June 2010 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2010:0346-1 (important): samba: Fixed various security issues
by opensuse-security＠opensuse.org 29 Jun '10

29 Jun '10

openSUSE Security Update: samba: Fixed various security issues ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0346-1 Rating: important References: #550002 #577868 #605935 #606947 #611927 Cross-References: CVE-2010-2063 Affected Products: openSUSE 11.1 openSUSE 11.0 ______________________________________________________________________________ An update that solves one vulnerability and has four fixes is now available. It includes two new package versions. Description: This update of the Samba server package fixes security issues and bugs. Following security issues were fixed: CVE-2010-2063: A buffer overrun was possible in chain_reply code in 3.3.x and below, which could be used to crash the samba server or potentially execute code. CVE-2010-0787: Take extra care that a mount point of mount.cifs isn't changed during mount. Also the following bugs were fixed: - Honor "interfaces" list in net ad dns register. (bnc#606947) - An uninitialized variable read could cause an smbd crash; (bso#7254); (bnc#605935). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.1: zypper in -t patch cifs-mount-2543 - openSUSE 11.0: zypper in -t patch cifs-mount-2543 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.1 (i586 ppc src x86_64) [New Version: 3.2.7]: samba-3.2.7-11.7.1 - openSUSE 11.1 (i586 ppc x86_64) [New Version: 3.2.7]: cifs-mount-3.2.7-11.7.1 ldapsmb-1.34b-6.7.1 libnetapi-devel-3.2.7-11.7.1 libnetapi0-3.2.7-11.7.1 libsmbclient-devel-3.2.7-11.7.1 libsmbclient0-3.2.7-11.7.1 libsmbsharemodes-devel-3.2.7-11.7.1 libsmbsharemodes0-3.2.7-11.7.1 libtalloc-devel-3.2.7-11.7.1 libtalloc1-3.2.7-11.7.1 libtdb-devel-3.2.7-11.7.1 libtdb1-3.2.7-11.7.1 libwbclient-devel-3.2.7-11.7.1 libwbclient0-3.2.7-11.7.1 samba-client-3.2.7-11.7.1 samba-devel-3.2.7-11.7.1 samba-krb-printing-3.2.7-11.7.1 samba-vscan-0.3.6b-6.7.1 samba-winbind-3.2.7-11.7.1 - openSUSE 11.1 (x86_64) [New Version: 3.2.7]: libsmbclient0-32bit-3.2.7-11.7.1 libtalloc1-32bit-3.2.7-11.7.1 libtdb1-32bit-3.2.7-11.7.1 libwbclient0-32bit-3.2.7-11.7.1 samba-32bit-3.2.7-11.7.1 samba-client-32bit-3.2.7-11.7.1 samba-winbind-32bit-3.2.7-11.7.1 - openSUSE 11.1 (ppc) [New Version: 3.2.7]: libsmbclient0-64bit-3.2.7-11.7.1 libtalloc1-64bit-3.2.7-11.7.1 libtdb1-64bit-3.2.7-11.7.1 libwbclient0-64bit-3.2.7-11.7.1 samba-64bit-3.2.7-11.7.1 samba-client-64bit-3.2.7-11.7.1 samba-winbind-64bit-3.2.7-11.7.1 - openSUSE 11.0 (i586 ppc src x86_64) [New Version: 3.2.4]: samba-3.2.4-4.12 - openSUSE 11.0 (i586 ppc x86_64) [New Version: 3.2.4]: cifs-mount-3.2.4-4.12 ldapsmb-1.34b-195.17 libnetapi-devel-3.2.4-4.12 libnetapi0-3.2.4-4.12 libsmbclient-devel-3.2.4-4.12 libsmbclient0-3.2.4-4.12 libsmbsharemodes-devel-3.2.4-4.12 libsmbsharemodes0-3.2.4-4.12 libtalloc-devel-3.2.4-4.12 libtalloc1-3.2.4-4.12 libtdb-devel-3.2.4-4.12 libtdb1-3.2.4-4.12 libwbclient-devel-3.2.4-4.12 libwbclient0-3.2.4-4.12 samba-client-3.2.4-4.12 samba-devel-3.2.4-4.12 samba-krb-printing-3.2.4-4.12 samba-winbind-3.2.4-4.12 - openSUSE 11.0 (x86_64) [New Version: 3.2.4]: libsmbclient0-32bit-3.2.4-4.12 libtalloc1-32bit-3.2.4-4.12 libtdb1-32bit-3.2.4-4.12 libwbclient0-32bit-3.2.4-4.12 samba-32bit-3.2.4-4.12 samba-client-32bit-3.2.4-4.12 samba-winbind-32bit-3.2.4-4.12 - openSUSE 11.0 (ppc) [New Version: 3.2.4]: libsmbclient0-64bit-3.2.4-4.12 libtalloc1-64bit-3.2.4-4.12 libtdb1-64bit-3.2.4-4.12 libwbclient0-64bit-3.2.4-4.12 samba-64bit-3.2.4-4.12 samba-client-64bit-3.2.4-4.12 samba-winbind-64bit-3.2.4-4.12 References: http://support.novell.com/security/cve/CVE-2010-2063.html https://bugzilla.novell.com/550002 https://bugzilla.novell.com/577868 https://bugzilla.novell.com/605935 https://bugzilla.novell.com/606947 https://bugzilla.novell.com/611927

