzilla.novell.com/577489

1 0

openSUSE-SU-2010:0502-1 (critical): flash-player: Updated to security update version 10.1.82.76
by opensuse-security＠opensuse.org 12 Aug '10

12 Aug '10

openSUSE Security Update: flash-player: Updated to security update version 10.1.82.76 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0502-1 Rating: critical References: #630108 Cross-References: CVE-2010-0209 CVE-2010-2188 CVE-2010-2213 CVE-2010-2214 CVE-2010-2216 Affected Products: openSUSE 11.3 openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. It includes one version update. Description: Flash Player was updated to version 10.1.82.76 fixing several critical security issues. CVE-2010-0209, CVE-2010-2188, CVE-2010-2213, CVE-2010-2214, CVE2010-2215, CVE-2010-2216 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch flash-player-2895 - openSUSE 11.2: zypper in -t patch flash-player-2895 - openSUSE 11.1: zypper in -t patch flash-player-2895 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src) [New Version: 10.1.82.76]: flash-player-10.1.82.76-0.1.1 - openSUSE 11.2 (i586 src) [New Version: 10.1.82.76]: flash-player-10.1.82.76-0.1.1 - openSUSE 11.1 (i586 src) [New Version: 10.1.82.76]: flash-player-10.1.82.76-0.1.1 References: http://support.novell.com/security/cve/CVE-2010-0209.html http://support.novell.com/security/cve/CVE-2010-2188.html http://support.novell.com/security/cve/CVE-2010-2213.html http://support.novell.com/security/cve/CVE-2010-2214.html http://support.novell.com/security/cve/CVE-2010-2216.html https://bugzilla.novell.com/630108

1 0

openSUSE-SU-2010:0500-1 (low): pcsc-lite: fix for CVE-2009-4901 and CVE-2009-4902
by opensuse-security＠opensuse.org 12 Aug '10

12 Aug '10

openSUSE Security Update: pcsc-lite: fix for CVE-2009-4901 and CVE-2009-4902 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0500-1 Rating: low References: #629026 Cross-References: CVE-2009-4901 CVE-2009-4902 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update of pcsc-liste fixes two vulnerabilities: - CVE-2009-4901: local denial of service (daemon crash) via crafted SCARD_SET_ATTRIB message data, a related issue to CVE-2010-0407. - CVE-2009-4902: a buffer overflow might allow local users to gain privileges via crafted SCARD_CONTROL message data, this vulnerability exists because of an incorrect fix for CVE-2010-0407. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch libpcsclite1-2908 - openSUSE 11.2: zypper in -t patch libpcsclite1-2908 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64): pcsc-lite-1.5.5-7.1.1 - openSUSE 11.3 (i586 x86_64): libpcsclite1-1.5.5-7.1.1 pcsc-lite-devel-1.5.5-7.1.1 - openSUSE 11.3 (x86_64): libpcsclite1-32bit-1.5.5-7.1.1 - openSUSE 11.2 (i586 src x86_64): pcsc-lite-1.5.5-2.2.1 - openSUSE 11.2 (i586 x86_64): libpcsclite1-1.5.5-2.2.1 pcsc-lite-devel-1.5.5-2.2.1 - openSUSE 11.2 (x86_64): libpcsclite1-32bit-1.5.5-2.2.1 References: http://support.novell.com/security/cve/CVE-2009-4901.html http://support.novell.com/security/cve/CVE-2009-4902.html https://bugzilla.novell.com/629026

1 0

openSUSE-RU-2010:0498-1 (low): yast2-add-on-creator: Yast Add-on Creator build broken addons when multiple addons at one time are created. Fixed by this update.
by maintenance＠opensuse.org 11 Aug '10

11 Aug '10

openSUSE Recommended Update: yast2-add-on-creator: Yast Add-on Creator build broken addons when multiple addons at one time are created. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0498-1 Rating: low References: #540627 #623036 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. It includes two new package versions. Description: Yast Add-on Creator build broken addons when multiple addons at one time are created. Fixed by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch yast2-add-on-creator-2886 - openSUSE 11.2: zypper in -t patch yast2-add-on-creator-2886 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (noarch src) [New Version: 2.19.2]: yast2-add-on-creator-2.19.2-1.1.1 - openSUSE 11.2 (noarch src) [New Version: 2.18.9]: yast2-add-on-creator-2.18.9-0.1.1 References: https://bugzilla.novell.com/540627 https://bugzilla.novell.com/623036

1 0

openSUSE-RU-2010:0497-1 (low): sysvinit: "startproc/checkproc/killproc" do not work with scripts. Fixed by this update.
by maintenance＠opensuse.org 10 Aug '10

