- openSUSE Updates

openSUSE-RU-2010:0436-1 (low): gnome-panel: Fix newly created panels to be visible
by maintenance＠opensuse.org 26 Jul '10

26 Jul '10

openSUSE Recommended Update: gnome-panel: Fix newly created panels to be visible ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0436-1 Rating: low References: #620418 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes an issue … [View More]

1 0

openSUSE-RU-2010:0435-1 (low): lvm2: Fixed lvcreate --snapshot .. results in scary messages to console and /var/log/messages
by maintenance＠opensuse.org 26 Jul '10

26 Jul '10

openSUSE Recommended Update: lvm2: Fixed lvcreate --snapshot .. results in scary messages to console and /var/log/messages ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0435-1 Rating: low References: #556177 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. … [View More]

1 0

openSUSE-RU-2010:0434-1 (low): postfix: Chrooted mysql.sock lost on mysql restart. Fixed by this update.
by maintenance＠opensuse.org 26 Jul '10

26 Jul '10

openSUSE Recommended Update: postfix: Chrooted mysql.sock lost on mysql restart. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0434-1 Rating: low References: #606251 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This … [View More]

1 0

openSUSE-RU-2010:0433-1 (low): udisks: Fixed ejecting usb-drives or disks as normal user
by maintenance＠opensuse.org 26 Jul '10

26 Jul '10

openSUSE Recommended Update: udisks: Fixed ejecting usb-drives or disks as normal user ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0433-1 Rating: low References: #618955 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: A problem in udisks … [View More]

1 0

openSUSE-RU-2010:0432-1 (moderate): yast2-gtk: updated to version 2.21.68 fixing bnc#609778 and bnc#620513
by maintenance＠opensuse.org 26 Jul '10

26 Jul '10

openSUSE Recommended Update: yast2-gtk: updated to version 2.21.68 fixing bnc#609778 and bnc#620513 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0432-1 Rating: moderate References: #609778 #620513 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. It … [View More]

1 0

openSUSE-RU-2010:0431-1 (low): NetworkManager-NovellVPN: Fix for NovellVPN Connection Requires to Accept Advanced Options to Work
by maintenance＠opensuse.org 26 Jul '10

26 Jul '10

openSUSE Recommended Update: NetworkManager-NovellVPN: Fix for NovellVPN Connection Requires to Accept Advanced Options to Work ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0431-1 Rating: low References: #622854 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be … [View More]

1 0

openSUSE-SU-2010:0430-1 (important): seamonkey: Update to 2.0.6 security release
by opensuse-security＠opensuse.org 26 Jul '10

26 Jul '10

openSUSE Security Update: seamonkey: Update to 2.0.6 security release ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0430-1 Rating: important References: #622506 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. It includes … [View More]one version update. Description: This update brings Mozilla Seamonkey to the 2.0.6 security release. It fixes following security bugs: MFSA 2010-34 / CVE-2010-1211: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code. Jesse Ruderman, Ehsan Akhgari, Mats Palmgren, Igor Bukanov, Gary Kwong, Tobias Markus and Daniel Holbert reported memory safety problems that affected Firefox 3.6 and Firefox 3.5. MFSA 2010-35 / CVE-2010-1208: Security researcher regenrecht reported via TippingPoint's Zero Day Initiative an error in the DOM attribute cloning routine where under certain circumstances an event attribute node can be deleted while another object still contains a reference to it. This reference could subsequently be accessed, potentially causing the execution of attacker controlled memory. MFSA 2010-36 / CVE-2010-1209: Security researcher regenrecht reported via TippingPoint's Zero Day Initiative an error in Mozilla's implementation of NodeIterator in which a malicious NodeFilter could be created which would detach nodes from the DOM tree while it was being traversed. The use of a detached and subsequently deleted node could result in the execution of attacker-controlled memory. MFSA 2010-37 / CVE-2010-1214: Security researcher J23 reported via TippingPoint's Zero Day Initiative an error in the code used to store the names and values of plugin parameter elements. A malicious page could embed plugin content containing a very large number of parameter elements which would cause an overflow in the integer value counting them. This integer is later used in allocating a memory buffer used to store the plugin parameters. Under such conditions, too small a buffer would be created and attacker-controlled data could be written past the end of the buffer, potentially resulting in code execution. MFSA 2010-39 / CVE-2010-2752: Security researcher J23 reported via TippingPoint's Zero Day Initiative that an array class used to store CSS values contained an integer overflow vulnerability. The 16 bit integer value used in allocating the size of the array could overflow, resulting in too small a memory buffer being created. When the array was later populated with CSS values data would be written past the end of the buffer potentially resulting in the execution of attacker-controlled memory. MFSA 2010-40 / CVE-2010-2753: Security researcher regenrecht reported via TippingPoint's Zero Day Initiative an integer overflow vulnerability in the implementation of the XUL <tree> element's selection attribute. When the size of a new selection is sufficiently large the integer used in calculating the length of the selection can overflow, resulting in a bogus range being marked selected. When adjustSelection is then called on the bogus range the range is deleted leaving dangling references to the ranges which could be used by an attacker to call into deleted memory and run arbitrary code on a victim's computer. MFSA 2010-41 / CVE-2010-1205: OUSPG researcher Aki Helin reported a buffer overflow in Mozilla graphics code which consumes image data processed by libpng. A malformed PNG file could be created which would cause libpng to incorrectly report the size of the image to downstream consumers. When the dimensions of such images are underreported, the Mozilla code responsible for displaying the graphic will allocate too small a memory buffer to contain the image data and will wind up writing data past the end of the buffer. This could result in the execution of attacker-controlled memory. MFSA 2011-42 / CVE-2010-1213: Security researcher Yosuke Hasegawa reported that the Web Worker method importScripts can read and parse resources from other domains even when the content is not valid JavaScript. This is a violation of the same-origin policy and could be used by an attacker to steal information from other sites. MFSA 2010-45 / CVE-2010-1206: Google security researcher Michal Zalewski reported two methods for spoofing the contents of the location bar. The first method works by opening a new window containing a resource that responds with an HTTP 204 (no content) and then using the reference to the new window to insert HTML content into the blank document. The second location bar spoofing method does not require that the resource opened in a new window respond with 204, as long as the opener calls window.stop() before the document is loaded. In either case a user could be mislead as to the correct location of the document they are currently viewing. MFSA 2010-45 / CVE-2010-2751: Security researcher Jordi Chancel reported that the location bar could be spoofed to look like a secure page when the current document was served via plaintext. The vulnerability is triggered by a server by first redirecting a request for a plaintext resource to another resource behind a valid SSL/TLS certificate. A second request made to the original plaintext resource which is responded to not with a redirect but with JavaScript containing history.back() and history.forward() will result in the plaintext resource being displayed with valid SSL/TLS badging in the location bar. References MFSA 2010-46 / CVE-2010-0654: Google security researcher Chris Evans reported that data can be read across domains by injecting bogus CSS selectors into a target site and then retrieving the data using JavaScript APIs. If an attacker can inject opening and closing portions of a CSS selector into points A and B of a target page, then the region between the two injection points becomes readable to JavaScript through, for example, the getComputedStyle() API. MFSA 2010-47 / CVE-2010-2754: Security researcher Soroush Dalili reported that potentially sensitive URL parameters could be leaked across domains upon script errors when the script filename and line number is included in the error message. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch seamonkey-2754 - openSUSE 11.2: zypper in -t patch seamonkey-2754 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 src x86_64) [New Version: 2.0.6]: seamonkey-2.0.6-0.1.1 - openSUSE 11.3 (i586 x86_64) [New Version: 2.0.6]: seamonkey-dom-inspector-2.0.6-0.1.1 seamonkey-irc-2.0.6-0.1.1 seamonkey-translations-common-2.0.6-0.1.1 seamonkey-translations-other-2.0.6-0.1.1 seamonkey-venkman-2.0.6-0.1.1 - openSUSE 11.2 (i586 src x86_64) [New Version: 2.0.6]: seamonkey-2.0.6-0.1.1 - openSUSE 11.2 (i586 x86_64) [New Version: 2.0.6]: seamonkey-dom-inspector-2.0.6-0.1.1 seamonkey-irc-2.0.6-0.1.1 seamonkey-venkman-2.0.6-0.1.1 References: https://bugzilla.novell.com/622506 [View Less]

1 0

openSUSE-RU-2010:0429-1 (low): openSUSE 11.0 security and bugfix support is discontinued
by maintenance＠opensuse.org 26 Jul '10

26 Jul '10

openSUSE Recommended Update: openSUSE 11.0 security and bugfix support is discontinued ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0429-1 Rating: low References: #624993 Affected Products: openSUSE 11.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This patch concludes … [View More]

1 0

openSUSE-SU-2010:0428-1 (low): rpm: Fix security problem where we miss to clear the SUID/SGID bits during package updates.
by opensuse-security＠opensuse.org 24 Jul '10

24 Jul '10

openSUSE Security Update: rpm: Fix security problem where we miss to clear the SUID/SGID bits during package updates. ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0428-1 Rating: low References: #536256 #610941 Cross-References: CVE-2010-2059 Affected Products: openSUSE 11.0 ______________________________________________________________________________ An update that solves one … [View More]

1 0

openSUSE-SU-2010:0427-1 (moderate): openldap: fixed MODRDN DoS, replicating inconsistencies and \0 character-DoS
by opensuse-security＠opensuse.org 24 Jul '10

24 Jul '10

openSUSE Security Update: openldap: fixed MODRDN DoS, replicating inconsistencies and \0 character-DoS ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0427-1 Rating: moderate References: #612430 Cross-References: CVE-2010-0211 CVE-2010-0212 Affected Products: openSUSE 11.0 ______________________________________________________________________________ An update that fixes two … [View More]

1 0

openSUSE-SU-2010:0426-1 (moderate): lxsession security update
by opensuse-security＠opensuse.org 23 Jul '10

23 Jul '10

openSUSE Security Update: lxsession security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0426-1 Rating: moderate References: #622083 #623192 Cross-References: CVE-2010-2532 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. … [View More]

1 0

openSUSE-SU-2010:0425-1 (important): ghostscript security update
by opensuse-security＠opensuse.org 22 Jul '10

22 Jul '10

openSUSE Security Update: ghostscript security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0425-1 Rating: important References: #559122 #605043 #608071 Cross-References: CVE-2009-4270 CVE-2009-4897 CVE-2010-1628 CVE-2010-1869 CVE-2010-2055 Affected Products: openSUSE 11.0 ______________________________________________________________________________ … [View More]

1 0

openSUSE-OU-2010:0424-1 (low): Download and Install Microsoft(r) TrueType Core Fonts
by maintenance＠opensuse.org 22 Jul '10

22 Jul '10

openSUSE Optional Update: Download and Install Microsoft(r) TrueType Core Fonts ______________________________________________________________________________ Announcement ID: openSUSE-OU-2010:0424-1 Rating: low References: #621540 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: Installing this update will … [View More]

1 0

openSUSE-SU-2010:0423-1 (moderate): vte security update
by opensuse-security＠opensuse.org 22 Jul '10

22 Jul '10

openSUSE Security Update: vte security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0423-1 Rating: moderate References: #621097 Cross-References: CVE-2010-2713 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. It … [View More]

1 0

openSUSE-SU-2010:0422-1 (moderate): opera: cross-origin loading of CSS stylesheets
by opensuse-security＠opensuse.org 22 Jul '10

22 Jul '10

openSUSE Security Update: opera: cross-origin loading of CSS stylesheets ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0422-1 Rating: moderate References: #583620 #607823 #615942 Cross-References: CVE-2010-0653 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes … [View More]

1 0

openSUSE-RU-2010:0421-1 (low): smolt: Trigger smolt run
by maintenance＠opensuse.org 22 Jul '10

22 Jul '10

openSUSE Recommended Update: smolt: Trigger smolt run ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0421-1 Rating: low References: #621540 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Installing this update will trigger the updater … [View More]

1 0

openSUSE-SU-2010:0420-1 (moderate): libtiff security updates
by opensuse-security＠opensuse.org 22 Jul '10

22 Jul '10

openSUSE Security Update: libtiff security updates ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0420-1 Rating: moderate References: #612879 Cross-References: CVE-2010-2067 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: specially crafted … [View More]

1 0

openSUSE-RU-2010:0419-1 (critical): glibc: initgroups leaves out NIS groups on the second invocation
by maintenance＠opensuse.org 22 Jul '10

22 Jul '10

openSUSE Recommended Update: glibc: initgroups leaves out NIS groups on the second invocation ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0419-1 Rating: critical References: #623098 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This … [View More]

1 0

openSUSE-SU-2010:0418-1 (moderate): python-mako security update
by opensuse-security＠opensuse.org 22 Jul '10

22 Jul '10

openSUSE Security Update: python-mako security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0418-1 Rating: moderate References: #619134 Cross-References: CVE-2010-2480 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. … [View More]

1 0

openSUSE-RU-2010:0417-1 (moderate): spideroak: Update to version 9681
by maintenance＠opensuse.org 22 Jul '10

22 Jul '10

openSUSE Recommended Update: spideroak: Update to version 9681 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0417-1 Rating: moderate References: #621581 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: This … [View More]

1 0

openSUSE-SU-2010:0416-1 (moderate): exim: fixes two local issues;CVE-2010-2023 and CVE-2010-2024
by opensuse-security＠opensuse.org 22 Jul '10

22 Jul '10

openSUSE Security Update: exim: fixes two local issues;CVE-2010-2023 and CVE-2010-2024 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0416-1 Rating: moderate References: #612549 Cross-References: CVE-2010-2023 CVE-2010-2024 Affected Products: openSUSE 11.3 openSUSE 11.2 openSUSE 11.1 … [View More]

1 0

openSUSE-SU-2010:0414-1 (low): clamav: remote denial of service
by opensuse-security＠opensuse.org 21 Jul '10

21 Jul '10

openSUSE Security Update: clamav: remote denial of service ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0414-1 Rating: low References: #608188 Cross-References: CVE-2010-1639 CVE-2010-1640 CVE-2010-2077 Affected Products: openSUSE 11.2 openSUSE 11.1 openSUSE 11.0 … [View More]

1 0

openSUSE-RU-2010:0410-1 (moderate): spideroak: Update to version 9681
by maintenance＠opensuse.org 20 Jul '10

20 Jul '10

openSUSE Recommended Update: spideroak: Update to version 9681 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0410-1 Rating: moderate References: #621581 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. Description: This … [View More]

1 0

openSUSE-SU-2010:0404-1 (moderate): vte security update
by opensuse-security＠opensuse.org 20 Jul '10

20 Jul '10

openSUSE Security Update: vte security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0404-1 Rating: moderate References: #621097 Cross-References: CVE-2010-2713 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. It … [View More]

1 0

openSUSE-RU-2010:0402-1 (critical): glibc: initgroups leaves out NIS groups on the second invocation
by maintenance＠opensuse.org 20 Jul '10

20 Jul '10

openSUSE Recommended Update: glibc: initgroups leaves out NIS groups on the second invocation ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0402-1 Rating: critical References: #623098 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This … [View More]

