Fri Oct 4 20:52:37 2024
EVENTS
 FREE
SOFTWARE
INSTITUTE

POLITICS
JOBS
MEMBERS'
CORNER

MAILING
LIST

NYLXS Mailing Lists and Archives
NYLXS Members have a lot to say and share but we don't keep many secrets. Join the Hangout Mailing List and say your peice.

DATE 2010-02-01

HANGOUT

2024-10-04 | 2024-09-04 | 2024-08-04 | 2024-07-04 | 2024-06-04 | 2024-05-04 | 2024-04-04 | 2024-03-04 | 2024-02-04 | 2024-01-04 | 2023-12-04 | 2023-11-04 | 2023-10-04 | 2023-09-04 | 2023-08-04 | 2023-07-04 | 2023-06-04 | 2023-05-04 | 2023-04-04 | 2023-03-04 | 2023-02-04 | 2023-01-04 | 2022-12-04 | 2022-11-04 | 2022-10-04 | 2022-09-04 | 2022-08-04 | 2022-07-04 | 2022-06-04 | 2022-05-04 | 2022-04-04 | 2022-03-04 | 2022-02-04 | 2022-01-04 | 2021-12-04 | 2021-11-04 | 2021-10-04 | 2021-09-04 | 2021-08-04 | 2021-07-04 | 2021-06-04 | 2021-05-04 | 2021-04-04 | 2021-03-04 | 2021-02-04 | 2021-01-04 | 2020-12-04 | 2020-11-04 | 2020-10-04 | 2020-09-04 | 2020-08-04 | 2020-07-04 | 2020-06-04 | 2020-05-04 | 2020-04-04 | 2020-03-04 | 2020-02-04 | 2020-01-04 | 2019-12-04 | 2019-11-04 | 2019-10-04 | 2019-09-04 | 2019-08-04 | 2019-07-04 | 2019-06-04 | 2019-05-04 | 2019-04-04 | 2019-03-04 | 2019-02-04 | 2019-01-04 | 2018-12-04 | 2018-11-04 | 2018-10-04 | 2018-09-04 | 2018-08-04 | 2018-07-04 | 2018-06-04 | 2018-05-04 | 2018-04-04 | 2018-03-04 | 2018-02-04 | 2018-01-04 | 2017-12-04 | 2017-11-04 | 2017-10-04 | 2017-09-04 | 2017-08-04 | 2017-07-04 | 2017-06-04 | 2017-05-04 | 2017-04-04 | 2017-03-04 | 2017-02-04 | 2017-01-04 | 2016-12-04 | 2016-11-04 | 2016-10-04 | 2016-09-04 | 2016-08-04 | 2016-07-04 | 2016-06-04 | 2016-05-04 | 2016-04-04 | 2016-03-04 | 2016-02-04 | 2016-01-04 | 2015-12-04 | 2015-11-04 | 2015-10-04 | 2015-09-04 | 2015-08-04 | 2015-07-04 | 2015-06-04 | 2015-05-04 | 2015-04-04 | 2015-03-04 | 2015-02-04 | 2015-01-04 | 2014-12-04 | 2014-11-04 | 2014-10-04 | 2014-09-04 | 2014-08-04 | 2014-07-04 | 2014-06-04 | 2014-05-04 | 2014-04-04 | 2014-03-04 | 2014-02-04 | 2014-01-04 | 2013-12-04 | 2013-11-04 | 2013-10-04 | 2013-09-04 | 2013-08-04 | 2013-07-04 | 2013-06-04 | 2013-05-04 | 2013-04-04 | 2013-03-04 | 2013-02-04 | 2013-01-04 | 2012-12-04 | 2012-11-04 | 2012-10-04 | 2012-09-04 | 2012-08-04 | 2012-07-04 | 2012-06-04 | 2012-05-04 | 2012-04-04 | 2012-03-04 | 2012-02-04 | 2012-01-04 | 2011-12-04 | 2011-11-04 | 2011-10-04 | 2011-09-04 | 2011-08-04 | 2011-07-04 | 2011-06-04 | 2011-05-04 | 2011-04-04 | 2011-03-04 | 2011-02-04 | 2011-01-04 | 2010-12-04 | 2010-11-04 | 2010-10-04 | 2010-09-04 | 2010-08-04 | 2010-07-04 | 2010-06-04 | 2010-05-04 | 2010-04-04 | 2010-03-04 | 2010-02-04 | 2010-01-04 | 2009-12-04 | 2009-11-04 | 2009-10-04 | 2009-09-04 | 2009-08-04 | 2009-07-04 | 2009-06-04 | 2009-05-04 | 2009-04-04 | 2009-03-04 | 2009-02-04 | 2009-01-04 | 2008-12-04 | 2008-11-04 | 2008-10-04 | 2008-09-04 | 2008-08-04 | 2008-07-04 | 2008-06-04 | 2008-05-04 | 2008-04-04 | 2008-03-04 | 2008-02-04 | 2008-01-04 | 2007-12-04 | 2007-11-04 | 2007-10-04 | 2007-09-04 | 2007-08-04 | 2007-07-04 | 2007-06-04 | 2007-05-04 | 2007-04-04 | 2007-03-04 | 2007-02-04 | 2007-01-04 | 2006-12-04 | 2006-11-04 | 2006-10-04 | 2006-09-04 | 2006-08-04 | 2006-07-04 | 2006-06-04 | 2006-05-04 | 2006-04-04 | 2006-03-04 | 2006-02-04 | 2006-01-04 | 2005-12-04 | 2005-11-04 | 2005-10-04 | 2005-09-04 | 2005-08-04 | 2005-07-04 | 2005-06-04 | 2005-05-04 | 2005-04-04 | 2005-03-04 | 2005-02-04 | 2005-01-04 | 2004-12-04 | 2004-11-04 | 2004-10-04 | 2004-09-04 | 2004-08-04 | 2004-07-04 | 2004-06-04 | 2004-05-04 | 2004-04-04 | 2004-03-04 | 2004-02-04 | 2004-01-04 | 2003-12-04 | 2003-11-04 | 2003-10-04 | 2003-09-04 | 2003-08-04 | 2003-07-04 | 2003-06-04 | 2003-05-04 | 2003-04-04 | 2003-03-04 | 2003-02-04 | 2003-01-04 | 2002-12-04 | 2002-11-04 | 2002-10-04 | 2002-09-04 | 2002-08-04 | 2002-07-04 | 2002-06-04 | 2002-05-04 | 2002-04-04 | 2002-03-04 | 2002-02-04 | 2002-01-04 | 2001-12-04 | 2001-11-04 | 2001-10-04 | 2001-09-04 | 2001-08-04 | 2001-07-04 | 2001-06-04 | 2001-05-04 | 2001-04-04 | 2001-03-04 | 2001-02-04 | 2001-01-04 | 2000-12-04 | 2000-11-04 | 2000-10-04 | 2000-09-04 | 2000-08-04 | 2000-07-04 | 2000-06-04 | 2000-05-04 | 2000-04-04 | 2000-03-04 | 2000-02-04 | 2000-01-04 | 1999-12-04

