July 2013 - openSUSE Security Announce

[security-announce] SUSE-SU-2013:1175-1: important: Security update for Mesa
by opensuse-security＠opensuse.org 10 Jul '13

10 Jul '13

SUSE Security Update: Security update for Mesa ______________________________________________________________________________ Announcement ID: SUSE-SU-2013:1175-1 Rating: important References: #828007 Cross-References: CVE-2013-1872 Affected Products: SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Server 11 SP3 for VMware SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Desktop 11 SP3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: A memory corruption in the Mesa Intel drivers (OOB read/write) has been fixed. (CVE-2013-1872) This could have been potentially exploited by remote attackers who would have been able to inject 3d graphics into the attacked desktop. Security Issue reference: * CVE-2013-1872 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1872 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11 SP3: zypper in -t patch sdksp3-Mesa-8011 - SUSE Linux Enterprise Server 11 SP3 for VMware: zypper in -t patch slessp3-Mesa-8011 - SUSE Linux Enterprise Server 11 SP3: zypper in -t patch slessp3-Mesa-8011 - SUSE Linux Enterprise Desktop 11 SP3: zypper in -t patch sledsp3-Mesa-8011 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11 SP3 (i586 ia64 ppc64 s390x x86_64): Mesa-devel-9.0.3-0.19.1 - SUSE Linux Enterprise Software Development Kit 11 SP3 (ppc64 s390x x86_64): Mesa-devel-32bit-9.0.3-0.19.1 - SUSE Linux Enterprise Server 11 SP3 for VMware (i586 x86_64): Mesa-9.0.3-0.19.1 - SUSE Linux Enterprise Server 11 SP3 for VMware (x86_64): Mesa-32bit-9.0.3-0.19.1 - SUSE Linux Enterprise Server 11 SP3 (i586 ia64 ppc64 s390x x86_64): Mesa-9.0.3-0.19.1 - SUSE Linux Enterprise Server 11 SP3 (ppc64 s390x x86_64): Mesa-32bit-9.0.3-0.19.1 - SUSE Linux Enterprise Server 11 SP3 (ia64): Mesa-x86-9.0.3-0.19.1 - SUSE Linux Enterprise Desktop 11 SP3 (i586 x86_64): Mesa-9.0.3-0.19.1 - SUSE Linux Enterprise Desktop 11 SP3 (x86_64): Mesa-32bit-9.0.3-0.19.1 References: http://support.novell.com/security/cve/CVE-2013-1872.html https://bugzilla.novell.com/828007 http://download.novell.com/patch/finder/?keywords=550a68dfd6351cc111370056d… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2013:1174-1: important: Security update for icedtea-web
by opensuse-security＠opensuse.org 10 Jul '13

10 Jul '13

SUSE Security Update: Security update for icedtea-web ______________________________________________________________________________ Announcement ID: SUSE-SU-2013:1174-1 Rating: important References: #815596 #818768 #825880 Cross-References: CVE-2012-3422 CVE-2012-3423 CVE-2013-1926 CVE-2013-1927 Affected Products: SUSE Linux Enterprise Desktop 11 SP3 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. It includes one version update. Description: This update to IcedTea-Web 1.4 provides the following fixes and enhancements: * Security updates o CVE-2013-1926, RH916774: Class-loader incorrectly shared for applets with same relative-path o CVE-2013-1927, RH884705: fixed gifar vulnerabilit o CVE-2012-3422, RH840592: Potential read from an uninitialized memory location o CVE-2012-3423, RH841345: Incorrect handling of not 0-terminated strings o CVE-2013-1927, RH884705: fixed gifar vulnerability o CVE-2013-1926, RH916774: Class-loader incorrectly shared for applets with same relative-path. * NetX o PR1027: DownloadService is not supported by IcedTea-Web o PR725: JNLP applications will prompt for creating desktop shortcuts every time they are run o PR1292: Javaws does not resolve versioned jar names with periods correctly o PR580: http://www.horaoficial.cl/ loads improperly. * Plugin o PR1106: Buffer overflow in plugin table- o PR1166: Embedded JNLP File is not supported in applet tag o PR1217: Add command line arguments for plugins o PR1189: Icedtea-plugin requires code attribute when using jnlp_href o PR1198: JSObject is not passed to javascript correctly o PR1260: IcedTea-Web should not rely on GTK o PR1157: Applets can hang browser after fatal exception o PR580: http://www.horaoficial.cl/ loads improperly o PR1260: IcedTea-Web should not rely on GTK o PR1157: Applets can hang browser after fatal exception. * Common o PR1049: Extension jnlp's signed jar with the content of only META-INF/* is considered o PR955: regression: SweetHome3D fails to run o PR1145: IcedTea-Web can cause ClassCircularityError o PR1161: X509VariableTrustManager does not work correctly with OpenJDK7 o PR822: Applets fail to load if jars have different signers o PR1186: System.getProperty("deployment.user.security.trusted.cacerts ") is null o PR909: The Java applet at http://de.gosupermodel.com/games/wardrobegame.jsp fails o PR1299: WebStart doesn't read socket proxy settings from firefox correctly. * Added cs, de, pl localization * Splash screen for javaws and plugin * Better error reporting for plugin via Error-splash-screen * All IcedTea-Web dialogues are centered to middle of active screen * Download indicator made compact for more then one jar * User can select its own JVM via itw-settings and deploy.properties * Added extended applets security settings and dialogue * Added new option in itw-settings which allows users to set JVM arguments when plugin is initialized * Fixed a build failure with older xulrunner * Changed strict openjdk6 dependencies to anything java-openjdk >= 1.6.0. Security Issue references: * CVE-2013-1926 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1926 > * CVE-2013-1927 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1927 > * CVE-2012-3422 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3422 > * CVE-2012-3423 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3423 > * CVE-2013-1927 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1927 > * CVE-2013-1926 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1926 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Desktop 11 SP3: zypper in -t patch sledsp3-icedtea-web-7981 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Desktop 11 SP3 (i586 x86_64) [New Version: 1.4]: icedtea-web-1.4-0.10.1 References: http://support.novell.com/security/cve/CVE-2012-3422.html http://support.novell.com/security/cve/CVE-2012-3423.html http://support.novell.com/security/cve/CVE-2013-1926.html http://support.novell.com/security/cve/CVE-2013-1927.html https://bugzilla.novell.com/815596 https://bugzilla.novell.com/818768 https://bugzilla.novell.com/825880 http://download.novell.com/patch/finder/?keywords=e2d8b10b4253bb88de271814c… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2013:1161-1: important: Security update for ceph-kmp
by opensuse-security＠opensuse.org 08 Jul '13