1 0

openSUSE-SU-2010:0397-1 (important): Linux Kernel: Security/Bugfix update to 2.6.27.48
by opensuse-security＠opensuse.org 19 Jul '10

19 Jul '10

openSUSE Security Update: Linux Kernel: Security/Bugfix update to 2.6.27.48 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0397-1 Rating: important References: #465707 #543480 #557710 #559111 #567376 #569916 #574006 #577967 #583677 #584216 #590415 #591371 #591556 #593881 #596113 #596462 #597337 #599213 #599955 #600774 #601283 #602969 #604183 #… [View More]

1 0

openSUSE-SU-2010:0393-1 (low): w3m security update (CVE-2010-2074) to handle 0 characters in x509 certificates properly.
by opensuse-security＠opensuse.org 19 Jul '10

19 Jul '10

openSUSE Security Update: w3m security update (CVE-2010-2074) to handle 0 characters in x509 certificates properly. ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0393-1 Rating: low References: #609451 Cross-References: CVE-2010-2074 Affected Products: openSUSE 11.2 openSUSE 11.1 openSUSE 11.0 … [View More]

1 0

openSUSE-RU-2010:0392-1 (low): libQtWebKit: Update to QtWebKit from 4.5.3
by maintenance＠opensuse.org 19 Jul '10

19 Jul '10

openSUSE Recommended Update: libQtWebKit: Update to QtWebKit from 4.5.3 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0392-1 Rating: low References: #600468 Affected Products: openSUSE 11.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides an update of … [View More]

1 0

openSUSE-SU-2010:0387-1 (moderate): libtiff security updates
by opensuse-security＠opensuse.org 16 Jul '10

16 Jul '10

openSUSE Security Update: libtiff security updates ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0387-1 Rating: moderate References: #612879 Cross-References: CVE-2010-2067 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: specially crafted … [View More]

1 0

openSUSE-SU-2010:0386-1 (important): OpenOffice: security update to fix python macro execution
by opensuse-security＠opensuse.org 16 Jul '10

16 Jul '10

openSUSE Security Update: OpenOffice: security update to fix python macro execution ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0386-1 Rating: important References: #607095 Cross-References: CVE-2010-0395 Affected Products: openSUSE 11.2 openSUSE 11.1 openSUSE 11.0 … [View More]______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update of OpenOffice_org does not allow macros written in Python to be executed without permission, CVE-2010-0395. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch OpenOffice_org-base-drivers-postgresql-2578 - openSUSE 11.1: zypper in -t patch OpenOffice_org-base-drivers-postgresql-2578 - openSUSE 11.0: zypper in -t patch OpenOffice_org-2581 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 src x86_64): OpenOffice_org-libs-core-3.1.1.4-1.3.1 - openSUSE 11.2 (i586 x86_64): OpenOffice_org-base-drivers-postgresql-3.1.1.4-1.3.1 OpenOffice_org-gnome-3.1.1.4-1.3.1 OpenOffice_org-kde-3.1.1.4-1.3.1 OpenOffice_org-kde4-3.1.1.4-1.3.1 OpenOffice_org-libs-core-devel-3.1.1.4-1.3.1 OpenOffice_org-libs-core-l10n-prebuilt-3.1.1.4-1.3.1 OpenOffice_org-mailmerge-3.1.1.4-1.3.1 - openSUSE 11.1 (i586 ppc src x86_64): OpenOffice_org-libs-core-3.0.0.9-1.12.1 - openSUSE 11.1 (i586 ppc x86_64): OpenOffice_org-base-drivers-postgresql-3.0.0.9-1.12.1 OpenOffice_org-gnome-3.0.0.9-1.12.1 OpenOffice_org-kde-3.0.0.9-1.12.1 OpenOffice_org-libs-core-devel-3.0.0.9-1.12.1 OpenOffice_org-libs-core-l10n-prebuilt-3.0.0.9-1.12.1 OpenOffice_org-mailmerge-3.0.0.9-1.12.1 - openSUSE 11.0 (i586 ppc src x86_64): OpenOffice_org-2.4.0.14-1.8 - openSUSE 11.0 (i586 ppc x86_64): OpenOffice_org-base-2.4.0.14-1.8 OpenOffice_org-branding-upstream-2.4.0.14-1.8 OpenOffice_org-calc-2.4.0.14-1.8 OpenOffice_org-devel-2.4.0.14-1.8 OpenOffice_org-draw-2.4.0.14-1.8 OpenOffice_org-filters-2.4.0.14-1.8 OpenOffice_org-gnome-2.4.0.14-1.8 OpenOffice_org-icon-themes-prebuilt-2.4.0.14-1.8 OpenOffice_org-impress-2.4.0.14-1.8 OpenOffice_org-kde-2.4.0.14-1.8 OpenOffice_org-mailmerge-2.4.0.14-1.8 OpenOffice_org-math-2.4.0.14-1.8 OpenOffice_org-mono-2.4.0.14-1.8 OpenOffice_org-officebean-2.4.0.14-1.8 OpenOffice_org-pyuno-2.4.0.14-1.8 OpenOffice_org-sdk-2.4.0.14-1.8 OpenOffice_org-sdk-doc-2.4.0.14-1.8 OpenOffice_org-testtool-2.4.0.14-1.8 OpenOffice_org-writer-2.4.0.14-1.8 References: http://support.novell.com/security/cve/CVE-2010-0395.html https://bugzilla.novell.com/607095 [View Less]

1 0

openSUSE-RU-2010:0384-1 (low): ksh: Collective update for ksh
by maintenance＠opensuse.org 16 Jul '10

16 Jul '10

openSUSE Recommended Update: ksh: Collective update for ksh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0384-1 Rating: low References: #502622 #520598 #523212 #548558 #555938 #561405 #564967 #585244 #591248 Affected Products: openSUSE 11.2 openSUSE 11.1 openSUSE 11.0 … [View More]

1 0

openSUSE-SU-2010:0383-1 (moderate): python-mako security update
by opensuse-security＠opensuse.org 16 Jul '10

16 Jul '10

openSUSE Security Update: python-mako security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0383-1 Rating: moderate References: #619134 Cross-References: CVE-2010-2480 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. … [View More]

1 0

openSUSE-OU-2010:0373-2 (low): Download and Install Microsoft(r) TrueType Core Fonts
by maintenance＠opensuse.org 15 Jul '10

15 Jul '10

openSUSE Optional Update: Download and Install Microsoft(r) TrueType Core Fonts ______________________________________________________________________________ Announcement ID: openSUSE-OU-2010:0373-2 Rating: low References: #621540 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: Installing this update will … [View More]

1 0

openSUSE-OU-2010:0373-1 (low): flash-player: openSUSE maintained Flash Player 10.1
by maintenance＠opensuse.org 14 Jul '10

14 Jul '10

openSUSE Optional Update: flash-player: openSUSE maintained Flash Player 10.1 ______________________________________________________________________________ Announcement ID: openSUSE-OU-2010:0373-1 Rating: low References: #621540 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This patch adds an openSUSE … [View More]

1 0

openSUSE-RU-2010:0372-1 (low): smolt: Trigger smolt run
by maintenance＠opensuse.org 14 Jul '10

14 Jul '10

openSUSE Recommended Update: smolt: Trigger smolt run ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0372-1 Rating: low References: #621540 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Installing this update will trigger the updater … [View More]

1 0

openSUSE-SU-2010:0371-1 (moderate): postgresql: security update to fix four vulnerabilities
by opensuse-security＠opensuse.org 13 Jul '10

13 Jul '10

openSUSE Security Update: postgresql: security update to fix four vulnerabilities ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0371-1 Rating: moderate References: #588996 #605845 #605926 #607778 Cross-References: CVE-2010-0733 CVE-2010-1169 CVE-2010-1170 CVE-2010-1975 Affected Products: openSUSE 11.2 openSUSE 11.1 openSUSE … [View More]11.0 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. It includes two new package versions. Description: This update of postgresql was pblished to fix several minor security vulnerabilities: - CVE-2010-1975: postgresql does not properly check privileges during certain RESET ALL operations, which allows remote authenticated users to remove arbitrary parameter settings. - CVE-2010-1170: The PL/Tcl implementation in postgresql loads Tcl code from the pltcl_modules table regardless of the table's ownership and permissions, which allows remote authenticated users, with database-creation privileges, to execute arbitrary Tcl code. - CVE-2010-1169: Postgresql does not properly restrict PL/perl procedures, which allows remote authenticated users, with database-creation privileges, to execute arbitrary Perl code via a crafted script. - CVE-2010-0733: An integer overflow in postgresql allows remote authenticated users to crash the daemon via a SELECT statement. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch postgresql-2472 - openSUSE 11.1: zypper in -t patch postgresql-2472 - openSUSE 11.0: zypper in -t patch postgresql-2472 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 src x86_64) [New Version: 8.4.4]: postgresql-8.4.4-0.1.1 - openSUSE 11.2 (i586 x86_64) [New Version: 8.4.4]: postgresql-contrib-8.4.4-0.1.1 postgresql-devel-8.4.4-0.1.1 postgresql-docs-8.4.4-0.1.1 postgresql-libs-8.4.4-0.1.1 postgresql-plperl-8.4.4-0.1.1 postgresql-plpython-8.4.4-0.1.1 postgresql-pltcl-8.4.4-0.1.1 postgresql-server-8.4.4-0.1.1 - openSUSE 11.2 (x86_64) [New Version: 8.4.4]: postgresql-libs-32bit-8.4.4-0.1.1 - openSUSE 11.1 (i586 ppc src x86_64) [New Version: 8.3.11]: postgresql-8.3.11-0.1.1 - openSUSE 11.1 (i586 ppc x86_64) [New Version: 8.3.11]: postgresql-contrib-8.3.11-0.1.1 postgresql-devel-8.3.11-0.1.1 postgresql-docs-8.3.11-0.1.1 postgresql-libs-8.3.11-0.1.1 postgresql-plperl-8.3.11-0.1.1 postgresql-plpython-8.3.11-0.1.1 postgresql-pltcl-8.3.11-0.1.1 postgresql-server-8.3.11-0.1.1 - openSUSE 11.1 (x86_64) [New Version: 8.3.11]: postgresql-libs-32bit-8.3.11-0.1.1 - openSUSE 11.1 (ppc) [New Version: 8.3.11]: postgresql-libs-64bit-8.3.11-0.1.1 - openSUSE 11.0 (i586 ppc ppc64 src x86_64) [New Version: 8.3.11]: postgresql-8.3.11-0.1 - openSUSE 11.0 (i586 ppc x86_64) [New Version: 8.3.11]: postgresql-contrib-8.3.11-0.1 postgresql-devel-8.3.11-0.1 postgresql-docs-8.3.11-0.1 postgresql-libs-8.3.11-0.1 postgresql-plperl-8.3.11-0.1 postgresql-plpython-8.3.11-0.1 postgresql-pltcl-8.3.11-0.1 postgresql-server-8.3.11-0.1 - openSUSE 11.0 (x86_64) [New Version: 8.3.11]: postgresql-libs-32bit-8.3.11-0.1 - openSUSE 11.0 (ppc) [New Version: 8.3.11]: postgresql-libs-64bit-8.3.11-0.1 References: http://support.novell.com/security/cve/CVE-2010-0733.html http://support.novell.com/security/cve/CVE-2010-1169.html http://support.novell.com/security/cve/CVE-2010-1170.html http://support.novell.com/security/cve/CVE-2010-1975.html https://bugzilla.novell.com/588996 https://bugzilla.novell.com/605845 https://bugzilla.novell.com/605926 https://bugzilla.novell.com/607778 [View Less]

1 0

openSUSE-SU-2010:0370-1 (moderate): opera: cross-origin loading of CSS stylesheets
by opensuse-security＠opensuse.org 13 Jul '10

13 Jul '10

openSUSE Security Update: opera: cross-origin loading of CSS stylesheets ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0370-1 Rating: moderate References: #583620 #607823 #615942 Cross-References: CVE-2010-0653 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes … [View More]

1 0

openSUSE-SU-2010:0368-1 (moderate): opera: Upgrade to 10.60 release
by opensuse-security＠opensuse.org 13 Jul '10

13 Jul '10

openSUSE Security Update: opera: Upgrade to 10.60 release ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0368-1 Rating: moderate References: #583620 #607823 #615942 Cross-References: CVE-2010-0653 CVE-2010-1993 Affected Products: openSUSE 11.2 openSUSE 11.1 openSUSE 11.0 … [View More]

1 0

openSUSE-SU-2010:0366-1 (important): otrs: Fixed a vulnerability in OTRS-Core that allowed SQL-Injection
by opensuse-security＠opensuse.org 13 Jul '10

13 Jul '10

openSUSE Security Update: otrs: Fixed a vulnerability in OTRS-Core that allowed SQL-Injection ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0366-1 Rating: important References: #576066 Cross-References: CVE-2010-0438 Affected Products: openSUSE 11.2 openSUSE 11.1 openSUSE 11.0 … [View More]

1 0

openSUSE-SU-2010:0365-1 (moderate): moodle security update
by opensuse-security＠opensuse.org 12 Jul '10