Key: Value:

Key: Value:

MESSAGE
DATE 2010-02-09
FROM Ruben Safir
SUBJECT Subject: [NYLXS - HANGOUT] Security Alert
SUSE Security Announcement

Package: kernel
Announcement ID: SUSE-SA:2010:010
Date: Mon, 08 Feb 2010 16:00:00 +0000
Affected Products: openSUSE 11.2
Vulnerability Type: remote denial of service
CVSS v2 Base Score: 6.8 (AV:A/AC:L/Au:N/C:N/I:P/A:C)
SUSE Default Package: yes
Cross-References: CVE-2009-3939, CVE-2009-4141,
CVE-2009-4536
CVE-2009-4538, CVE-2010-0003,
CVE-2010-0006
CVE-2010-0007, CVE-2010-0299

Content of This Advisory:
1) Security Vulnerability Resolved:
Linux kernel security update
Problem Description
2) Solution or Work-Around
3) Special Instructions and Notes
4) Package Location and Checksums
5) Pending Vulnerabilities, Solutions, and Work-Arounds:
See SUSE Security Summary Report.
6) Authenticity Verification and Additional Information

______________________________________________________________________________

1) Problem Description and Brief Discussion

This update of the openSUSE 11.2 kernel brings the kernel to version
2.6.31.12 and contains a lot of bug and security fixes.

CVE-2010-0299: The permission of the devtmpfs root directory
was incorrectly 1777 (instead of 755). If it was used, local
attackers could escalate privileges.
(openSUSE 11.2 does not use this filesystem by default).

CVE-2009-3939: The poll_mode_io file for the megaraid_sas driver in
the Linux kernel 2.6.31.6 and earlier has world-writable permissions,
which allows local users to change the I/O mode of the driver by
modifying this file.

CVE-2010-0007: ebtables was lacking a CAP_NET_ADMIN check, making
it possible for local unprivileged attackers to modify the network
bridge management.

CVE-2010-0003: An information leakage on fatal signals on x86_64
machines was fixed.

CVE-2009-4141: A race condition in fasync handling could be used by
local attackers to crash the machine or potentially execute code.

CVE-2010-0006: The ipv6_hop_jumbo function in net/ipv6/exthdrs.c in
the Linux kernel before 2.6.32.4, when network namespaces are
enabled,
allows remote attackers to cause a denial of service (NULL pointer
dereference) via an invalid IPv6 jumbogram.

CVE-2009-4536: drivers/net/e1000/e1000_main.c in the e1000 driver in
the Linux kernel 2.6.32.3 and earlier handles Ethernet frames that
exceed the MTU by processing certain trailing payload data as if it
were a complete frame, which allows remote attackers to bypass packet
filters via a large packet with a crafted payload.

CVE-2009-4538: drivers/net/e1000e/netdev.c in the e1000e driver in
the Linux kernel 2.6.32.3 and earlier does not properly check the
size of an Ethernet frame that exceeds the MTU, which allows remote
attackers to have an unspecified impact via crafted packets.

2) Solution or Work-Around

There is no known workaround, please install the update packages.

3) Special Instructions and Notes

Please reboot the machine after installing the update.

4) Package Location and Checksums

The preferred method for installing security updates is to use the
YaST
Online Update (YOU) tool. YOU detects which updates are required and
automatically performs the necessary steps to verify and install
them.
Alternatively, download the update packages for your distribution
manually
and verify their integrity by the methods listed in Section 6 of this
announcement. Then install the packages using the command

rpm -Fhv

to apply the update, replacing with the filename of the
downloaded RPM package.


