June 2012 - openSUSE Security Announce

[security-announce] SUSE-SU-2012:0741-1: important: Security update for bind
by opensuse-security＠opensuse.org 14 Jun '12

14 Jun '12

SUSE Security Update: Security update for bind ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0741-1 Rating: important References: #765315 Cross-References: CVE-2012-1667 Affected Products: SUSE Linux Enterprise Software Development Kit 11 SP1 SUSE Linux Enterprise Server 11 SP1 for VMware SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Desktop 11 SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. It includes one version update. Description: The following issue has been fixed: * Records with zero length rdata field could have crashed named or disclose portions of memory to clients (CVE-2012-1667). Security Issue reference: * CVE-2012-1667 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1667 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11 SP1: zypper in -t patch sdksp1-bind-6388 - SUSE Linux Enterprise Server 11 SP1 for VMware: zypper in -t patch slessp1-bind-6388 - SUSE Linux Enterprise Server 11 SP1: zypper in -t patch slessp1-bind-6388 - SUSE Linux Enterprise Desktop 11 SP1: zypper in -t patch sledsp1-bind-6388 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11 SP1 (i586 ia64 ppc64 s390x x86_64) [New Version: 9.6ESVR7P1]: bind-devel-9.6ESVR7P1-0.2.5.1 - SUSE Linux Enterprise Software Development Kit 11 SP1 (ppc64) [New Version: 9.6ESVR7P1]: bind-devel-32bit-9.6ESVR7P1-0.2.5.1 - SUSE Linux Enterprise Server 11 SP1 for VMware (i586 x86_64) [New Version: 9.6ESVR7P1]: bind-9.6ESVR7P1-0.2.5.1 bind-chrootenv-9.6ESVR7P1-0.2.5.1 bind-doc-9.6ESVR7P1-0.2.5.1 bind-libs-9.6ESVR7P1-0.2.5.1 bind-utils-9.6ESVR7P1-0.2.5.1 - SUSE Linux Enterprise Server 11 SP1 for VMware (x86_64) [New Version: 9.6ESVR7P1]: bind-libs-32bit-9.6ESVR7P1-0.2.5.1 - SUSE Linux Enterprise Server 11 SP1 (i586 ia64 ppc64 s390x x86_64) [New Version: 9.6ESVR7P1]: bind-9.6ESVR7P1-0.2.5.1 bind-chrootenv-9.6ESVR7P1-0.2.5.1 bind-doc-9.6ESVR7P1-0.2.5.1 bind-libs-9.6ESVR7P1-0.2.5.1 bind-utils-9.6ESVR7P1-0.2.5.1 - SUSE Linux Enterprise Server 11 SP1 (ppc64 s390x x86_64) [New Version: 9.6ESVR7P1]: bind-libs-32bit-9.6ESVR7P1-0.2.5.1 - SUSE Linux Enterprise Server 11 SP1 (ia64) [New Version: 9.6ESVR7P1]: bind-libs-x86-9.6ESVR7P1-0.2.5.1 - SUSE Linux Enterprise Desktop 11 SP1 (i586 x86_64) [New Version: 9.6ESVR7P1]: bind-libs-9.6ESVR7P1-0.2.5.1 bind-utils-9.6ESVR7P1-0.2.5.1 - SUSE Linux Enterprise Desktop 11 SP1 (x86_64) [New Version: 9.6ESVR7P1]: bind-libs-32bit-9.6ESVR7P1-0.2.5.1 References: http://support.novell.com/security/cve/CVE-2012-1667.html https://bugzilla.novell.com/765315 http://download.novell.com/patch/finder/?keywords=5a8f30aa7298342017cd0d068… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:0736-1: important: Security update for Linux kernel
by opensuse-security＠opensuse.org 14 Jun '12