08 Jul '13

SUSE Security Update: Security update for ceph-kmp ______________________________________________________________________________ Announcement ID: SUSE-SU-2013:1161-1 Rating: important References: #750047 #756193 #826350 Cross-References: CVE-2013-1059 Affected Products: SUSE Cloud 1.0 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This ceph-kmp update fixes a libceph NULL function pointer dereference. Here is the full list of changes: * bug#826350 - libceph NULL function pointer dereference (CVE-2013-1059) * bug#750047 - marking ceph-kmp as supported * bug#756193 - fix for libceph crash Security Issue reference: * CVE-2013-1059 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1059 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Cloud 1.0: zypper in -t patch sleclo10sp2-ceph-kmp-default-7980 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Cloud 1.0 (x86_64): ceph-kmp-default-0_3.0.80_0.7-0.12.3.1 ceph-kmp-xen-0_3.0.80_0.7-0.12.3.1 References: http://support.novell.com/security/cve/CVE-2013-1059.html https://bugzilla.novell.com/750047 https://bugzilla.novell.com/756193 https://bugzilla.novell.com/826350 http://download.novell.com/patch/finder/?keywords=ad2569858e79b7b06c24f42a7… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2013:1153-1: important: Security update for Mozilla Firefox
by opensuse-security＠opensuse.org 05 Jul '13

