Fixlet Site - PatchesforSUSELinuxEnterprise Current Version: 92 Published: Fri, 21 Dec 2007 22:48:28 GMT *************************************************************** Title: PATCH-11603 - Security update for lprng - SLES9 Severity: Fixlet ID: 1160301 Fixlet Link: http://support.novell.com/techcenter/psdb/cb9323a87dabd95c2f4e82547614295a.html Fixlet Description: There is a (small) memory leak in lpd which lets its memory usage grow a bit for each print job until the print system becomes unusable. Using lprng with a printcap provided via NIS/YP produced following error: "Init_tempfile: bad tempdir '/var/spool/lpd/%P'". This was caused by the function "Init_tempfile()", which tried to create tmpfiles in the spool directory, which was not expanded at this time. Patched version creates tmpfiles in tmpdir, when spooldir is not yet expanded. Everyone should update. Please see patch page for more detailed information. *************************************************************** Title: PATCH-11660 - Security update for sudo - SLES9 Severity: Fixlet ID: 1166001 Fixlet Link: http://support.novell.com/techcenter/psdb/01f6b9bc59b794985725f8e1e07d5843.html Fixlet Description: Permissions of file /etc/sudoers was changed from 0640 to 0440 for security reasons. (Fate #300934) Everybody using sudo should update. Please see patch page for more detailed information. *************************************************************** Title: PATCH-11717 - Security update for bind - SLES9 Severity: Fixlet ID: 1171701 Fixlet Link: http://support.novell.com/techcenter/psdb/5c5ee08252e92d17b4958c5a386285b6.html Fixlet Description: CVE-2007-2926, cryptographically weak query ids [RT #16915]. Applied fix extracted from 9.2.8-P1 version. version update to 9.3. x because ISC will no longer maintain version 9.2. x version update because of end of maintenance of bind 9.2.x plus a security fix Please see patch page for more detailed information. *************************************************************** Title: PATCH-12008 - Security update for Mozilla - SLES9 Severity: Fixlet ID: 1200801 Fixlet Link: http://support.novell.com/techcenter/psdb/cdc4a6a740cfce018bc8945da9156808.html Fixlet Description: Everyone using the Mozilla suite should install this update. Please see patch page for more detailed information.