x86 Platform:

openSUSE 11.2:
http://download.opensuse.org/debug/update/11.2/rpm/i586/kernel-debug-debuginfo-2.6.31.12-0.1.1.i586.rpm
http://download.opensuse.org/debug/update/11.2/rpm/i586/kernel-debug-debugsource-2.6.31.12-0.1.1.i586.rpm
http://download.opensuse.org/debug/update/11.2/rpm/i586/kernel-debug-devel-debuginfo-2.6.31.12-0.1.1.i586.rpm
http://download.opensuse.org/debug/update/11.2/rpm/i586/kernel-default-debuginfo-2.6.31.12-0.1.1.i586.rpm
http://download.opensuse.org/debug/update/11.2/rpm/i586/kernel-default-debugsource-2.6.31.12-0.1.1.i586.rpm
http://download.opensuse.org/debug/update/11.2/rpm/i586/kernel-default-devel-debuginfo-2.6.31.12-0.1.1.i586.rpm
http://download.opensuse.org/debug/update/11.2/rpm/i586/kernel-desktop-base-debuginfo-2.6.31.12-0.1.1.i586.rpm
http://download.opensuse.org/debug/update/11.2/rpm/i586/kernel-desktop-debuginfo-2.6.31.12-0.1.1.i586.rpm
http://download.opensuse.org/debug/update/11.2/rpm/i586/kernel-desktop-debugsource-2.6.31.12-0.1.1.i586.rpm
http://download.opensuse.org/debug/update/11.2/rpm/i586/kernel-pae-debuginfo-2.6.31.12-0.1.1.i586.rpm
http://download.opensuse.org/debug/update/11.2/rpm/i586/kernel-pae-debugsource-2.6.31.12-0.1.1.i586.rpm
http://download.opensuse.org/debug/update/11.2/rpm/i586/kernel-pae-devel-debuginfo-2.6.31.12-0.1.1.i586.rpm
http://download.opensuse.org/debug/update/11.2/rpm/i586/kernel-trace-base-debuginfo-2.6.31.12-0.1.1.i586.rpm
http://download.opensuse.org/debug/update/11.2/rpm/i586/kernel-trace-debuginfo-2.6.31.12-0.1.1.i586.rpm
http://download.opensuse.org/debug/update/11.2/rpm/i586/kernel-trace-debugsource-2.6.31.12-0.1.1.i586.rpm
http://download.opensuse.org/debug/update/11.2/rpm/i586/kernel-vanilla-base-debuginfo-2.6.31.12-0.1.1.i586.rpm
http://download.opensuse.org/debug/update/11.2/rpm/i586/kernel-vanilla-debuginfo-2.6.31.12-0.1.1.i586.rpm
http://download.opensuse.org/debug/update/11.2/rpm/i586/kernel-vanilla-debugsource-2.6.31.12-0.1.1.i586.rpm
http://download.opensuse.org/debug/update/11.2/rpm/i586/kernel-xen-debuginfo-2.6.31.12-0.1.1.i586.rpm
http://download.opensuse.org/debug/update/11.2/rpm/i586/kernel-xen-debugsource-2.6.31.12-0.1.1.i586.rpm
http://download.opensuse.org/debug/update/11.2/rpm/i586/kernel-xen-devel-debuginfo-2.6.31.12-0.1.1.i586.rpm
http://download.opensuse.org/update/11.2/rpm/i586/kernel-debug-2.6.31.12-0.1.1.i586.rpm
http://download.opensuse.org/update/11.2/rpm/i586/kernel-debug-base-2.6.31.12-0.1.1.i586.rpm
http://download.opensuse.org/update/11.2/rpm/i586/kernel-debug-devel-2.6.31.12-0.1.1.i586.rpm
http://download.opensuse.org/update/11.2/rpm/i586/kernel-default-2.6.31.12-0.1.1.i586.rpm
http://download.opensuse.org/update/11.2/rpm/i586/kernel-default-base-2.6.31.12-0.1.1.i586.rpm
http://download.opensuse.org/update/11.2/rpm/i586/kernel-default-devel-2.6.31.12-0.1.1.i586.rpm
http://download.opensuse.org/update/11.2/rpm/i586/kernel-desktop-2.6.31.12-0.1.1.i586.rpm
http://download.opensuse.org/update/11.2/rpm/i586/kernel-desktop-base-2.6.31.12-0.1.1.i586.rpm
http://download.opensuse.org/update/11.2/rpm/i586/kernel-desktop-devel-2.6.31.12-0.1.1.i586.rpm
http://download.opensuse.org/update/11.2/rpm/i586/kernel-pae-2.6.31.12-0.1.1.i586.rpm
http://download.opensuse.org/update/11.2/rpm/i586/kernel-pae-base-2.6.31.12-0.1.1.i586.rpm
http://download.opensuse.org/update/11.2/rpm/i586/kernel-pae-devel-2.6.31.12-0.1.1.i586.rpm
http://download.opensuse.org/update/11.2/rpm/i586/kernel-syms-2.6.31.12-0.1.1.i586.rpm
http://download.opensuse.org/update/11.2/rpm/i586/kernel-trace-2.6.31.12-0.1.1.i586.rpm
http://download.opensuse.org/update/11.2/rpm/i586/kernel-trace-base-2.6.31.12-0.1.1.i586.rpm
http://download.opensuse.org/update/11.2/rpm/i586/kernel-trace-devel-2.6.31.12-0.1.1.i586.rpm
http://download.opensuse.org/update/11.2/rpm/i586/kernel-vanilla-2.6.31.12-0.1.1.i586.rpm
http://download.opensuse.org/update/11.2/rpm/i586/kernel-vanilla-base-2.6.31.12-0.1.1.i586.rpm
http://download.opensuse.org/update/11.2/rpm/i586/kernel-vanilla-devel-2.6.31.12-0.1.1.i586.rpm
http://download.opensuse.org/update/11.2/rpm/i586/kernel-xen-2.6.31.12-0.1.1.i586.rpm
http://download.opensuse.org/update/11.2/rpm/i586/kernel-xen-base-2.6.31.12-0.1.1.i586.rpm
http://download.opensuse.org/update/11.2/rpm/i586/kernel-xen-devel-2.6.31.12-0.1.1.i586.rpm
http://download.opensuse.org/update/11.2/rpm/i586/preload-kmp-default-1.1_2.6.31.12_0.1-6.9.12.i586.rpm
http://download.opensuse.org/update/11.2/rpm/i586/preload-kmp-desktop-1.1_2.6.31.12_0.1-6.9.12.i586.rpm