14 Jun '12

SUSE Security Update: Security update for Linux kernel ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0736-1 Rating: important References: #671124 #671479 #683270 #693639 #713430 #718343 #721869 #722400 #723294 #724692 #724734 #726600 #729685 #730118 #730200 #731673 #732613 #733155 #734707 #737325 #737899 #740131 #742148 #742881 #744592 #745640 #745732 #745760 #745929 #746397 #746980 #747381 #749168 #750168 #750928 #751880 #752486 #754964 #758813 #760902 #761389 #762111 #764128 Cross-References: CVE-2011-2928 CVE-2011-4077 CVE-2011-4324 CVE-2011-4330 CVE-2012-2313 CVE-2012-2319 Affected Products: SUSE Linux Enterprise Server 10 SP4 SUSE Linux Enterprise Desktop 10 SP4 SLE SDK 10 SP4 ______________________________________________________________________________ An update that solves 6 vulnerabilities and has 37 fixes is now available. Description: This Linux kernel update fixes various security issues and bugs in the SUSE Linux Enterprise 10 SP4 kernel. The following security issues have been fixed: * CVE-2012-2319: A memory corruption when mounting a hfsplus filesystem was fixed that could be used by local attackers able to mount filesystem to crash the system. * CVE-2012-2313: The dl2k network card driver lacked permission handling for some ethtool ioctls, which could allow local attackers to start/stop the network card. * CVE-2011-2928: The befs_follow_linkl function in fs/befs/linuxvfs.c in the Linux kernel did not validate the lenght attribute of long symlinsk, which allowed local users to cause a denial of service (incorrect pointer dereference and Ooops) by accessing a long symlink on a malformed Be filesystem. * CVE-2011-4077: Fixed a memory corruption possibility in xfs readlink, which could be used by local attackers to crash the system or potentially execute code by mounting a prepared xfs filesystem image. * CVE-2011-4324: A BUG() error report in the nfs4xdr routines on a NFSv4 mount was fixed that could happen during mknod. * CVE-2011-4330: Mounting a corrupted hfs filesystem could lead to a buffer overflow. The following non-security issues have been fixed: * kernel: pfault task state race (bnc#764128,LTC#81724). * ap: Toleration for ap bus devices with device type 10 (bnc#761389). * hugetlb, numa: fix interleave mpol reference count (bnc#762111). * cciss: fixup kdump (bnc#730200). * kdump: Avoid allocating bootmem map over crash reserved region (bnc#749168, bnc#722400, bnc#742881). * qeth: Improve OSA Express 4 blkt defaults (bnc#754964,LTC#80325). * zcrypt: Fix parameter checking for ZSECSENDCPRB ioctl (bnc#754964,LTC#80378). * virtio: add names to virtqueue struct, mapping from devices to queues (bnc#742148). * virtio: find_vqs/del_vqs virtio operations (bnc#742148). * virtio_pci: optional MSI-X support (bnc#742148). * virtio_pci: split up vp_interrupt (bnc#742148). * knfsd: nfsd4: fix laundromat shutdown race (752556). * driver core: Check for valid device in bus_find_device() (bnc#729685). * VMware detection backport from mainline (bnc#671124, bnc#747381). * net: adding memory barrier to the poll and receive callbacks (bnc#746397 bnc#750928). * qla2xxx: drop reference before wait for completion (bnc#744592). * qla2xxx: drop reference before wait for completion (bnc#744592). * ixgbe driver sets all WOL flags upon initialization so that machine is powered on as soon at it is switched off (bnc#693639) * Properly release MSI(X) vector(s) when MSI(X) gets disabled (bnc#723294, bnc#721869). * scsi: Always retry internal target error (bnc#745640). * cxgb4: fix parent device access in netdev_printk (bnc#733155). * lcs: lcs offline failure (bnc#752486,LTC#79788). * qeth: add missing wake_up call (bnc#752486,LTC#79899). * NFSD: Fill in WCC data for REMOVE, RMDIR, MKNOD, and MKDIR (bnc#751880). * xenbus: Reject replies with payload > XENSTORE_PAYLOAD_MAX. * xenbus_dev: add missing error checks to watch handling. * blkfront: properly fail packet requests (bnc#745929). * blkback: failure to write "feature-barrier" node is non-fatal. * igb: Free MSI and MSIX interrupt vectors on driver remove or shutdown (bnc#723294). * igb: Fix for Alt MAC Address feature on 82580 and later devices (bnc#746980). * igb: Free MSI and MSIX interrupt vectors on driver remove or shutdown (bnc#723294). * cfq: Fix infinite loop in cfq_preempt_queue() (bnc#724692). * dasd: fix fixpoint divide exception in define_extent (bnc#750168,LTC#79125). * ctcmpc: use correct idal word list for ctcmpc (bnc#750168,LTC#79264). * patches.fixes/ext3-fix-reuse-of-freed-blocks.diff: Delete. Patch should not really be needed and apparently causes a performance regression (bnc#683270) * tcp: fix race condition leading to premature termination of sockets in FIN_WAIT2 state and connection being reset (bnc#745760) * kernel: console interrupts vs. panic (bnc#737325,LTC#77272). * af_iucv: remove IUCV-pathes completely (bnc#737325,LTC#78292). * qdio: wrong buffers-used counter for ERROR buffers (bnc#737325,LTC#78758). * ext3: Fix credit estimate for DIO allocation (bnc#745732). * jbd: validate sb->s_first in journal_get_superblock() (bnc#730118). * ocfs2: serialize unaligned aio (bnc#671479). * cifs: eliminate usage of kthread_stop for cifsd (bnc#718343). * virtio: fix wrong type used, resulting in truncated addresses in bigsmp kernel. (bnc#737899) * cciss: Adds simple mode functionality (bnc#730200). * blktap: fix locking (again) (bnc#724734). * block: Initial support for data-less (or empty) barrier support (bnc#734707 FATE#313126). * xen: Do not allow empty barriers to be passed down to queues that do not grok them (bnc#734707 FATE#313126). * linkwatch: Handle jiffies wrap-around (bnc#740131). Security Issue references: * CVE-2011-2928 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2928 > * CVE-2011-4077 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4077 > * CVE-2011-4324 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4324 > * CVE-2011-4330 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4330 > * CVE-2012-2319 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2319 > * CVE-2012-2313 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2313 > Indications: Everyone using the Linux Kernel on x86_64 architecture should update. Special Instructions and Notes: Please reboot the system after installing this update. Package List: - SUSE Linux Enterprise Server 10 SP4 (i586 ia64 ppc s390x x86_64): kernel-default-2.6.16.60-0.97.1 kernel-source-2.6.16.60-0.97.1 kernel-syms-2.6.16.60-0.97.1 - SUSE Linux Enterprise Server 10 SP4 (i586 ia64 x86_64): kernel-debug-2.6.16.60-0.97.1 - SUSE Linux Enterprise Server 10 SP4 (i586 ppc x86_64): kernel-kdump-2.6.16.60-0.97.1 - SUSE Linux Enterprise Server 10 SP4 (i586 x86_64): kernel-smp-2.6.16.60-0.97.1 kernel-xen-2.6.16.60-0.97.1 - SUSE Linux Enterprise Server 10 SP4 (i586): kernel-bigsmp-2.6.16.60-0.97.1 kernel-kdumppae-2.6.16.60-0.97.1 kernel-vmi-2.6.16.60-0.97.1 kernel-vmipae-2.6.16.60-0.97.1 kernel-xenpae-2.6.16.60-0.97.1 - SUSE Linux Enterprise Server 10 SP4 (ppc): kernel-iseries64-2.6.16.60-0.97.1 kernel-ppc64-2.6.16.60-0.97.1 - SUSE Linux Enterprise Desktop 10 SP4 (i586 x86_64): kernel-default-2.6.16.60-0.97.1 kernel-smp-2.6.16.60-0.97.1 kernel-source-2.6.16.60-0.97.1 kernel-syms-2.6.16.60-0.97.1 kernel-xen-2.6.16.60-0.97.1 - SUSE Linux Enterprise Desktop 10 SP4 (i586): kernel-bigsmp-2.6.16.60-0.97.1 kernel-xenpae-2.6.16.60-0.97.1 - SLE SDK 10 SP4 (i586 ia64 x86_64): kernel-debug-2.6.16.60-0.97.1 - SLE SDK 10 SP4 (i586 ppc x86_64): kernel-kdump-2.6.16.60-0.97.1 - SLE SDK 10 SP4 (i586 x86_64): kernel-xen-2.6.16.60-0.97.1 - SLE SDK 10 SP4 (i586): kernel-xenpae-2.6.16.60-0.97.1 References: http://support.novell.com/security/cve/CVE-2011-2928.html http://support.novell.com/security/cve/CVE-2011-4077.html http://support.novell.com/security/cve/CVE-2011-4324.html http://support.novell.com/security/cve/CVE-2011-4330.html http://support.novell.com/security/cve/CVE-2012-2313.html http://support.novell.com/security/cve/CVE-2012-2319.html https://bugzilla.novell.com/671124 https://bugzilla.novell.com/671479 https://bugzilla.novell.com/683270 https://bugzilla.novell.com/693639 https://bugzilla.novell.com/713430 https://bugzilla.novell.com/718343 https://bugzilla.novell.com/721869 https://bugzilla.novell.com/722400 https://bugzilla.novell.com/723294 https://bugzilla.novell.com/724692 https://bugzilla.novell.com/724734 https://bugzilla.novell.com/726600 https://bugzilla.novell.com/729685 https://bugzilla.novell.com/730118 https://bugzilla.novell.com/730200 https://bugzilla.novell.com/731673 https://bugzilla.novell.com/732613 https://bugzilla.novell.com/733155 https://bugzilla.novell.com/734707 https://bugzilla.novell.com/737325 https://bugzilla.novell.com/737899 https://bugzilla.novell.com/740131 https://bugzilla.novell.com/742148 https://bugzilla.novell.com/742881 https://bugzilla.novell.com/744592 https://bugzilla.novell.com/745640 https://bugzilla.novell.com/745732 https://bugzilla.novell.com/745760 https://bugzilla.novell.com/745929 https://bugzilla.novell.com/746397 https://bugzilla.novell.com/746980 https://bugzilla.novell.com/747381 https://bugzilla.novell.com/749168 https://bugzilla.novell.com/750168 https://bugzilla.novell.com/750928 https://bugzilla.novell.com/751880 https://bugzilla.novell.com/752486 https://bugzilla.novell.com/754964 https://bugzilla.novell.com/758813 https://bugzilla.novell.com/760902 https://bugzilla.novell.com/761389 https://bugzilla.novell.com/762111 https://bugzilla.novell.com/764128 http://download.novell.com/patch/finder/?keywords=3395803e5857d3e0f44b39331… http://download.novell.com/patch/finder/?keywords=74169532cbeb6a34c2168ce4c… http://download.novell.com/patch/finder/?keywords=96d47125b6fb737bee4bf3f76… http://download.novell.com/patch/finder/?keywords=9fe1c1f891de7bb8b0abad735… http://download.novell.com/patch/finder/?keywords=d66830daf8e6d37d2c64dfa77… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:0734-1: important: Security update for IBM Java
by opensuse-security＠opensuse.org 13 Jun '12