12 Jul '10

openSUSE Security Update: moodle security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0365-1 Rating: moderate References: #616186 Cross-References: CVE-2010-2228 CVE-2010-2229 CVE-2010-2230 CVE-2010-2231 Affected Products: openSUSE 11.1 openSUSE 11.0 ______________________________________________________________________________ An … [View More]update that fixes four vulnerabilities is now available. It includes one version update. Description: Moodle was prone to several Cross-Site Scripting (XSS) vulnerabilities (CVE-2010-2228, CVE-2010-2229, CVE-2010-2230, CVE-2010-2231). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.1: zypper in -t patch moodle-2691 - openSUSE 11.0: zypper in -t patch moodle-2691 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.1 (noarch src) [New Version: 1.9.9]: moodle-1.9.9-0.1.1 - openSUSE 11.1 (noarch) [New Version: 1.9.9]: moodle-af-1.9.9-0.1.1 moodle-ar-1.9.9-0.1.1 moodle-be-1.9.9-0.1.1 moodle-bg-1.9.9-0.1.1 moodle-bs-1.9.9-0.1.1 moodle-ca-1.9.9-0.1.1 moodle-cs-1.9.9-0.1.1 moodle-da-1.9.9-0.1.1 moodle-de-1.9.9-0.1.1 moodle-de_du-1.9.9-0.1.1 moodle-el-1.9.9-0.1.1 moodle-es-1.9.9-0.1.1 moodle-et-1.9.9-0.1.1 moodle-eu-1.9.9-0.1.1 moodle-fa-1.9.9-0.1.1 moodle-fi-1.9.9-0.1.1 moodle-fr-1.9.9-0.1.1 moodle-ga-1.9.9-0.1.1 moodle-gl-1.9.9-0.1.1 moodle-he-1.9.9-0.1.1 moodle-hi-1.9.9-0.1.1 moodle-hr-1.9.9-0.1.1 moodle-hu-1.9.9-0.1.1 moodle-id-1.9.9-0.1.1 moodle-is-1.9.9-0.1.1 moodle-it-1.9.9-0.1.1 moodle-ja-1.9.9-0.1.1 moodle-ka-1.9.9-0.1.1 moodle-km-1.9.9-0.1.1 moodle-kn-1.9.9-0.1.1 moodle-ko-1.9.9-0.1.1 moodle-lt-1.9.9-0.1.1 moodle-lv-1.9.9-0.1.1 moodle-mi_tn-1.9.9-0.1.1 moodle-ms-1.9.9-0.1.1 moodle-nl-1.9.9-0.1.1 moodle-nn-1.9.9-0.1.1 moodle-no-1.9.9-0.1.1 moodle-pl-1.9.9-0.1.1 moodle-pt-1.9.9-0.1.1 moodle-ro-1.9.9-0.1.1 moodle-ru-1.9.9-0.1.1 moodle-sk-1.9.9-0.1.1 moodle-sl-1.9.9-0.1.1 moodle-so-1.9.9-0.1.1 moodle-sq-1.9.9-0.1.1 moodle-sr-1.9.9-0.1.1 moodle-sv-1.9.9-0.1.1 moodle-th-1.9.9-0.1.1 moodle-tl-1.9.9-0.1.1 moodle-tr-1.9.9-0.1.1 moodle-uk-1.9.9-0.1.1 moodle-vi-1.9.9-0.1.1 moodle-zh_cn-1.9.9-0.1.1 - openSUSE 11.0 (noarch src) [New Version: 1.9.9]: moodle-1.9.9-0.1 - openSUSE 11.0 (noarch) [New Version: 1.9.9]: moodle-af-1.9.9-0.1 moodle-ar-1.9.9-0.1 moodle-be-1.9.9-0.1 moodle-bg-1.9.9-0.1 moodle-bs-1.9.9-0.1 moodle-ca-1.9.9-0.1 moodle-cs-1.9.9-0.1 moodle-da-1.9.9-0.1 moodle-de-1.9.9-0.1 moodle-de_du-1.9.9-0.1 moodle-el-1.9.9-0.1 moodle-es-1.9.9-0.1 moodle-et-1.9.9-0.1 moodle-eu-1.9.9-0.1 moodle-fa-1.9.9-0.1 moodle-fi-1.9.9-0.1 moodle-fr-1.9.9-0.1 moodle-ga-1.9.9-0.1 moodle-gl-1.9.9-0.1 moodle-he-1.9.9-0.1 moodle-hi-1.9.9-0.1 moodle-hr-1.9.9-0.1 moodle-hu-1.9.9-0.1 moodle-id-1.9.9-0.1 moodle-is-1.9.9-0.1 moodle-it-1.9.9-0.1 moodle-ja-1.9.9-0.1 moodle-ka-1.9.9-0.1 moodle-km-1.9.9-0.1 moodle-kn-1.9.9-0.1 moodle-ko-1.9.9-0.1 moodle-lt-1.9.9-0.1 moodle-lv-1.9.9-0.1 moodle-mi_tn-1.9.9-0.1 moodle-ms-1.9.9-0.1 moodle-nl-1.9.9-0.1 moodle-nn-1.9.9-0.1 moodle-no-1.9.9-0.1 moodle-pl-1.9.9-0.1 moodle-pt-1.9.9-0.1 moodle-ro-1.9.9-0.1 moodle-ru-1.9.9-0.1 moodle-sk-1.9.9-0.1 moodle-sl-1.9.9-0.1 moodle-so-1.9.9-0.1 moodle-sq-1.9.9-0.1 moodle-sr-1.9.9-0.1 moodle-sv-1.9.9-0.1 moodle-th-1.9.9-0.1 moodle-tl-1.9.9-0.1 moodle-tr-1.9.9-0.1 moodle-uk-1.9.9-0.1 moodle-vi-1.9.9-0.1 moodle-zh_cn-1.9.9-0.1 References: http://support.novell.com/security/cve/CVE-2010-2228.html http://support.novell.com/security/cve/CVE-2010-2229.html http://support.novell.com/security/cve/CVE-2010-2230.html http://support.novell.com/security/cve/CVE-2010-2231.html https://bugzilla.novell.com/616186 [View Less]

1 0

openSUSE-SU-2010:0359-1 (critical): acroread: Update to security fix release 9.3.3
by opensuse-security＠opensuse.org 08 Jul '10

08 Jul '10

openSUSE Security Update: acroread: Update to security fix release 9.3.3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0359-1 Rating: critical References: #612064 Cross-References: CVE-2010-1240 CVE-2010-1285 CVE-2010-1295 CVE-2010-1297 CVE-2010-2168 CVE-2010-2201 CVE-2010-2202 CVE-2010-2203 CVE-2010-2204 CVE-2010-2205 CVE-2010-2206 CVE-2010-… [View More]

1 0

openSUSE-SU-2010:0358-2 (important): MozillaFirefox: Security update to version 3.5.10
by opensuse-security＠opensuse.org 08 Jul '10

08 Jul '10

openSUSE Security Update: MozillaFirefox: Security update to version 3.5.10 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0358-2 Rating: important References: #603356 Affected Products: openSUSE 11.2 openSUSE 11.1 openSUSE 11.0 ______________________________________________________________________________ An update that contains security … [View More]fixes can now be installed. It includes two new package versions. Description: Mozilla Firefox was updated to version 3.5.10, fixing various bugs and security issues. MFSA 2010-33 / CVE-2008-5913: Security researcher Amit Klein reported that it was possible to reverse engineer the value used to seed Math.random(). Since the pseudo-random number generator was only seeded once per browsing session, this seed value could be used as a unique token to identify and track users across different web sites. MFSA 2010-32 / CVE-2010-1197: Security researcher Ilja van Sprundel of IOActive reported that the Content-Disposition: attachment HTTP header was ignored when Content-Type: multipart was also present. This issue could potentially lead to XSS problems in sites that allow users to upload arbitrary files and specify a Content-Type but rely on Content-Disposition: attachment to prevent the content from being displayed inline. MFSA 2010-31 / CVE-2010-1125: Google security researcher Michal Zalewski reported that focus() could be used to change a user's cursor focus while they are typing, potentially directing their keyboard input to an unintended location. This behaviour was also present across origins when content from one domain was embedded within another via an iframe. A malicious web page could use this behaviour to steal keystrokes from a victim while they were typing sensitive information such as a password. MFSA 2010-30 / CVE-2010-1199: Security researcher Martin Barbella reported via TippingPoint's Zero Day Initiative that an XSLT node sorting routine contained an integer overflow vulnerability. In cases where one of the nodes to be sorted contained a very large text value, the integer used to allocate a memory buffer to store its value would overflow, resulting in too small a buffer being created. An attacker could use this vulnerability to write data past the end of the buffer, causing the browser to crash and potentially running arbitrary code on a victim's computer. MFSA 2010-29 / CVE-2010-1196: Security researcher Nils of MWR InfoSecurity reported that the routine for setting the text value for certain types of DOM nodes contained an integer overflow vulnerability. When a very long string was passed to this routine, the integer value used in creating a new memory buffer to hold the string would overflow, resulting in too small a buffer being allocated. An attacker could use this vulnerability to write data past the end of the buffer, causing a crash and potentially running arbitrary code on a victim's computer. MFSA 2010-28 / CVE-2010-1198: Microsoft Vulnerability Research reported that two plugin instances could interact in a way in which one plugin gets a reference to an object owned by a second plugin and continues to hold that reference after the second plugin is unloaded and its object is destroyed. In these cases, the first plugin would contain a pointer to freed memory which, if accessed, could be used by an attacker to execute arbitrary code on a victim's computer. MFSA 2010-27 / CVE-2010-0183: Security researcher wushi of team509 reported that the frame construction process for certain types of menus could result in a menu containing a pointer to a previously freed menu item. During the cycle collection process, this freed item could be accessed, resulting in the execution of a section of code potentially controlled by an attacker. MFSA 2010-26 / CVE-2010-1200 / CVE-2010-1201 / CVE-2010-1202 / CVE-2010-1203: Mozilla developers identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these crashes showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code. MFSA 2010-25 / CVE-2010-1121: A memory corruption flaw leading to code execution was reported by security researcher Nils of MWR InfoSecurity during the 2010 Pwn2Own contest sponsored by TippingPoint's Zero Day Initiative. By moving DOM nodes between documents Nils found a case where the moved node incorrectly retained its old scope. If garbage collection could be triggered at the right time then Firefox would later use this freed object. The contest winning exploit only affects Firefox 3.6 and not earlier versions. Updated (June 22, 2010): Firefox 3.5, SeaMonkey 2.0, and Thunderbird 3.0 based on earlier versions of the browser engine were patched just in case there is an alternate way of triggering the underlying flaw. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch MozillaFirefox-2595 - openSUSE 11.1: zypper in -t patch MozillaFirefox-2595 - openSUSE 11.0: zypper in -t patch MozillaFirefox-2595 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 src x86_64) [New Version: 1.9.1.10 and 3.5.10]: MozillaFirefox-3.5.10-0.1.1 mozilla-xulrunner191-1.9.1.10-0.1.1 - openSUSE 11.2 (i586 x86_64) [New Version: 1.9.1.10 and 3.5.10]: MozillaFirefox-branding-upstream-3.5.10-0.1.1 MozillaFirefox-translations-common-3.5.10-0.1.1 MozillaFirefox-translations-other-3.5.10-0.1.1 mozilla-xulrunner191-devel-1.9.1.10-0.1.1 mozilla-xulrunner191-gnomevfs-1.9.1.10-0.1.1 mozilla-xulrunner191-translations-common-1.9.1.10-0.1.1 mozilla-xulrunner191-translations-other-1.9.1.10-0.1.1 python-xpcom191-1.9.1.10-0.1.1 - openSUSE 11.2 (x86_64) [New Version: 1.9.1.10]: mozilla-xulrunner191-32bit-1.9.1.10-0.1.1 mozilla-xulrunner191-gnomevfs-32bit-1.9.1.10-0.1.1 - openSUSE 11.1 (i586 ppc src x86_64) [New Version: 1.9.1.10 and 3.5.10]: MozillaFirefox-3.5.10-0.1.2 mozilla-xulrunner191-1.9.1.10-0.1.2 - openSUSE 11.1 (i586 ppc x86_64) [New Version: 1.9.1.10 and 3.5.10]: MozillaFirefox-branding-upstream-3.5.10-0.1.2 MozillaFirefox-translations-common-3.5.10-0.1.2 MozillaFirefox-translations-other-3.5.10-0.1.2 mozilla-xulrunner191-devel-1.9.1.10-0.1.2 mozilla-xulrunner191-gnomevfs-1.9.1.10-0.1.2 mozilla-xulrunner191-translations-common-1.9.1.10-0.1.2 mozilla-xulrunner191-translations-other-1.9.1.10-0.1.2 python-xpcom191-1.9.1.10-0.1.2 - openSUSE 11.1 (x86_64) [New Version: 1.9.1.10]: mozilla-xulrunner191-32bit-1.9.1.10-0.1.2 mozilla-xulrunner191-gnomevfs-32bit-1.9.1.10-0.1.2 - openSUSE 11.0 (i586 ppc src x86_64) [New Version: 1.9.1.10 and 3.5.10]: MozillaFirefox-3.5.10-0.1 mozilla-xulrunner191-1.9.1.10-0.1 - openSUSE 11.0 (i586 ppc x86_64) [New Version: 1.9.1.10 and 3.5.10]: MozillaFirefox-branding-upstream-3.5.10-0.1 MozillaFirefox-translations-common-3.5.10-0.1 MozillaFirefox-translations-other-3.5.10-0.1 mozilla-xulrunner191-devel-1.9.1.10-0.1 mozilla-xulrunner191-gnomevfs-1.9.1.10-0.1 mozilla-xulrunner191-translations-common-1.9.1.10-0.1 mozilla-xulrunner191-translations-other-1.9.1.10-0.1 python-xpcom191-1.9.1.10-0.1 - openSUSE 11.0 (x86_64) [New Version: 1.9.1.10]: mozilla-xulrunner191-32bit-1.9.1.10-0.1 mozilla-xulrunner191-gnomevfs-32bit-1.9.1.10-0.1 - openSUSE 11.0 (ppc) [New Version: 1.9.1.10]: mozilla-xulrunner191-64bit-1.9.1.10-0.1 mozilla-xulrunner191-gnomevfs-64bit-1.9.1.10-0.1 References: https://bugzilla.novell.com/603356 [View Less]

1 0

openSUSE-SU-2010:0358-1 (important): MozillaThunderbird: Update to 3.0.5
by opensuse-security＠opensuse.org 07 Jul '10

07 Jul '10

openSUSE Security Update: MozillaThunderbird: Update to 3.0.5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0358-1 Rating: important References: #603356 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. It includes two new package versions. Description: … [View More]

1 0

openSUSE-RU-2010:0357-1 (low): python: This update fixes problems caused by using "osc build"
by maintenance＠opensuse.org 06 Jul '10

06 Jul '10

openSUSE Recommended Update: python: This update fixes problems caused by using "osc build" ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0357-1 Rating: low References: #612305 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Some calls in … [View More]

1 0

openSUSE-SU-2010:0354-1 (important): KVIrc: format string and directory traversal vulnerability
by opensuse-security＠opensuse.org 05 Jul '10

05 Jul '10

openSUSE Security Update: KVIrc: format string and directory traversal vulnerability ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0354-1 Rating: important References: #613163 Cross-References: CVE-2010-2451 CVE-2010-2452 Affected Products: openSUSE 11.2 openSUSE 11.1 openSUSE 11.0 … [View More]

1 0

openSUSE-SU-2010:0351-1 (moderate): libvorbis: memory corruption while parsing ogg files
by opensuse-security＠opensuse.org 02 Jul '10

02 Jul '10

openSUSE Security Update: libvorbis: memory corruption while parsing ogg files ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0351-1 Rating: moderate References: #608192 Cross-References: CVE-2009-2663 Affected Products: openSUSE 11.2 openSUSE 11.1 openSUSE 11.0 ______________________________________________________________________________ … [View More]

1 0

openSUSE-SU-2010:0346-1 (important): samba: Fixed various security issues
by opensuse-security＠opensuse.org 29 Jun '10