10 Aug '10

openSUSE Recommended Update: sysvinit: "startproc/checkproc/killproc" do not work with scripts. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0497-1 Rating: low References: #559534 #623766 Affected Products: openSUSE 11.3 openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: "startproc/checkproc/killproc" do not work with scripts. Fixed by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch sysvinit-2856 - openSUSE 11.2: zypper in -t patch sysvinit-2856 - openSUSE 11.1: zypper in -t patch sysvinit-2856 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64): sysvinit-2.88-10.1.1 - openSUSE 11.3 (i586 x86_64): sysvinit-tools-2.88-10.1.1 - openSUSE 11.2 (i586 src x86_64): sysvinit-2.86-215.3.1 - openSUSE 11.1 (i586 ppc src x86_64): sysvinit-2.86-186.18.1 References: https://bugzilla.novell.com/559534 https://bugzilla.novell.com/623766

1 0

openSUSE-SU-2010:0496-1 (important): strongswan: fixing snprintf overflows
by opensuse-security＠opensuse.org 10 Aug '10

10 Aug '10

openSUSE Security Update: strongswan: fixing snprintf overflows ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0496-1 Rating: important References: #615915 Cross-References: CVE-2010-2628 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Remote unauthenticated attackers could cause a buffer overflow in strongswan's IKE deamon by using specially crafted certificates or identify information. Attackers could potentially exploit that to execute code (CVE-2010-2628). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch strongswan-2855 - openSUSE 11.2: zypper in -t patch strongswan-2855 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64): strongswan-4.4.0-4.1.1 - openSUSE 11.3 (i586 x86_64): strongswan-doc-4.4.0-4.1.1 strongswan-ikev1-4.4.0-4.1.1 strongswan-ikev2-4.4.0-4.1.1 strongswan-ipsec-4.4.0-4.1.1 strongswan-libs0-4.4.0-4.1.1 strongswan-nm-4.4.0-4.1.1 - openSUSE 11.2 (i586 src x86_64): strongswan-4.3.4-4.4.1 - openSUSE 11.2 (i586 x86_64): strongswan-doc-4.3.4-4.4.1 References: http://support.novell.com/security/cve/CVE-2010-2628.html https://bugzilla.novell.com/615915

1 0

openSUSE-RU-2010:0489-1 (low): build: Distribution default is wrong. Fixed by this update.
by maintenance＠opensuse.org 09 Aug '10

09 Aug '10

openSUSE Recommended Update: build: Distribution default is wrong. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0489-1 Rating: low References: #618004 Affected Products: openSUSE 11.3 openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: This update brings the build package to the 2010-07-28 version which includes many fixes and enhancements for building openSUSE packages, including: - export BUILD_DEBUG so rpmlint can check for it (bnc#618004) - support for Files provide - document --repo and --dis - update wiki links - fix bugs in repo handling - fix distribution autodetection code Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch build-2854 - openSUSE 11.2: zypper in -t patch build-2854 - openSUSE 11.1: zypper in -t patch build-2854 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (noarch src) [New Version: 2010.07.28]: build-2010.07.28-1.1.1 - openSUSE 11.3 (noarch) [New Version: 2010.07.28]: build-mkbaselibs-2010.07.28-1.1.1 - openSUSE 11.2 (noarch src) [New Version: 2010.07.28]: build-2010.07.28-1.1.1 - openSUSE 11.1 (noarch src) [New Version: 2010.07.28]: build-2010.07.28-1.1.1 References: https://bugzilla.novell.com/618004

1 0

openSUSE-RU-2010:0488-1 (low): xpdf-poppler: This update fixes a crash in xpdf-poppler.
by maintenance＠opensuse.org 09 Aug '10

09 Aug '10

openSUSE Recommended Update: xpdf-poppler: This update fixes a crash in xpdf-poppler. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0488-1 Rating: low References: #617623 Affected Products: openSUSE 11.3 openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes two crashes in XPutImage, "*image is NULL". Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch xpdf-poppler-2870 - openSUSE 11.2: zypper in -t patch xpdf-poppler-2870 - openSUSE 11.1: zypper in -t patch xpdf-2865 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64): xpdf-poppler-3.02-11.1.1 - openSUSE 11.2 (i586 src x86_64): xpdf-poppler-3.02-4.6.1 - openSUSE 11.1 (i586 ppc src x86_64): xpdf-3.02-97.82.1 - openSUSE 11.1 (i586 ppc x86_64): xpdf-tools-3.02-97.82.1 References: https://bugzilla.novell.com/617623

1 0

openSUSE-RU-2010:0487-1 (low): beaver: Update from 0.4.0rc1 to the stable release 0.4.0
by maintenance＠opensuse.org 09 Aug '10