13 Jun '12

SUSE Security Update: Security update for IBM Java ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0734-1 Rating: important References: #763805 Affected Products: SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP1 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP1 for VMware SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server 10 SP4 SUSE Linux Enterprise Java 11 SP1 SUSE Linux Enterprise Java 10 SP4 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: IBM Java 1.4.2 SR13 FP12 has been released which fixes various bugs and security issues. http://www.ibm.com/developerworks/java/jdk/alerts/ <http://www.ibm.com/developerworks/java/jdk/alerts/> has more informations. CVEs addressed: CVE-2011-3563 CVE-2012-0499 CVE-2012-0502 CVE-2012-0503 CVE-2012-0505 CVE-2012-0506 Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11 SP2: zypper in -t patch sdksp1-java-1_4_2-ibm-6360 - SUSE Linux Enterprise Software Development Kit 11 SP1: zypper in -t patch sdksp1-java-1_4_2-ibm-6360 - SUSE Linux Enterprise Server 11 SP2: zypper in -t patch slessp1-java-1_4_2-ibm-6360 - SUSE Linux Enterprise Server 11 SP1 for VMware: zypper in -t patch slessp1-java-1_4_2-ibm-6360 - SUSE Linux Enterprise Server 11 SP1: zypper in -t patch slessp1-java-1_4_2-ibm-6360 - SUSE Linux Enterprise Java 11 SP1: zypper in -t patch slejsp1-java-1_4_2-ibm-6360 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11 SP2 (i586 ia64 ppc64 s390x x86_64): java-1_4_2-ibm-devel-1.4.2_sr13.12-0.2.1 - SUSE Linux Enterprise Software Development Kit 11 SP2 (i586 x86_64): java-1_4_2-ibm-1.4.2_sr13.12-0.2.1 - SUSE Linux Enterprise Software Development Kit 11 SP1 (i586 ia64 ppc64 s390x x86_64): java-1_4_2-ibm-devel-1.4.2_sr13.12-0.2.1 - SUSE Linux Enterprise Software Development Kit 11 SP1 (i586 x86_64): java-1_4_2-ibm-1.4.2_sr13.12-0.2.1 - SUSE Linux Enterprise Server 11 SP2 (i586 ia64 ppc64 s390x x86_64): java-1_4_2-ibm-1.4.2_sr13.12-0.2.1 - SUSE Linux Enterprise Server 11 SP2 (i586): java-1_4_2-ibm-jdbc-1.4.2_sr13.12-0.2.1 java-1_4_2-ibm-plugin-1.4.2_sr13.12-0.2.1 - SUSE Linux Enterprise Server 11 SP1 for VMware (i586 x86_64): java-1_4_2-ibm-1.4.2_sr13.12-0.2.1 - SUSE Linux Enterprise Server 11 SP1 for VMware (i586): java-1_4_2-ibm-jdbc-1.4.2_sr13.12-0.2.1 java-1_4_2-ibm-plugin-1.4.2_sr13.12-0.2.1 - SUSE Linux Enterprise Server 11 SP1 (i586 ia64 ppc64 s390x x86_64): java-1_4_2-ibm-1.4.2_sr13.12-0.2.1 - SUSE Linux Enterprise Server 11 SP1 (i586): java-1_4_2-ibm-jdbc-1.4.2_sr13.12-0.2.1 java-1_4_2-ibm-plugin-1.4.2_sr13.12-0.2.1 - SUSE Linux Enterprise Server 10 SP4 (i586 ia64 ppc s390x x86_64): java-1_4_2-ibm-1.4.2_sr13.12-0.5.1 java-1_4_2-ibm-devel-1.4.2_sr13.12-0.5.1 - SUSE Linux Enterprise Server 10 SP4 (i586 ppc): java-1_4_2-ibm-jdbc-1.4.2_sr13.12-0.5.1 - SUSE Linux Enterprise Server 10 SP4 (i586): java-1_4_2-ibm-plugin-1.4.2_sr13.12-0.5.1 - SUSE Linux Enterprise Java 11 SP1 (i586 ia64 ppc64 s390x x86_64): java-1_4_2-ibm-1.4.2_sr13.12-0.2.1 - SUSE Linux Enterprise Java 11 SP1 (i586): java-1_4_2-ibm-jdbc-1.4.2_sr13.12-0.2.1 java-1_4_2-ibm-plugin-1.4.2_sr13.12-0.2.1 - SUSE Linux Enterprise Java 10 SP4 (i586 ia64 ppc s390x x86_64): java-1_4_2-ibm-1.4.2_sr13.12-0.5.1 java-1_4_2-ibm-devel-1.4.2_sr13.12-0.5.1 - SUSE Linux Enterprise Java 10 SP4 (i586 ppc): java-1_4_2-ibm-jdbc-1.4.2_sr13.12-0.5.1 - SUSE Linux Enterprise Java 10 SP4 (i586): java-1_4_2-ibm-plugin-1.4.2_sr13.12-0.5.1 References: https://bugzilla.novell.com/763805 http://download.novell.com/patch/finder/?keywords=91410c4f201444d1c10815a8d… http://download.novell.com/patch/finder/?keywords=adc0df3a81b3b146456e8e189… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:0730-1: critical: Security update for Xen
by opensuse-security＠opensuse.org 12 Jun '12

