July 2006 - openSUSE Users - openSUSE Mailing Lists

[SLE] Location of pstack
by Tom Yerex 29 Jul '06

29 Jul '06

Newbie question - I am trying to install pstack support for SuSE 10.x, but I cannot find it anywhere. I see references to pstack for RedHat, but I cannot find anything for SuSE - help! Thank you.

2 1

[SLE] Multiple Mozilla security holes - But how to upgrade???
by ken 29 Jul '06

29 Jul '06

I haven't been able to find v.1.5 for either Firefox or Thunderbird for Suse v.9.3. Is Suse dropping support for it? I haven't seen any discussion of the below on this list, so... For Your Reading Pleasure::::::) -------- Original Message -------- Subject: US-CERT Technical Cyber Security Alert TA06-208A -- Mozilla Products Contain Multiple Vulnerabilities Date: Thu, 27 Jul 2006 16:38:20 -0400 From: US-CERT Technical Alerts <technical-alerts(a)us-cert.gov> Organization: US-CERT - +1 202-205-5266 To: technical-alerts(a)us-cert.gov -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA06-208A Mozilla Products Contain Multiple Vulnerabilities Original release date: July 27, 2006 Last revised: -- Source: US-CERT Systems Affected * Mozilla SeaMonkey * Mozilla Firefox * Mozilla Thunderbird Any products based on Mozilla components, specifically Gecko, may also be affected. Overview The Mozilla web browser and derived products contain several vulnerabilities, the most serious of which could allow a remote attacker to execute arbitrary code on an affected system. I. Description Several vulnerabilities have been reported in the Mozilla web browser and derived products. More detailed information is available in the individual vulnerability notes, including the following: VU#476724 - Mozilla products fail to properly handle frame references Mozilla products fail to properly handle frame or window references. This may allow a remote attacker to execute arbitrary code on a vulnerable system. (CVE-2006-3801) VU#670060 - Mozilla fails to properly release JavaScript references Mozilla products fail to properly release memory. This vulnerability may allow a remote attacker to execute code on a vulnerable system. (CVE-2006-3677) VU#239124 - Mozilla fails to properly handle simultaneous XPCOM events Mozilla products are vulnerable to memory corruption via simultaneous XPCOM events. This may allow a remote attacker to execute arbitrary code on a vulnerable system. (CVE-2006-3113) VU#265964 - Mozilla products contain a race condition Mozilla products contain a race condition. This vulnerability may allow a remote attacker to execute code on a vulnerable system. (CVE-2006-3803) VU#897540 - Mozilla products VCard attachment buffer overflow Mozilla products fail to properly handle malformed VCard attachments, allowing a buffer overflow to occur. This vulnerability may allow a remote attacker to execute arbitrary code on a vulnerable system. (CVE-2006-3804) VU#876420 - Mozilla fails to properly handle garbage collection The Mozilla JavaScript engine fails to properly perform garbage collection, which may allow a remote attacker to execute arbitrary code on a vulnerable system. (CVE-2006-3805) VU#655892 - Mozilla JavaScript engine contains multiple integer overflows The Mozilla JavaScript engine contains multiple integer overflows. This vulnerability may allow a remote attacker to execute arbitrary code on a vulnerable system. (CVE-2006-3806) VU#687396 - Mozilla products fail to properly validate JavaScript constructors Mozilla products fail to properly validate references returned by JavaScript constructors. This vulnerability may allow a remote attacker to execute arbitrary code on a vulnerable system. (CVE-2006-3807) VU#527676 - Mozilla contains multiple memory corruption vulnerabilities Mozilla products contain multiple vulnerabilities that can cause memory corruption. This may allow a remote attacker to execute arbitrary code on a vulnerable system. (CVE-2006-3811) II. Impact A remote, unauthenticated attacker could execute arbitrary code on a vulnerable system. An attacker may also be able to cause the vulnerable application to crash. III. Solution Upgrade Upgrade to Mozilla Firefox 1.5.0.5, Mozilla Thunderbird 1.5.0.5, or SeaMonkey 1.0.3. Disable JavaScript and Java These vulnerabilities can be mitigated by disabling JavaScript and Java in all affected products. Instructions for disabling Java in Firefox can be found in the "Securing Your Web Browser" document. Appendix A. References * US-CERT Vulnerability Notes Related to July Mozilla Security Advisories - <http://www.kb.cert.org/vuls/byid?searchview&query=firefox_1505> * CVE-2006-3081 - <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3801> * CVE-2006-3677 - <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3677> * CVE-2006-3113 - <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3113> * CVE-2006-3803 - <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3803> * CVE-2006-3804 - <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3804> * CVE-2006-3805 - <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3805> * CVE-2006-3806 - <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3806> * CVE-2006-3807 - <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3807> * CVE-2006-3811 - <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3811> * Mozilla Foundation Security Advisories - <http://www.mozilla.org/security/announce/> * Known Vulnerabilities in Mozilla Products - <http://www.mozilla.org/projects/security/known-vulnerabilities.html> * Securing Your Web Browser - <http://www.us-cert.gov/reading_room/securing_browser/browser_security.html#…> ____________________________________________________________________ The most recent version of this document can be found at: <http://www.us-cert.gov/cas/techalerts/TA06-208A.html> ____________________________________________________________________ Feedback can be directed to US-CERT Technical Staff. Please send email to <cert(a)cert.org> with "TA06-208A Feedback VU#239124" in the subject. ____________________________________________________________________ For instructions on subscribing to or unsubscribing from this mailing list, visit <http://www.us-cert.gov/cas/signup.html>. ____________________________________________________________________ Produced 2006 by US-CERT, a government organization. Terms of use: <http://www.us-cert.gov/legal.html> ____________________________________________________________________ Revision History Jul 27, 2006: Initial release -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iQEVAwUBRMkgNexOF3G+ig+rAQIFsAgAoWoMkxxhkzb+xgLVCJF7h4k4EBCgJGWa BSOiFfL4Gs4vv4lNooDRCIOdxiBfXYL71XsIOT4aWry5852/6kyYnyAiXXYj1Uv0 SbPY2sQSZ5EaG+G9i8HDIy3fpJN4XgH3ng1uzUnJihY19IfndbXicpZE+debIUri qt9NRD2f5FW5feKo1cBpYxtmxQAEePOa2dJHh7I7cnFGtG3MixHx4kVEyuYUutCX 5tHDsfTIdySNkIdCQ4vhk846bErB/kaHiKMQDfMglllb3GOSc07OQ0CDo2eTPVsA 9DtKkiDP1C4dh1mxco8CWlS6327+EB0KXGGoqDF2+j/rrpsW0oc8nA== =HwuK -----END PGP SIGNATURE----- -- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help(a)suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq(a)suse.com