05 Jul '13

SUSE Security Update: Security update for Mozilla Firefox ______________________________________________________________________________ Announcement ID: SUSE-SU-2013:1153-1 Rating: important References: #825935 Cross-References: CVE-2013-1682 CVE-2013-1684 CVE-2013-1685 CVE-2013-1686 CVE-2013-1687 CVE-2013-1690 CVE-2013-1692 CVE-2013-1693 CVE-2013-1697 Affected Products: SUSE Linux Enterprise Server 11 SP2 for VMware SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP1 for VMware LTSS SUSE Linux Enterprise Server 11 SP1 LTSS SUSE Linux Enterprise Server 10 SP4 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 10 SP4 SLE SDK 10 SP4 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. It includes two new package versions. Description: Mozilla Firefox has been updated to the 17.0.7 ESR version, which fixes bugs and security issues. * MFSA 2013-49: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code. Gary Kwong, Jesse Ruderman, and Andrew McCreight reported memory safety problems and crashes that affect Firefox ESR 17, and Firefox 21. (CVE-2013-1682) * MFSA 2013-50: Security researcher Abhishek Arya (Inferno) of the Google Chrome Security Team used the Address Sanitizer tool to discover a series of use-after-free problems rated critical as security issues in shipped software. Some of these issues are potentially exploitable, allowing for remote code execution. We would also like to thank Abhishek for reporting additional use-after-free and buffer overflow flaws in code introduced during Firefox development. These were fixed before general release. o Heap-use-after-free in mozilla::dom::HTMLMediaElement::LookupMediaElementURITable (CVE-2013-1684) o Heap-use-after-free in nsIDocument::GetRootElement (CVE-2013-1685) o Heap-use-after-free in mozilla::ResetDir (CVE-2013-1686) * MFSA 2013-51 / CVE-2013-1687: Security researcher Mariusz Mlynski reported that it is possible to compile a user-defined function in the XBL scope of a specific element and then trigger an event within this scope to run code. In some circumstances, when this code is run, it can access content protected by System Only Wrappers (SOW) and chrome-privileged pages. This could potentially lead to arbitrary code execution. Additionally, Chrome Object Wrappers (COW) can be bypassed by web content to access privileged methods, leading to a cross-site scripting (XSS) attack from privileged pages. * MFSA 2013-53 / CVE-2013-1690: Security researcher Nils reported that specially crafted web content using the onreadystatechange event and reloading of pages could sometimes cause a crash when unmapped memory is executed. This crash is potentially exploitable. * MFSA 2013-54 / CVE-2013-1692: Security researcher Johnathan Kuskos reported that Firefox is sending data in the body of XMLHttpRequest (XHR) HEAD requests, which goes agains the XHR specification. This can potentially be used for Cross-Site Request Forgery (CSRF) attacks against sites which do not distinguish between HEAD and POST requests. * MFSA 2013-55 / CVE-2013-1693: Security researcher Paul Stone of Context Information Security discovered that timing differences in the processing of SVG format images with filters could allow for pixel values to be read. This could potentially allow for text values to be read across domains, leading to information disclosure. * MFSA 2013-59 / CVE-2013-1697: Mozilla security researcher moz_bug_r_a4 reported that XrayWrappers can be bypassed to call content-defined toString and valueOf methods through DefaultValue. This can lead to unexpected behavior when privileged code acts on the incorrect values. Security Issue references: * CVE-2013-1682 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1682 > * CVE-2013-1684 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1684 > * CVE-2013-1685 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1685 > * CVE-2013-1686 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1686 > * CVE-2013-1687 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1687 > * CVE-2013-1690 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1690 > * CVE-2013-1692 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1692 > * CVE-2013-1693 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1693 > * CVE-2013-1697 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1697 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 11 SP2 for VMware: zypper in -t patch slessp2-firefox-20130628-7976 - SUSE Linux Enterprise Server 11 SP2: zypper in -t patch slessp2-firefox-20130628-7976 - SUSE Linux Enterprise Server 11 SP1 for VMware LTSS: zypper in -t patch slessp1-firefox-20130628-7977 - SUSE Linux Enterprise Server 11 SP1 LTSS: zypper in -t patch slessp1-firefox-20130628-7977 - SUSE Linux Enterprise Desktop 11 SP2: zypper in -t patch sledsp2-firefox-20130628-7976 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Server 11 SP2 for VMware (i586 x86_64) [New Version: 17.0.7esr]: MozillaFirefox-17.0.7esr-0.3.1 MozillaFirefox-translations-17.0.7esr-0.3.1 - SUSE Linux Enterprise Server 11 SP2 (i586 ia64 ppc64 s390x x86_64) [New Version: 17.0.7esr]: MozillaFirefox-17.0.7esr-0.3.1 MozillaFirefox-branding-SLED-7-0.6.9.31 MozillaFirefox-translations-17.0.7esr-0.3.1 - SUSE Linux Enterprise Server 11 SP1 for VMware LTSS (i586 x86_64) [New Version: 17.0.7esr]: MozillaFirefox-17.0.7esr-0.3.1 MozillaFirefox-translations-17.0.7esr-0.3.1 - SUSE Linux Enterprise Server 11 SP1 LTSS (i586 s390x x86_64) [New Version: 17.0.7esr and 7]: MozillaFirefox-17.0.7esr-0.3.1 MozillaFirefox-branding-SLED-7-0.6.9.31 MozillaFirefox-translations-17.0.7esr-0.3.1 - SUSE Linux Enterprise Server 10 SP4 (i586 ia64 ppc s390x) [New Version: 17.0.7esr and 7]: MozillaFirefox-17.0.7esr-0.6.1 MozillaFirefox-branding-SLED-7-0.10.28 MozillaFirefox-translations-17.0.7esr-0.6.1 - SUSE Linux Enterprise Desktop 11 SP2 (i586 x86_64) [New Version: 17.0.7esr]: MozillaFirefox-17.0.7esr-0.3.1 MozillaFirefox-branding-SLED-7-0.6.9.31 MozillaFirefox-translations-17.0.7esr-0.3.1 - SUSE Linux Enterprise Desktop 10 SP4 (i586) [New Version: 17.0.7esr and 7]: MozillaFirefox-17.0.7esr-0.6.1 MozillaFirefox-branding-SLED-7-0.10.28 MozillaFirefox-translations-17.0.7esr-0.6.1 - SLE SDK 10 SP4 (i586 ia64 ppc s390x): MozillaFirefox-branding-upstream-17.0.7esr-0.6.1 References: http://support.novell.com/security/cve/CVE-2013-1682.html http://support.novell.com/security/cve/CVE-2013-1684.html http://support.novell.com/security/cve/CVE-2013-1685.html http://support.novell.com/security/cve/CVE-2013-1686.html http://support.novell.com/security/cve/CVE-2013-1687.html http://support.novell.com/security/cve/CVE-2013-1690.html http://support.novell.com/security/cve/CVE-2013-1692.html http://support.novell.com/security/cve/CVE-2013-1693.html http://support.novell.com/security/cve/CVE-2013-1697.html https://bugzilla.novell.com/825935 http://download.novell.com/patch/finder/?keywords=061026413fe3bb69a7f42e0b7… http://download.novell.com/patch/finder/?keywords=1133af3aaf996a7684d227efb… http://download.novell.com/patch/finder/?keywords=7d0f6003f49140e3d5ad8c675… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2013:1152-1: important: Security update for Mozilla Firefox
by opensuse-security＠opensuse.org 05 Jul '13