12 Jun '12

SUSE Security Update: Security update for Xen ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0730-1 Rating: critical References: #757537 #757970 #764077 Cross-References: CVE-2012-0217 CVE-2012-0218 CVE-2012-2934 Affected Products: SUSE Linux Enterprise Software Development Kit 11 SP1 SUSE Linux Enterprise Server 11 SP1 for VMware SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server 10 SP4 SUSE Linux Enterprise Server 10 SP3 LTSS SUSE Linux Enterprise Server 10 SP2 SUSE Linux Enterprise Desktop 11 SP1 SUSE Linux Enterprise Desktop 10 SP4 SLE SDK 10 SP4 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: Three security issues were found in XEN. Two security issues are fixed by this update: * CVE-2012-0217: Due to incorrect fault handling in the XEN hypervisor it was possible for a XEN guest domain administrator to execute code in the XEN host environment. * CVE-2012-0218: Also a guest user could crash the guest XEN kernel due to a protection fault bounce. The third fix is changing the Xen behaviour on certain hardware: * CVE-2012-2934: The issue is a denial of service issue on older pre-SVM AMD CPUs (AMD Erratum 121). AMD Erratum #121 is described in "Revision Guide for AMD Athlon 64 and AMD Opteron Processors": http://support.amd.com/us/Processor_TechDocs/25759.pdf <http://support.amd.com/us/Processor_TechDocs/25759.pdf> The following 130nm and 90nm (DDR1-only) AMD processors are subject to this erratum: o First-generation AMD-Opteron(tm) single and dual core processors in either 939 or 940 packages: + AMD Opteron(tm) 100-Series Processors + AMD Opteron(tm) 200-Series Processors + AMD Opteron(tm) 800-Series Processors + AMD Athlon(tm) processors in either 754, 939 or 940 packages + AMD Sempron(tm) processor in either 754 or 939 packages + AMD Turion(tm) Mobile Technology in 754 package This issue does not effect Intel processors. The impact of this flaw is that a malicious PV guest user can halt the host system. As this is a hardware flaw, it is not fixable except by upgrading your hardware to a newer revision, or not allowing untrusted 64bit guestsystems. The patch changes the behaviour of the host system booting, which makes it unable to create guest machines until a specific boot option is set. There is a new XEN boot option "allow_unsafe" for GRUB which allows the host to start guests again. This is added to /boot/grub/menu.lst in the line looking like this: kernel /boot/xen.gz .... allow_unsafe Note: .... in this example represents the existing boot options for the host. Security Issue references: * CVE-2012-0217 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0217 > * CVE-2012-0218 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0218 > * CVE-2012-2934 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2934 > Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11 SP1: zypper in -t patch sdksp1-xen-201206-6399 - SUSE Linux Enterprise Server 11 SP1 for VMware: zypper in -t patch slessp1-xen-201206-6399 - SUSE Linux Enterprise Server 11 SP1: zypper in -t patch slessp1-xen-201206-6399 - SUSE Linux Enterprise Desktop 11 SP1: zypper in -t patch sledsp1-xen-201206-6399 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11 SP1 (i586 x86_64): xen-devel-4.0.3_21548_04-0.9.1 - SUSE Linux Enterprise Server 11 SP1 for VMware (i586 x86_64): xen-kmp-trace-4.0.3_21548_04_2.6.32.59_0.5-0.9.1 - SUSE Linux Enterprise Server 11 SP1 (i586 x86_64): xen-4.0.3_21548_04-0.9.1 xen-doc-html-4.0.3_21548_04-0.9.1 xen-doc-pdf-4.0.3_21548_04-0.9.1 xen-kmp-default-4.0.3_21548_04_2.6.32.59_0.5-0.9.1 xen-kmp-trace-4.0.3_21548_04_2.6.32.59_0.5-0.9.1 xen-libs-4.0.3_21548_04-0.9.1 xen-tools-4.0.3_21548_04-0.9.1 xen-tools-domU-4.0.3_21548_04-0.9.1 - SUSE Linux Enterprise Server 11 SP1 (i586): xen-kmp-pae-4.0.3_21548_04_2.6.32.59_0.5-0.9.1 - SUSE Linux Enterprise Server 10 SP4 (i586 x86_64): xen-3.2.3_17040_38-0.11.1 xen-devel-3.2.3_17040_38-0.11.1 xen-doc-html-3.2.3_17040_38-0.11.1 xen-doc-pdf-3.2.3_17040_38-0.11.1 xen-doc-ps-3.2.3_17040_38-0.11.1 xen-kmp-debug-3.2.3_17040_38_2.6.16.60_0.97.1-0.11.1 xen-kmp-default-3.2.3_17040_38_2.6.16.60_0.97.1-0.11.1 xen-kmp-kdump-3.2.3_17040_38_2.6.16.60_0.97.1-0.11.1 xen-kmp-smp-3.2.3_17040_38_2.6.16.60_0.97.1-0.11.1 xen-libs-3.2.3_17040_38-0.11.1 xen-tools-3.2.3_17040_38-0.11.1 xen-tools-domU-3.2.3_17040_38-0.11.1 xen-tools-ioemu-3.2.3_17040_38-0.11.1 - SUSE Linux Enterprise Server 10 SP4 (x86_64): xen-libs-32bit-3.2.3_17040_38-0.11.1 - SUSE Linux Enterprise Server 10 SP4 (i586): xen-kmp-bigsmp-3.2.3_17040_38_2.6.16.60_0.97.1-0.11.1 xen-kmp-kdumppae-3.2.3_17040_38_2.6.16.60_0.97.1-0.11.1 xen-kmp-vmi-3.2.3_17040_38_2.6.16.60_0.97.1-0.11.1 xen-kmp-vmipae-3.2.3_17040_38_2.6.16.60_0.97.1-0.11.1 - SUSE Linux Enterprise Server 10 SP3 LTSS (i586 x86_64): xen-3.2.3_17040_28-0.6.11.1 xen-devel-3.2.3_17040_28-0.6.11.1 xen-doc-html-3.2.3_17040_28-0.6.11.1 xen-doc-pdf-3.2.3_17040_28-0.6.11.1 xen-doc-ps-3.2.3_17040_28-0.6.11.1 xen-kmp-debug-3.2.3_17040_28_2.6.16.60_0.83.131-0.6.11.1 xen-kmp-default-3.2.3_17040_28_2.6.16.60_0.83.131-0.6.11.1 xen-kmp-kdump-3.2.3_17040_28_2.6.16.60_0.83.131-0.6.11.1 xen-kmp-smp-3.2.3_17040_28_2.6.16.60_0.83.131-0.6.11.1 xen-libs-3.2.3_17040_28-0.6.11.1 xen-tools-3.2.3_17040_28-0.6.11.1 xen-tools-domU-3.2.3_17040_28-0.6.11.1 xen-tools-ioemu-3.2.3_17040_28-0.6.11.1 - SUSE Linux Enterprise Server 10 SP3 LTSS (x86_64): xen-libs-32bit-3.2.3_17040_28-0.6.11.1 - SUSE Linux Enterprise Server 10 SP3 LTSS (i586): xen-kmp-bigsmp-3.2.3_17040_28_2.6.16.60_0.83.131-0.6.11.1 xen-kmp-kdumppae-3.2.3_17040_28_2.6.16.60_0.83.131-0.6.11.1 xen-kmp-vmi-3.2.3_17040_28_2.6.16.60_0.83.131-0.6.11.1 xen-kmp-vmipae-3.2.3_17040_28_2.6.16.60_0.83.131-0.6.11.1 - SUSE Linux Enterprise Server 10 SP2 (i586 x86_64): xen-3.2.0_16718_26-0.8.1 xen-devel-3.2.0_16718_26-0.8.1 xen-doc-html-3.2.0_16718_26-0.8.1 xen-doc-pdf-3.2.0_16718_26-0.8.1 xen-doc-ps-3.2.0_16718_26-0.8.1 xen-kmp-debug-3.2.0_16718_26_2.6.16.60_0.42.54.11-0.8.1 xen-kmp-default-3.2.0_16718_26_2.6.16.60_0.42.54.11-0.8.1 xen-kmp-kdump-3.2.0_16718_26_2.6.16.60_0.42.54.11-0.8.1 xen-kmp-smp-3.2.0_16718_26_2.6.16.60_0.42.54.11-0.8.1 xen-libs-3.2.0_16718_26-0.8.1 xen-tools-3.2.0_16718_26-0.8.1 xen-tools-domU-3.2.0_16718_26-0.8.1 xen-tools-ioemu-3.2.0_16718_26-0.8.1 - SUSE Linux Enterprise Server 10 SP2 (x86_64): xen-libs-32bit-3.2.0_16718_26-0.8.1 - SUSE Linux Enterprise Server 10 SP2 (i586): xen-kmp-bigsmp-3.2.0_16718_26_2.6.16.60_0.42.54.11-0.8.1 - SUSE Linux Enterprise Desktop 11 SP1 (i586 x86_64): xen-4.0.3_21548_04-0.9.1 xen-kmp-default-4.0.3_21548_04_2.6.32.59_0.5-0.9.1 xen-libs-4.0.3_21548_04-0.9.1 xen-tools-4.0.3_21548_04-0.9.1 xen-tools-domU-4.0.3_21548_04-0.9.1 - SUSE Linux Enterprise Desktop 11 SP1 (i586): xen-kmp-pae-4.0.3_21548_04_2.6.32.59_0.5-0.9.1 - SUSE Linux Enterprise Desktop 10 SP4 (i586 x86_64): xen-3.2.3_17040_38-0.11.1 xen-devel-3.2.3_17040_38-0.11.1 xen-doc-html-3.2.3_17040_38-0.11.1 xen-doc-pdf-3.2.3_17040_38-0.11.1 xen-doc-ps-3.2.3_17040_38-0.11.1 xen-kmp-default-3.2.3_17040_38_2.6.16.60_0.97.1-0.11.1 xen-kmp-smp-3.2.3_17040_38_2.6.16.60_0.97.1-0.11.1 xen-libs-3.2.3_17040_38-0.11.1 xen-tools-3.2.3_17040_38-0.11.1 xen-tools-domU-3.2.3_17040_38-0.11.1 xen-tools-ioemu-3.2.3_17040_38-0.11.1 - SUSE Linux Enterprise Desktop 10 SP4 (x86_64): xen-libs-32bit-3.2.3_17040_38-0.11.1 - SUSE Linux Enterprise Desktop 10 SP4 (i586): xen-kmp-bigsmp-3.2.3_17040_38_2.6.16.60_0.97.1-0.11.1 - SLE SDK 10 SP4 (i586 x86_64): xen-3.2.3_17040_38-0.11.1 xen-devel-3.2.3_17040_38-0.11.1 xen-kmp-debug-3.2.3_17040_38_2.6.16.60_0.97.1-0.11.1 xen-kmp-kdump-3.2.3_17040_38_2.6.16.60_0.97.1-0.11.1 xen-libs-3.2.3_17040_38-0.11.1 xen-tools-3.2.3_17040_38-0.11.1 xen-tools-ioemu-3.2.3_17040_38-0.11.1 - SLE SDK 10 SP4 (x86_64): xen-libs-32bit-3.2.3_17040_38-0.11.1 References: http://support.novell.com/security/cve/CVE-2012-0217.html http://support.novell.com/security/cve/CVE-2012-0218.html http://support.novell.com/security/cve/CVE-2012-2934.html https://bugzilla.novell.com/757537 https://bugzilla.novell.com/757970 https://bugzilla.novell.com/764077 http://download.novell.com/patch/finder/?keywords=1428153e4b377d6519b568fc4… http://download.novell.com/patch/finder/?keywords=1fd339d2b48672edeccbed4bd… http://download.novell.com/patch/finder/?keywords=bbca71d17e042f39532a8e306… http://download.novell.com/patch/finder/?keywords=c25fa3090bc865a8836ebaff0… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:0724-1: critical: Security update for flash-player
by opensuse-security＠opensuse.org 11 Jun '12