1 0

openSUSE-SU-2010:0342-1 (moderate): mono security update
by opensuse-security＠opensuse.org 29 Jun '10

29 Jun '10

openSUSE Security Update: mono security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0342-1 Rating: moderate References: #592428 Cross-References: CVE-2010-1459 Affected Products: openSUSE 11.2 openSUSE 11.1 openSUSE 11.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Mono's ASP.NET implementation did not set the 'EnableViewStateMac' property by default. Attackers could exploit that to conduct cross-site-scripting (XSS) attacks. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch bytefx-data-mysql-2384 - openSUSE 11.1: zypper in -t patch bytefx-data-mysql-2384 - openSUSE 11.0: zypper in -t patch bytefx-data-mysql-2384 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 src x86_64): mono-core-2.4.2.3-2.7.1 - openSUSE 11.2 (i586 x86_64): bytefx-data-mysql-2.4.2.3-2.7.1 ibm-data-db2-2.4.2.3-2.7.1 mono-complete-2.4.2.3-2.7.1 mono-data-2.4.2.3-2.7.1 mono-data-firebird-2.4.2.3-2.7.1 mono-data-oracle-2.4.2.3-2.7.1 mono-data-postgresql-2.4.2.3-2.7.1 mono-data-sqlite-2.4.2.3-2.7.1 mono-data-sybase-2.4.2.3-2.7.1 mono-devel-2.4.2.3-2.7.1 mono-extras-2.4.2.3-2.7.1 mono-jscript-2.4.2.3-2.7.1 mono-locale-extras-2.4.2.3-2.7.1 mono-nunit-2.4.2.3-2.7.1 mono-wcf-2.4.2.3-2.7.1 mono-web-2.4.2.3-2.7.1 mono-winforms-2.4.2.3-2.7.1 monodoc-core-2.4.2.3-2.7.1 - openSUSE 11.1 (i586 ppc src x86_64): mono-core-2.0.1-1.23.1 - openSUSE 11.1 (i586 ppc x86_64): bytefx-data-mysql-2.0.1-1.23.1 ibm-data-db2-2.0.1-1.23.1 mono-complete-2.0.1-1.23.1 mono-data-2.0.1-1.23.1 mono-data-firebird-2.0.1-1.23.1 mono-data-oracle-2.0.1-1.23.1 mono-data-postgresql-2.0.1-1.23.1 mono-data-sqlite-2.0.1-1.23.1 mono-data-sybase-2.0.1-1.23.1 mono-devel-2.0.1-1.23.1 mono-extras-2.0.1-1.23.1 mono-jscript-2.0.1-1.23.1 mono-locale-extras-2.0.1-1.23.1 mono-nunit-2.0.1-1.23.1 mono-web-2.0.1-1.23.1 mono-winforms-2.0.1-1.23.1 - openSUSE 11.1 (noarch src): monodoc-core-2.0-1.42.1 - openSUSE 11.1 (x86_64): mono-core-32bit-2.0.1-1.23.1 - openSUSE 11.0 (i586 ppc src x86_64): mono-core-1.9.1-6.8 - openSUSE 11.0 (i586 ppc x86_64): bytefx-data-mysql-1.9.1-6.8 ibm-data-db2-1.9.1-6.8 mono-complete-1.9.1-6.8 mono-data-1.9.1-6.8 mono-data-firebird-1.9.1-6.8 mono-data-oracle-1.9.1-6.8 mono-data-postgresql-1.9.1-6.8 mono-data-sqlite-1.9.1-6.8 mono-data-sybase-1.9.1-6.8 mono-devel-1.9.1-6.8 mono-extras-1.9.1-6.8 mono-jscript-1.9.1-6.8 mono-locale-extras-1.9.1-6.8 mono-nunit-1.9.1-6.8 mono-web-1.9.1-6.8 mono-winforms-1.9.1-6.8 - openSUSE 11.0 (noarch src): monodoc-core-1.9-18.1 - openSUSE 11.0 (x86_64): mono-core-32bit-1.9.1-6.8 References: http://support.novell.com/security/cve/CVE-2010-1459.html https://bugzilla.novell.com/592428