4 4

[SLE] looking for the source rpms
by Bruce Ferrell 29 Jul '06

29 Jul '06

I've found I need some apache modules not included with the binaries. Can someone tell me where to find the source rpms? I don't see them on the media -- One day at a time, one second if that's what it takes -- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help(a)suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq(a)suse.com

3 2

[SLE] 10.0 box install forgets the atapi cdrom & only sees the usb-dvd drive
by Serge Naggar 28 Jul '06

28 Jul '06

Hi, I seem to have a situation which resembles, but is a variant of the one mentioned in: `10.1 box install forgets DVD' except that in this case the cdrom is forgotten. I installed Suse 10.0 [box] on a machine with both: ide-cdroms and, usb-dvd. The ide cdrom drive [hdc] is recognized by the bios [auto] and fstab as /dev/hdc; the other is a usb dvd drive /dev/sr0. The drives are cdromecorder [plextor] & dvdrecoder [sony]. the entries in fstab are: /dev/hdc /media/cdrom subfs noauto,fs=cdfss,ro,procuid,nosuid,nodev,exec,iocharset=utf8,users 0 0 /dev/sr0 /media/cdrom2 subfs noauto,fs=cdfss,ro,procuid,nosuid,nodev,exec,iocharset=utf8,users 0 0 /dev/cdrecorder /media/cdrecorder subfs noauto,fs=cdfss,ro,procuid,nosuid,nodev,exec,iocharset=utf8,users 0 0 /dev/cdrecorder2 /media/cdrecorder2subfs noauto,fs=cdfss,ro,procuid,nosuid,nodev,exec,iocharset=utf8,users 0 0 I was surprised to note that each drive was treated as two drives: one for cdrecorder [1, 2] and the other as cdrom [1, 2] also that the recorde had the `ro' rather than the expected [by me] rw. I added `users' but the cdrom was already not functional. I installed suse 10.0 using the dvd without any problem except that the system will no longer `see' any media in the cdrom. It will only accept and present media in the dvd. When a cd/dvd is put in the dvd drive it is recognized and offered. When a cd is put in the cd drive nothing happens. I have tried disconnecting the usb-dvd to no avail. The machine becomes a system without a cd or dvd drive. There is no question that suse `sees' both drives in Yast cdrom. I am stumped - why can't suse `see' media in the cdrom = /dev/hdc? Does suse have a problem with two cd drives? Can anybody help? Thanks -- Cheers, Serge Naggar -- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help(a)suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq(a)suse.com

1 0

[SLE] File location
by richard bown 28 Jul '06

28 Jul '06

Hi building the makefile for an app, and I'm unable to find a file either on the install dvd or the mirrors. I'm getting "checking for gnomeConf.sh file in /usr/local/lib... not found configure: error: Could not find the gnomeConf.sh file that is generated by gnome-libs install" I've installed the gnome libs and all the -devel files that are remotely like it, but still nothing. Anyone know which rpm to use ? TIA Richard -- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help(a)suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq(a)suse.com