Platform Independent:

openSUSE 11.2:
http://download.opensuse.org/update/11.2/rpm/noarch/kernel-source-2.6.31.12-0.1.1.noarch.rpm
http://download.opensuse.org/update/11.2/rpm/noarch/kernel-source-vanilla-2.6.31.12-0.1.1.noarch.rpm

x86-64 Platform:

openSUSE 11.2:
http://download.opensuse.org/debug/update/11.2/rpm/x86_64/kernel-debug-debuginfo-2.6.31.12-0.1.1.x86_64.rpm
http://download.opensuse.org/debug/update/11.2/rpm/x86_64/kernel-debug-debugsource-2.6.31.12-0.1.1.x86_64.rpm
http://download.opensuse.org/debug/update/11.2/rpm/x86_64/kernel-debug-devel-debuginfo-2.6.31.12-0.1.1.x86_64.rpm
http://download.opensuse.org/debug/update/11.2/rpm/x86_64/kernel-default-debuginfo-2.6.31.12-0.1.1.x86_64.rpm
http://download.opensuse.org/debug/update/11.2/rpm/x86_64/kernel-default-debugsource-2.6.31.12-0.1.1.x86_64.rpm
http://download.opensuse.org/debug/update/11.2/rpm/x86_64/kernel-default-devel-debuginfo-2.6.31.12-0.1.1.x86_64.rpm
http://download.opensuse.org/debug/update/11.2/rpm/x86_64/kernel-desktop-base-debuginfo-2.6.31.12-0.1.1.x86_64.rpm
http://download.opensuse.org/debug/update/11.2/rpm/x86_64/kernel-desktop-debuginfo-2.6.31.12-0.1.1.x86_64.rpm
http://download.opensuse.org/debug/update/11.2/rpm/x86_64/kernel-desktop-debugsource-2.6.31.12-0.1.1.x86_64.rpm
http://download.opensuse.org/debug/update/11.2/rpm/x86_64/kernel-trace-base-debuginfo-2.6.31.12-0.1.1.x86_64.rpm
http://download.opensuse.org/debug/update/11.2/rpm/x86_64/kernel-trace-debuginfo-2.6.31.12-0.1.1.x86_64.rpm
http://download.opensuse.org/debug/update/11.2/rpm/x86_64/kernel-trace-debugsource-2.6.31.12-0.1.1.x86_64.rpm
http://download.opensuse.org/debug/update/11.2/rpm/x86_64/kernel-vanilla-base-debuginfo-2.6.31.12-0.1.1.x86_64.rpm
http://download.opensuse.org/debug/update/11.2/rpm/x86_64/kernel-vanilla-debuginfo-2.6.31.12-0.1.1.x86_64.rpm
http://download.opensuse.org/debug/update/11.2/rpm/x86_64/kernel-vanilla-debugsource-2.6.31.12-0.1.1.x86_64.rpm
http://download.opensuse.org/debug/update/11.2/rpm/x86_64/kernel-xen-debuginfo-2.6.31.12-0.1.1.x86_64.rpm
http://download.opensuse.org/debug/update/11.2/rpm/x86_64/kernel-xen-debugsource-2.6.31.12-0.1.1.x86_64.rpm
http://download.opensuse.org/debug/update/11.2/rpm/x86_64/kernel-xen-devel-debuginfo-2.6.31.12-0.1.1.x86_64.rpm
http://download.opensuse.org/update/11.2/rpm/x86_64/kernel-debug-2.6.31.12-0.1.1.x86_64.rpm
http://download.opensuse.org/update/11.2/rpm/x86_64/kernel-debug-base-2.6.31.12-0.1.1.x86_64.rpm
http://download.opensuse.org/update/11.2/rpm/x86_64/kernel-debug-devel-2.6.31.12-0.1.1.x86_64.rpm
http://download.opensuse.org/update/11.2/rpm/x86_64/kernel-default-2.6.31.12-0.1.1.x86_64.rpm
http://download.opensuse.org/update/11.2/rpm/x86_64/kernel-default-base-2.6.31.12-0.1.1.x86_64.rpm
http://download.opensuse.org/update/11.2/rpm/x86_64/kernel-default-devel-2.6.31.12-0.1.1.x86_64.rpm
http://download.opensuse.org/update/11.2/rpm/x86_64/kernel-desktop-2.6.31.12-0.1.1.x86_64.rpm
http://download.opensuse.org/update/11.2/rpm/x86_64/kernel-desktop-base-2.6.31.12-0.1.1.x86_64.rpm
http://download.opensuse.org/update/11.2/rpm/x86_64/kernel-desktop-devel-2.6.31.12-0.1.1.x86_64.rpm
http://download.opensuse.org/update/11.2/rpm/x86_64/kernel-syms-2.6.31.12-0.1.1.x86_64.rpm
http://download.opensuse.org/update/11.2/rpm/x86_64/kernel-trace-2.6.31.12-0.1.1.x86_64.rpm
http://download.opensuse.org/update/11.2/rpm/x86_64/kernel-trace-base-2.6.31.12-0.1.1.x86_64.rpm
http://download.opensuse.org/update/11.2/rpm/x86_64/kernel-trace-devel-2.6.31.12-0.1.1.x86_64.rpm
http://download.opensuse.org/update/11.2/rpm/x86_64/kernel-vanilla-2.6.31.12-0.1.1.x86_64.rpm
http://download.opensuse.org/update/11.2/rpm/x86_64/kernel-vanilla-base-2.6.31.12-0.1.1.x86_64.rpm
http://download.opensuse.org/update/11.2/rpm/x86_64/kernel-vanilla-devel-2.6.31.12-0.1.1.x86_64.rpm
http://download.opensuse.org/update/11.2/rpm/x86_64/kernel-xen-2.6.31.12-0.1.1.x86_64.rpm
http://download.opensuse.org/update/11.2/rpm/x86_64/kernel-xen-base-2.6.31.12-0.1.1.x86_64.rpm
http://download.opensuse.org/update/11.2/rpm/x86_64/kernel-xen-devel-2.6.31.12-0.1.1.x86_64.rpm
http://download.opensuse.org/update/11.2/rpm/x86_64/preload-kmp-default-1.1_2.6.31.12_0.1-6.9.12.x86_64.rpm
http://download.opensuse.org/update/11.2/rpm/x86_64/preload-kmp-desktop-1.1_2.6.31.12_0.1-6.9.12.x86_64.rpm