11 Jun '12

SUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0724-1 Rating: critical References: #766241 Cross-References: CVE-2012-2034 CVE-2012-2035 CVE-2012-2036 CVE-2012-2037 CVE-2012-2038 CVE-2012-2039 CVE-2012-2040 Affected Products: SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP1 SUSE Linux Enterprise Desktop 10 SP4 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. It includes one version update. Description: Flash Player has been updated to 11.2.202.236 which fixes various bugs and critical security issues. The advisory published by Adobe can be found here: https://www.adobe.com/support/security/bulletins/apsb12-14.h tml <https://www.adobe.com/support/security/bulletins/apsb12-14. html> These updates resolve * a memory corruption vulnerability that could lead to code execution (CVE-2012-2034). * a stack overflow vulnerability that could lead to code execution (CVE-2012-2035). * an integer overflow vulnerability that could lead to code execution (CVE-2012-2036). * a memory corruption vulnerability that could lead to code execution (CVE-2012-2037). * a security bypass vulnerability that could lead to information disclosure (CVE-2012-2038). * null dereference vulnerabilities that could lead to code execution (CVE-2012-2039). * a binary planting vulnerability in the Flash Player installer that could lead to code execution (CVE-2012-2040). Security Issue references: * CVE-2012-2034 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2034 > * CVE-2012-2035 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2035 > * CVE-2012-2036 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2036 > * CVE-2012-2037 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2037 > * CVE-2012-2038 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2038 > * CVE-2012-2039 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2039 > * CVE-2012-2040 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2040 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Desktop 11 SP2: zypper in -t patch sledsp1-flash-player-6404 - SUSE Linux Enterprise Desktop 11 SP1: zypper in -t patch sledsp1-flash-player-6404 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Desktop 11 SP2 (i586 x86_64) [New Version: 11.2.202.236]: flash-player-11.2.202.236-0.3.1 - SUSE Linux Enterprise Desktop 11 SP1 (i586 x86_64) [New Version: 11.2.202.236]: flash-player-11.2.202.236-0.3.1 - SUSE Linux Enterprise Desktop 10 SP4 (i586) [New Version: 11.2.202.236]: flash-player-11.2.202.236-0.5.1 References: http://support.novell.com/security/cve/CVE-2012-2034.html http://support.novell.com/security/cve/CVE-2012-2035.html http://support.novell.com/security/cve/CVE-2012-2036.html http://support.novell.com/security/cve/CVE-2012-2037.html http://support.novell.com/security/cve/CVE-2012-2038.html http://support.novell.com/security/cve/CVE-2012-2039.html http://support.novell.com/security/cve/CVE-2012-2040.html https://bugzilla.novell.com/766241 http://download.novell.com/patch/finder/?keywords=32f63c722aa23420e1bd3dc21… http://download.novell.com/patch/finder/?keywords=887bb347a8b547f7a9640dc23… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2012:0723-1: critical: flash-player: Update to 11.2.202.236 security release
by opensuse-security＠opensuse.org 11 Jun '12

11 Jun '12

openSUSE Security Update: flash-player: Update to 11.2.202.236 security release ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0723-1 Rating: critical References: #761975 #766241 Cross-References: CVE-2012-2034 CVE-2012-2035 CVE-2012-2036 CVE-2012-2037 CVE-2012-2038 CVE-2012-2039 CVE-2012-2040 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: Adobe Flash Player was updated to 11.2.202.236, fixing lots of bugs and critical security issues. We also disabled inclusion of mms.cfg again, as it caused trouble on hardware accelerated systems. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-315 - openSUSE 11.4: zypper in -t patch openSUSE-2012-315 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): flash-player-11.2.202.236-24.1 flash-player-gnome-11.2.202.236-24.1 flash-player-kde4-11.2.202.236-24.1 - openSUSE 11.4 (i586 x86_64): flash-player-11.2.202.236-17.1 flash-player-gnome-11.2.202.236-17.1 flash-player-kde4-11.2.202.236-17.1 References: http://support.novell.com/security/cve/CVE-2012-2034.html http://support.novell.com/security/cve/CVE-2012-2035.html http://support.novell.com/security/cve/CVE-2012-2036.html http://support.novell.com/security/cve/CVE-2012-2037.html http://support.novell.com/security/cve/CVE-2012-2038.html http://support.novell.com/security/cve/CVE-2012-2039.html http://support.novell.com/security/cve/CVE-2012-2040.html https://bugzilla.novell.com/761975 https://bugzilla.novell.com/766241 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2012:0722-1: important: bind: Fixed a remote denial of service
by opensuse-security＠opensuse.org 11 Jun '12

11 Jun '12

openSUSE Security Update: bind: Fixed a remote denial of service ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0722-1 Rating: important References: #765315 Cross-References: CVE-2012-1667 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: A remote denial of service in the bind nameserver via zero length rdata fields was fixed. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-316 - openSUSE 11.4: zypper in -t patch openSUSE-2012-316 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): bind-9.8.1P1-4.11.1 bind-chrootenv-9.8.1P1-4.11.1 bind-debuginfo-9.8.1P1-4.11.1 bind-debugsource-9.8.1P1-4.11.1 bind-devel-9.8.1P1-4.11.1 bind-libs-9.8.1P1-4.11.1 bind-libs-debuginfo-9.8.1P1-4.11.1 bind-lwresd-9.8.1P1-4.11.1 bind-lwresd-debuginfo-9.8.1P1-4.11.1 bind-utils-9.8.1P1-4.11.1 bind-utils-debuginfo-9.8.1P1-4.11.1 - openSUSE 12.1 (x86_64): bind-libs-32bit-9.8.1P1-4.11.1 bind-libs-debuginfo-32bit-9.8.1P1-4.11.1 - openSUSE 12.1 (noarch): bind-doc-9.8.1P1-4.11.1 - openSUSE 12.1 (ia64): bind-libs-debuginfo-x86-9.8.1P1-4.11.1 bind-libs-x86-9.8.1P1-4.11.1 - openSUSE 11.4 (i586 x86_64): bind-9.7.4P1-0.28.1 bind-chrootenv-9.7.4P1-0.28.1 bind-debuginfo-9.7.4P1-0.28.1 bind-debugsource-9.7.4P1-0.28.1 bind-devel-9.7.4P1-0.28.1 bind-libs-9.7.4P1-0.28.1 bind-libs-debuginfo-9.7.4P1-0.28.1 bind-lwresd-9.7.4P1-0.28.1 bind-lwresd-debuginfo-9.7.4P1-0.28.1 bind-utils-9.7.4P1-0.28.1 bind-utils-debuginfo-9.7.4P1-0.28.1 - openSUSE 11.4 (x86_64): bind-libs-32bit-9.7.4P1-0.28.1 bind-libs-debuginfo-32bit-9.7.4P1-0.28.1 - openSUSE 11.4 (noarch): bind-doc-9.7.4P1-0.28.1 - openSUSE 11.4 (ia64): bind-libs-debuginfo-x86-9.7.4P1-0.28.1 bind-libs-x86-9.7.4P1-0.28.1 References: http://support.novell.com/security/cve/CVE-2012-1667.html https://bugzilla.novell.com/765315 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:0721-1: important: Security update for PHP5
by opensuse-security＠opensuse.org 08 Jun '12