29 Jun '10

openSUSE Security Update: samba: Fixed various security issues ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0346-1 Rating: important References: #550002 #577868 #605935 #606947 #611927 Cross-References: CVE-2010-2063 Affected Products: openSUSE 11.1 openSUSE 11.0 ______________________________________________________________________________ An update that … [View More]solves one vulnerability and has four fixes is now available. It includes two new package versions. Description: This update of the Samba server package fixes security issues and bugs. Following security issues were fixed: CVE-2010-2063: A buffer overrun was possible in chain_reply code in 3.3.x and below, which could be used to crash the samba server or potentially execute code. CVE-2010-0787: Take extra care that a mount point of mount.cifs isn't changed during mount. Also the following bugs were fixed: - Honor "interfaces" list in net ad dns register. (bnc#606947) - An uninitialized variable read could cause an smbd crash; (bso#7254); (bnc#605935). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.1: zypper in -t patch cifs-mount-2543 - openSUSE 11.0: zypper in -t patch cifs-mount-2543 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.1 (i586 ppc src x86_64) [New Version: 3.2.7]: samba-3.2.7-11.7.1 - openSUSE 11.1 (i586 ppc x86_64) [New Version: 3.2.7]: cifs-mount-3.2.7-11.7.1 ldapsmb-1.34b-6.7.1 libnetapi-devel-3.2.7-11.7.1 libnetapi0-3.2.7-11.7.1 libsmbclient-devel-3.2.7-11.7.1 libsmbclient0-3.2.7-11.7.1 libsmbsharemodes-devel-3.2.7-11.7.1 libsmbsharemodes0-3.2.7-11.7.1 libtalloc-devel-3.2.7-11.7.1 libtalloc1-3.2.7-11.7.1 libtdb-devel-3.2.7-11.7.1 libtdb1-3.2.7-11.7.1 libwbclient-devel-3.2.7-11.7.1 libwbclient0-3.2.7-11.7.1 samba-client-3.2.7-11.7.1 samba-devel-3.2.7-11.7.1 samba-krb-printing-3.2.7-11.7.1 samba-vscan-0.3.6b-6.7.1 samba-winbind-3.2.7-11.7.1 - openSUSE 11.1 (x86_64) [New Version: 3.2.7]: libsmbclient0-32bit-3.2.7-11.7.1 libtalloc1-32bit-3.2.7-11.7.1 libtdb1-32bit-3.2.7-11.7.1 libwbclient0-32bit-3.2.7-11.7.1 samba-32bit-3.2.7-11.7.1 samba-client-32bit-3.2.7-11.7.1 samba-winbind-32bit-3.2.7-11.7.1 - openSUSE 11.1 (ppc) [New Version: 3.2.7]: libsmbclient0-64bit-3.2.7-11.7.1 libtalloc1-64bit-3.2.7-11.7.1 libtdb1-64bit-3.2.7-11.7.1 libwbclient0-64bit-3.2.7-11.7.1 samba-64bit-3.2.7-11.7.1 samba-client-64bit-3.2.7-11.7.1 samba-winbind-64bit-3.2.7-11.7.1 - openSUSE 11.0 (i586 ppc src x86_64) [New Version: 3.2.4]: samba-3.2.4-4.12 - openSUSE 11.0 (i586 ppc x86_64) [New Version: 3.2.4]: cifs-mount-3.2.4-4.12 ldapsmb-1.34b-195.17 libnetapi-devel-3.2.4-4.12 libnetapi0-3.2.4-4.12 libsmbclient-devel-3.2.4-4.12 libsmbclient0-3.2.4-4.12 libsmbsharemodes-devel-3.2.4-4.12 libsmbsharemodes0-3.2.4-4.12 libtalloc-devel-3.2.4-4.12 libtalloc1-3.2.4-4.12 libtdb-devel-3.2.4-4.12 libtdb1-3.2.4-4.12 libwbclient-devel-3.2.4-4.12 libwbclient0-3.2.4-4.12 samba-client-3.2.4-4.12 samba-devel-3.2.4-4.12 samba-krb-printing-3.2.4-4.12 samba-winbind-3.2.4-4.12 - openSUSE 11.0 (x86_64) [New Version: 3.2.4]: libsmbclient0-32bit-3.2.4-4.12 libtalloc1-32bit-3.2.4-4.12 libtdb1-32bit-3.2.4-4.12 libwbclient0-32bit-3.2.4-4.12 samba-32bit-3.2.4-4.12 samba-client-32bit-3.2.4-4.12 samba-winbind-32bit-3.2.4-4.12 - openSUSE 11.0 (ppc) [New Version: 3.2.4]: libsmbclient0-64bit-3.2.4-4.12 libtalloc1-64bit-3.2.4-4.12 libtdb1-64bit-3.2.4-4.12 libwbclient0-64bit-3.2.4-4.12 samba-64bit-3.2.4-4.12 samba-client-64bit-3.2.4-4.12 samba-winbind-64bit-3.2.4-4.12 References: http://support.novell.com/security/cve/CVE-2010-2063.html https://bugzilla.novell.com/550002 https://bugzilla.novell.com/577868 https://bugzilla.novell.com/605935 https://bugzilla.novell.com/606947 https://bugzilla.novell.com/611927 [View Less]

1 0

openSUSE-SU-2010:0342-1 (moderate): mono security update
by opensuse-security＠opensuse.org 29 Jun '10

29 Jun '10

openSUSE Security Update: mono security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0342-1 Rating: moderate References: #592428 Cross-References: CVE-2010-1459 Affected Products: openSUSE 11.2 openSUSE 11.1 openSUSE 11.0 ______________________________________________________________________________ An update that fixes one … [View More]vulnerability is now available. Description: Mono's ASP.NET implementation did not set the 'EnableViewStateMac' property by default. Attackers could exploit that to conduct cross-site-scripting (XSS) attacks. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch bytefx-data-mysql-2384 - openSUSE 11.1: zypper in -t patch bytefx-data-mysql-2384 - openSUSE 11.0: zypper in -t patch bytefx-data-mysql-2384 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 src x86_64): mono-core-2.4.2.3-2.7.1 - openSUSE 11.2 (i586 x86_64): bytefx-data-mysql-2.4.2.3-2.7.1 ibm-data-db2-2.4.2.3-2.7.1 mono-complete-2.4.2.3-2.7.1 mono-data-2.4.2.3-2.7.1 mono-data-firebird-2.4.2.3-2.7.1 mono-data-oracle-2.4.2.3-2.7.1 mono-data-postgresql-2.4.2.3-2.7.1 mono-data-sqlite-2.4.2.3-2.7.1 mono-data-sybase-2.4.2.3-2.7.1 mono-devel-2.4.2.3-2.7.1 mono-extras-2.4.2.3-2.7.1 mono-jscript-2.4.2.3-2.7.1 mono-locale-extras-2.4.2.3-2.7.1 mono-nunit-2.4.2.3-2.7.1 mono-wcf-2.4.2.3-2.7.1 mono-web-2.4.2.3-2.7.1 mono-winforms-2.4.2.3-2.7.1 monodoc-core-2.4.2.3-2.7.1 - openSUSE 11.1 (i586 ppc src x86_64): mono-core-2.0.1-1.23.1 - openSUSE 11.1 (i586 ppc x86_64): bytefx-data-mysql-2.0.1-1.23.1 ibm-data-db2-2.0.1-1.23.1 mono-complete-2.0.1-1.23.1 mono-data-2.0.1-1.23.1 mono-data-firebird-2.0.1-1.23.1 mono-data-oracle-2.0.1-1.23.1 mono-data-postgresql-2.0.1-1.23.1 mono-data-sqlite-2.0.1-1.23.1 mono-data-sybase-2.0.1-1.23.1 mono-devel-2.0.1-1.23.1 mono-extras-2.0.1-1.23.1 mono-jscript-2.0.1-1.23.1 mono-locale-extras-2.0.1-1.23.1 mono-nunit-2.0.1-1.23.1 mono-web-2.0.1-1.23.1 mono-winforms-2.0.1-1.23.1 - openSUSE 11.1 (noarch src): monodoc-core-2.0-1.42.1 - openSUSE 11.1 (x86_64): mono-core-32bit-2.0.1-1.23.1 - openSUSE 11.0 (i586 ppc src x86_64): mono-core-1.9.1-6.8 - openSUSE 11.0 (i586 ppc x86_64): bytefx-data-mysql-1.9.1-6.8 ibm-data-db2-1.9.1-6.8 mono-complete-1.9.1-6.8 mono-data-1.9.1-6.8 mono-data-firebird-1.9.1-6.8 mono-data-oracle-1.9.1-6.8 mono-data-postgresql-1.9.1-6.8 mono-data-sqlite-1.9.1-6.8 mono-data-sybase-1.9.1-6.8 mono-devel-1.9.1-6.8 mono-extras-1.9.1-6.8 mono-jscript-1.9.1-6.8 mono-locale-extras-1.9.1-6.8 mono-nunit-1.9.1-6.8 mono-web-1.9.1-6.8 mono-winforms-1.9.1-6.8 - openSUSE 11.0 (noarch src): monodoc-core-1.9-18.1 - openSUSE 11.0 (x86_64): mono-core-32bit-1.9.1-6.8 References: http://support.novell.com/security/cve/CVE-2010-1459.html https://bugzilla.novell.com/592428 [View Less]

1 0

openSUSE-RU-2010:0341-1 (low): nagios-nrpe-client: Writes on installation to /etc/services without dependency of netcfg. Fixed by this update.
by maintenance＠opensuse.org 29 Jun '10

29 Jun '10

openSUSE Recommended Update: nagios-nrpe-client: Writes on installation to /etc/services without dependency of netcfg. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0341-1 Rating: low References: #608164 Affected Products: openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update … [View More]

1 0

openSUSE-SU-2010:0338-1 (important): aria2: Update to 1.9.3 to fix a metalink name Directory Traversal Vulnerability
by opensuse-security＠opensuse.org 24 Jun '10

24 Jun '10

openSUSE Security Update: aria2: Update to 1.9.3 to fix a metalink name Directory Traversal Vulnerability ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0338-1 Rating: important References: #605937 Cross-References: CVE-2010-1512 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that fixes one vulnerability … [View More]

1 0

openSUSE-RU-2010:0335-1 (moderate): NetworkManager-gnome: It crash when a profile is edit. Fixed by this update.
by maintenance＠opensuse.org 22 Jun '10

22 Jun '10

openSUSE Recommended Update: NetworkManager-gnome: It crash when a profile is edit. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0335-1 Rating: moderate References: #611630 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: … [View More]

1 0

openSUSE-SU-2010:0334-1 (important): lftp: fixed a http client unexpected download filename vulnerability
by opensuse-security＠opensuse.org 21 Jun '10

21 Jun '10

openSUSE Security Update: lftp: fixed a http client unexpected download filename vulnerability ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0334-1 Rating: important References: #606319 Cross-References: CVE-2010-2251 Affected Products: openSUSE 11.2 openSUSE 11.1 openSUSE 11.0 … [View More]

1 0

openSUSE-RU-2010:0331-1 (low): unzip: Encoding of Cyrillic filenames in zip archive, created under Windows, is incorrect. Fixed by this update.
by maintenance＠opensuse.org 17 Jun '10

17 Jun '10

openSUSE Recommended Update: unzip: Encoding of Cyrillic filenames in zip archive, created under Windows, is incorrect. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0331-1 Rating: low References: #540598 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that has one recommended fix can … [View More]

1 0

openSUSE-RU-2010:0330-1 (moderate): viewvc: Fix exceptions on various cases
by maintenance＠opensuse.org 17 Jun '10

17 Jun '10

openSUSE Recommended Update: viewvc: Fix exceptions on various cases ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0330-1 Rating: moderate References: #612090 Affected Products: openSUSE 11.2 openSUSE 11.1 openSUSE 11.0 ______________________________________________________________________________ An update that has one recommended fix can … [View More]

1 0

openSUSE-SU-2010:0324-1 (important): libtiff: integer overflow can lead to corrupted heap
by opensuse-security＠opensuse.org 14 Jun '10

14 Jun '10

openSUSE Security Update: libtiff: integer overflow can lead to corrupted heap ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0324-1 Rating: important References: #605837 Cross-References: CVE-2010-1411 Affected Products: openSUSE 11.2 openSUSE 11.1 openSUSE 11.0 ______________________________________________________________________________ … [View More]

1 0

openSUSE-SU-2010:0321-1 (important): flash-player: Fixed remote code execution
by opensuse-security＠opensuse.org 11 Jun '10

11 Jun '10

openSUSE Security Update: flash-player: Fixed remote code execution ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0321-1 Rating: important References: #612063 Cross-References: CVE-2008-4546 CVE-2009-3793 CVE-2010-1297 CVE-2010-2160 CVE-2010-2161 CVE-2010-2162 CVE-2010-2163 CVE-2010-2164 CVE-2010-2165 CVE-2010-2166 CVE-2010-2167 CVE-2010-2169 … [View More]

1 0

openSUSE-RU-2010:0318-1 (low): graphviz: 'tred' from package graphviz is broken. Fixed by this update.
by maintenance＠opensuse.org 08 Jun '10

08 Jun '10

openSUSE Recommended Update: graphviz: 'tred' from package graphviz is broken. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0318-1 Rating: low References: #590743 #609404 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. … [View More]

1 0

openSUSE-SU-2010:0306-1 (low): puppet security update
by opensuse-security＠opensuse.org 01 Jun '10

01 Jun '10

openSUSE Security Update: puppet security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0306-1 Rating: low References: #585402 Cross-References: CVE-2010-0156 Affected Products: openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description:… [View More]

1 0

openSUSE-SU-2010:0303-1 (moderate): memcached DoS
by opensuse-security＠opensuse.org 27 May '10

27 May '10

openSUSE Security Update: memcached DoS ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0303-1 Rating: moderate References: #595117 Cross-References: CVE-2010-1152 Affected Products: openSUSE 11.2 openSUSE 11.1 openSUSE 11.0 ______________________________________________________________________________ An update that fixes one vulnerability … [View More]

1 0

openSUSE-RU-2010:0299-1 (low): sysconfig: This update improves the handling of huge zebra routing tables
by maintenance＠opensuse.org 26 May '10

26 May '10

openSUSE Recommended Update: sysconfig: This update improves the handling of huge zebra routing tables ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0299-1 Rating: low References: #572205 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This … [View More]

1 0

openSUSE-SU-2010:0293-1 (moderate): Xen: Collective bugfix update (2010/04)
by opensuse-security＠opensuse.org 25 May '10