Sources:

openSUSE 11.2:
http://download.opensuse.org/update/11.2/rpm/src/kernel-debug-2.6.31.12-0.1.1.nosrc.rpm
http://download.opensuse.org/update/11.2/rpm/src/kernel-default-2.6.31.12-0.1.1.nosrc.rpm
http://download.opensuse.org/update/11.2/rpm/src/kernel-desktop-2.6.31.12-0.1.1.nosrc.rpm
http://download.opensuse.org/update/11.2/rpm/src/kernel-pae-2.6.31.12-0.1.1.nosrc.rpm
http://download.opensuse.org/update/11.2/rpm/src/kernel-source-2.6.31.12-0.1.1.src.rpm
http://download.opensuse.org/update/11.2/rpm/src/kernel-syms-2.6.31.12-0.1.1.src.rpm
http://download.opensuse.org/update/11.2/rpm/src/kernel-trace-2.6.31.12-0.1.1.nosrc.rpm
http://download.opensuse.org/update/11.2/rpm/src/kernel-vanilla-2.6.31.12-0.1.1.nosrc.rpm
http://download.opensuse.org/update/11.2/rpm/src/kernel-xen-2.6.31.12-0.1.1.nosrc.rpm

______________________________________________________________________________

5) Pending Vulnerabilities, Solutions, and Work-Arounds:

See SUSE Security Summary Report.
______________________________________________________________________________

6) Authenticity Verification and Additional Information

- Announcement authenticity verification:

SUSE security announcements are published via mailing lists and on
Web
sites. The authenticity and integrity of a SUSE security
announcement is
guaranteed by a cryptographic signature in each announcement. All
SUSE
security announcements are published with a valid signature.

To verify the signature of the announcement, save it as text into a
file
and run the command

gpg --verify

replacing with the name of the file where you saved the
announcement. The output for a valid signature looks like:

gpg: Signature made using RSA key ID 3D25D3D9
gpg: Good signature from "SuSE Security Team "

where is replaced by the date the document was signed.

If the security team's key is not contained in your key ring, you
can
import it from the first installation CD. To import the key, use the
command

gpg --import gpg-pubkey-3d25d3d9-36e12d04.asc

- Package authenticity verification:

SUSE update packages are available on many mirror FTP servers all
over the
world. While this service is considered valuable and important to
the free
and open source software community, the authenticity and the
integrity of
a package needs to be verified to ensure that it has not been
tampered
with.

The internal rpm package signatures provide an easy way to verify
the
authenticity of an RPM package. Use the command

rpm -v --checksig

to verify the signature of the package, replacing with the
filename of the RPM package downloaded. The package is unmodified if
it
contains a valid signature from build-at-suse.de with the key ID
9C800ACA.

This key is automatically imported into the RPM database (on
RPMv4-based distributions) and the gpg key ring of 'root' during
installation. You can also find it on the first installation CD and
at
the end of this announcement.

- SUSE runs two security mailing lists to which any interested party
may
subscribe:

opensuse-security-at-opensuse.org
- General Linux and SUSE security discussion.
All SUSE security announcements are sent to this list.
To subscribe, send an e-mail to
.

opensuse-security-announce-at-opensuse.org
- SUSE's announce-only mailing list.
Only SUSE's security announcements are sent to this list.
To subscribe, send an e-mail to
.

=====================================================================
SUSE's security contact is or .
The public key is listed below.
=====================================================================
______________________________________________________________________________

The information in this advisory may be distributed or reproduced,
provided that the advisory is not modified in any way. In
particular, the
clear text signature should show proof of the authenticity of the
text.

SUSE Linux Products GmbH provides no warranties of any kind
whatsoever
with respect to the information contained in this security advisory.