08 Jun '12

SUSE Security Update: Security update for PHP5 ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0721-1 Rating: important References: #761631 Cross-References: CVE-2012-2335 CVE-2012-2336 Affected Products: SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP1 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP1 for VMware SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server 10 SP4 SLE SDK 10 SP4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. It includes one version update. Description: PHP5 was updated with incremental fixes to the previous update: * CVE-2012-2335: Additional unsafe cgi wrapper scripts are also fixed now. * CVE-2012-2336: Even more commandline option handling is filtered, which could lead to crashes of the php interpreter. Security Issue references: * CVE-2012-2335 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2335 > * CVE-2012-2336 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2336 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11 SP2: zypper in -t patch sdksp1-apache2-mod_php5-6316 - SUSE Linux Enterprise Software Development Kit 11 SP1: zypper in -t patch sdksp1-apache2-mod_php5-6316 - SUSE Linux Enterprise Server 11 SP2: zypper in -t patch slessp1-apache2-mod_php5-6316 - SUSE Linux Enterprise Server 11 SP1 for VMware: zypper in -t patch slessp1-apache2-mod_php5-6316 - SUSE Linux Enterprise Server 11 SP1: zypper in -t patch slessp1-apache2-mod_php5-6316 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11 SP2 (i586 ia64 ppc64 s390x x86_64) [New Version: 5.2.14]: php5-devel-5.2.14-0.7.30.40.1 php5-imap-5.2.14-0.7.30.40.1 php5-ncurses-5.2.14-0.7.30.40.1 php5-posix-5.2.14-0.7.30.40.1 php5-readline-5.2.14-0.7.30.40.1 php5-sockets-5.2.14-0.7.30.40.1 php5-sqlite-5.2.14-0.7.30.40.1 php5-tidy-5.2.14-0.7.30.40.1 - SUSE Linux Enterprise Software Development Kit 11 SP2 (i586 x86_64) [New Version: 5.2.14]: apache2-mod_php5-5.2.14-0.7.30.40.1 php5-5.2.14-0.7.30.40.1 php5-bcmath-5.2.14-0.7.30.40.1 php5-bz2-5.2.14-0.7.30.40.1 php5-calendar-5.2.14-0.7.30.40.1 php5-ctype-5.2.14-0.7.30.40.1 php5-curl-5.2.14-0.7.30.40.1 php5-dba-5.2.14-0.7.30.40.1 php5-dbase-5.2.14-0.7.30.40.1 php5-dom-5.2.14-0.7.30.40.1 php5-exif-5.2.14-0.7.30.40.1 php5-fastcgi-5.2.14-0.7.30.40.1 php5-ftp-5.2.14-0.7.30.40.1 php5-gd-5.2.14-0.7.30.40.1 php5-gettext-5.2.14-0.7.30.40.1 php5-gmp-5.2.14-0.7.30.40.1 php5-hash-5.2.14-0.7.30.40.1 php5-iconv-5.2.14-0.7.30.40.1 php5-json-5.2.14-0.7.30.40.1 php5-ldap-5.2.14-0.7.30.40.1 php5-mbstring-5.2.14-0.7.30.40.1 php5-mcrypt-5.2.14-0.7.30.40.1 php5-mysql-5.2.14-0.7.30.40.1 php5-odbc-5.2.14-0.7.30.40.1 php5-openssl-5.2.14-0.7.30.40.1 php5-pcntl-5.2.14-0.7.30.40.1 php5-pdo-5.2.14-0.7.30.40.1 php5-pear-5.2.14-0.7.30.40.1 php5-pgsql-5.2.14-0.7.30.40.1 php5-pspell-5.2.14-0.7.30.40.1 php5-shmop-5.2.14-0.7.30.40.1 php5-snmp-5.2.14-0.7.30.40.1 php5-soap-5.2.14-0.7.30.40.1 php5-suhosin-5.2.14-0.7.30.40.1 php5-sysvmsg-5.2.14-0.7.30.40.1 php5-sysvsem-5.2.14-0.7.30.40.1 php5-sysvshm-5.2.14-0.7.30.40.1 php5-tokenizer-5.2.14-0.7.30.40.1 php5-wddx-5.2.14-0.7.30.40.1 php5-xmlreader-5.2.14-0.7.30.40.1 php5-xmlrpc-5.2.14-0.7.30.40.1 php5-xmlwriter-5.2.14-0.7.30.40.1 php5-xsl-5.2.14-0.7.30.40.1 php5-zip-5.2.14-0.7.30.40.1 php5-zlib-5.2.14-0.7.30.40.1 - SUSE Linux Enterprise Software Development Kit 11 SP1 (i586 ia64 ppc64 s390x x86_64) [New Version: 5.2.14]: php5-devel-5.2.14-0.7.30.40.1 php5-imap-5.2.14-0.7.30.40.1 php5-ncurses-5.2.14-0.7.30.40.1 php5-posix-5.2.14-0.7.30.40.1 php5-readline-5.2.14-0.7.30.40.1 php5-sockets-5.2.14-0.7.30.40.1 php5-sqlite-5.2.14-0.7.30.40.1 php5-tidy-5.2.14-0.7.30.40.1 - SUSE Linux Enterprise Software Development Kit 11 SP1 (i586 x86_64) [New Version: 5.2.14]: apache2-mod_php5-5.2.14-0.7.30.40.1 php5-5.2.14-0.7.30.40.1 php5-bcmath-5.2.14-0.7.30.40.1 php5-bz2-5.2.14-0.7.30.40.1 php5-calendar-5.2.14-0.7.30.40.1 php5-ctype-5.2.14-0.7.30.40.1 php5-curl-5.2.14-0.7.30.40.1 php5-dba-5.2.14-0.7.30.40.1 php5-dbase-5.2.14-0.7.30.40.1 php5-dom-5.2.14-0.7.30.40.1 php5-exif-5.2.14-0.7.30.40.1 php5-fastcgi-5.2.14-0.7.30.40.1 php5-ftp-5.2.14-0.7.30.40.1 php5-gd-5.2.14-0.7.30.40.1 php5-gettext-5.2.14-0.7.30.40.1 php5-gmp-5.2.14-0.7.30.40.1 php5-hash-5.2.14-0.7.30.40.1 php5-iconv-5.2.14-0.7.30.40.1 php5-json-5.2.14-0.7.30.40.1 php5-ldap-5.2.14-0.7.30.40.1 php5-mbstring-5.2.14-0.7.30.40.1 php5-mcrypt-5.2.14-0.7.30.40.1 php5-mysql-5.2.14-0.7.30.40.1 php5-odbc-5.2.14-0.7.30.40.1 php5-openssl-5.2.14-0.7.30.40.1 php5-pcntl-5.2.14-0.7.30.40.1 php5-pdo-5.2.14-0.7.30.40.1 php5-pear-5.2.14-0.7.30.40.1 php5-pgsql-5.2.14-0.7.30.40.1 php5-pspell-5.2.14-0.7.30.40.1 php5-shmop-5.2.14-0.7.30.40.1 php5-snmp-5.2.14-0.7.30.40.1 php5-soap-5.2.14-0.7.30.40.1 php5-suhosin-5.2.14-0.7.30.40.1 php5-sysvmsg-5.2.14-0.7.30.40.1 php5-sysvsem-5.2.14-0.7.30.40.1 php5-sysvshm-5.2.14-0.7.30.40.1 php5-tokenizer-5.2.14-0.7.30.40.1 php5-wddx-5.2.14-0.7.30.40.1 php5-xmlreader-5.2.14-0.7.30.40.1 php5-xmlrpc-5.2.14-0.7.30.40.1 php5-xmlwriter-5.2.14-0.7.30.40.1 php5-xsl-5.2.14-0.7.30.40.1 php5-zip-5.2.14-0.7.30.40.1 php5-zlib-5.2.14-0.7.30.40.1 - SUSE Linux Enterprise Server 11 SP2 (i586 ia64 ppc64 s390x x86_64) [New Version: 5.2.14]: apache2-mod_php5-5.2.14-0.7.30.40.1 php5-5.2.14-0.7.30.40.1 php5-bcmath-5.2.14-0.7.30.40.1 php5-bz2-5.2.14-0.7.30.40.1 php5-calendar-5.2.14-0.7.30.40.1 php5-ctype-5.2.14-0.7.30.40.1 php5-curl-5.2.14-0.7.30.40.1 php5-dba-5.2.14-0.7.30.40.1 php5-dbase-5.2.14-0.7.30.40.1 php5-dom-5.2.14-0.7.30.40.1 php5-exif-5.2.14-0.7.30.40.1 php5-fastcgi-5.2.14-0.7.30.40.1 php5-ftp-5.2.14-0.7.30.40.1 php5-gd-5.2.14-0.7.30.40.1 php5-gettext-5.2.14-0.7.30.40.1 php5-gmp-5.2.14-0.7.30.40.1 php5-hash-5.2.14-0.7.30.40.1 php5-iconv-5.2.14-0.7.30.40.1 php5-json-5.2.14-0.7.30.40.1 php5-ldap-5.2.14-0.7.30.40.1 php5-mbstring-5.2.14-0.7.30.40.1 php5-mcrypt-5.2.14-0.7.30.40.1 php5-mysql-5.2.14-0.7.30.40.1 php5-odbc-5.2.14-0.7.30.40.1 php5-openssl-5.2.14-0.7.30.40.1 php5-pcntl-5.2.14-0.7.30.40.1 php5-pdo-5.2.14-0.7.30.40.1 php5-pear-5.2.14-0.7.30.40.1 php5-pgsql-5.2.14-0.7.30.40.1 php5-pspell-5.2.14-0.7.30.40.1 php5-shmop-5.2.14-0.7.30.40.1 php5-snmp-5.2.14-0.7.30.40.1 php5-soap-5.2.14-0.7.30.40.1 php5-suhosin-5.2.14-0.7.30.40.1 php5-sysvmsg-5.2.14-0.7.30.40.1 php5-sysvsem-5.2.14-0.7.30.40.1 