25 May '10

openSUSE Security Update: Xen: Collective bugfix update (2010/04) ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0293-1 Rating: moderate References: #481592 #529195 #537370 #541945 #542525 #545470 #547590 #548438 #548443 #548852 #550397 #553631 #553633 #555152 #561912 #564750 #572691 #573748 #576832 Cross-References: CVE-2009-3525 Affected … [View More]Products: openSUSE 11.1 ______________________________________________________________________________ An update that solves one vulnerability and has 18 fixes is now available. It includes one version update. Description: Collective Xen 2010/04 Update, containing fixes for the following issues: bnc#576832 - pygrub, reiserfs: Fix on-disk structure definition bnc#537370 - Xen on SLES 11 does not boot - endless loop in ATA detection bnc#561912 - xend leaks memory bnc#564750 - Keyboard Caps Lock key works abnormal under SLES11 xen guest OS. bnc#548443 - keymap setting not preserved bnc#555152 - "NAME" column in xentop (SLES11) output limited to 10 characters unlike SLES10 bnc#553631 - L3: diskpart will not run on windows 2008 bnc#548852 - DL585G2 - plug-in PCI cards fail in IO-APIC mode bnc#529195 - xend: disallow ! as a sxp separator bnc#550397 - xend: bootable flag of VBD not always of type int bnc#545470 - Xen vifname parameter is ignored when using type=ioemu in guest configuration file bnc#541945 - xm create -x command does not work in SLES 10 SP2 or SLES 11 bnc#542525 - VUL-1: xen pygrub vulnerability bnc#481592 and fate#306125 - Virtual machines are not able to boot from CD to allow upgrade to OES2SP1 (sle10 bug) bnc#553633 - Update breaks menu access keys in virt-viewer and still misses some key sequences. (sle10 bug) fate#306720: xen: virt-manager cdrom handling. bnc#547590 - L3: virt-manager is unable of displaying VNC console on remote hosts bnc#572691 - libvird segfaults when trying to create a kvm guest bnc#573748 - L3: Virsh gives error Device 51712 not connected after updating libvirt modules bnc#548438 - libcmpiutil / libvirt-cim does not properly handle CIM_ prefixed bnc#513921 - Xen doesn't work get an eror when starting the install processes or starting a pervious installed DomU bnc#526855 - Cannot set MAC address for PV guest in vm-install Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.1: zypper in -t patch xen-201004-2445 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.1 (i586 ppc src x86_64): libcmpiutil-0.5-15.18.1 libvirt-0.4.6-11.16.26 libvirt-cim-0.5.2-4.22.92 - openSUSE 11.1 (i586 ppc x86_64): libcmpiutil-devel-0.5-15.18.1 libvirt-devel-0.4.6-11.16.26 libvirt-doc-0.4.6-11.16.26 libvirt-python-0.4.6-11.16.26 - openSUSE 11.1 (i586 src x86_64) [New Version: 0.3.27]: virt-manager-0.5.3-64.26.26 virt-viewer-0.0.3-3.30.27 vm-install-0.3.27-0.1.13 xen-3.3.1_18546_24-0.4.13 - openSUSE 11.1 (i586 x86_64): xen-devel-3.3.1_18546_24-0.4.13 xen-doc-html-3.3.1_18546_24-0.4.13 xen-doc-pdf-3.3.1_18546_24-0.4.13 xen-kmp-debug-3.3.1_18546_24_2.6.27.45_0.2-0.4.13 xen-kmp-default-3.3.1_18546_24_2.6.27.45_0.2-0.4.13 xen-kmp-trace-3.3.1_18546_24_2.6.27.45_0.2-0.4.13 xen-libs-3.3.1_18546_24-0.4.13 xen-tools-3.3.1_18546_24-0.4.13 xen-tools-domU-3.3.1_18546_24-0.4.13 - openSUSE 11.1 (x86_64): xen-libs-32bit-3.3.1_18546_24-0.4.13 - openSUSE 11.1 (i586): xen-kmp-pae-3.3.1_18546_24_2.6.27.45_0.2-0.4.13 References: http://support.novell.com/security/cve/CVE-2009-3525.html https://bugzilla.novell.com/481592 https://bugzilla.novell.com/529195 https://bugzilla.novell.com/537370 https://bugzilla.novell.com/541945 https://bugzilla.novell.com/542525 https://bugzilla.novell.com/545470 https://bugzilla.novell.com/547590 https://bugzilla.novell.com/548438 https://bugzilla.novell.com/548443 https://bugzilla.novell.com/548852 https://bugzilla.novell.com/550397 https://bugzilla.novell.com/553631 https://bugzilla.novell.com/553633 https://bugzilla.novell.com/555152 https://bugzilla.novell.com/561912 https://bugzilla.novell.com/564750 https://bugzilla.novell.com/572691 https://bugzilla.novell.com/573748 https://bugzilla.novell.com/576832 [View Less]

1 0

openSUSE-SU-2010:0292-1 (moderate): krb5: security update for remote denial-of-service vulnerability
by opensuse-security＠opensuse.org 25 May '10

25 May '10

openSUSE Security Update: krb5: security update for remote denial-of-service vulnerability ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0292-1 Rating: moderate References: #596826 Cross-References: CVE-2010-1321 Affected Products: openSUSE 11.2 openSUSE 11.1 openSUSE 11.0 … [View More]______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update fixes a denial-of-service vulnerability in kadmind. A remote attack can send a malformed GSS-API token that triggers a NULL pointer dereference. (CVE-2010-1321: CVSS v2 Base Score: 6.8 (MEDIUM) (AV:N/AC:L/Au:S/C:N/I:N/A:C)) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch krb5-2443 - openSUSE 11.1: zypper in -t patch krb5-2443 - openSUSE 11.0: zypper in -t patch krb5-2443 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 src x86_64): krb5-1.7-6.6.1 - openSUSE 11.2 (i586 x86_64): krb5-apps-clients-1.7-6.6.1 krb5-apps-servers-1.7-6.6.1 krb5-client-1.7-6.6.1 krb5-devel-1.7-6.6.1 krb5-plugin-kdb-ldap-1.7-6.6.1 krb5-plugin-preauth-pkinit-1.7-6.6.1 krb5-server-1.7-6.6.1 - openSUSE 11.2 (x86_64): krb5-32bit-1.7-6.6.1 krb5-devel-32bit-1.7-6.6.1 - openSUSE 11.1 (i586 ppc src x86_64): krb5-1.6.3-132.8.1 - openSUSE 11.1 (i586 ppc x86_64): krb5-apps-clients-1.6.3-132.8.1 krb5-apps-servers-1.6.3-132.8.1 krb5-client-1.6.3-132.8.1 krb5-devel-1.6.3-132.8.1 krb5-plugin-kdb-ldap-1.6.3-132.8.1 krb5-plugin-preauth-pkinit-1.6.3-132.8.1 krb5-server-1.6.3-132.8.1 - openSUSE 11.1 (x86_64): krb5-32bit-1.6.3-132.8.1 krb5-devel-32bit-1.6.3-132.8.1 - openSUSE 11.1 (src): krb5-plugins-1.6.3-132.8.1 - openSUSE 11.1 (ppc): krb5-64bit-1.6.3-132.8.1 krb5-devel-64bit-1.6.3-132.8.1 - openSUSE 11.0 (i586 ppc src x86_64): krb5-1.6.3-50.11 - openSUSE 11.0 (i586 ppc x86_64): krb5-apps-clients-1.6.3-50.11 krb5-apps-servers-1.6.3-50.11 krb5-client-1.6.3-50.11 krb5-devel-1.6.3-50.11 krb5-plugin-kdb-ldap-1.6.3-9.8 krb5-plugin-preauth-pkinit-1.6.3-9.8 krb5-server-1.6.3-50.11 - openSUSE 11.0 (x86_64): krb5-32bit-1.6.3-50.11 krb5-devel-32bit-1.6.3-50.11 - openSUSE 11.0 (src): krb5-plugins-1.6.3-9.8 - openSUSE 11.0 (ppc): krb5-64bit-1.6.3-50.11 krb5-devel-64bit-1.6.3-50.11 References: http://support.novell.com/security/cve/CVE-2010-1321.html https://bugzilla.novell.com/596826 [View Less]

1 0

openSUSE-RU-2010:0286-1 (low): valgrind: Collective fixes
by maintenance＠opensuse.org 25 May '10

25 May '10

openSUSE Recommended Update: valgrind: Collective fixes ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0286-1 Rating: low References: #558964 #559061 #599585 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update of valgrind … [View More]

1 0

openSUSE-RU-2010:0285-1 (low): util-linux: This update fixes an error if "mount -a" is used.
by maintenance＠opensuse.org 25 May '10

25 May '10

openSUSE Recommended Update: util-linux: This update fixes an error if "mount -a" is used. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0285-1 Rating: low References: #509082 Affected Products: openSUSE 11.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: mount -a … [View More]

1 0

openSUSE-RU-2010:0284-1 (low): fail2ban: This update fixes the init script which can't restart the service
by maintenance＠opensuse.org 25 May '10

25 May '10

openSUSE Recommended Update: fail2ban: This update fixes the init script which can't restart the service ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0284-1 Rating: low References: #606238 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one … [View More]

1 0

openSUSE-RU-2010:0282-1 (low): tree: Fixed 2GB size and larger files display
by maintenance＠opensuse.org 25 May '10

25 May '10

openSUSE Recommended Update: tree: Fixed 2GB size and larger files display ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0282-1 Rating: low References: #601779 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The following bug was fixed in … [View More]

1 0

openSUSE-RU-2010:0278-1 (low): libgnomesu: Translation is fixed when gnome prompts root password.
by maintenance＠opensuse.org 20 May '10

20 May '10

openSUSE Recommended Update: libgnomesu: Translation is fixed when gnome prompts root password. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0278-1 Rating: low References: #477638 #562162 #582085 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. … [View More]

1 0

openSUSE-SU-2010:0273-1 (important): seamonkey: 1.1.19 security update
by opensuse-security＠opensuse.org 19 May '10

19 May '10

openSUSE Security Update: seamonkey: 1.1.19 security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0273-1 Rating: important References: #590499 Cross-References: CVE-2009-0689 CVE-2009-2463 CVE-2009-3072 CVE-2009-3075 CVE-2009-3077 CVE-2009-3376 CVE-2009-3385 CVE-2009-3983 CVE-2010-0161 CVE-2010-0163 Affected Products: … [View More] openSUSE 11.1 openSUSE 11.0 ______________________________________________________________________________ An update that fixes 10 vulnerabilities is now available. It includes one version update. Description: This update brings Mozilla Seamonkey to 1.1.19 fixing various bugs and security issues. Following security issues are fixed: MFSA 2010-07: Mozilla developers took fixes from previously fixed memory safety bugs in newer Mozilla-based products and ported them to the Mozilla 1.8.1 branch so they can be utilized by Thunderbird 2 and SeaMonkey 1.1. Paul Fisher reported a crash when joined to an Active Directory server under Vista or Windows 7 and using SSPI authentication. (CVE-2010-0161) Ludovic Hirlimann reported a crash indexing some messages with attachments (CVE-2010-0163) Carsten Book reported a crash in the JavaScript engine (CVE-2009-3075) Josh Soref reported a crash in the BinHex decoder used on non-Mac platforms. (CVE-2009-3072) monarch2000 reported an integer overflow in a base64 decoding function (CVE-2009-2463) MFSA 2009-68 / CVE-2009-3983: Security researcher Takehiro Takahashi of the IBM X-Force reported that Mozilla's NTLM implementation was vulnerable to reflection attacks in which NTLM credentials from one application could be forwarded to another arbitary application via the browser. If an attacker could get a user to visit a web page he controlled he could force NTLM authenticated requests to be forwarded to another application on behalf of the user. MFSA 2009-62 / CVE-2009-3376: Mozilla security researchers Jesse Ruderman and Sid Stamm reported that when downloading a file containing a right-to-left override character (RTL) in the filename, the name displayed in the dialog title bar conflicts with the name of the file shown in the dialog body. An attacker could use this vulnerability to obfuscate the name and file extension of a file to be downloaded and opened, potentially causing a user to run an executable file when they expected to open a non-executable file. MFSA 2009-59 / CVE-2009-0689: Security researcher Alin Rad Pop of Secunia Research reported a heap-based buffer overflow in Mozilla's string to floating point number conversion routines. Using this vulnerability an attacker could craft some malicious JavaScript code containing a very long string to be converted to a floating point number which would result in improper memory allocation and the execution of an arbitrary memory location. This vulnerability could thus be leveraged by the attacker to run arbitrary code on a victim's computer. Update: The underlying flaw in the dtoa routines used by Mozilla appears to be essentially the same as that reported against the libc gdtoa routine by Maksymilian Arciemowicz. MFSA 2010-06 / CVE-2009-3385: Security researcher Georgi Guninski reported that scriptable plugin content, such as Flash objects, could be loaded and executed in SeaMonkey mail messages by embedding the content in an iframe inside the message. If a user were to reply to or forward such a message, malicious JavaScript embedded in the plugin content could potentially steal the contents of the message or files from the local filesystem. MFSA 2009-49 / CVE-2009-3077: An anonymous security researcher, via TippingPoint's Zero Day Initiative, reported that the columns of a XUL tree element could be manipulated in a particular way which would leave a pointer owned by the column pointing to freed memory. An attacker could potentially use this vulnerability to crash a victim's browser and run arbitrary code on the victim's computer. Please see http://www.mozilla.org/security/known-vulnerabilities/seamon key11.html Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.1: zypper in -t patch seamonkey-2388 - openSUSE 11.0: zypper in -t patch seamonkey-2388 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.1 (i586 ppc src x86_64) [New Version: 1.1.19]: seamonkey-1.1.19-0.1.1 - openSUSE 11.1 (i586 ppc x86_64) [New Version: 1.1.19]: seamonkey-dom-inspector-1.1.19-0.1.1 seamonkey-irc-1.1.19-0.1.1 seamonkey-mail-1.1.19-0.1.1 seamonkey-spellchecker-1.1.19-0.1.1 seamonkey-venkman-1.1.19-0.1.1 - openSUSE 11.0 (i586 ppc src x86_64) [New Version: 1.1.19]: seamonkey-1.1.19-0.1 - openSUSE 11.0 (i586 ppc x86_64) [New Version: 1.1.19]: seamonkey-dom-inspector-1.1.19-0.1 seamonkey-irc-1.1.19-0.1 seamonkey-mail-1.1.19-0.1 seamonkey-spellchecker-1.1.19-0.1 seamonkey-venkman-1.1.19-0.1 References: http://support.novell.com/security/cve/CVE-2009-0689.html http://support.novell.com/security/cve/CVE-2009-2463.html http://support.novell.com/security/cve/CVE-2009-3072.html http://support.novell.com/security/cve/CVE-2009-3075.html http://support.novell.com/security/cve/CVE-2009-3077.html http://support.novell.com/security/cve/CVE-2009-3376.html http://support.novell.com/security/cve/CVE-2009-3385.html http://support.novell.com/security/cve/CVE-2009-3983.html http://support.novell.com/security/cve/CVE-2010-0161.html http://support.novell.com/security/cve/CVE-2010-0163.html https://bugzilla.novell.com/590499 [View Less]

1 0

openSUSE-SU-2010:0264-1 (low): ncpfs: Fixed several security issues
by opensuse-security＠opensuse.org 18 May '10

18 May '10

openSUSE Security Update: ncpfs: Fixed several security issues ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0264-1 Rating: low References: #550004 #583536 Cross-References: CVE-2010-0788 CVE-2010-0790 CVE-2010-0791 Affected Products: openSUSE 11.2 openSUSE 11.1 openSUSE 11.0 … [View More]

1 0

openSUSE-YU-2010:0259-1 (low): libzypp: Collective update for openSUSE 11.1.
by maintenance＠opensuse.org 17 May '10