  1. 2010-02-01 Ruben Safir <mrbrklyn-at-panix.com> Subject: [NYLXS - HANGOUT] Michael George
  2. 2010-02-01 Ruben Safir <mrbrklyn-at-panix.com> Subject: [NYLXS - HANGOUT] sddsfs
  3. 2010-02-01 Ruben Safir <mrbrklyn-at-panix.com> Subject: [NYLXS - HANGOUT] The end of the future
  4. 2010-02-01 Ruben Safir <mrbrklyn-at-panix.com> Subject: [NYLXS - HANGOUT] The end of the future
  5. 2010-02-02 Ruben Safir <mrbrklyn-at-panix.com> Subject: [NYLXS - HANGOUT] C++ Workshop - Introduction
  6. 2010-02-02 Ruben Safir <mrbrklyn-at-panix.com> Subject: [NYLXS - HANGOUT] C++ Workshop I datatypes cont..
  7. 2010-02-02 Ruben Safir <mrbrklyn-at-panix.com> Subject: [NYLXS - HANGOUT] C++ Workshop - Introduction
  8. 2010-02-02 Ruben Safir <mrbrklyn-at-panix.com> Subject: [NYLXS - HANGOUT] C++ Workshop I datatypes cont..
  9. 2010-02-02 From: "Beau Gould" <bg-at-capitalmarketsp.com> Subject: [NYLXS - HANGOUT] [JOB] Operations Manager, NYC | 120k+
  10. 2010-02-02 Ruben Safir <mrbrklyn-at-panix.com> Re: [NYLXS - HANGOUT] [JOB] Operations Manager, NYC | 120k+
  11. 2010-02-02 From: "Beau Gould" <bg-at-capitalmarketsp.com> RE: [NYLXS - HANGOUT] [JOB] Operations Manager, NYC | 120k+
  12. 2010-02-02 Ruben Safir <mrbrklyn-at-panix.com> Subject: [NYLXS - HANGOUT] C++ Workshop I datatypes cont..
  13. 2010-02-02 Ruben Safir <mrbrklyn-at-panix.com> Subject: [NYLXS - HANGOUT] C++ Workshop I datatypes cont..
  14. 2010-02-02 From: "Stan Davenport" <stan-at-etrtechcenter.com> RE: [NYLXS - HANGOUT] [JOB] Operations Manager, NYC | 120k+
  15. 2010-02-03 Ruben Safir <mrbrklyn-at-panix.com> Re: [NYLXS - HANGOUT] C++ Workshop I datatypes cont..
  16. 2010-02-05 Ruben Safir <mrbrklyn-at-panix.com> Subject: [NYLXS - HANGOUT] Tech Nite
  17. 2010-02-05 Ruben Safir <mrbrklyn-at-panix.com> Subject: [NYLXS - HANGOUT] C++ Workshop I datatypes cont..
  18. 2010-02-05 Ruben Safir <mrbrklyn-at-panix.com> Subject: [NYLXS - HANGOUT] C++ Workshop I datatypes cont..
  19. 2010-02-05 Michael L Richardson <mlr52-at-michaellrichardson.com> Subject: [NYLXS - HANGOUT] Ruben
  20. 2010-02-05 Ruben Safir <mrbrklyn-at-panix.com> Re: [NYLXS - HANGOUT] Ruben
  21. 2010-02-05 Paul Charles Leddy <pcleddy-at-gmail.com> Re: [NYLXS - HANGOUT] The new mail server
  22. 2010-02-06 Kevin Mark <kevin.mark-at-verizon.net> Re: [NYLXS - HANGOUT] Ruben
  23. 2010-02-06 Michael L Richardson <mlr52-at-michaellrichardson.com> Re: [NYLXS - HANGOUT] Ruben
  24. 2010-02-06 Ruben Safir <mrbrklyn-at-panix.com> Subject: [NYLXS - HANGOUT] Worlds most secure Operating System
  25. 2010-02-06 Ruben Safir <mrbrklyn-at-panix.com> Subject: [NYLXS - HANGOUT] They are OUT OF PRINT stupid..
  26. 2010-02-07 Kevin Mark <kevin.mark-at-verizon.net> Re: [NYLXS - HANGOUT] Ruben
  27. 2010-02-07 Kevin Mark <kevin.mark-at-verizon.net> Re: [NYLXS - HANGOUT] Ruben
  28. 2010-02-07 Michael L Richardson <mlr52-at-michaellrichardson.com> Re: [NYLXS - HANGOUT] Ruben
  29. 2010-02-07 Paul Robert Marino <prmarino1-at-gmail.com> Re: [NYLXS - HANGOUT] Ruben
  30. 2010-02-07 Michael L Richardson <mlr52-at-michaellrichardson.com> Re: [NYLXS - HANGOUT] Ruben
  31. 2010-02-08 Ruben Safir <mrbrklyn-at-panix.com> Subject: [NYLXS - HANGOUT] Copyright Criminals on PBS
  32. 2010-02-08 Ruben Safir <mrbrklyn-at-panix.com> Subject: [NYLXS - HANGOUT] C++ Workshop _ Syntax Basics
  33. 2010-02-09 Ruben Safir <mrbrklyn-at-panix.com> Subject: [NYLXS - HANGOUT] Copyright Wars in Europe
  34. 2010-02-09 Ruben Safir <mrbrklyn-at-panix.com> Re: [NYLXS - HANGOUT] Copyright Wars in Europe Part II
  35. 2010-02-09 Ruben Safir <mrbrklyn-at-panix.com> Subject: [NYLXS - HANGOUT] Security Alert
  36. 2010-02-09 Ruben Safir <mrbrklyn-at-panix.com> Subject: [NYLXS - HANGOUT] C Code for Android
  37. 2010-02-09 Ruben Safir <mrbrklyn-at-panix.com> Re: [NYLXS - HANGOUT] C++ Workshop _ Syntax Basics
  38. 2010-02-10 Ruben Safir <mrbrklyn-at-panix.com> Subject: [NYLXS - HANGOUT] C++ Workshop _ Syntax Basics
  39. 2010-02-11 Ruben Safir <mrbrklyn-at-panix.com> Subject: [NYLXS - HANGOUT] Tech Night This Week