php5-sysvshm-5.2.14-0.7.30.40.1 php5-tokenizer-5.2.14-0.7.30.40.1 php5-wddx-5.2.14-0.7.30.40.1 php5-xmlreader-5.2.14-0.7.30.40.1 php5-xmlrpc-5.2.14-0.7.30.40.1 php5-xmlwriter-5.2.14-0.7.30.40.1 php5-xsl-5.2.14-0.7.30.40.1 php5-zip-5.2.14-0.7.30.40.1 php5-zlib-5.2.14-0.7.30.40.1 - SUSE Linux Enterprise Server 11 SP1 for VMware (i586 x86_64) [New Version: 5.2.14]: apache2-mod_php5-5.2.14-0.7.30.40.1 php5-5.2.14-0.7.30.40.1 php5-bcmath-5.2.14-0.7.30.40.1 php5-bz2-5.2.14-0.7.30.40.1 php5-calendar-5.2.14-0.7.30.40.1 php5-ctype-5.2.14-0.7.30.40.1 php5-curl-5.2.14-0.7.30.40.1 php5-dba-5.2.14-0.7.30.40.1 php5-dbase-5.2.14-0.7.30.40.1 php5-dom-5.2.14-0.7.30.40.1 php5-exif-5.2.14-0.7.30.40.1 php5-fastcgi-5.2.14-0.7.30.40.1 php5-ftp-5.2.14-0.7.30.40.1 php5-gd-5.2.14-0.7.30.40.1 php5-gettext-5.2.14-0.7.30.40.1 php5-gmp-5.2.14-0.7.30.40.1 php5-hash-5.2.14-0.7.30.40.1 php5-iconv-5.2.14-0.7.30.40.1 php5-json-5.2.14-0.7.30.40.1 php5-ldap-5.2.14-0.7.30.40.1 php5-mbstring-5.2.14-0.7.30.40.1 php5-mcrypt-5.2.14-0.7.30.40.1 php5-mysql-5.2.14-0.7.30.40.1 php5-odbc-5.2.14-0.7.30.40.1 php5-openssl-5.2.14-0.7.30.40.1 php5-pcntl-5.2.14-0.7.30.40.1 php5-pdo-5.2.14-0.7.30.40.1 php5-pear-5.2.14-0.7.30.40.1 php5-pgsql-5.2.14-0.7.30.40.1 php5-pspell-5.2.14-0.7.30.40.1 php5-shmop-5.2.14-0.7.30.40.1 php5-snmp-5.2.14-0.7.30.40.1 php5-soap-5.2.14-0.7.30.40.1 php5-suhosin-5.2.14-0.7.30.40.1 php5-sysvmsg-5.2.14-0.7.30.40.1 php5-sysvsem-5.2.14-0.7.30.40.1 php5-sysvshm-5.2.14-0.7.30.40.1 php5-tokenizer-5.2.14-0.7.30.40.1 php5-wddx-5.2.14-0.7.30.40.1 php5-xmlreader-5.2.14-0.7.30.40.1 php5-xmlrpc-5.2.14-0.7.30.40.1 php5-xmlwriter-5.2.14-0.7.30.40.1 php5-xsl-5.2.14-0.7.30.40.1 php5-zip-5.2.14-0.7.30.40.1 php5-zlib-5.2.14-0.7.30.40.1 - SUSE Linux Enterprise Server 11 SP1 (i586 ia64 ppc64 s390x x86_64) [New Version: 5.2.14]: apache2-mod_php5-5.2.14-0.7.30.40.1 php5-5.2.14-0.7.30.40.1 php5-bcmath-5.2.14-0.7.30.40.1 php5-bz2-5.2.14-0.7.30.40.1 php5-calendar-5.2.14-0.7.30.40.1 php5-ctype-5.2.14-0.7.30.40.1 php5-curl-5.2.14-0.7.30.40.1 php5-dba-5.2.14-0.7.30.40.1 php5-dbase-5.2.14-0.7.30.40.1 php5-dom-5.2.14-0.7.30.40.1 php5-exif-5.2.14-0.7.30.40.1 php5-fastcgi-5.2.14-0.7.30.40.1 php5-ftp-5.2.14-0.7.30.40.1 php5-gd-5.2.14-0.7.30.40.1 php5-gettext-5.2.14-0.7.30.40.1 php5-gmp-5.2.14-0.7.30.40.1 php5-hash-5.2.14-0.7.30.40.1 php5-iconv-5.2.14-0.7.30.40.1 php5-json-5.2.14-0.7.30.40.1 php5-ldap-5.2.14-0.7.30.40.1 php5-mbstring-5.2.14-0.7.30.40.1 php5-mcrypt-5.2.14-0.7.30.40.1 php5-mysql-5.2.14-0.7.30.40.1 php5-odbc-5.2.14-0.7.30.40.1 php5-openssl-5.2.14-0.7.30.40.1 php5-pcntl-5.2.14-0.7.30.40.1 php5-pdo-5.2.14-0.7.30.40.1 php5-pear-5.2.14-0.7.30.40.1 php5-pgsql-5.2.14-0.7.30.40.1 php5-pspell-5.2.14-0.7.30.40.1 php5-shmop-5.2.14-0.7.30.40.1 php5-snmp-5.2.14-0.7.30.40.1 php5-soap-5.2.14-0.7.30.40.1 php5-suhosin-5.2.14-0.7.30.40.1 php5-sysvmsg-5.2.14-0.7.30.40.1 php5-sysvsem-5.2.14-0.7.30.40.1 php5-sysvshm-5.2.14-0.7.30.40.1 php5-tokenizer-5.2.14-0.7.30.40.1 php5-wddx-5.2.14-0.7.30.40.1 php5-xmlreader-5.2.14-0.7.30.40.1 php5-xmlrpc-5.2.14-0.7.30.40.1 php5-xmlwriter-5.2.14-0.7.30.40.1 php5-xsl-5.2.14-0.7.30.40.1 php5-zip-5.2.14-0.7.30.40.1 php5-zlib-5.2.14-0.7.30.40.1 - SUSE Linux Enterprise Server 10 SP4 (i586 ia64 ppc s390x x86_64): apache2-mod_php5-5.2.14-0.34.1 php5-5.2.14-0.34.1 php5-bcmath-5.2.14-0.34.1 php5-bz2-5.2.14-0.34.1 php5-calendar-5.2.14-0.34.1 php5-ctype-5.2.14-0.34.1 php5-curl-5.2.14-0.34.1 php5-dba-5.2.14-0.34.1 php5-dbase-5.2.14-0.34.1 php5-devel-5.2.14-0.34.1 php5-dom-5.2.14-0.34.1 php5-exif-5.2.14-0.34.1 php5-fastcgi-5.2.14-0.34.1 php5-ftp-5.2.14-0.34.1 php5-gd-5.2.14-0.34.1 php5-gettext-5.2.14-0.34.1 php5-gmp-5.2.14-0.34.1 php5-hash-5.2.14-0.34.1 php5-iconv-5.2.14-0.34.1 php5-imap-5.2.14-0.34.1 php5-json-5.2.14-0.34.1 php5-ldap-5.2.14-0.34.1 php5-mbstring-5.2.14-0.34.1 php5-mcrypt-5.2.14-0.34.1 php5-mhash-5.2.14-0.34.1 php5-mysql-5.2.14-0.34.1 php5-ncurses-5.2.14-0.34.1 php5-odbc-5.2.14-0.34.1 php5-openssl-5.2.14-0.34.1 php5-pcntl-5.2.14-0.34.1 php5-pdo-5.2.14-0.34.1 php5-pear-5.2.14-0.34.1 php5-pgsql-5.2.14-0.34.1 php5-posix-5.2.14-0.34.1 php5-pspell-5.2.14-0.34.1 php5-shmop-5.2.14-0.34.1 php5-snmp-5.2.14-0.34.1 php5-soap-5.2.14-0.34.1 php5-sockets-5.2.14-0.34.1 php5-sqlite-5.2.14-0.34.1 php5-suhosin-5.2.14-0.34.1 php5-sysvmsg-5.2.14-0.34.1 php5-sysvsem-5.2.14-0.34.1 php5-sysvshm-5.2.14-0.34.1 php5-tokenizer-5.2.14-0.34.1 php5-wddx-5.2.14-0.34.1 php5-xmlreader-5.2.14-0.34.1 php5-xmlrpc-5.2.14-0.34.1 php5-xsl-5.2.14-0.34.1 php5-zlib-5.2.14-0.34.1 - SLE SDK 10 SP4 (i586 ia64 ppc s390x x86_64): apache2-mod_php5-5.2.14-0.34.1 php5-5.2.14-0.34.1 php5-bcmath-5.2.14-0.34.1 php5-bz2-5.2.14-0.34.1 php5-calendar-5.2.14-0.34.1 php5-ctype-5.2.14-0.34.1 php5-curl-5.2.14-0.34.1 php5-dba-5.2.14-0.34.1 php5-dbase-5.2.14-0.34.1 php5-devel-5.2.14-0.34.1 php5-dom-5.2.14-0.34.1 php5-exif-5.2.14-0.34.1 php5-fastcgi-5.2.14-0.34.1 php5-ftp-5.2.14-0.34.1 php5-gd-5.2.14-0.34.1 php5-gettext-5.2.14-0.34.1 php5-gmp-5.2.14-0.34.1 php5-hash-5.2.14-0.34.1 php5-iconv-5.2.14-0.34.1 php5-imap-5.2.14-0.34.1 php5-ldap-5.2.14-0.34.1 php5-mbstring-5.2.14-0.34.1 php5-mcrypt-5.2.14-0.34.1 php5-mhash-5.2.14-0.34.1 php5-mysql-5.2.14-0.34.1 php5-ncurses-5.2.14-0.34.1 php5-odbc-5.2.14-0.34.1 php5-openssl-5.2.14-0.34.1 php5-pcntl-5.2.14-0.34.1 php5-pdo-5.2.14-0.34.1 php5-pear-5.2.14-0.34.1 php5-pgsql-5.2.14-0.34.1 php5-posix-5.2.14-0.34.1 php5-pspell-5.2.14-0.34.1 php5-shmop-5.2.14-0.34.1 php5-snmp-5.2.14-0.34.1 php5-soap-5.2.14-0.34.1 php5-sockets-5.2.14-0.34.1 php5-sqlite-5.2.14-0.34.1 php5-suhosin-5.2.14-0.34.1 php5-sysvmsg-5.2.14-0.34.1 php5-sysvsem-5.2.14-0.34.1 php5-sysvshm-5.2.14-0.34.1 php5-tidy-5.2.14-0.34.1 php5-tokenizer-5.2.14-0.34.1 php5-wddx-5.2.14-0.34.1 php5-xmlreader-5.2.14-0.34.1 php5-xmlrpc-5.2.14-0.34.1 php5-xsl-5.2.14-0.34.1 php5-zlib-5.2.14-0.34.1 References: http://support.novell.com/security/cve/CVE-2012-2335.html http://support.novell.com/security/cve/CVE-2012-2336.html https://bugzilla.novell.com/761631 http://download.novell.com/patch/finder/?keywords=9254c34a3137091631d58336e… http://download.novell.com/patch/finder/?keywords=e24fcb47191769c91e3f4a461… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:0703-1: important: Security update for pidgin-otr
by opensuse-security＠opensuse.org 06 Jun '12