09 Aug '10

openSUSE Recommended Update: beaver: Update from 0.4.0rc1 to the stable release 0.4.0 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0487-1 Rating: low References: #623221 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Beaver has been updated to stable release 0.4.0 form previous 0.4.0 release candidate 1. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch beaver-2866 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64): beaver-0.4.0-0.1.1 References: https://bugzilla.novell.com/623221

1 0

openSUSE-RU-2010:0486-1 (moderate): apparmor-utils: It is totally broken - can't find their perl module. Fixed by this update.
by maintenance＠opensuse.org 09 Aug '10

09 Aug '10

openSUSE Recommended Update: apparmor-utils: It is totally broken - can't find their perl module. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0486-1 Rating: moderate References: #619893 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Apparmor utils is totally broken - can't find their perl module. Fixed by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch apparmor-utils-2873 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (noarch src): apparmor-utils-2.3.1-19.1.1 References: https://bugzilla.novell.com/619893

1 0

openSUSE-RU-2010:0485-1 (low): ImageMagick: It cannot compress grayscale TIFF images with JPEG. Fixed by this update.
by maintenance＠opensuse.org 09 Aug '10

09 Aug '10

openSUSE Recommended Update: ImageMagick: It cannot compress grayscale TIFF images with JPEG. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0485-1 Rating: low References: #615223 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: ImageMagick cannot compress grayscale TIFF images with JPEG. Fixed by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch ImageMagick-2863 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64): ImageMagick-6.6.1.0-4.1.1 - openSUSE 11.3 (i586 x86_64): ImageMagick-devel-6.6.1.0-4.1.1 ImageMagick-extra-6.6.1.0-4.1.1 libMagick++-devel-6.6.1.0-4.1.1 libMagick++3-6.6.1.0-4.1.1 libMagickCore3-6.6.1.0-4.1.1 libMagickWand3-6.6.1.0-4.1.1 perl-PerlMagick-6.6.1.0-4.1.1 - openSUSE 11.3 (x86_64): libMagickCore3-32bit-6.6.1.0-4.1.1 libMagickWand3-32bit-6.6.1.0-4.1.1 - openSUSE 11.3 (noarch): ImageMagick-doc-6.6.1.0-4.1.1 References: https://bugzilla.novell.com/615223

1 0

openSUSE-RU-2010:0484-1 (critical): NetworkManager: Fixed no longer connecting after machine crashed during suspend
by maintenance＠opensuse.org 09 Aug '10

09 Aug '10

openSUSE Recommended Update: NetworkManager: Fixed no longer connecting after machine crashed during suspend ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0484-1 Rating: critical References: #585433 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes a bug in NetworkManager: - #585433: NetworkManager 0.8 no longer connects after machine crashed during suspend Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch NetworkManager-2859 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64): NetworkManager-0.8-8.1.1 - openSUSE 11.3 (i586 x86_64): NetworkManager-devel-0.8-8.1.1 NetworkManager-doc-0.8-8.1.1 NetworkManager-glib-0.8-8.1.1 References: https://bugzilla.novell.com/585433

1 0

openSUSE-RU-2010:0483-1 (moderate): star: This updates fixes a buffer overflow in star.
by maintenance＠opensuse.org 09 Aug '10

09 Aug '10

openSUSE Recommended Update: star: This updates fixes a buffer overflow in star. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0483-1 Rating: moderate References: #625527 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: star is trying to copy data into buffer which is not long enough, leading to buffer overflow and crash. Fixed bz this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch star-2864 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64): star-1.5final-43.1.1 References: https://bugzilla.novell.com/625527

1 0

openSUSE-RU-2010:0482-1 (low): kdeartwork4: fixed xscreensaver-based screensavers not working in KDE4
by maintenance＠opensuse.org 09 Aug '10

09 Aug '10

openSUSE Recommended Update: kdeartwork4: fixed xscreensaver-based screensavers not working in KDE4 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0482-1 Rating: low References: #624288 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes: - bnc#624288: xscreensaver-based screensavers not working in KDE4 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch kdeartwork4-2871 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64): kdeartwork4-4.4.4-2.1.1 - openSUSE 11.3 (i586 x86_64): kdeartwork4-screensaver-4.4.4-2.1.1 xscreensaver-5.10-5.2 xscreensaver-data-5.10-5.2 xscreensaver-data-extra-5.10-5.2 References: https://bugzilla.novell.com/624288

1 0

openSUSE-SU-2010:0481-1 (important): Linux Kernel: Regression bugfix update
by opensuse-security＠opensuse.org 09 Aug '10