  40. 2010-02-11 Ruben Safir <mrbrklyn-at-panix.com> Subject: [NYLXS - HANGOUT] Downtown Brooklyn Tech Center
  41. 2010-02-12 Paul Charles Leddy <pcleddy-at-gmail.com> Re: [NYLXS - HANGOUT] Ruben
  42. 2010-02-12 Ruben Safir <mrbrklyn-at-panix.com> Re: [NYLXS - HANGOUT] Tech Night This Week
  43. 2010-02-12 From: "Beau Gould" <bg-at-capitalmarketsp.com> Subject: [NYLXS - HANGOUT] [JOB] LAMP Developer, NYC | 90-100k
  44. 2010-02-12 From: "Beau Gould" <bg-at-capitalmarketsp.com> Subject: [NYLXS - HANGOUT] Hi Ruben
  45. 2010-02-12 Ruben Safir <mrbrklyn-at-panix.com> Re: [NYLXS - HANGOUT] Hi Ruben
  46. 2010-02-12 Ruben Safir <mrbrklyn-at-panix.com> Re: [NYLXS - HANGOUT] Hi Ruben
  47. 2010-02-12 From: "Beau Gould" <bg-at-capitalmarketsp.com> RE: [NYLXS - HANGOUT] Hi Ruben
  48. 2010-02-12 From: "Beau Gould" <bg-at-capitalmarketsp.com> RE: [NYLXS - HANGOUT] Hi Ruben
  49. 2010-02-12 Kevin Mark <kevin.mark-at-verizon.net> Re: [NYLXS - HANGOUT] Downtown Brooklyn Tech Center
  50. 2010-02-13 Ruben Safir <mrbrklyn-at-panix.com> Subject: [NYLXS - HANGOUT] C++ Workshop - side discussing on C++ variable declarations
  51. 2010-02-13 Ruben Safir <mrbrklyn-at-panix.com> Subject: [NYLXS - HANGOUT] C++ Workshop - side discussing on C++ variable declarations
  52. 2010-02-13 Ruben Safir <mrbrklyn-at-panix.com> Subject: [NYLXS - HANGOUT] C++ Workshop - side discussing on C++ variable declarations
  53. 2010-02-13 Ruben Safir <mrbrklyn-at-panix.com> Subject: [NYLXS - HANGOUT] C++ Workshop - side discussing on C++ variable declarations
  54. 2010-02-13 Ruben Safir <mrbrklyn-at-panix.com> Subject: [NYLXS - HANGOUT] C++ Workshop - side discussing on C++ variable declarations
  55. 2010-02-13 Ruben Safir <mrbrklyn-at-panix.com> Subject: [NYLXS - HANGOUT] C++ Workshop - side discussing on C++ variable declarations
  56. 2010-02-13 Ruben Safir <mrbrklyn-at-panix.com> Subject: [NYLXS - HANGOUT] C++ Workshop - side discussing on C++ variable declarations
  57. 2010-02-13 Ruben Safir <mrbrklyn-at-panix.com> Subject: [NYLXS - HANGOUT] C++ Workshop - side discussing on C++ variable declarations
  58. 2010-02-13 Contrarian <adrba-at-nyct.net> Re: [NYLXS - HANGOUT] Downtown Brooklyn Tech Center
  59. 2010-02-13 Contrarian <adrba-at-nyct.net> Re: [NYLXS - HANGOUT] Downtown Brooklyn Tech Center
  60. 2010-02-14 Ruben Safir <mrbrklyn-at-panix.com> Re: [NYLXS - HANGOUT] C++ Workshop _ Syntax Basics
  61. 2010-02-15 From: "Beau Gould" <bg-at-capitalmarketsp.com> Subject: [NYLXS - HANGOUT] A good friend of mine is looking for a job
  62. 2010-02-15 Ron <ron-at-vnetworx.net> Subject: [NYLXS - HANGOUT] NYLUG Workshop / Hacking Society, (Smalltalk, C++, Python) TOMORROW February 16 6:00PM-8:00PM
  63. 2010-02-15 Ron Guerin <ron-at-vnetworx.net> Re: [NYLXS - HANGOUT] NYLUG Workshop / Hacking Society, (Smalltalk,
  64. 2010-02-15 Ruben Safir <mrbrklyn-at-panix.com> Re: [NYLXS - HANGOUT] C++ Workshop _ Syntax Basics
  65. 2010-02-16 Ron Guerin <ron-at-vnetworx.net> Subject: [NYLXS - HANGOUT] [Fwd: [nylug-announce] NYLUG Presents: 2/17 -at- 6:30PM Luke Kanies
  66. 2010-02-16 Ruben Safir <mrbrklyn-at-panix.com> Subject: [NYLXS - HANGOUT] Re: Passing Tradition in the digital age
  67. 2010-02-16 Ruben Safir <mrbrklyn-at-panix.com> Subject: [NYLXS - HANGOUT] Fwd: Senior Linux Engineer - Job Opportunity for NYLXS
  68. 2010-02-16 Ruben Safir <mrbrklyn-at-panix.com> Subject: [NYLXS - HANGOUT] Catching up to me
  69. 2010-02-16 Ron Guerin <ron-at-vnetworx.net> Subject: [NYLXS - HANGOUT] NYLUG Workshop / Hacking Society, (Smalltalk, C++, Python) TODAY February 16 6:00PM-8:00PM
  70. 2010-02-16 From: "Beau Gould" <bg-at-capitalmarketsp.com> Subject: [NYLXS - HANGOUT] [JOB] 30 C++/Unix Programmers, NYC | to 200k or to $700/day
  71. 2010-02-16 Ruben Safir <mrbrklyn-at-panix.com> Subject: [NYLXS - HANGOUT] Fwd: [Linux.com.users] Ultimate Linux Guru Update
  72. 2010-02-16 Ruben Safir <mrbrklyn-at-panix.com> Re: [NYLXS - HANGOUT] [JOB] 30 C++/Unix Programmers, NYC | to 200k