2 1

[SLE] monitor settings in yast
by Brian Glover 28 Jul '06

28 Jul '06

Newbie here, sorry if this is offtopic I have been given some old hardware with win98 and a set of suse 8 pro CD's... suse seems to have installed ok The video adaptor is an ATI Rage II pci and recognised ok The 14" CRT monitor seems to be an ESCOM model EM-141LR and is not in the Yast list of monitors, as I have no manual, disk or information about it I selected VESA 800x600 @ 60hz Horiz freq 31 - 37.9 Vert freq 50 - 60 Now each window that displays on the screen has a 2cm strip down the left hand side where the display is steady and readable but the rest of the window is flickering and virtually unreadable Would a later version of suse fix the problem automatically? I have googled for the settings for this old monitor to no avail. Could anyone advise them to me please. Regards Brian Glover

4 3

FW: SPAM: Re: [SLE] Screen Saver Problem
by Greg Wallace 28 Jul '06

28 Jul '06

On Wednesday, July 26, 2006 @ 7:50 PM, I wrote: >On Wednesday, July 26, 2006 @ 4:22 PM, PatrickM wrote: ><snip> >> >>> When upgrading (YaST, ZEN, smart...): >>> kdebase3-3.5.1-69 >>> to >>> kdebase3-3.5.1-69.15 >>> >>> i lost my screensaver. >>> <snip> >>Hi, >>it's ok with YaST to manage the tweak. >>Try it if you wish, you can always upgrade if you feel so. >>Go to YaST-> Software Management >>In the "filter" choose "Search" >>Search for kdebase3. On the right pane, ensure "kdebase3" (the "single" >>one, not kdebase3-devel, etc) is highlighted. >>Below that pane, you'll have several tabs, one is "Versions". Click on it. >>Select the 3.5.1-69 (so, not the .15). Click "Accept". >>This procedure will ensure your worries about dependencies will go well :-) >>If the result is not the expected (the recovery of the screensavers), >>you can update to the .15 again the same way, or by one of your choice. >Downgrading to 3.5.1-69 brought back my screensaver, so it would appear >that you were right -- the kdebase-3.5.1-69.15 patch must have been what >caused the screensaver to stop working. >>There are other ways, though. You might want later to try "smart". >>HTH, >>Cheers, >>PatrickM >Greg Wallace I filed a bug report on this, but, this being the first time I've filed a bug report, I'm not sure I filed it in the correct place. Here's where I filed it -- http://support.novell.com/additional/bugreport.html?sourceidint=suplnav4a_bu g I hope that was the right place. Greg Wallace -- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help(a)suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq(a)suse.com

1 0

[opensuse] I am trying again
by Gunnar Håland 28 Jul '06

28 Jul '06

I will try to install Opensuse 10.1 once again. Can someone tell me the correct way to do it. Can I use Zen for the updating the first time or is Yast the best toy. Can I use tiny-nividia-installer to get the NIVIDIA driver for my system. Gunnar --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-help(a)opensuse.org

3 3

[SLE] Setting url in yast
by richard bown 28 Jul '06

28 Jul '06

Hi Sorry if this is too much of a newbie question. I've found the locations of the various mirrors, how do I point yast to one of them to download updates etc.? I've found most of the suse functions, its not so dissimilar to the mandriva releases, apart from some bit actually work ! TIA Richard -- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help(a)suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq(a)suse.com

3 8

[SLE] Duplicating a directory structure
by Marlier, Ian 28 Jul '06

28 Jul '06

I need to duplicate a directory structure on a SuSE 10.0 box -- not the files, just the directory tree. I thought this would be pretty simple, using find, but I'm running into big issues because many (as in almost all) of the directories have spaces in their names. For the life of me I can't get the silly thing to put everything where it should be. The current directory structure is something like the following: /tmp/origin /tmp/origin/folder one /tmp/origin/folder one/sub folder one /tmp/origin/folder one/sub folder two /tmp/origin/folder one/sub folder three /tmp/origin/folder one/sub folder three/sub sub folder one /tmp/origin/folder one/sub folder three/sub sub folder two /tmp/origin/folder one/sub folder four /tmp/origin/folder two /tmp/origin/folder two/sub folder one . . . (Suffice it to say that the actual structure is much more complicated, and, well, real. But not essentially different.) What I'm trying to end up with is something like this: /tmp/dest /tmp/dest/folder one /tmp/dest/folder one/sub folder one /tmp/dest/folder one/sub folder two /tmp/dest/folder one/sub folder three /tmp/dest/folder one/sub folder three/sub sub folder one . . . I started off by doing this: `cd /tmp/origin` `find . -type d -print | xargs mkdir {}` which gave me lots of errors like "mkdir folder: file exists" and "mkdir one/sub: file exists". Clearly "folder" and "one/sub" are being seen as distinct file names. Anyone have any thoughts/advice on what I can do to duplicate the structure? I know it's really just a question of quoting/escaping the output of the find command, but for the life of me I can't figure out where to put the quotes! Thanks... - IAn -- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help(a)suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq(a)suse.com

5 4