05 Jul '13

SUSE Security Update: Security update for Mozilla Firefox ______________________________________________________________________________ Announcement ID: SUSE-SU-2013:1152-1 Rating: important References: #792432 #813026 #819204 #825935 Cross-References: CVE-2013-1682 CVE-2013-1684 CVE-2013-1685 CVE-2013-1686 CVE-2013-1687 CVE-2013-1690 CVE-2013-1692 CVE-2013-1693 CVE-2013-1697 Affected Products: SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Server 11 SP3 for VMware SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Desktop 11 SP3 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. It includes one version update. Description: Mozilla Firefox has been updated to the 17.0.7 ESR version, which fixes bugs and security fixes. * MFSA 2013-49: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code. Gary Kwong, Jesse Ruderman, and Andrew McCreight reported memory safety problems and crashes that affect Firefox ESR 17, and Firefox 21. (CVE-2013-1682) * MFSA 2013-50: Security researcher Abhishek Arya (Inferno) of the Google Chrome Security Team used the Address Sanitizer tool to discover a series of use-after-free problems rated critical as security issues in shipped software. Some of these issues are potentially exploitable, allowing for remote code execution. We would also like to thank Abhishek for reporting additional use-after-free and buffer overflow flaws in code introduced during Firefox development. These were fixed before general release. o Heap-use-after-free in mozilla::dom::HTMLMediaElement::LookupMediaElementURITable (CVE-2013-1684) o Heap-use-after-free in nsIDocument::GetRootElement (CVE-2013-1685) o Heap-use-after-free in mozilla::ResetDir (CVE-2013-1686) * MFSA 2013-51 / CVE-2013-1687: Security researcher Mariusz Mlynski reported that it is possible to compile a user-defined function in the XBL scope of a specific element and then trigger an event within this scope to run code. In some circumstances, when this code is run, it can access content protected by System Only Wrappers (SOW) and chrome-privileged pages. This could potentially lead to arbitrary code execution. Additionally, Chrome Object Wrappers (COW) can be bypassed by web content to access privileged methods, leading to a cross-site scripting (XSS) attack from privileged pages. * MFSA 2013-53 / CVE-2013-1690: Security researcher Nils reported that specially crafted web content using the onreadystatechange event and reloading of pages could sometimes cause a crash when unmapped memory is executed. This crash is potentially exploitable. * MFSA 2013-54 / CVE-2013-1692: Security researcher Johnathan Kuskos reported that Firefox is sending data in the body of XMLHttpRequest (XHR) HEAD requests, which goes agains the XHR specification. This can potentially be used for Cross-Site Request Forgery (CSRF) attacks against sites which do not distinguish between HEAD and POST requests. * MFSA 2013-55 / CVE-2013-1693: Security researcher Paul Stone of Context Information Security discovered that timing differences in the processing of SVG format images with filters could allow for pixel values to be read. This could potentially allow for text values to be read across domains, leading to information disclosure. * MFSA 2013-59 / CVE-2013-1697: Mozilla security researcher moz_bug_r_a4 reported that XrayWrappers can be bypassed to call content-defined toString and valueOf methods through DefaultValue. This can lead to unexpected behavior when privileged code acts on the incorrect values. * MFSA 2013-30: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code. Olli Pettay, Jesse Ruderman, Boris Zbarsky, Christian Holler, Milan Sreckovic, and Joe Drew reported memory safety problems and crashes that affect Firefox ESR 17, and Firefox 19. (CVE-2013-0788) * MFSA 2013-31 / CVE-2013-0800: Security researcher Abhishek Arya (Inferno) of the Google Chrome Security Team used the Address Sanitizer tool to discover an out-of-bounds write in Cairo graphics library. When certain values are passed to it during rendering, Cairo attempts to use negative boundaries or sizes for boxes, leading to a potentially exploitable crash in some instances. * MFSA 2013-32 / CVE-2013-0799: Security researcher Frederic Hoguin discovered that the Mozilla Maintenance Service on Windows was vulnerable to a buffer overflow. This system is used to update software without invoking the User Account Control (UAC) prompt. The Mozilla Maintenance Service is configured to allow unprivileged users to start it with arbitrary arguments. By manipulating the data passed in these arguments, an attacker can execute arbitrary code with the system privileges used by the service. This issue requires local file system access to be exploitable. * MFSA 2013-34 / CVE-2013-0797: Security researcher Ash reported an issue with the Mozilla Updater. The Mozilla Updater can be made to load a malicious local DLL file in a privileged context through either the Mozilla Maintenance Service or independently on systems that do not use the service. This occurs when the DLL file is placed in a specific location on the local system before the Mozilla Updater is run. Local file system access is necessary in order for this issue to be exploitable. * MFSA 2013-35 / CVE-2013-0796: Security researcher miaubiz used the Address Sanitizer tool to discover a crash in WebGL rendering when memory is freed that has not previously been allocated. This issue only affects Linux users who have Intel Mesa graphics drivers. The resulting crash could be potentially exploitable. * MFSA 2013-36 / CVE-2013-0795: Security researcher Cody Crews reported a mechanism to use the cloneNode method to bypass System Only Wrappers (SOW) and clone a protected node. This allows violation of the browser's same origin policy and could also lead to privilege escalation and the execution of arbitrary code. * MFSA 2013-37 / CVE-2013-0794: Security researcher shutdown reported a method for removing the origin indication on tab-modal dialog boxes in combination with browser navigation. This could allow an attacker's dialog to overlay a page and show another site's content. This can be used for phishing by allowing users to enter data into a modal prompt dialog on an attacking, site while appearing to be from the displayed site. * MFSA 2013-38 / CVE-2013-0793: Security researcher Mariusz Mlynski reported a method to use browser navigations through history to load an arbitrary website with that page's baseURI property pointing to another site instead of the seemingly loaded one. The user will continue to see the incorrect site in the addressbar of the browser. This allows for a cross-site scripting (XSS) attack or the theft of data through a phishing attack. * MFSA 2013-39 / CVE-2013-0792: Mozilla community member Tobias Schula reported that if gfx.color_management.enablev4 preference is enabled manually in about:config, some grayscale PNG images will be rendered incorrectly and cause memory corruption during PNG decoding when certain color profiles are in use. A crafted PNG image could use this flaw to leak data through rendered images drawing from random memory. By default, this preference is not enabled. * MFSA 2013-40 / CVE-2013-0791: Mozilla community member Ambroz Bizjak reported an out-of-bounds array read in the CERT_DecodeCertPackage function of the Network Security Services (NSS) libary when decoding a certificate. When this occurs, it will lead to memory corruption and a non-exploitable crash. * MFSA 2013-41: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code. References o Christoph Diehl, Christian Holler, Jesse Ruderman, Timothy Nikkel, and Jeff Walden reported memory safety problems and crashes that affect Firefox ESR 17, and Firefox 20. o Bob Clary, Ben Turner, Benoit Jacob, Bobby Holley, Christoph Diehl, Christian Holler, Andrew McCreight, Gary Kwong, Jason Orendorff, Jesse Ruderman, Matt Wobensmith, and Mats Palmgren reported memory safety problems and crashes that affect Firefox 20. * MFSA 2013-42 / CVE-2013-1670: Security researcher Cody Crews