1 0

openSUSE-RU-2010:0341-1 (low): nagios-nrpe-client: Writes on installation to /etc/services without dependency of netcfg. Fixed by this update.
by maintenance＠opensuse.org 29 Jun '10

29 Jun '10

openSUSE Recommended Update: nagios-nrpe-client: Writes on installation to /etc/services without dependency of netcfg. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0341-1 Rating: low References: #608164 Affected Products: openSUSE 11.2 openSUSE 11.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: nagios-nrpe-client writes to /etc/services without having an dependency on netcfg. As result the file /etc/services can sometimes be nearly empty if nagios-nrpe-client is installed before netcfg. Fixed by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch nagios-nrpe-client-2582 - openSUSE 11.1: zypper in -t patch nagios-nrpe-client-2582 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 x86_64): nagios-nrpe-client-2.12-4.6.1 - openSUSE 11.2 (src): nagios-nrpe-2.12-4.6.1 - openSUSE 11.1 (i586 ppc x86_64): nagios-nrpe-client-2.12-3.3.1 - openSUSE 11.1 (src): nagios-nrpe-2.12-3.3.1 References: https://bugzilla.novell.com/608164

1 0

openSUSE-SU-2010:0338-1 (important): aria2: Update to 1.9.3 to fix a metalink name Directory Traversal Vulnerability
by opensuse-security＠opensuse.org 24 Jun '10

24 Jun '10

openSUSE Security Update: aria2: Update to 1.9.3 to fix a metalink name Directory Traversal Vulnerability ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0338-1 Rating: important References: #605937 Cross-References: CVE-2010-1512 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. It includes one version update. Description: This aria2 update to 1.9.3 fixes a metalink name Directory Traversal issue (CVE-2010-1512). The version was also bumped from 1.8.2 to 1.9.3 to fix lots of bugs. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch aria2-2515 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 src x86_64) [New Version: 1.9.3]: aria2-1.9.3-0.1.1 References: http://support.novell.com/security/cve/CVE-2010-1512.html https://bugzilla.novell.com/605937

1 0

openSUSE-RU-2010:0335-1 (moderate): NetworkManager-gnome: It crash when a profile is edit. Fixed by this update.
by maintenance＠opensuse.org 22 Jun '10

22 Jun '10

openSUSE Recommended Update: NetworkManager-gnome: It crash when a profile is edit. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0335-1 Rating: moderate References: #611630 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: A crash occurs if a profile is edit by the user. This bug is fixed by this update. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch NetworkManager-gnome-2516 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 src x86_64): NetworkManager-gnome-0.7.1-5.5.1 References: https://bugzilla.novell.com/611630

1 0

openSUSE-SU-2010:0334-1 (important): lftp: fixed a http client unexpected download filename vulnerability
by opensuse-security＠opensuse.org 21 Jun '10

21 Jun '10

openSUSE Security Update: lftp: fixed a http client unexpected download filename vulnerability ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0334-1 Rating: important References: #606319 Cross-References: CVE-2010-2251 Affected Products: openSUSE 11.2 openSUSE 11.1 openSUSE 11.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update of lftp improves the filename handling of downloaded files to avoid downloading arbitrary content to unexpected locations (like .login). (CVE-2010-2251) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch lftp-2534 - openSUSE 11.1: zypper in -t patch lftp-2534 - openSUSE 11.0: zypper in -t patch lftp-2534 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 src x86_64): lftp-3.6.3-58.2.1 - openSUSE 11.1 (i586 ppc src x86_64): lftp-3.6.3-5.68.1 - openSUSE 11.0 (i586 ppc src x86_64): lftp-3.6.3-28.2 References: http://support.novell.com/security/cve/CVE-2010-2251.html https://bugzilla.novell.com/606319

1 0

openSUSE-RU-2010:0331-1 (low): unzip: Encoding of Cyrillic filenames in zip archive, created under Windows, is incorrect. Fixed by this update.
by maintenance＠opensuse.org 17 Jun '10