09 Aug '10

openSUSE Security Update: Linux Kernel: Regression bugfix update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0481-1 Rating: important References: #580799 Affected Products: openSUSE 11.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. It includes one version update. Description: The openSUSE 11.1 Kernel was updated fixing a single regression: The previous update contained an erronous fix which broke the IPv4 GRE tunneling module. This regression is fixed by this update. No other change is contained in this update, if you are not using the module, this update is not required. Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.1: zypper in -t patch kernel-2848 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.1 (i586 ppc src x86_64) [New Version: 2.6.27.48]: kernel-source-2.6.27.48-0.2.1 kernel-syms-2.6.27.48-0.2.1 - openSUSE 11.1 (i586 ppc x86_64) [New Version: 2.6.27.48]: kernel-default-2.6.27.48-0.2.1 kernel-default-base-2.6.27.48-0.2.1 kernel-default-extra-2.6.27.48-0.2.1 kernel-vanilla-2.6.27.48-0.2.1 - openSUSE 11.1 (i586 x86_64) [New Version: 2.6.27.48]: kernel-debug-2.6.27.48-0.2.1 kernel-debug-base-2.6.27.48-0.2.1 kernel-debug-extra-2.6.27.48-0.2.1 kernel-trace-2.6.27.48-0.2.1 kernel-trace-base-2.6.27.48-0.2.1 kernel-trace-extra-2.6.27.48-0.2.1 kernel-xen-2.6.27.48-0.2.1 kernel-xen-base-2.6.27.48-0.2.1 kernel-xen-extra-2.6.27.48-0.2.1 - openSUSE 11.1 (noarch src): kernel-docs-2.6.3-3.13.112 - openSUSE 11.1 (i586) [New Version: 2.6.27.48]: kernel-pae-2.6.27.48-0.2.1 kernel-pae-base-2.6.27.48-0.2.1 kernel-pae-extra-2.6.27.48-0.2.1 - openSUSE 11.1 (ppc) [New Version: 2.6.27.48]: kernel-kdump-2.6.27.48-0.2.1 kernel-ppc64-2.6.27.48-0.2.1 kernel-ppc64-base-2.6.27.48-0.2.1 kernel-ppc64-extra-2.6.27.48-0.2.1 kernel-ps3-2.6.27.48-0.2.1 References: https://bugzilla.novell.com/580799

1 0

openSUSE-SU-2010:0479-1 (important): gpg2: reuses a freed pointer when verifying a signature
by opensuse-security＠opensuse.org 05 Aug '10

05 Aug '10

openSUSE Security Update: gpg2: reuses a freed pointer when verifying a signature ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0479-1 Rating: important References: #625947 Cross-References: CVE-2010-2547 Affected Products: openSUSE 11.3 openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: GnuPG2 was vulnerable to arbitrary code execution by context-dependent attackers because of reusing a freed pointer when verifying a signature or importing a certificate with many "Subject Alternate Names". (CVE-2010-2547) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch gpg2-2819 - openSUSE 11.2: zypper in -t patch gpg2-2819 - openSUSE 11.1: zypper in -t patch gpg2-2819 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64): gpg2-2.0.15-5.1.1 - openSUSE 11.3 (noarch): gpg2-lang-2.0.15-5.1.1 - openSUSE 11.2 (i586 src x86_64): gpg2-2.0.12-2.4.1 - openSUSE 11.2 (noarch): gpg2-lang-2.0.12-2.4.1 - openSUSE 11.1 (i586 ppc src x86_64): gpg2-2.0.9-25.109.1 - openSUSE 11.1 (i586 ppc x86_64): gpg2-lang-2.0.9-25.109.1 References: http://support.novell.com/security/cve/CVE-2010-2547.html https://bugzilla.novell.com/625947

1 0

openSUSE-RU-2010:0478-1 (low): iputils: Fix arping
by maintenance＠opensuse.org 05 Aug '10

05 Aug '10

openSUSE Recommended Update: iputils: Fix arping ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0478-1 Rating: low References: #610839 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update makes arping work for ethernet devices (bnc#610839). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch iputils-2816 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64): iputils-ss021109-300.1.1 References: https://bugzilla.novell.com/610839

1 0

openSUSE-RU-2010:0477-1 (low): libjpeg8: Recommend to old libjpeg version to fix 3rd party applications
by maintenance＠opensuse.org 05 Aug '10

05 Aug '10

openSUSE Recommended Update: libjpeg8: Recommend to old libjpeg version to fix 3rd party applications ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0477-1 Rating: low References: #624583 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Re-add libjpeg6 to the default installation so that applications installed not from rpm can start again. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch jpeg-2832 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64): jpeg-8.0.1-2.1.1 - openSUSE 11.3 (i586 x86_64): libjpeg-devel-8.0.1-2.1.1 libjpeg6-6.2.0-3.1 libjpeg8-8.0.1-2.1.1 - openSUSE 11.3 (x86_64): libjpeg-devel-32bit-8.0.1-2.1.1 libjpeg6-32bit-6.2.0-3.1 libjpeg8-32bit-8.0.1-2.1.1 References: https://bugzilla.novell.com/624583