reported a method to call a content level constructor that allows for this constructor to have chrome privileged accesss. This affects chrome object wrappers (COW) and allows for write actions on objects when only read actions should be allowed. This can lead to cross-site scripting (XSS) attacks. * MFSA 2013-43 / CVE-2013-1671: Mozilla security researcher moz_bug_r_a4 reported a mechanism to exploit the control when set to the file type in order to get the full path. This can lead to information leakage and could be combined with other exploits to target attacks on the local file system. * MFSA 2013-44 / CVE-2013-1672: Security researcher Seb Patane reported an issue with the Mozilla Maintenance Service on Windows. This issue allows unprivileged users to local privilege escalation through the system privileges used by the service when interacting with local malicious software. This allows the user to bypass integrity checks leading to local privilege escalation. Local file system access is necessary in order for this issue to be exploitable and it cannot be triggered through web content. * MFSA 2013-45: Security researcher Robert Kugler discovered that in some instances the Mozilla Maintenance Service on Windows will be vulnerable to some previously fixed privilege escalation attacks that allowed for local privilege escalation. This was caused by the Mozilla Updater not updating Windows Registry entries for the Mozilla Maintenance Service, which fixed the earlier issues present if Firefox 12 had been installed. New installations of Firefox after version 12 are not affected by this issue. Local file system access is necessary in order for this issue to be exploitable and it cannot be triggered through web content. References: - old MozillaMaintenance Service registry entry not updated leading to Trusted Path Privilege Escalation (CVE-2013-1673) - Possible Arbitrary Code Execution by Update Service (CVE-2012-1942) * MFSA 2013-46 / CVE-2013-1674: Security researcher Nils reported a use-after-free when resizing video while playing. This could allow for arbitrary code execution. * MFSA 2013-47 / CVE-2013-1675: Mozilla community member Ms2ger discovered that some DOMSVGZoomEvent functions are used without being properly initialized, causing uninitialized memory to be used when they are called by web content. This could lead to a information leakage to sites depending on the contents of this uninitialized memory. * MFSA 2013-48: Security researcher Abhishek Arya (Inferno) of the Google Chrome Security Team used the Address Sanitizer tool to discover a series of use-after-free, out of bounds read, and invalid write problems rated as moderate to critical as security issues in shipped software. Some of these issues are potentially exploitable, allowing for remote code execution. We would also like to thank Abhishek for reporting additional use-after-free flaws in dir=auto code introduced during Firefox development. These were fixed before general release. References o Out of Bounds Read in SelectionIterator::GetNextSegment (CVE-2013-1676) o Out-of-bound read in gfxSkipCharsIterator::SetOffsets (CVE-2013-1677)) o Invalid write in _cairo_xlib_surface_add_glyph (CVE-2013-1678) o Heap-use-after-free in mozilla::plugins::child::_geturlnotify (CVE-2013-1679) o Heap-use-after-free in nsFrameList::FirstChild (CVE-2013-1680) o Heap-use-after-free in nsContentUtils::RemoveScriptBlocker (CVE-2013-1681) * CVE-2012-1942 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1942 > * CVE-2013-0788 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0788 > * CVE-2013-0791 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0791 > * CVE-2013-0792 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0792 > * CVE-2013-0793 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0793 > * CVE-2013-0794 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0794 > * CVE-2013-0795 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0795 > * CVE-2013-0796 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0796 > * CVE-2013-0797 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0797 > * CVE-2013-0798 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0798 > * CVE-2013-0799 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0799 > * CVE-2013-0800 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0800 > * CVE-2013-0801 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0801 > * CVE-2013-1669 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1669 > * CVE-2013-1670 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1670 > * CVE-2013-1671 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1671 > * CVE-2013-1672 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1672 > * CVE-2013-1673 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1673 > * CVE-2013-1674 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1674 > * CVE-2013-1675 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1675 > * CVE-2013-1676 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1676 > * CVE-2013-1677 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1677 > * CVE-2013-1678 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1678 > * CVE-2013-1679 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1679 > * CVE-2013-1680 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1680 > * CVE-2013-1681 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1681 > * CVE-2013-1682 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1682 > * CVE-2013-1684 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1684 > * CVE-2013-1685 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1685 > * CVE-2013-1686 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1686 > * CVE-2013-1687 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1687 > * CVE-2013-1690 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1690 > * CVE-2013-1692 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1692 > * CVE-2013-1693 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1693 > * CVE-2013-1697 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1697 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11 SP3: zypper in -t patch sdksp3-firefox-20130628-8001 - SUSE Linux Enterprise Server 11 SP3 for VMware: zypper in -t patch slessp3-firefox-20130628-8001 - SUSE Linux Enterprise Server 11 SP3: zypper in -t patch slessp3-firefox-20130628-8001 - SUSE Linux Enterprise Desktop 11 SP3: zypper in -t patch sledsp3-firefox-20130628-8001 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11 SP3 (i586 ia64 ppc64 s390x x86_64): MozillaFirefox-devel-17.0.7esr-0.8.1 - SUSE Linux Enterprise Server 11 SP3 for VMware (i586 x86_64) [New Version: 17.0.7esr]: MozillaFirefox-17.0.7esr-0.8.1 MozillaFirefox-translations-17.0.7esr-0.8.1 - SUSE Linux Enterprise Server 11 SP3 (i586 ia64 ppc64 s390x x86_64) [New Version: 17.0.7esr]: MozillaFirefox-17.0.7esr-0.8.1 MozillaFirefox-branding-SLED-7-0.12.1 MozillaFirefox-translations-17.0.7esr-0.8.1 - SUSE Linux Enterprise Desktop 11 SP3 (i586 x86_64) [New Version: 17.0.7esr]: MozillaFirefox-17.0.7esr-0.8.1 MozillaFirefox-branding-SLED-7-0.12.1 MozillaFirefox-translations-17.0.7esr-0.8.1 References: http://support.novell.com/security/cve/CVE-2013-1682.html http://support.novell.com/security/cve/CVE-2013-1684.html http://support.novell.com/security/cve/CVE-2013-1685.html http://support.novell.com/security/cve/CVE-2013-1686.html http://support.novell.com/security/cve/CVE-2013-1687.html http://support.novell.com/security/cve/CVE-2013-1690.html http://support.novell.com/security/cve/CVE-2013-1692.html http://support.novell.com/security/cve/CVE-2013-1693.html http://support.novell.com/security/cve/CVE-2013-1697.html https://bugzilla.novell.com/792432 https://bugzilla.novell.com/813026 https://bugzilla.novell.com/819204 https://bugzilla.novell.com/825935 http://download.novell.com/patch/finder/?keywords=2c55ef365e2022c62abed41b2… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2013:1151-1: important: Security update for Linux kernel
by opensuse-security＠opensuse.org 05 Jul '13