17 May '10

openSUSE YOU Update: libzypp: Collective update for openSUSE 11.1. ______________________________________________________________________________ Announcement ID: openSUSE-YU-2010:0259-1 Rating: low References: #552265 #553712 #553895 #558813 #564239 #565050 #565525 #566291 #570623 #572634 #573897 Affected Products: openSUSE 11.1 ______________________________________________________________________________ An update that has … [View More]11 YOU fixes can now be installed. It includes three new package versions. Description: The following bugs are fixed with this update: - support sha256 checksum for repomd and susetags - set repository:toolversion to 1.0 in common_write - disable update rule in noobsoletes case if installed package is to be kept [bnc#564239] - work around rpm bug when --prefix is used [bnc#565525] - add support for sparc architecture [bnc#566291] - Support optionally compressed product(s).xml in rpmmd metadata. - Turn off cookies when retrieving services repoindex.xml (bnc #573897) - Consider pending disable requests when removing service repositories. (bnc #572634) - Remember the enabled state of removed service repositories. This way we are able to restore service repositories correctly after a subscrition expired and gets renewed. (bnc #572634) - Evaluate SolvAttr::repositoryToolVersion to prevent loading outdated solv files. (bnc #570623) - Also parse <product> tag from .prod files <upgrade> section. - Fix chroot execution of update scripts. (bnc #558813) - Fix repository probing and building in presence of productdir. (bnc #553712) - Following https redirections requires the libcurl4 update providing CURLOPT_REDIR_PROTOCOLS to be installed. (bnc #553895) - Fix outdated python examples. - Show patch conflicts instead of requires to provide a hint about patch contents (bnc #565050) - Fix typo in man page. (bnc #552265) Special Instructions and Notes: This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. Patch Instructions: To install this openSUSE YOU Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.1: zypper in -t patch updatestack_04_10-2279 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.1 (i586 ppc src x86_64) [New Version: 1.0.14 and 5.30.24]: libzypp-5.30.24-0.1.1 zypper-1.0.14-0.1.2 - openSUSE 11.1 (i586 ppc x86_64) [New Version: 0.13.13 and 5.30.24]: libsatsolver-devel-0.13.13-0.1.1 libzypp-devel-5.30.24-0.1.1 perl-satsolver-0.13.13-0.1.1 perl-zypp-0.4.8-2.1.51 python-satsolver-0.13.13-0.1.1 python-zypp-0.4.8-2.1.51 ruby-satsolver-0.13.13-0.1.1 ruby-zypp-0.4.8-2.1.51 satsolver-tools-0.13.13-0.1.1 - openSUSE 11.1 (src) [New Version: 0.13.13]: libsatsolver-0.13.13-0.1.1 libzypp-bindings-0.4.8-2.1.51 References: https://bugzilla.novell.com/552265 https://bugzilla.novell.com/553712 https://bugzilla.novell.com/553895 https://bugzilla.novell.com/558813 https://bugzilla.novell.com/564239 https://bugzilla.novell.com/565050 https://bugzilla.novell.com/565525 https://bugzilla.novell.com/566291 https://bugzilla.novell.com/570623 https://bugzilla.novell.com/572634 https://bugzilla.novell.com/573897 [View Less]

1 0

openSUSE-SU-2010:0255-2 (low): php5 security update.
by opensuse-security＠opensuse.org 17 May '10

17 May '10

openSUSE Security Update: php5 security update. ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0255-2 Rating: low References: #588975 Cross-References: CVE-2010-0397 Affected Products: openSUSE 11.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. It includes one version update. Description:… [View More] Incomplete XML RPC requests could crash the php interpreter (CVE-2010-0397). PHP was updated to version 5.2.12 to fix the problem. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.1: zypper in -t patch apache2-mod_php5-2410 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.1 (i586 ppc src x86_64) [New Version: 5.2.13]: php5-5.2.13-0.1.1 - openSUSE 11.1 (i586 ppc x86_64) [New Version: 5.2.13]: apache2-mod_php5-5.2.13-0.1.1 php5-bcmath-5.2.13-0.1.1 php5-bz2-5.2.13-0.1.1 php5-calendar-5.2.13-0.1.1 php5-ctype-5.2.13-0.1.1 php5-curl-5.2.13-0.1.1 php5-dba-5.2.13-0.1.1 php5-dbase-5.2.13-0.1.1 php5-devel-5.2.13-0.1.1 php5-dom-5.2.13-0.1.1 php5-exif-5.2.13-0.1.1 php5-fastcgi-5.2.13-0.1.1 php5-ftp-5.2.13-0.1.1 php5-gd-5.2.13-0.1.1 php5-gettext-5.2.13-0.1.1 php5-gmp-5.2.13-0.1.1 php5-hash-5.2.13-0.1.1 php5-iconv-5.2.13-0.1.1 php5-imap-5.2.13-0.1.1 php5-json-5.2.13-0.1.1 php5-ldap-5.2.13-0.1.1 php5-mbstring-5.2.13-0.1.1 php5-mcrypt-5.2.13-0.1.1 php5-mysql-5.2.13-0.1.1 php5-ncurses-5.2.13-0.1.1 php5-odbc-5.2.13-0.1.1 php5-openssl-5.2.13-0.1.1 php5-pcntl-5.2.13-0.1.1 php5-pdo-5.2.13-0.1.1 php5-pear-5.2.13-0.1.1 php5-pgsql-5.2.13-0.1.1 php5-posix-5.2.13-0.1.1 php5-pspell-5.2.13-0.1.1 php5-readline-5.2.13-0.1.1 php5-shmop-5.2.13-0.1.1 php5-snmp-5.2.13-0.1.1 php5-soap-5.2.13-0.1.1 php5-sockets-5.2.13-0.1.1 php5-sqlite-5.2.13-0.1.1 php5-suhosin-5.2.13-0.1.1 php5-sysvmsg-5.2.13-0.1.1 php5-sysvsem-5.2.13-0.1.1 php5-sysvshm-5.2.13-0.1.1 php5-tidy-5.2.13-0.1.1 php5-tokenizer-5.2.13-0.1.1 php5-wddx-5.2.13-0.1.1 php5-xmlreader-5.2.13-0.1.1 php5-xmlrpc-5.2.13-0.1.1 php5-xmlwriter-5.2.13-0.1.1 php5-xsl-5.2.13-0.1.1 php5-zip-5.2.13-0.1.1 php5-zlib-5.2.13-0.1.1 References: http://support.novell.com/security/cve/CVE-2010-0397.html https://bugzilla.novell.com/588975 [View Less]

1 0

openSUSE-SU-2010:0257-1 (low): libpng: fixed denial of service while decompressing a highly compressed huge ancillary chunk (CVE-2010-0205)
by opensuse-security＠opensuse.org 17 May '10

17 May '10

openSUSE Security Update: libpng: fixed denial of service while decompressing a highly compressed huge ancillary chunk (CVE-2010-0205) ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0257-1 Rating: low References: #580484 Affected Products: openSUSE 11.2 openSUSE 11.1 openSUSE 11.0 … [View More]

1 0

openSUSE-SU-2010:0255-1 (low): php5 security update
by opensuse-security＠opensuse.org 17 May '10

17 May '10

openSUSE Security Update: php5 security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0255-1 Rating: low References: #588975 Cross-References: CVE-2010-0397 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. It includes one version update. Description: … [View More] Incomplete XML RPC requests could crash the php interpreter (CVE-2010-0397). PHP was updated to version 5.3.2 to fix the problem. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch apache2-mod_php5-2409 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 src x86_64) [New Version: 5.3.2]: php5-5.3.2-1.1.1 - openSUSE 11.2 (i586 x86_64) [New Version: 5.3.2]: apache2-mod_php5-5.3.2-1.1.1 php5-bcmath-5.3.2-1.1.1 php5-bz2-5.3.2-1.1.1 php5-calendar-5.3.2-1.1.1 php5-ctype-5.3.2-1.1.1 php5-curl-5.3.2-1.1.1 php5-dba-5.3.2-1.1.1 php5-devel-5.3.2-1.1.1 php5-dom-5.3.2-1.1.1 php5-enchant-5.3.2-1.1.1 php5-exif-5.3.2-1.1.1 php5-fastcgi-5.3.2-1.1.1 php5-fileinfo-5.3.2-1.1.1 php5-ftp-5.3.2-1.1.1 php5-gd-5.3.2-1.1.1 php5-gettext-5.3.2-1.1.1 php5-gmp-5.3.2-1.1.1 php5-hash-5.3.2-1.1.1 php5-iconv-5.3.2-1.1.1 php5-imap-5.3.2-1.1.1 php5-intl-5.3.2-1.1.1 php5-json-5.3.2-1.1.1 php5-ldap-5.3.2-1.1.1 php5-mbstring-5.3.2-1.1.1 php5-mcrypt-5.3.2-1.1.1 php5-mysql-5.3.2-1.1.1 php5-odbc-5.3.2-1.1.1 php5-openssl-5.3.2-1.1.1 php5-pcntl-5.3.2-1.1.1 php5-pdo-5.3.2-1.1.1 php5-pgsql-5.3.2-1.1.1 php5-phar-5.3.2-1.1.1 php5-posix-5.3.2-1.1.1 php5-pspell-5.3.2-1.1.1 php5-readline-5.3.2-1.1.1 php5-shmop-5.3.2-1.1.1 php5-snmp-5.3.2-1.1.1 php5-soap-5.3.2-1.1.1 php5-sockets-5.3.2-1.1.1 php5-sqlite-5.3.2-1.1.1 php5-suhosin-5.3.2-1.1.1 php5-sysvmsg-5.3.2-1.1.1 php5-sysvsem-5.3.2-1.1.1 php5-sysvshm-5.3.2-1.1.1 php5-tidy-5.3.2-1.1.1 php5-tokenizer-5.3.2-1.1.1 php5-wddx-5.3.2-1.1.1 php5-xmlreader-5.3.2-1.1.1 php5-xmlrpc-5.3.2-1.1.1 php5-xmlwriter-5.3.2-1.1.1 php5-xsl-5.3.2-1.1.1 php5-zip-5.3.2-1.1.1 php5-zlib-5.3.2-1.1.1 - openSUSE 11.2 (noarch) [New Version: 5.3.2]: php5-pear-5.3.2-1.1.1 References: http://support.novell.com/security/cve/CVE-2010-0397.html https://bugzilla.novell.com/588975 [View Less]

1 0

openSUSE-SU-2010:0251-1 (low): texlive security update
by opensuse-security＠opensuse.org 14 May '10

14 May '10

openSUSE Security Update: texlive security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0251-1 Rating: low References: #587794 Cross-References: CVE-2010-0739 CVE-2010-0827 CVE-2010-0829 CVE-2010-1440 Affected Products: openSUSE 11.2 openSUSE 11.1 openSUSE 11.0 … [View More]______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: Specially crafted dvi files could cause buffer overflows in dvips and dvipng (CVE-2010-0827, CVE-2010-0829, CVE-2010-0739, CVE-2010-1440). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch texlive-2392 - openSUSE 11.1: zypper in -t patch texlive-2392 - openSUSE 11.0: zypper in -t patch texlive-2392 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 x86_64): texlive-bin-2008-13.18.1 - openSUSE 11.2 (noarch src): texlive-2008-13.18.1 - openSUSE 11.2 (noarch): texlive-arab-2008-13.18.1 texlive-cjk-2008-13.18.1 texlive-context-2008-13.18.1 texlive-devel-2008-13.18.1 texlive-doc-2008-13.18.1 texlive-dvilj-2008-13.18.1 texlive-jadetex-2008-13.18.1 texlive-latex-2008-13.18.1 texlive-latex-doc-2008-13.18.1 texlive-metapost-2008-13.18.1 texlive-musictex-2008-13.18.1 texlive-nfs-2008-13.18.1 texlive-omega-2008-13.18.1 texlive-ppower4-2008-13.18.1 texlive-tex4ht-2008-13.18.1 texlive-tools-2008-13.18.1 texlive-xetex-2008-13.18.1 texlive-xmltex-2008-13.18.1 - openSUSE 11.1 (i586 ppc x86_64): texlive-bin-2007-219.7.1 - openSUSE 11.1 (noarch src): texlive-2007-219.7.1 - openSUSE 11.1 (noarch): texlive-arab-2007-219.7.1 texlive-cjk-2007-219.7.1 texlive-context-2007-219.7.1 texlive-devel-2007-219.7.1 texlive-doc-2007-219.7.1 texlive-dvilj-2007-219.7.1 texlive-jadetex-2007-219.7.1 texlive-latex-2007-219.7.1 texlive-latex-doc-2007-219.7.1 texlive-metapost-2007-219.7.1 texlive-musictex-2007-219.7.1 texlive-nfs-2007-219.7.1 texlive-omega-2007-219.7.1 texlive-ppower4-2007-219.7.1 texlive-tex4ht-2007-219.7.1 texlive-tools-2007-219.7.1 texlive-xetex-2007-219.7.1 texlive-xmltex-2007-219.7.1 - openSUSE 11.0 (i586 ppc x86_64): texlive-bin-2007-176.4 - openSUSE 11.0 (noarch src): texlive-2007-177.4 - openSUSE 11.0 (noarch): texlive-arab-2007-177.4 texlive-cjk-2007-177.4 texlive-context-2007-177.4 texlive-devel-2007-177.4 texlive-doc-2007-177.4 texlive-dvilj-2007-177.4 texlive-jadetex-2007-177.4 texlive-latex-2007-177.4 texlive-latex-doc-2007-177.4 texlive-metapost-2007-177.4 texlive-musictex-2007-177.4 texlive-nfs-2007-177.4 texlive-omega-2007-177.4 texlive-ppower4-2007-177.4 texlive-tex4ht-2007-177.4 texlive-tools-2007-177.4 texlive-xetex-2007-177.4 texlive-xmltex-2007-177.4 References: http://support.novell.com/security/cve/CVE-2010-0739.html http://support.novell.com/security/cve/CVE-2010-0827.html http://support.novell.com/security/cve/CVE-2010-0829.html http://support.novell.com/security/cve/CVE-2010-1440.html https://bugzilla.novell.com/587794 [View Less]

1 0

openSUSE-SU-2010:0247-1 (moderate): python: denial of service by proessing malformed XML ("Expat vulnerability")
by opensuse-security＠opensuse.org 14 May '10