06 Jun '12

SUSE Security Update: Security update for pidgin-otr ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0703-1 Rating: important References: #762498 Cross-References: CVE-2012-2369 Affected Products: SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: A format string flaw in pidgin-otr could have caused a denial of service condition or even potentially allowed attackers to execute arbitrary code. This has been fixed. Security Issue reference: * CVE-2012-2369 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2369 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Desktop 11 SP2: zypper in -t patch sledsp1-pidgin-otr-6380 - SUSE Linux Enterprise Desktop 11 SP1: zypper in -t patch sledsp1-pidgin-otr-6380 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Desktop 11 SP2 (i586 x86_64): pidgin-otr-3.2.0-1.40.1 - SUSE Linux Enterprise Desktop 11 SP1 (i586 x86_64): pidgin-otr-3.2.0-1.40.1 References: http://support.novell.com/security/cve/CVE-2012-2369.html https://bugzilla.novell.com/762498 http://download.novell.com/patch/finder/?keywords=88a4e0d56e88f035f398a36e4… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2012:0691-1: important: update for strongswan
by opensuse-security＠opensuse.org 04 Jun '12

04 Jun '12

openSUSE Security Update: update for strongswan ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0691-1 Rating: important References: #761325 Cross-References: CVE-2012-2388 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Strongswan's gmp plugin could treat empty RSA signature as valid ones Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-309 - openSUSE 11.4: zypper in -t patch openSUSE-2012-309 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): strongswan-4.5.3-5.4.1 strongswan-debugsource-4.5.3-5.4.1 strongswan-doc-4.5.3-5.4.1 strongswan-ikev1-4.5.3-5.4.1 strongswan-ikev1-debuginfo-4.5.3-5.4.1 strongswan-ikev2-4.5.3-5.4.1 strongswan-ikev2-debuginfo-4.5.3-5.4.1 strongswan-ipsec-4.5.3-5.4.1 strongswan-ipsec-debuginfo-4.5.3-5.4.1 strongswan-libs0-4.5.3-5.4.1 strongswan-libs0-debuginfo-4.5.3-5.4.1 strongswan-mysql-4.5.3-5.4.1 strongswan-mysql-debuginfo-4.5.3-5.4.1 strongswan-nm-4.5.3-5.4.1 strongswan-nm-debuginfo-4.5.3-5.4.1 strongswan-sqlite-4.5.3-5.4.1 strongswan-sqlite-debuginfo-4.5.3-5.4.1 - openSUSE 11.4 (i586 x86_64): strongswan-4.5.0-6.45.1 strongswan-debugsource-4.5.0-6.45.1 strongswan-doc-4.5.0-6.45.1 strongswan-ikev1-4.5.0-6.45.1 strongswan-ikev1-debuginfo-4.5.0-6.45.1 strongswan-ikev2-4.5.0-6.45.1 strongswan-ikev2-debuginfo-4.5.0-6.45.1 strongswan-ipsec-4.5.0-6.45.1 strongswan-ipsec-debuginfo-4.5.0-6.45.1 strongswan-libs0-4.5.0-6.45.1 strongswan-libs0-debuginfo-4.5.0-6.45.1 strongswan-mysql-4.5.0-6.45.1 strongswan-mysql-debuginfo-4.5.0-6.45.1 strongswan-nm-4.5.0-6.45.1 strongswan-nm-debuginfo-4.5.0-6.45.1 strongswan-sqlite-4.5.0-6.45.1 strongswan-sqlite-debuginfo-4.5.0-6.45.1 References: http://support.novell.com/security/cve/CVE-2012-2388.html https://bugzilla.novell.com/761325 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0