17 Jun '10

openSUSE Recommended Update: unzip: Encoding of Cyrillic filenames in zip archive, created under Windows, is incorrect. Fixed by this update. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0331-1 Rating: low References: #540598 Affected Products: openSUSE 11.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update adds the use of librcc0 to unzip. So from now unzip can correctly encode Cyrillic and Czech file names. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch librcc-devel-2496 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 src x86_64): librcc0-0.2.9-1.1.1 librcd0-0.1.13-1.1.1 unzip-5.52-143.5.1 - openSUSE 11.2 (i586 x86_64): librcc-devel-0.2.9-1.1.1 librcd-devel-0.1.13-1.1.1 rcc-runtime-0.2.9-1.1.1 References: https://bugzilla.novell.com/540598

1 0

openSUSE-RU-2010:0330-1 (moderate): viewvc: Fix exceptions on various cases
by maintenance＠opensuse.org 17 Jun '10

17 Jun '10

openSUSE Recommended Update: viewvc: Fix exceptions on various cases ______________________________________________________________________________ Announcement ID: openSUSE-RU-2010:0330-1 Rating: moderate References: #612090 Affected Products: openSUSE 11.2 openSUSE 11.1 openSUSE 11.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. It includes two new package versions. Description: This updates viewvc to version 1.1.6: * add rudimentary support for WSGI-based deployments * fix exception caused by trying to HTML-escape non-string data * fix incorrect RSS feed Content-Type header * fix RSS <title> encoding problem * allow 'svndbadmin purge' to work on missing repositories Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch viewvc-2523 - openSUSE 11.1: zypper in -t patch viewvc-2522 - openSUSE 11.0: zypper in -t patch viewvc-2522 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (noarch src) [New Version: 1.1.6]: viewvc-1.1.6-0.1.1 - openSUSE 11.1 (i586 ppc src x86_64) [New Version: 1.0.12]: viewvc-1.0.12-0.1.1 - openSUSE 11.0 (i586 ppc src x86_64) [New Version: 1.0.12]: viewvc-1.0.12-0.1 References: https://bugzilla.novell.com/612090

1 0

openSUSE-SU-2010:0324-1 (important): libtiff: integer overflow can lead to corrupted heap
by opensuse-security＠opensuse.org 14 Jun '10

14 Jun '10

openSUSE Security Update: libtiff: integer overflow can lead to corrupted heap ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0324-1 Rating: important References: #605837 Cross-References: CVE-2010-1411 Affected Products: openSUSE 11.2 openSUSE 11.1 openSUSE 11.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update of libtiff fixes several integer overflows that could lead to a corrupted heap memory. This bug can be exploited remotely with a crafted TIFF file to cause an application crash or probably to execute arbitrary code. (CVE-2010-1411) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch libtiff-devel-2477 - openSUSE 11.1: zypper in -t patch libtiff-devel-2477 - openSUSE 11.0: zypper in -t patch libtiff-devel-2477 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 src x86_64): tiff-3.8.2-145.4.1 - openSUSE 11.2 (i586 x86_64): libtiff-devel-3.8.2-145.4.1 libtiff3-3.8.2-145.4.1 - openSUSE 11.2 (x86_64): libtiff-devel-32bit-3.8.2-145.4.1 libtiff3-32bit-3.8.2-145.4.1 - openSUSE 11.1 (i586 ppc src x86_64): tiff-3.8.2-133.39.1 - openSUSE 11.1 (i586 ppc x86_64): libtiff-devel-3.8.2-133.39.1 libtiff3-3.8.2-133.39.1 - openSUSE 11.1 (x86_64): libtiff-devel-32bit-3.8.2-133.39.1 libtiff3-32bit-3.8.2-133.39.1 - openSUSE 11.1 (ppc): libtiff-devel-64bit-3.8.2-133.39.1 libtiff3-64bit-3.8.2-133.39.1 - openSUSE 11.0 (i586 ppc src x86_64): tiff-3.8.2-108.9 - openSUSE 11.0 (i586 ppc x86_64): libtiff-devel-3.8.2-108.9 libtiff3-3.8.2-108.9 - openSUSE 11.0 (x86_64): libtiff-devel-32bit-3.8.2-108.9 libtiff3-32bit-3.8.2-108.9 - openSUSE 11.0 (ppc): libtiff-devel-64bit-3.8.2-108.9 libtiff3-64bit-3.8.2-108.9 References: http://support.novell.com/security/cve/CVE-2010-1411.html https://bugzilla.novell.com/605837

1 0

openSUSE-SU-2010:0321-1 (important): flash-player: Fixed remote code execution
by opensuse-security＠opensuse.org 11 Jun '10