05 Jul '13

SUSE Security Update: Security update for Linux kernel ______________________________________________________________________________ Announcement ID: SUSE-SU-2013:1151-1 Rating: important References: #825657 Affected Products: SUSE Linux Enterprise Server 11 SP2 for VMware SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise High Availability Extension 11 SP2 SUSE Linux Enterprise Desktop 11 SP2 SLE 11 SERVER Unsupported Extras ______________________________________________________________________________ An update that contains security fixes can now be installed. It includes one version update. Description: The SUSE Linux Enterprise 11 Service Pack 2 kernel was respun with the 3.0.80 update to fix a severe compatibility problem with kernel module packages (KMPs) like e.g. drbd. An incompatible ABI change could lead to those modules not correctly working or crashing on loading and is fixed by this update. Indications: Everyone using the Linux Kernel on x86_64 architecture should update. Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 11 SP2 for VMware: zypper in -t patch slessp2-kernel-7954 slessp2-kernel-7960 - SUSE Linux Enterprise Server 11 SP2: zypper in -t patch slessp2-kernel-7954 slessp2-kernel-7957 slessp2-kernel-7958 slessp2-kernel-7959 slessp2-kernel-7960 - SUSE Linux Enterprise High Availability Extension 11 SP2: zypper in -t patch sleshasp2-kernel-7954 sleshasp2-kernel-7957 sleshasp2-kernel-7958 sleshasp2-kernel-7959 sleshasp2-kernel-7960 - SUSE Linux Enterprise Desktop 11 SP2: zypper in -t patch sledsp2-kernel-7954 sledsp2-kernel-7960 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Server 11 SP2 for VMware (i586 x86_64) [New Version: 3.0.80]: kernel-default-3.0.80-0.7.1 kernel-default-base-3.0.80-0.7.1 kernel-default-devel-3.0.80-0.7.1 kernel-source-3.0.80-0.7.1 kernel-syms-3.0.80-0.7.1 kernel-trace-3.0.80-0.7.1 kernel-trace-base-3.0.80-0.7.1 kernel-trace-devel-3.0.80-0.7.1 kernel-xen-devel-3.0.80-0.7.1 - SUSE Linux Enterprise Server 11 SP2 for VMware (x86_64): xen-kmp-trace-4.1.5_02_3.0.80_0.7-0.5.18 - SUSE Linux Enterprise Server 11 SP2 for VMware (i586) [New Version: 3.0.80]: kernel-pae-3.0.80-0.7.1 kernel-pae-base-3.0.80-0.7.1 kernel-pae-devel-3.0.80-0.7.1 - SUSE Linux Enterprise Server 11 SP2 (i586 ia64 ppc64 s390x x86_64) [New Version: 3.0.80]: kernel-default-3.0.80-0.7.1 kernel-default-base-3.0.80-0.7.1 kernel-default-devel-3.0.80-0.7.1 kernel-source-3.0.80-0.7.1 kernel-syms-3.0.80-0.7.1 kernel-trace-3.0.80-0.7.1 kernel-trace-base-3.0.80-0.7.1 kernel-trace-devel-3.0.80-0.7.1 - SUSE Linux Enterprise Server 11 SP2 (i586 x86_64) [New Version: 3.0.80]: kernel-ec2-3.0.80-0.7.1 kernel-ec2-base-3.0.80-0.7.1 kernel-ec2-devel-3.0.80-0.7.1 kernel-xen-3.0.80-0.7.1 kernel-xen-base-3.0.80-0.7.1 kernel-xen-devel-3.0.80-0.7.1 - SUSE Linux Enterprise Server 11 SP2 (x86_64): xen-kmp-default-4.1.5_02_3.0.80_0.7-0.5.18 xen-kmp-trace-4.1.5_02_3.0.80_0.7-0.5.18 - SUSE Linux Enterprise Server 11 SP2 (s390x) [New Version: 3.0.80]: kernel-default-man-3.0.80-0.7.1 - SUSE Linux Enterprise Server 11 SP2 (ppc64) [New Version: 3.0.80]: kernel-ppc64-3.0.80-0.7.1 kernel-ppc64-base-3.0.80-0.7.1 kernel-ppc64-devel-3.0.80-0.7.1 - SUSE Linux Enterprise Server 11 SP2 (i586) [New Version: 3.0.80]: kernel-pae-3.0.80-0.7.1 