1 0

openSUSE-RU-2010:0476-1 (moderate): ethtool: Add option to modify GRO setting
by maintenance＠opensuse.org 05 Aug '10

05 Aug '10

openSUSE Recommended Update: ethtool: Add option to modify GRO setting ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0476-1 Rating: moderate References: #616263 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: ethtool has no way to turn off generic-receive-offload. This patch adds commandline option to enable/disable GRO. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch ethtool-2815 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64): ethtool-6-85.1.1 References: https://bugzilla.novell.com/616263

1 0

openSUSE-RU-2010:0475-1 (moderate): pam_mount: Fix segfault when executed from sshd
by maintenance＠opensuse.org 05 Aug '10

05 Aug '10

openSUSE Recommended Update: pam_mount: Fix segfault when executed from sshd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0475-1 Rating: moderate References: #619780 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes a segfault in pam_mount when executed from sshd. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch pam_mount-2818 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64): pam_mount-1.34-3.1.1 - openSUSE 11.3 (x86_64): pam_mount-32bit-1.34-3.1.1 References: https://bugzilla.novell.com/619780

1 0

openSUSE-RU-2010:0474-1 (important): mrtg: The execution of mrtg ends in a parse error when perl 5.12 is used. Fixed by this update.
by maintenance＠opensuse.org 05 Aug '10

05 Aug '10

openSUSE Recommended Update: mrtg: The execution of mrtg ends in a parse error when perl 5.12 is used. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0474-1 Rating: important References: #625437 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The execution of mrtg ends in a parse error when perl 5.12 is used. Fixed by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch mrtg-2831 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64): mrtg-2.16.2-45.1.1 References: https://bugzilla.novell.com/625437

1 0

openSUSE-RU-2010:0473-1 (low): xemacs-packages: Xemacs fails to load customization files. Fixed by this update.
by maintenance＠opensuse.org 05 Aug '10

05 Aug '10

openSUSE Recommended Update: xemacs-packages: Xemacs fails to load customization files. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0473-1 Rating: low References: #590429 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Xemacs fails to load customization files. Fixed by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch xemacs-packages-2857 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (noarch src): xemacs-packages-20090217-2.5.1 - openSUSE 11.2 (noarch): xemacs-packages-el-20090217-2.5.1 xemacs-packages-info-20090217-2.5.1 References: https://bugzilla.novell.com/590429

1 0

openSUSE-RU-2010:0472-1 (low): perl: This update fixes a crash caused by the use of constants.
by maintenance＠opensuse.org 05 Aug '10

05 Aug '10

openSUSE Recommended Update: perl: This update fixes a crash caused by the use of constants. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0472-1 Rating: low References: #621856 #624628 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: If a constant is defined with the 'use constant' pragma, perl may crash later on when the constant is used as function argument (like in a print statement). Also, a bug in the h2ph translator was fixed that led to spurious warnings about _h2ph_pre.ph if 'perl -w' was used. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch perl-2828 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64): perl-5.12.1-2.1.1 - openSUSE 11.3 (i586 x86_64): perl-base-5.12.1-2.1.1 - openSUSE 11.3 (x86_64): perl-32bit-5.12.1-2.1.1 perl-base-32bit-5.12.1-2.1.1 - openSUSE 11.3 (noarch): perl-doc-5.12.1-2.1.1 References: https://bugzilla.novell.com/621856 https://bugzilla.novell.com/624628

1 0

openSUSE-RU-2010:0471-1 (moderate): bind: Fixed a bug in named chrooting
by maintenance＠opensuse.org 05 Aug '10

05 Aug '10

openSUSE Recommended Update: bind: Fixed a bug in named chrooting ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0471-1 Rating: moderate References: #625019 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The bind name server init script was updated to fix: - #625019: named refuse to start : init.d/named script is wrong to mount /proc bind Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch bind-2825 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64): bind-9.7.1-2.1.1 - openSUSE 11.3 (i586 x86_64): bind-chrootenv-9.7.1-2.1.1 bind-devel-9.7.1-2.1.1 bind-libs-9.7.1-2.1.1 bind-utils-9.7.1-2.1.1 - openSUSE 11.3 (x86_64): bind-libs-32bit-9.7.1-2.1.1 - openSUSE 11.3 (noarch): bind-doc-9.7.1-2.1.1 References: https://bugzilla.novell.com/625019