14 May '10

openSUSE Security Update: python: denial of service by proessing malformed XML ("Expat vulnerability") ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0247-1 Rating: moderate References: #581765 Cross-References: CVE-2009-2625 CVE-2009-3560 CVE-2009-3720 Affected Products: openSUSE 11.2 openSUSE 11.1 openSUSE 11.0 … [View More]______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update of python has a copy of libxmlrpc that is vulnerable to denial of service bugs that can occur while processing malformed XML input. CVE-2009-2625: CVSS v2 Base Score: 5.0 (moderate) (AV:N/AC:L/Au:N/C:N/I:N/A:P): Permissions, Privileges, and Access Control (CWE-264) CVE-2009-3720: CVSS v2 Base Score: 5.0 (MEDIUM) (AV:N/AC:L/Au:N/C:N/I:N/A:P): Insufficient Information (CWE-noinfo) CVE-2009-3560: CVSS v2 Base Score: 5.0 (MEDIUM) (AV:N/AC:L/Au:N/C:N/I:N/A:P): Buffer Errors (CWE-119) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch libpython2_6-1_0-2213 - openSUSE 11.1: zypper in -t patch libpython2_6-1_0-2213 - openSUSE 11.0: zypper in -t patch libpython2_6-1_0-2213 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 src x86_64): python-2.6.2-6.4.1 python-base-2.6.2-6.4.1 - openSUSE 11.2 (i586 x86_64): libpython2_6-1_0-2.6.2-6.4.1 python-curses-2.6.2-6.4.1 python-demo-2.6.2-6.4.1 python-devel-2.6.2-6.4.1 python-gdbm-2.6.2-6.4.1 python-idle-2.6.2-6.4.1 python-tk-2.6.2-6.4.1 python-xml-2.6.2-6.4.1 - openSUSE 11.2 (x86_64): libpython2_6-1_0-32bit-2.6.2-6.4.1 python-32bit-2.6.2-6.4.1 python-base-32bit-2.6.2-6.4.1 - openSUSE 11.1 (i586 ppc src x86_64): python-2.6.0-2.23.1 python-base-2.6.0-2.22.23.1 - openSUSE 11.1 (i586 ppc x86_64): libpython2_6-1_0-2.6.0-2.22.23.1 python-curses-2.6.0-2.23.1 python-demo-2.6.0-2.23.1 python-devel-2.6.0-2.22.23.1 python-gdbm-2.6.0-2.23.1 python-idle-2.6.0-2.23.1 python-tk-2.6.0-2.23.1 python-xml-2.6.0-2.22.23.1 - openSUSE 11.1 (x86_64): libpython2_6-1_0-32bit-2.6.0-2.22.23.1 python-32bit-2.6.0-2.23.1 python-base-32bit-2.6.0-2.22.23.1 - openSUSE 11.1 (ppc): libpython2_6-1_0-64bit-2.6.0-2.22.23.1 python-64bit-2.6.0-2.23.1 python-base-64bit-2.6.0-2.22.23.1 - openSUSE 11.0 (i586 ppc src x86_64): python-2.5.2-26.6 - openSUSE 11.0 (i586 ppc x86_64): python-curses-2.5.2-26.6 python-demo-2.5.2-26.6 python-devel-2.5.2-26.6 python-gdbm-2.5.2-26.6 python-idle-2.5.2-26.6 python-tk-2.5.2-26.6 python-xml-2.5.2-26.6 - openSUSE 11.0 (x86_64): python-32bit-2.5.2-26.6 - openSUSE 11.0 (ppc): python-64bit-2.5.2-26.6 References: http://support.novell.com/security/cve/CVE-2009-2625.html http://support.novell.com/security/cve/CVE-2009-3560.html http://support.novell.com/security/cve/CVE-2009-3720.html https://bugzilla.novell.com/581765 [View Less]

1 0

openSUSE-RU-2010:0244-1 (low): fail2ban: A communication error caused by python version incompatibility is fixed with this update.
by maintenance＠opensuse.org 11 May '10

11 May '10

openSUSE Recommended Update: fail2ban: A communication error caused by python version incompatibility is fixed with this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0244-1 Rating: low References: #537239 #600076 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that has two recommended fixes can now … [View More]

1 0

openSUSE-RU-2010:0232-1 (low): open-vm-tools: The file "/etc/modprobe.d/vmnics" is missing in open-vm-tools. It is added by this update.
by maintenance＠opensuse.org 06 May '10

06 May '10

openSUSE Recommended Update: open-vm-tools: The file "/etc/modprobe.d/vmnics" is missing in open-vm-tools. It is added by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0232-1 Rating: low References: #590329 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that has one recommended fix can now be … [View More]

1 0

openSUSE-RU-2010:0231-1 (critical): suse-build-key: extend key lifetimes.
by maintenance＠opensuse.org 06 May '10

06 May '10

openSUSE Recommended Update: suse-build-key: extend key lifetimes. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0231-1 Rating: critical References: #600157 Affected Products: openSUSE 11.2 openSUSE 11.1 openSUSE 11.0 ______________________________________________________________________________ An update that has one recommended fix can now … [View More]

1 0

openSUSE-YU-2010:0230-1 (low): libzypp: Collective update for openSUSE 11.2.
by maintenance＠opensuse.org 06 May '10

06 May '10

openSUSE YOU Update: libzypp: Collective update for openSUSE 11.2. ______________________________________________________________________________ Announcement ID: openSUSE-YU-2010:0230-1 Rating: low References: #223512 #279045 #377568 #393723 #394396 #462697 #465532 #467106 #467693 #471436 #473834 #495977 #497711 #522223 #523573 #535816 #537870 #538152 #544432 #545106 #545295 #545722 #547354 #549940 … [View More]

1 0

openSUSE-SU-2010:0220-1 (moderate): libesmtp security update
by opensuse-security＠opensuse.org 05 May '10

05 May '10

openSUSE Security Update: libesmtp security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0220-1 Rating: moderate References: #585393 Cross-References: CVE-2010-1192 CVE-2010-1194 Affected Products: openSUSE 11.2 openSUSE 11.1 openSUSE 11.0 ______________________________________________________________________________ An update that … [View More]

1 0

openSUSE-RU-2010:0218-1 (moderate): libqt4: Fix crashes with YaST in Japanese locale
by maintenance＠opensuse.org 05 May '10

05 May '10

openSUSE Recommended Update: libqt4: Fix crashes with YaST in Japanese locale ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0218-1 Rating: moderate References: #517894 Affected Products: openSUSE 11.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update improves … [View More]

1 0

openSUSE-SU-2010:0216-1 (moderate): evolution-data-server security update
by opensuse-security＠opensuse.org 05 May '10

05 May '10

openSUSE Security Update: evolution-data-server security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0216-1 Rating: moderate References: #475108 #568822 Cross-References: CVE-2009-0547 Affected Products: openSUSE 11.0 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now … [View More]

1 0

openSUSE-SU-2010:0198-2 (moderate): mysql security update
by opensuse-security＠opensuse.org 04 May '10

04 May '10

openSUSE Security Update: mysql security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0198-2 Rating: moderate References: #557669 Cross-References: CVE-2008-7247 CVE-2009-4019 CVE-2009-4028 CVE-2009-4030 Affected Products: openSUSE 11.2 openSUSE 11.1 openSUSE 11.0 … [View More]______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: Updated mysql packages fix the following bugs: - upstream #47320 - checking server certificates (CVE-2009-4028) - upstream #48291 - error handling in subqueries (CVE-2009-4019) - upstream #47780 - preserving null_value flag in GeomFromWKB() (CVE-2009-4019) - upstream #39277 - symlink behaviour fixed (CVE-2008-7247) - upstream #32167 - symlink behaviour refixed (CVE-2009-4030) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch libmysqlclient-devel-2315 - openSUSE 11.1: zypper in -t patch libmysqlclient-devel-2315 - openSUSE 11.0: zypper in -t patch libmysqlclient-devel-2315 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 src x86_64): mysql-5.1.36-6.8.8 - openSUSE 11.2 (i586 x86_64): libmysqlclient-devel-5.1.36-6.8.8 libmysqlclient16-5.1.36-6.8.8 libmysqlclient_r16-5.1.36-6.8.8 libmysqld-devel-5.1.36-6.8.8 mysql-bench-5.1.36-6.8.8 mysql-client-5.1.36-6.8.8 mysql-debug-5.1.36-6.8.8 mysql-ndb-extra-5.1.36-6.8.8 mysql-ndb-management-5.1.36-6.8.8 mysql-ndb-storage-5.1.36-6.8.8 mysql-ndb-tools-5.1.36-6.8.8 mysql-test-5.1.36-6.8.8 mysql-tools-5.1.36-6.8.8 - openSUSE 11.2 (x86_64): libmysqlclient16-32bit-5.1.36-6.8.8 libmysqlclient_r16-32bit-5.1.36-6.8.8 - openSUSE 11.1 (i586 ppc src x86_64): mysql-5.0.67-12.17.7 - openSUSE 11.1 (i586 ppc x86_64): libmysqlclient-devel-5.0.67-12.17.7 libmysqlclient15-5.0.67-12.17.7 libmysqlclient_r15-5.0.67-12.17.7 mysql-Max-5.0.67-12.17.7 mysql-bench-5.0.67-12.17.7 mysql-client-5.0.67-12.17.7 mysql-debug-5.0.67-12.17.7 mysql-test-5.0.67-12.17.7 mysql-tools-5.0.67-12.17.7 - openSUSE 11.1 (x86_64): libmysqlclient15-32bit-5.0.67-12.17.7 libmysqlclient_r15-32bit-5.0.67-12.17.7 - openSUSE 11.1 (ppc): libmysqlclient15-64bit-5.0.67-12.17.7 libmysqlclient_r15-64bit-5.0.67-12.17.7 - openSUSE 11.0 (i586 ppc ppc64 src x86_64): mysql-5.0.51a-27.8 - openSUSE 11.0 (i586 ppc x86_64): libmysqlclient-devel-5.0.51a-27.8 libmysqlclient15-5.0.51a-27.8 libmysqlclient_r15-5.0.51a-27.8 mysql-Max-5.0.51a-27.8 mysql-bench-5.0.51a-27.8 mysql-client-5.0.51a-27.8 mysql-debug-5.0.51a-27.8 mysql-tools-5.0.51a-27.8 - openSUSE 11.0 (x86_64): libmysqlclient15-32bit-5.0.51a-27.8 libmysqlclient_r15-32bit-5.0.51a-27.8 - openSUSE 11.0 (ppc): libmysqlclient15-64bit-5.0.51a-27.8 libmysqlclient_r15-64bit-5.0.51a-27.8 References: http://support.novell.com/security/cve/CVE-2008-7247.html http://support.novell.com/security/cve/CVE-2009-4019.html http://support.novell.com/security/cve/CVE-2009-4028.html http://support.novell.com/security/cve/CVE-2009-4030.html https://bugzilla.novell.com/557669 [View Less]

1 0

openSUSE-RU-2010:0214-1 (important): xorg-x11-server: Update to fix 'X eats up CPU on an idle system'
by maintenance＠opensuse.org 04 May '10

04 May '10

openSUSE Recommended Update: xorg-x11-server: Update to fix 'X eats up CPU on an idle system' ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0214-1 Rating: important References: #524724 #594433 Affected Products: openSUSE 11.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description:… [View More]

1 0

openSUSE-SU-2010:0212-1 (low): moodle security update
by opensuse-security＠opensuse.org 04 May '10

04 May '10

openSUSE Security Update: moodle security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0212-1 Rating: low References: #591850 Cross-References: CVE-2010-1613 CVE-2010-1614 CVE-2010-1615 CVE-2010-1616 CVE-2010-1617 CVE-2010-1618 CVE-2010-1619 Affected Products: openSUSE 11.1 openSUSE 11.0 … [View More]______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. It includes four new package versions. Description: Moodle version 1.9.8 fixes several security issues including cross-site-scripting (XSS) and SQL injection bugs (CVE-2010-1613, CVE-2010-1614, CVE-2010-1615, CVE-2010-1616, CVE-2010-1617 CVE-2010-1618, CVE-2010-1619). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.1: zypper in -t patch moodle-2387 - openSUSE 11.0: zypper in -t patch moodle-2387 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.1 (noarch src) [New Version: 1.9.8]: moodle-1.9.8-0.1.1 - openSUSE 11.1 (noarch) [New Version: 1.9.8]: moodle-af-1.9.8-0.1.1 moodle-ar-1.9.8-0.1.1 moodle-be-1.9.8-0.1.1 moodle-bg-1.9.8-0.1.1 moodle-bs-1.9.8-0.1.1 moodle-ca-1.9.8-0.1.1 moodle-cs-1.9.8-0.1.1 moodle-da-1.9.8-0.1.1 moodle-de-1.9.8-0.1.1 moodle-de_du-1.9.8-0.1.1 moodle-el-1.9.8-0.1.1 moodle-es-1.9.8-0.1.1 moodle-et-1.9.8-0.1.1 moodle-eu-1.9.8-0.1.1 moodle-fa-1.9.8-0.1.1 moodle-fi-1.9.8-0.1.1 moodle-fr-1.9.8-0.1.1 moodle-ga-1.9.8-0.1.1 moodle-gl-1.9.8-0.1.1 moodle-he-1.9.8-0.1.1 moodle-hi-1.9.8-0.1.1 moodle-hr-1.9.8-0.1.1 moodle-hu-1.9.8-0.1.1 moodle-id-1.9.8-0.1.1 moodle-is-1.9.8-0.1.1 moodle-it-1.9.8-0.1.1 moodle-ja-1.9.8-0.1.1 moodle-ka-1.9.8-0.1.1 moodle-km-1.9.8-0.1.1 moodle-kn-1.9.8-0.1.1 moodle-ko-1.9.8-0.1.1 moodle-lt-1.9.8-0.1.1 moodle-lv-1.9.8-0.1.1 moodle-mi_tn-1.9.8-0.1.1 moodle-ms-1.9.8-0.1.1 moodle-nl-1.9.8-0.1.1 moodle-nn-1.9.8-0.1.1 moodle-no-1.9.8-0.1.1 moodle-pl-1.9.8-0.1.1 moodle-pt-1.9.8-0.1.1 moodle-ro-1.9.8-0.1.1 moodle-ru-1.9.8-0.1.1 moodle-sk-1.9.8-0.1.1 moodle-sl-1.9.8-0.1.1 moodle-so-1.9.8-0.1.1 moodle-sq-1.9.8-0.1.1 moodle-sr-1.9.8-0.1.1 moodle-sv-1.9.8-0.1.1 moodle-th-1.9.8-0.1.1 moodle-tl-1.9.8-0.1.1 moodle-tr-1.9.8-0.1.1 moodle-uk-1.9.8-0.1.1 moodle-vi-1.9.8-0.1.1 moodle-zh_cn-1.9.8-0.1.1 - openSUSE 11.0 (noarch src) [New Version: 1.9.8]: moodle-1.9.8-0.1 - openSUSE 11.0 (noarch) [New Version: 1.9.8]: moodle-af-1.9.8-0.1 moodle-ar-1.9.8-0.1 moodle-be-1.9.8-0.1 moodle-bg-1.9.8-0.1 moodle-bs-1.9.8-0.1 moodle-ca-1.9.8-0.1 moodle-cs-1.9.8-0.1 moodle-da-1.9.8-0.1 moodle-de-1.9.8-0.1 moodle-de_du-1.9.8-0.1 moodle-el-1.9.8-0.1 moodle-es-1.9.8-0.1 moodle-et-1.9.8-0.1 moodle-eu-1.9.8-0.1 moodle-fa-1.9.8-0.1 moodle-fi-1.9.8-0.1 moodle-fr-1.9.8-0.1 moodle-ga-1.9.8-0.1 moodle-gl-1.9.8-0.1 moodle-he-1.9.8-0.1 moodle-hi-1.9.8-0.1 moodle-hr-1.9.8-0.1 moodle-hu-1.9.8-0.1 moodle-id-1.9.8-0.1 moodle-is-1.9.8-0.1 moodle-it-1.9.8-0.1 moodle-ja-1.9.8-0.1 moodle-ka-1.9.8-0.1 moodle-km-1.9.8-0.1 moodle-kn-1.9.8-0.1 moodle-ko-1.9.8-0.1 moodle-lt-1.9.8-0.1 moodle-lv-1.9.8-0.1 moodle-mi_tn-1.9.8-0.1 moodle-ms-1.9.8-0.1 moodle-nl-1.9.8-0.1 moodle-nn-1.9.8-0.1 moodle-no-1.9.8-0.1 moodle-pl-1.9.8-0.1 moodle-pt-1.9.8-0.1 moodle-ro-1.9.8-0.1 moodle-ru-1.9.8-0.1 moodle-sk-1.9.8-0.1 moodle-sl-1.9.8-0.1 moodle-so-1.9.8-0.1 moodle-sq-1.9.8-0.1 moodle-sr-1.9.8-0.1 moodle-sv-1.9.8-0.1 moodle-th-1.9.8-0.1 moodle-tl-1.9.8-0.1 moodle-tr-1.9.8-0.1 moodle-uk-1.9.8-0.1 moodle-vi-1.9.8-0.1 moodle-zh_cn-1.9.8-0.1 References: http://support.novell.com/security/cve/CVE-2010-1613.html http://support.novell.com/security/cve/CVE-2010-1614.html http://support.novell.com/security/cve/CVE-2010-1615.html http://support.novell.com/security/cve/CVE-2010-1616.html http://support.novell.com/security/cve/CVE-2010-1617.html http://support.novell.com/security/cve/CVE-2010-1618.html http://support.novell.com/security/cve/CVE-2010-1619.html https://bugzilla.novell.com/591850 [View Less]