kernel-pae-base-3.0.80-0.7.1 kernel-pae-devel-3.0.80-0.7.1 - SUSE Linux Enterprise High Availability Extension 11 SP2 (i586 ia64 ppc64 s390x x86_64): cluster-network-kmp-default-1.4_3.0.80_0.7-2.18.51 cluster-network-kmp-trace-1.4_3.0.80_0.7-2.18.51 gfs2-kmp-default-2_3.0.80_0.7-0.7.81 gfs2-kmp-trace-2_3.0.80_0.7-0.7.81 ocfs2-kmp-default-1.6_3.0.80_0.7-0.11.50 ocfs2-kmp-trace-1.6_3.0.80_0.7-0.11.50 - SUSE Linux Enterprise High Availability Extension 11 SP2 (i586 x86_64): cluster-network-kmp-xen-1.4_3.0.80_0.7-2.18.51 gfs2-kmp-xen-2_3.0.80_0.7-0.7.81 ocfs2-kmp-xen-1.6_3.0.80_0.7-0.11.50 - SUSE Linux Enterprise High Availability Extension 11 SP2 (ppc64): cluster-network-kmp-ppc64-1.4_3.0.80_0.7-2.18.51 gfs2-kmp-ppc64-2_3.0.80_0.7-0.7.81 ocfs2-kmp-ppc64-1.6_3.0.80_0.7-0.11.50 - SUSE Linux Enterprise High Availability Extension 11 SP2 (i586): cluster-network-kmp-pae-1.4_3.0.80_0.7-2.18.51 gfs2-kmp-pae-2_3.0.80_0.7-0.7.81 ocfs2-kmp-pae-1.6_3.0.80_0.7-0.11.50 - SUSE Linux Enterprise Desktop 11 SP2 (i586 x86_64) [New Version: 3.0.80]: kernel-default-3.0.80-0.7.1 kernel-default-base-3.0.80-0.7.1 kernel-default-devel-3.0.80-0.7.1 kernel-default-extra-3.0.80-0.7.1 kernel-source-3.0.80-0.7.1 kernel-syms-3.0.80-0.7.1 kernel-trace-3.0.80-0.7.1 kernel-trace-base-3.0.80-0.7.1 kernel-trace-devel-3.0.80-0.7.1 kernel-trace-extra-3.0.80-0.7.1 kernel-xen-3.0.80-0.7.1 kernel-xen-base-3.0.80-0.7.1 kernel-xen-devel-3.0.80-0.7.1 kernel-xen-extra-3.0.80-0.7.1 - SUSE Linux Enterprise Desktop 11 SP2 (x86_64): xen-kmp-default-4.1.5_02_3.0.80_0.7-0.5.18 xen-kmp-trace-4.1.5_02_3.0.80_0.7-0.5.18 - SUSE Linux Enterprise Desktop 11 SP2 (i586) [New Version: 3.0.80]: kernel-pae-3.0.80-0.7.1 kernel-pae-base-3.0.80-0.7.1 kernel-pae-devel-3.0.80-0.7.1 kernel-pae-extra-3.0.80-0.7.1 - SLE 11 SERVER Unsupported Extras (i586 ia64 ppc64 s390x x86_64): ext4-writeable-kmp-default-0_3.0.80_0.7-0.14.62 ext4-writeable-kmp-trace-0_3.0.80_0.7-0.14.62 kernel-default-extra-3.0.80-0.7.1 - SLE 11 SERVER Unsupported Extras (i586 x86_64): ext4-writeable-kmp-xen-0_3.0.80_0.7-0.14.62 kernel-xen-extra-3.0.80-0.7.1 - SLE 11 SERVER Unsupported Extras (ppc64): ext4-writeable-kmp-ppc64-0_3.0.80_0.7-0.14.62 kernel-ppc64-extra-3.0.80-0.7.1 - SLE 11 SERVER Unsupported Extras (i586): ext4-writeable-kmp-pae-0_3.0.80_0.7-0.14.62 kernel-pae-extra-3.0.80-0.7.1 References: https://bugzilla.novell.com/825657 http://download.novell.com/patch/finder/?keywords=2933fc1d318570fd29fc9c882… http://download.novell.com/patch/finder/?keywords=3979393609bc7fc0060c84d8f… http://download.novell.com/patch/finder/?keywords=42ff2be8ec2fb21f7d4946008… http://download.novell.com/patch/finder/?keywords=511f063f92e4fd065bc4f18cd… http://download.novell.com/patch/finder/?keywords=75d8104813f10db3bb35f4b6c… http://download.novell.com/patch/finder/?keywords=8e023846e9b2123c71d7008b4… http://download.novell.com/patch/finder/?keywords=94d76106e50952487c5aea15f… http://download.novell.com/patch/finder/?keywords=af79d110bc75684f84ac6baab… http://download.novell.com/patch/finder/?keywords=b60e1d289121ae78ca5a36000… http://download.novell.com/patch/finder/?keywords=f868176ad335455918aedbb96… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2013:1150-1: important: Security update for openswan
by opensuse-security＠opensuse.org 05 Jul '13