1 0

openSUSE-RU-2010:0470-1 (low): usb_modeswitch: version upgrade to support more devices
by maintenance＠opensuse.org 05 Aug '10

05 Aug '10

openSUSE Recommended Update: usb_modeswitch: version upgrade to support more devices ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0470-1 Rating: low References: #622525 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: usb_modeswitch is upgraded to version 1.1.3 and usb_modeswitch-data to version 20100707 to improve the openSUSE hardware compatibility. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch usb_modeswitch-2814 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64) [New Version: 1.1.3]: usb_modeswitch-1.1.3-1.1.1 - openSUSE 11.3 (noarch) [New Version: 1.1.3]: usb_modeswitch-data-1.1.3-1.1.1 References: https://bugzilla.novell.com/622525

1 0

openSUSE-SU-2010:0460-1 (moderate (10+4+6)): squidGuard: Fixed buffer overflows
by opensuse-security＠opensuse.org 02 Aug '10

02 Aug '10

openSUSE Security Update: squidGuard: Fixed buffer overflows ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0460-1 Rating: moderate (10+4+6) References: #550930 #625439 Cross-References: CVE-2009-3700 CVE-2009-3826 Affected Products: openSUSE 11.3 openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: Two buffer overflows in squidGard were fixed: CVE-2009-3700: Buffer overflow in sgLog.c in squidGuard 1.3 and 1.4 allows remote attackers to cause a denial of service (application hang or loss of blocking functionality) via a long URL with many / (slash) characters, related to "emergency mode." CVE-2009-3826: Multiple buffer overflows in squidGuard 1.4 allow remote attackers to bypass intended URL blocking via a long URL, related to (1) the relationship between a certain buffer size in squidGuard and a certain buffer size in Squid and (2) a redirect URL that contains information about the originally requested URL. Also a logrotate mistake was fixed. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch squidGuard-2852 - openSUSE 11.2: zypper in -t patch squidGuard-2852 - openSUSE 11.1: zypper in -t patch squidGuard-2852 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64): squidGuard-1.4-7.1.1 - openSUSE 11.3 (i586 x86_64): squidGuard-doc-1.4-7.1.1 - openSUSE 11.2 (i586 src x86_64): squidGuard-1.4-2.3.1 - openSUSE 11.2 (i586 x86_64): squidGuard-doc-1.4-2.3.1 - openSUSE 11.1 (i586 ppc src x86_64): squidGuard-1.3-57.67.1 References: http://support.novell.com/security/cve/CVE-2009-3700.html http://support.novell.com/security/cve/CVE-2009-3826.html https://bugzilla.novell.com/550930 https://bugzilla.novell.com/625439

1 0

openSUSE-SU-2010:0459-1 (moderate (10+4+6)): kvirc: remote CTCP commands execution via specially-crafted CTCP parameter
by opensuse-security＠opensuse.org 02 Aug '10

02 Aug '10

openSUSE Security Update: kvirc: remote CTCP commands execution via specially-crafted CTCP parameter ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0459-1 Rating: moderate (10+4+6) References: #626942 Cross-References: CVE-2010-2785 Affected Products: openSUSE 11.3 openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update of kvirc does not further allow remote client to send arbitrary CTCP commands. (CVE-2010-2785) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch kvirc-2860 - openSUSE 11.2: zypper in -t patch kvirc-2860 - openSUSE 11.1: zypper in -t patch kvirc-2860 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64): kvirc-3.4.2-10.1.1 - openSUSE 11.3 (i586 x86_64): kvirc-devel-3.4.2-10.1.1 - openSUSE 11.2 (i586 src x86_64): kvirc-3.4.2-4.7.1 - openSUSE 11.2 (i586 x86_64): kvirc-devel-3.4.2-4.7.1 - openSUSE 11.1 (i586 ppc src x86_64): kvirc-3.4.2-2.26.1 - openSUSE 11.1 (i586 ppc x86_64): kvirc-devel-3.4.2-2.26.1 References: http://support.novell.com/security/cve/CVE-2010-2785.html https://bugzilla.novell.com/626942

1 0

openSUSE-SU-2010:0458-1 (moderate): libwebkit security update
by opensuse-security＠opensuse.org 02 Aug '10