1 0

openSUSE-RU-2010:0210-1 (low): xorg-x11-libXext: This update fixes a race condition in libXext
by maintenance＠opensuse.org 04 May '10

04 May '10

openSUSE Recommended Update: xorg-x11-libXext: This update fixes a race condition in libXext ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0210-1 Rating: low References: #578577 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: XAllocID must … [View More]

1 0

openSUSE-SU-2010:0209-1 (moderate): libmikmod security update
by opensuse-security＠opensuse.org 04 May '10

04 May '10

openSUSE Security Update: libmikmod security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0209-1 Rating: moderate References: #577875 Cross-References: CVE-2009-3995 CVE-2009-3996 Affected Products: openSUSE 11.2 openSUSE 11.1 openSUSE 11.0 ______________________________________________________________________________ An update … [View More]

1 0

openSUSE-RU-2010:0204-1 (moderate): unscd: This update fixes huge log file generation
by maintenance＠opensuse.org 03 May '10

03 May '10

openSUSE Recommended Update: unscd: This update fixes huge log file generation ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0204-1 Rating: moderate References: #575736 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one version update. … [View More]

1 0

openSUSE-SU-2010:0198-1 (moderate): mysql security update
by opensuse-security＠opensuse.org 03 May '10

03 May '10

openSUSE Security Update: mysql security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0198-1 Rating: moderate References: #557669 Cross-References: CVE-2008-7247 CVE-2009-4019 CVE-2009-4028 CVE-2009-4030 Affected Products: openSUSE 11.2 openSUSE 11.1 openSUSE 11.0 … [View More]______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update fixes several security issues in mysql: - checking server certificates (CVE-2009-4028) - error handling in subqueries (CVE-2009-4019) - preserving null_value flag in GeomFromWKB (CVE-2009-4019) - symlink behavior fixed (CVE-2008-7247) - symlink behavior refixed (CVE-2009-4030) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch libmysqlclient-devel-1706 - openSUSE 11.1: zypper in -t patch libmysqlclient-devel-1706 - openSUSE 11.0: zypper in -t patch libmysqlclient-devel-1706 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 src x86_64): mysql-5.1.36-6.8.2 - openSUSE 11.2 (i586 x86_64): libmysqlclient-devel-5.1.36-6.8.2 libmysqlclient16-5.1.36-6.8.2 libmysqlclient_r16-5.1.36-6.8.2 libmysqld-devel-5.1.36-6.8.2 mysql-bench-5.1.36-6.8.2 mysql-client-5.1.36-6.8.2 mysql-debug-5.1.36-6.8.2 mysql-ndb-extra-5.1.36-6.8.2 mysql-ndb-management-5.1.36-6.8.2 mysql-ndb-storage-5.1.36-6.8.2 mysql-ndb-tools-5.1.36-6.8.2 mysql-test-5.1.36-6.8.2 mysql-tools-5.1.36-6.8.2 - openSUSE 11.2 (x86_64): libmysqlclient16-32bit-5.1.36-6.8.2 libmysqlclient_r16-32bit-5.1.36-6.8.2 - openSUSE 11.1 (i586 ppc src x86_64): mysql-5.0.67-12.17.1 - openSUSE 11.1 (i586 ppc x86_64): libmysqlclient-devel-5.0.67-12.17.1 libmysqlclient15-5.0.67-12.17.1 libmysqlclient_r15-5.0.67-12.17.1 mysql-Max-5.0.67-12.17.1 mysql-bench-5.0.67-12.17.1 mysql-client-5.0.67-12.17.1 mysql-debug-5.0.67-12.17.1 mysql-test-5.0.67-12.17.1 mysql-tools-5.0.67-12.17.1 - openSUSE 11.1 (x86_64): libmysqlclient15-32bit-5.0.67-12.17.1 libmysqlclient_r15-32bit-5.0.67-12.17.1 - openSUSE 11.1 (ppc): libmysqlclient15-64bit-5.0.67-12.17.1 libmysqlclient_r15-64bit-5.0.67-12.17.1 - openSUSE 11.0 (i586 ppc ppc64 src x86_64): mysql-5.0.51a-27.6 - openSUSE 11.0 (i586 ppc x86_64): libmysqlclient-devel-5.0.51a-27.6 libmysqlclient15-5.0.51a-27.6 libmysqlclient_r15-5.0.51a-27.6 mysql-Max-5.0.51a-27.6 mysql-bench-5.0.51a-27.6 mysql-client-5.0.51a-27.6 mysql-debug-5.0.51a-27.6 mysql-tools-5.0.51a-27.6 - openSUSE 11.0 (x86_64): libmysqlclient15-32bit-5.0.51a-27.6 libmysqlclient_r15-32bit-5.0.51a-27.6 - openSUSE 11.0 (ppc): libmysqlclient15-64bit-5.0.51a-27.6 libmysqlclient_r15-64bit-5.0.51a-27.6 References: http://support.novell.com/security/cve/CVE-2008-7247.html http://support.novell.com/security/cve/CVE-2009-4019.html http://support.novell.com/security/cve/CVE-2009-4028.html http://support.novell.com/security/cve/CVE-2009-4030.html https://bugzilla.novell.com/557669 [View Less]

1 0

openSUSE-SU-2010:0189-1 (low): tar security update
by opensuse-security＠opensuse.org 30 Apr '10

30 Apr '10

openSUSE Security Update: tar security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0189-1 Rating: low References: #579475 Cross-References: CVE-2010-0624 Affected Products: openSUSE 11.2 openSUSE 11.1 openSUSE 11.0 ______________________________________________________________________________ An update that fixes one vulnerability … [View More]

1 0

openSUSE-SU-2010:0187-1 (moderate): fuse security update
by opensuse-security＠opensuse.org 30 Apr '10

30 Apr '10

openSUSE Security Update: fuse security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0187-1 Rating: moderate References: #582725 Cross-References: CVE-2010-0789 Affected Products: openSUSE 11.2 openSUSE 11.1 openSUSE 11.0 ______________________________________________________________________________ An update that fixes one … [View More]

1 0

openSUSE-SU-2010:0183-1 (moderate): irssi security update
by opensuse-security＠opensuse.org 29 Apr '10

29 Apr '10

openSUSE Security Update: irssi security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0183-1 Rating: moderate References: #596005 Cross-References: CVE-2010-1155 CVE-2010-1156 Affected Products: openSUSE 11.2 openSUSE 11.1 openSUSE 11.0 ______________________________________________________________________________ An update that … [View More]

1 0

openSUSE-SU-2010:0182-1 (important): java-1_6_0-openjdk security update
by opensuse-security＠opensuse.org 29 Apr '10

29 Apr '10

openSUSE Security Update: java-1_6_0-openjdk security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0182-1 Rating: important References: #594415 Cross-References: CVE-2009-3555 CVE-2010-0082 CVE-2010-0084 CVE-2010-0085 CVE-2010-0088 CVE-2010-0091 CVE-2010-0092 CVE-2010-0093 CVE-2010-0094 CVE-2010-0095 CVE-2010-0837 CVE-2010-0838 … [View More] CVE-2010-0840 CVE-2010-0845 CVE-2010-0847 CVE-2010-0848 Affected Products: openSUSE 11.2 openSUSE 11.1 openSUSE 11.0 ______________________________________________________________________________ An update that fixes 16 vulnerabilities is now available. Description: java-1_6_0-openjdk version 1.7.3 fixes serveral security issues: - CVE-2010-0837: JAR 'unpack200' must verify input parameters - CVE-2010-0845: No ClassCastException for HashAttributeSet constructors if run with -Xcomp - CVE-2010-0838: CMM readMabCurveData Buffer Overflow Vulnerability - CVE-2010-0082: Loader-constraint table allows arrays instead of only the base-classes - CVE-2010-0095: Subclasses of InetAddress may incorrectly interpret network addresses - CVE-2010-0085: File TOCTOU deserialization vulnerability - CVE-2010-0091: Unsigned applet can retrieve the dragged information before drop action occurs - CVE-2010-0088: Inflater/Deflater clone issues - CVE-2010-0084: Policy/PolicyFile leak dynamic ProtectionDomains. - CVE-2010-0092: AtomicReferenceArray causes SIGSEGV -> SEGV_MAPERR error - CVE-2010-0094: Deserialization of RMIConnectionImpl objects should enforce stricter checks - CVE-2010-0093: System.arraycopy unable to reference elements beyond Integer.MAX_VALUE bytes - CVE-2010-0840: Applet Trusted Methods Chaining Privilege Escalation Vulnerability - CVE-2010-0848: AWT Library Invalid Index Vulnerability - CVE-2010-0847: ImagingLib arbitrary code execution vulnerability - CVE-2009-3555: TLS: MITM attacks via session renegotiation Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch java-1_6_0-openjdk-2362 - openSUSE 11.1: zypper in -t patch java-1_6_0-openjdk-2362 - openSUSE 11.0: zypper in -t patch java-1_6_0-openjdk-2362 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 src x86_64): java-1_6_0-openjdk-1.6.0.0_b17-2.1.1 - openSUSE 11.2 (i586 x86_64): java-1_6_0-openjdk-devel-1.6.0.0_b17-2.1.1 java-1_6_0-openjdk-plugin-1.6.0.0_b17-2.1.1 - openSUSE 11.2 (noarch): java-1_6_0-openjdk-demo-1.6.0.0_b17-2.1.1 java-1_6_0-openjdk-javadoc-1.6.0.0_b17-2.1.1 java-1_6_0-openjdk-src-1.6.0.0_b17-2.1.1 - openSUSE 11.1 (i586 ppc src x86_64): java-1_6_0-openjdk-1.6.0.0_b17-2.3.1 - openSUSE 11.1 (i586 ppc x86_64): java-1_6_0-openjdk-demo-1.6.0.0_b17-2.3.1 java-1_6_0-openjdk-devel-1.6.0.0_b17-2.3.1 java-1_6_0-openjdk-javadoc-1.6.0.0_b17-2.3.1 java-1_6_0-openjdk-plugin-1.6.0.0_b17-2.3.1 java-1_6_0-openjdk-src-1.6.0.0_b17-2.3.1 - openSUSE 11.0 (i586 ppc src x86_64): java-1_6_0-openjdk-1.6.0.0_b17-2.3 - openSUSE 11.0 (i586 ppc x86_64): java-1_6_0-openjdk-demo-1.6.0.0_b17-2.3 java-1_6_0-openjdk-devel-1.6.0.0_b17-2.3 java-1_6_0-openjdk-javadoc-1.6.0.0_b17-2.3 java-1_6_0-openjdk-plugin-1.6.0.0_b17-2.3 java-1_6_0-openjdk-src-1.6.0.0_b17-2.3 References: http://support.novell.com/security/cve/CVE-2009-3555.html http://support.novell.com/security/cve/CVE-2010-0082.html http://support.novell.com/security/cve/CVE-2010-0084.html http://support.novell.com/security/cve/CVE-2010-0085.html http://support.novell.com/security/cve/CVE-2010-0088.html http://support.novell.com/security/cve/CVE-2010-0091.html http://support.novell.com/security/cve/CVE-2010-0092.html http://support.novell.com/security/cve/CVE-2010-0093.html http://support.novell.com/security/cve/CVE-2010-0094.html http://support.novell.com/security/cve/CVE-2010-0095.html http://support.novell.com/security/cve/CVE-2010-0837.html http://support.novell.com/security/cve/CVE-2010-0838.html http://support.novell.com/security/cve/CVE-2010-0840.html http://support.novell.com/security/cve/CVE-2010-0845.html http://support.novell.com/security/cve/CVE-2010-0847.html http://support.novell.com/security/cve/CVE-2010-0848.html https://bugzilla.novell.com/594415 [View Less]

1 0

openSUSE-SU-2010:0181-1 (low): cacti security update
by opensuse-security＠opensuse.org 29 Apr '10

29 Apr '10

openSUSE Security Update: cacti security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0181-1 Rating: low References: #599239 Cross-References: CVE-2010-1431 Affected Products: openSUSE 11.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. It includes one version update. Description:… [View More]

1 0

openSUSE-RU-2010:0177-1 (low): timezone: Data update
by maintenance＠opensuse.org 28 Apr '10

28 Apr '10

openSUSE Recommended Update: timezone: Data update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0177-1 Rating: low References: #583745 Affected Products: openSUSE 11.2 openSUSE 11.1 openSUSE 11.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It … [View More]

1 0

openSUSE-SU-2010:0175-1 (low): dovecot security update
by opensuse-security＠opensuse.org 28 Apr '10

28 Apr '10

openSUSE Security Update: dovecot security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0175-1 Rating: low References: #587356 Cross-References: CVE-2010-0745 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. It includes one version update. … [View More]

1 0

openSUSE-RU-2010:0173-1 (low): evolution-data-server: This update improves the stability of the package.
by maintenance＠opensuse.org 27 Apr '10

27 Apr '10

openSUSE Recommended Update: evolution-data-server: This update improves the stability of the package. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0173-1 Rating: low References: #595936 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes one … [View More]

1 0

openSUSE-SU-2010:0166-1 (important): systemtap: fix for remote code execution and denial of service
by opensuse-security＠opensuse.org 26 Apr '10

26 Apr '10

openSUSE Security Update: systemtap: fix for remote code execution and denial of service ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0166-1 Rating: important References: #574243 Cross-References: CVE-2009-4273 CVE-2010-0411 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is … [View More]

1 0

openSUSE-SU-2010:0165-1 (low): apache2 security update
by opensuse-security＠opensuse.org 26 Apr '10

26 Apr '10

openSUSE Security Update: apache2 security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0165-1 Rating: low References: #570127 #586572 Cross-References: CVE-2010-0408 CVE-2010-0434 Affected Products: openSUSE 11.2 openSUSE 11.1 openSUSE 11.0 ______________________________________________________________________________ An update … [View More]

1 0

openSUSE-SU-2010:0156-1 (low): glib2 security update
by opensuse-security＠opensuse.org 26 Apr '10

26 Apr '10

openSUSE Security Update: glib2 security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0156-1 Rating: low References: #500520 #538005 Cross-References: CVE-2009-3289 Affected Products: openSUSE 11.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. It includes one … [View More]

1 0

Main

Development

Information

Community

Social Media

Other

openSUSE Updates