11 Jun '10

openSUSE Security Update: flash-player: Fixed remote code execution ______________________________________________________________________________ Announcement ID: openSUSE-SU-2010:0321-1 Rating: important References: #612063 Cross-References: CVE-2008-4546 CVE-2009-3793 CVE-2010-1297 CVE-2010-2160 CVE-2010-2161 CVE-2010-2162 CVE-2010-2163 CVE-2010-2164 CVE-2010-2165 CVE-2010-2166 CVE-2010-2167 CVE-2010-2169 CVE-2010-2170 CVE-2010-2171 CVE-2010-2172 CVE-2010-2173 CVE-2010-2174 CVE-2010-2175 CVE-2010-2176 CVE-2010-2177 CVE-2010-2178 CVE-2010-2179 CVE-2010-2180 CVE-2010-2181 CVE-2010-2182 CVE-2010-2183 CVE-2010-2184 CVE-2010-2185 CVE-2010-2186 CVE-2010-2187 CVE-2010-2188 CVE-2010-2189 Affected Products: openSUSE 11.2 openSUSE 11.1 openSUSE 11.0 ______________________________________________________________________________ An update that fixes 32 vulnerabilities is now available. It includes one version update. Description: This Flash Player update fixes multiple critical security vulnerabilities which allow an attacker to remotely execute arbitrary code or to cause a denial of service. The following CVE numbers have been assigned: CVE-2008-4546, CVE-2009-3793, CVE-2010-1297, CVE-2010-2160, CVE-2010-2161, CVE-2010-2162, CVE-2010-2163, CVE-2010-2164, CVE-2010-2165, CVE-2010-2166, CVE-2010-2167, CVE-2010-2169, CVE-2010-2170, CVE-2010-2171, CVE-2010-2172, CVE-2010-2173, CVE-2010-2174, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2179, CVE-2010-2180, CVE-2010-2181, CVE-2010-2182, CVE-2010-2183, CVE-2010-2184, CVE-2010-2185, CVE-2010-2186, CVE-2010-2187, CVE-2010-2188, CVE-2010-2189 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.2: zypper in -t patch flash-player-2542 - openSUSE 11.1: zypper in -t patch flash-player-2542 - openSUSE 11.0: zypper in -t patch flash-player-2542 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.2 (i586 src) [New Version: 10.1.53.64]: flash-player-10.1.53.64-1.1.1 - openSUSE 11.1 (i586 src) [New Version: 10.1.53.64]: flash-player-10.1.53.64-1.1.1 - openSUSE 11.0 (i586 src) [New Version: 10.1.53.64]: flash-player-10.1.53.64-1.1 References: http://support.novell.com/security/cve/CVE-2008-4546.html http://support.novell.com/security/cve/CVE-2009-3793.html http://support.novell.com/security/cve/CVE-2010-1297.html http://support.novell.com/security/cve/CVE-2010-2160.html http://support.novell.com/security/cve/CVE-2010-2161.html http://support.novell.com/security/cve/CVE-2010-2162.html http://support.novell.com/security/cve/CVE-2010-2163.html http://support.novell.com/security/cve/CVE-2010-2164.html http://support.novell.com/security/cve/CVE-2010-2165.html http://support.novell.com/security/cve/CVE-2010-2166.html http://support.novell.com/security/cve/CVE-2010-2167.html http://support.novell.com/security/cve/CVE-2010-2169.html http://support.novell.com/security/cve/CVE-2010-2170.html http://support.novell.com/security/cve/CVE-2010-2171.html http://support.novell.com/security/cve/CVE-2010-2172.html http://support.novell.com/security/cve/CVE-2010-2173.html http://support.novell.com/security/cve/CVE-2010-2174.html http://support.novell.com/security/cve/CVE-2010-2175.html http://support.novell.com/security/cve/CVE-2010-2176.html http://support.novell.com/security/cve/CVE-2010-2177.html http://support.novell.com/security/cve/CVE-2010-2178.html http://support.novell.com/security/cve/CVE-2010-2179.html http://support.novell.com/security/cve/CVE-2010-2180.html http://support.novell.com/security/cve/CVE-2010-2181.html http://support.novell.com/security/cve/CVE-2010-2182.html http://support.novell.com/security/cve/CVE-2010-2183.html http://support.novell.com/security/cve/CVE-2010-2184.html http://support.novell.com/security/cve/CVE-2010-2185.html http://support.novell.com/security/cve/CVE-2010-2186.html http://support.novell.com/security/cve/CVE-2010-2187.html http://support.novell.com/security/cve/CVE-2010-2188.html http://support.novell.com/security/cve/CVE-2010-2189.html https://bugzilla.novell.com/612063

1 0