02 Aug '10

openSUSE Security Update: libwebkit security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0458-1 Rating: moderate References: #622994 Cross-References: CVE-2010-1386 CVE-2010-1392 CVE-2010-1405 CVE-2010-1407 CVE-2010-1416 CVE-2010-1417 CVE-2010-1418 CVE-2010-1421 CVE-2010-1422 CVE-2010-1501 CVE-2010-1664 CVE-2010-1665 CVE-2010-1758 CVE-2010-1759 CVE-2010-1760 CVE-2010-1761 CVE-2010-1762 CVE-2010-1767 CVE-2010-1770 CVE-2010-1771 CVE-2010-1772 CVE-2010-1773 CVE-2010-1774 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that fixes 24 vulnerabilities is now available. It includes one version update. Description: The libwebkit browser engine version 1.2.3 fixes several security relevant bugs (CVE-2010-1386, CVE-2010-1392, CVE-2010-1405, CVE-2010-1407, CVE-2010-1416, CVE-2010-1417, CVE-2010-1665, CVE-2010-1418, CVE-2010-1421, CVE-2010-1422, CVE-2010-1501, CVE-2010-1767, CVE-2010-1664, CVE-2010-1758, CVE-2010-1759, CVE-2010-1760, CVE-2010-1761, CVE-2010-1762, CVE-2010-1770, CVE-2010-1771, CVE-2010-1772, CVE-2010-1773, CVE-2010-1774) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch libwebkit-2806 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 1.2.3]: libwebkit-1_0-2-1.2.3-0.1.1 libwebkit-devel-1.2.3-0.1.1 webkit-jsc-1.2.3-0.1.1 - openSUSE 11.3 (x86_64) [New Version: 1.2.3]: libwebkit-1_0-2-32bit-1.2.3-0.1.1 - openSUSE 11.3 (noarch) [New Version: 1.2.3]: libwebkit-lang-1.2.3-0.1.1 - openSUSE 11.3 (src) [New Version: 1.2.3]: libwebkit-1.2.3-0.1.1 References: http://support.novell.com/security/cve/.html http://support.novell.com/security/cve/CVE-2010-1386.html http://support.novell.com/security/cve/CVE-2010-1392.html http://support.novell.com/security/cve/CVE-2010-1405.html http://support.novell.com/security/cve/CVE-2010-1407.html http://support.novell.com/security/cve/CVE-2010-1416.html http://support.novell.com/security/cve/CVE-2010-1417.html http://support.novell.com/security/cve/CVE-2010-1418.html http://support.novell.com/security/cve/CVE-2010-1421.html http://support.novell.com/security/cve/CVE-2010-1422.html http://support.novell.com/security/cve/CVE-2010-1501.html http://support.novell.com/security/cve/CVE-2010-1664.html http://support.novell.com/security/cve/CVE-2010-1665.html http://support.novell.com/security/cve/CVE-2010-1758.html http://support.novell.com/security/cve/CVE-2010-1759.html http://support.novell.com/security/cve/CVE-2010-1760.html http://support.novell.com/security/cve/CVE-2010-1761.html http://support.novell.com/security/cve/CVE-2010-1762.html http://support.novell.com/security/cve/CVE-2010-1767.html http://support.novell.com/security/cve/CVE-2010-1770.html http://support.novell.com/security/cve/CVE-2010-1771.html http://support.novell.com/security/cve/CVE-2010-1772.html http://support.novell.com/security/cve/CVE-2010-1773.html http://support.novell.com/security/cve/CVE-2010-1774.html https://bugzilla.novell.com/622994

1 0

openSUSE-RU-2010:0456-1 (low): mkinitrd: Collective update for mkinitrd
by maintenance＠opensuse.org 02 Aug '10

02 Aug '10

openSUSE Recommended Update: mkinitrd: Collective update for mkinitrd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0456-1 Rating: low References: #595071 #596086 Affected Products: openSUSE 11.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: The following bugs are fixed by this update: - call update-bootloader if not available - setup-prepare: fix feature check Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.1: zypper in -t patch mkinitrd-2305 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.1 (i586 ppc src x86_64): mkinitrd-2.4-34.5.1 References: https://bugzilla.novell.com/595071 https://bugzilla.novell.com/596086

1 0

openSUSE-RU-2010:0455-1 (low): NetworkManager: Several bugs are fixed by this update.
by maintenance＠opensuse.org 02 Aug '10

02 Aug '10

openSUSE Recommended Update: NetworkManager: Several bugs are fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0455-1 Rating: low References: #472112 #479885 #520095 #522742 #556083 Affected Products: openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. It includes one version update. Description: - VPN doesn't work. Clear secrets before setting the connection state to FAILED (bnc#472112). - Update the resolv.conf only once (bnc#479885). - Check origin of NETLINK messages (bnc#520095). - Make iptables path configurable (bnc#522742). - Fix the system settings daemon to keep the hostname configuration up to date. Don't return the default hostname if a plugin is capable of handling hostname (bnc #556083). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch NetworkManager-2347 - openSUSE 11.1: zypper in -t patch NetworkManager-2347 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 src x86_64): NetworkManager-0.7.1_git20090811-4.3.1 - openSUSE 11.2 (i586 x86_64): NetworkManager-devel-0.7.1_git20090811-4.3.1 NetworkManager-doc-0.7.1_git20090811-4.3.1 NetworkManager-glib-0.7.1_git20090811-4.3.1 - openSUSE 11.1 (i586 ppc src x86_64) [New Version: 0.7.0.r4359]: NetworkManager-0.7.0.r4359-15.3.1 - openSUSE 11.1 (i586 ppc x86_64) [New Version: 0.7.0.r4359]: NetworkManager-devel-0.7.0.r4359-15.3.1 NetworkManager-doc-0.7.0.r4359-15.3.1 NetworkManager-glib-0.7.0.r4359-15.3.1 References: https://bugzilla.novell.com/472112 https://bugzilla.novell.com/479885 https://bugzilla.novell.com/520095 https://bugzilla.novell.com/522742 https://bugzilla.novell.com/556083