  73. 2010-02-16 From: "Beau Gould" <bg-at-capitalmarketsp.com> RE: [NYLXS - HANGOUT] [JOB] 30 C++/Unix Programmers, NYC | to 200kor to $700/day
  74. 2010-02-16 Ruben Safir <mrbrklyn-at-panix.com> Re: [NYLXS - HANGOUT] [JOB] 30 C++/Unix Programmers, NYC | to
  75. 2010-02-16 Ruben Safir <mrbrklyn-at-panix.com> Subject: [NYLXS - HANGOUT] Amy
  76. 2010-02-16 Ruben Safir <mrbrklyn-at-panix.com> Re: [NYLXS - HANGOUT] Amy
  77. 2010-02-17 Ruben Safir <mrbrklyn-at-panix.com> Subject: [NYLXS - HANGOUT] Technight - Sunday at 6:00PM till --- when ever
  78. 2010-02-17 Ron Guerin <ron-at-vnetworx.net> Subject: [NYLXS - HANGOUT] Streaming LIVE: Luke Kanies on The Future of Puppet
  79. 2010-02-18 Ruben Safir <mrbrklyn-at-panix.com> Subject: [NYLXS - HANGOUT] Fwd: TM Insider: HAIR: The Best Musical of 2009 for just $55
  80. 2010-02-19 Ruben Safir <mrbrklyn-at-panix.com> Subject: [NYLXS - HANGOUT] Technight - Hacking and Ice Cast - this Sunday Evening
  81. 2010-02-19 Ruben Safir <mrbrklyn-at-panix.com> Subject: [NYLXS - HANGOUT] C++ Workshop _ Syntax Basics
  82. 2010-02-19 Ruben Safir <mrbrklyn-at-panix.com> Subject: [NYLXS - HANGOUT] C Programming and Modern Approach question
  83. 2010-02-19 Ron Guerin <ron-at-vnetworx.net> Subject: [NYLXS - HANGOUT] (live streaming) Free Software Round Table Saturday 2/20 at 10 PM
  84. 2010-02-19 Elfen Magix <elfen_magix-at-yahoo.com> Re: [NYLXS - HANGOUT] Technight - Hacking and Ice Cast - this Sunday Evening
  85. 2010-02-20 Ruben Safir <mrbrklyn-at-panix.com> Subject: [NYLXS - HANGOUT] MS/Open SOurce Dejavu all over again
  86. 2010-02-20 Ron Guerin <ron-at-vnetworx.net> Subject: [NYLXS - HANGOUT] (live streaming) Free Software Round TableSaturday in ONE HOUR (10
  87. 2010-02-20 Ruben Safir <mrbrklyn-at-panix.com> Re: [NYLXS - HANGOUT] (live streaming) Free Software Round
  88. 2010-02-20 Ron Guerin <ron-at-vnetworx.net> Re: [NYLXS - HANGOUT] (live streaming) Free Software Round TableSaturday
  89. 2010-02-22 Ruben Safir <mrbrklyn-at-panix.com> Subject: [NYLXS - HANGOUT] [ruben-at-mrbrklyn.com: [knking-at-gsu.edu: Re: C Programming and Modern
  90. 2010-02-22 Ruben Safir <mrbrklyn-at-panix.com> Subject: [NYLXS - HANGOUT] IceCast Server
  91. 2010-02-23 Ruben Safir <mrbrklyn-at-panix.com> Subject: [NYLXS - HANGOUT] DSL Router Virus
  92. 2010-02-24 Ruben Safir <ruben-at-mrbrklyn.com> Subject: [NYLXS - HANGOUT] this should not get through
  93. 2010-02-24 Ruben Safir <ruben-at-mrbrklyn.com> Re: [NYLXS - HANGOUT] this should not get through
  94. 2010-02-24 Ruben Safir <ruben-at-mrbrklyn.com> Re: [NYLXS - HANGOUT] this should not get through
  95. 2010-02-24 Ruben Safir <mrbrklyn-at-panix.com> Subject: [NYLXS - HANGOUT] The Only significant Issue in the Healthcare bill
  96. 2010-02-24 Ruben Safir <mrbrklyn-at-panix.com> Re: [NYLXS - HANGOUT] The Only significant Issue in the Healthcare
  97. 2010-02-24 Elfen Magix <elfen_magix-at-yahoo.com> Re: [NYLXS - HANGOUT] this should not get through
  98. 2010-02-24 Ruben Safir <mrbrklyn-at-panix.com> Re: [NYLXS - HANGOUT] this should not get through
  99. 2010-02-25 Ron Guerin <ron-at-vnetworx.net> Re: [NYLXS - HANGOUT] this should not get through
  100. 2010-02-25 Ruben Safir <mrbrklyn-at-panix.com> Re: [NYLXS - HANGOUT] this should not get through
  101. 2010-02-25 Ron Guerin <ron-at-vnetworx.net> Re: [NYLXS - HANGOUT] this should not get through
  102. 2010-02-25 Ruben Safir <mrbrklyn-at-panix.com> Re: [NYLXS - HANGOUT] this should not get through
  103. 2010-02-25 Ruben Safir <mrbrklyn-at-panix.com> Re: [NYLXS - HANGOUT] this should not get through
  104. 2010-02-26 Ruben Safir <mrbrklyn-at-panix.com> Subject: [NYLXS - HANGOUT] [FSF] Day Against DRM: May 4
  105. 2010-02-26 Ron Guerin <ron-at-vnetworx.net> Re: [NYLXS - HANGOUT] this should not get through
  106. 2010-02-28 Ruben Safir <mrbrklyn-at-panix.com> Subject: [NYLXS - HANGOUT] C++ Workshop _ Syntax Basics - Aggregate Data Types

NYLXS are Do'ers and the first step of Doing is Joining! Join NYLXS and make a difference in your community today!