1 0

openSUSE-SU-2010:0425-2 (important): ghostscript security update
by opensuse-security＠opensuse.org 02 Aug '10

02 Aug '10

openSUSE Security Update: ghostscript security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0425-2 Rating: important References: #559122 #605043 #608071 Cross-References: CVE-2009-4270 CVE-2009-4897 CVE-2010-1628 CVE-2010-1869 CVE-2010-2055 Affected Products: openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: Specially crafted postscript (.ps) files could cause buffer overflows in ghostscript that could potentially be exploited to execute arbitrary code (CVE-2010-1628, CVE-2010-1869, CVE-2009-4270) ghostscript by default read some initialization files from the current working directory. Local attackers could potentially exploit that to have other users execute arbitrary commands by placing such files e.g. in /tmp (CVE-2010-2055). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch ghostscript-devel-2706 - openSUSE 11.1: zypper in -t patch ghostscript-devel-2706 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 src x86_64): ghostscript-library-8.64-6.3.1 - openSUSE 11.2 (i586 x86_64): ghostscript-devel-8.64-6.3.1 ghostscript-fonts-other-8.64-6.3.1 ghostscript-fonts-rus-8.64-6.3.1 ghostscript-fonts-std-8.64-6.3.1 ghostscript-ijs-devel-8.64-6.3.1 ghostscript-omni-8.64-6.3.1 ghostscript-x11-8.64-6.3.1 libgimpprint-4.2.7-6.3.1 libgimpprint-devel-4.2.7-6.3.1 - openSUSE 11.1 (i586 ppc src x86_64): ghostscript-library-8.62-31.44.1 - openSUSE 11.1 (i586 ppc x86_64): ghostscript-devel-8.62-31.44.1 ghostscript-fonts-other-8.62-31.44.1 ghostscript-fonts-rus-8.62-31.44.1 ghostscript-fonts-std-8.62-31.44.1 ghostscript-ijs-devel-8.62-31.44.1 ghostscript-omni-8.62-31.44.1 ghostscript-x11-8.62-31.44.1 libgimpprint-4.2.7-31.44.1 libgimpprint-devel-4.2.7-31.44.1 References: http://support.novell.com/security/cve/CVE-2009-4270.html http://support.novell.com/security/cve/CVE-2009-4897.html http://support.novell.com/security/cve/CVE-2010-1628.html http://support.novell.com/security/cve/CVE-2010-1869.html http://support.novell.com/security/cve/CVE-2010-2055.html https://bugzilla.novell.com/559122 https://bugzilla.novell.com/605043 https://bugzilla.novell.com/608071

1 0

openSUSE-SU-2010:0451-1 (important): ghostscript security update
by opensuse-security＠opensuse.org 02 Aug '10

02 Aug '10

openSUSE Security Update: ghostscript security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0451-1 Rating: important References: #559122 #605043 #608071 Cross-References: CVE-2010-2055 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: ghostscript by default read some initialization files from the current working directory. Local attackers could potentially exploit that to have other users execute arbitrary commands by placing such files e.g. in /tmp (CVE-2010-2055). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch ghostscript-devel-2726 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64): ghostscript-library-8.70-15.1.1 - openSUSE 11.3 (i586 x86_64): ghostscript-devel-8.70-15.1.1 ghostscript-fonts-other-8.70-15.1.1 ghostscript-fonts-rus-8.70-15.1.1 ghostscript-fonts-std-8.70-15.1.1 ghostscript-ijs-devel-8.70-15.1.1 ghostscript-omni-8.70-15.1.1 ghostscript-x11-8.70-15.1.1 libgimpprint-4.2.7-15.1.1 libgimpprint-devel-4.2.7-15.1.1 References: http://support.novell.com/security/cve/CVE-2010-2055.html https://bugzilla.novell.com/559122 https://bugzilla.novell.com/605043 https://bugzilla.novell.com/608071

1 0