05 Jul '13

SUSE Security Update: Security update for openswan ______________________________________________________________________________ Announcement ID: SUSE-SU-2013:1150-1 Rating: important References: #824316 Cross-References: CVE-2013-2053 Affected Products: SUSE Linux Enterprise Server 11 SP2 for VMware SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 10 SP4 SUSE Linux Enterprise Desktop 10 SP4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This openswan update fixes a remote buffer overflow issue (bnc#824316 / CVE-2013-2053). Security Issue reference: * CVE-2013-2053 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2053 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 11 SP2 for VMware: zypper in -t patch slessp2-openswan-7925 - SUSE Linux Enterprise Server 11 SP2: zypper in -t patch slessp2-openswan-7925 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Server 11 SP2 for VMware (i586 x86_64): openswan-2.6.16-1.38.1 openswan-doc-2.6.16-1.38.1 - SUSE Linux Enterprise Server 11 SP2 (i586 ia64 ppc64 s390x x86_64): openswan-2.6.16-1.38.1 openswan-doc-2.6.16-1.38.1 - SUSE Linux Enterprise Server 10 SP4 (i586 ia64 ppc s390x x86_64): openswan-2.4.4-18.21.1 - SUSE Linux Enterprise Desktop 10 SP4 (i586 x86_64): openswan-2.4.4-18.21.1 References: http://support.novell.com/security/cve/CVE-2013-2053.html https://bugzilla.novell.com/824316 http://download.novell.com/patch/finder/?keywords=4e623ae4a993ce51b1b6b7d9b… http://download.novell.com/patch/finder/?keywords=f043270acc009a30fe4516ffd… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2013:1060-2: important: Security update for GnuTLS
by opensuse-security＠opensuse.org 04 Jul '13

04 Jul '13

SUSE Security Update: Security update for GnuTLS ______________________________________________________________________________ Announcement ID: SUSE-SU-2013:1060-2 Rating: important References: #821818 Cross-References: CVE-2013-2116 Affected Products: SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Server 11 SP3 for VMware SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise High Availability Extension 11 SP3 SUSE Linux Enterprise Desktop 11 SP3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update of GnuTLS fixes a regression introduced by the previous update that could have resulted in a Denial of Service (application crash). Security Issue reference: * CVE-2013-2116 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2116 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11 SP3: zypper in -t patch sdksp3-gnutls-7918 - SUSE Linux Enterprise Server 11 SP3 for VMware: zypper in -t patch slessp3-gnutls-7918 - SUSE Linux Enterprise Server 11 SP3: zypper in -t patch slessp3-gnutls-7918 - SUSE Linux Enterprise High Availability Extension 11 SP3: zypper in -t patch slehasp3-gnutls-7918 - SUSE Linux Enterprise Desktop 11 SP3: zypper in -t patch sledsp3-gnutls-7918 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11 SP3 (i586 ia64 ppc64 s390x x86_64): libgnutls-devel-2.4.1-24.39.47.1 libgnutls-extra-devel-2.4.1-24.39.47.1 libgnutls-extra26-2.4.1-24.39.47.1 - SUSE Linux Enterprise Server 11 SP3 for VMware (i586 x86_64): gnutls-2.4.1-24.39.47.1 libgnutls-extra26-2.4.1-24.39.47.1 libgnutls26-2.4.1-24.39.47.1 - SUSE Linux Enterprise Server 11 SP3 for VMware (x86_64): libgnutls26-32bit-2.4.1-24.39.47.1 - SUSE Linux Enterprise Server 11 SP3 (i586 ia64 ppc64 s390x x86_64): gnutls-2.4.1-24.39.47.1 libgnutls-extra26-2.4.1-24.39.47.1 libgnutls26-2.4.1-24.39.47.1 - SUSE Linux Enterprise Server 11 SP3 (ppc64 s390x x86_64): libgnutls26-32bit-2.4.1-24.39.47.1 - SUSE Linux Enterprise Server 11 SP3 (ia64): libgnutls26-x86-2.4.1-24.39.47.1 - SUSE Linux Enterprise High Availability Extension 11 SP3 (i586 ia64 ppc64 s390x x86_64): libgnutls-extra26-2.4.1-24.39.47.1 - SUSE Linux Enterprise Desktop 11 SP3 (i586 x86_64): gnutls-2.4.1-24.39.47.1 libgnutls26-2.4.1-24.39.47.1 - SUSE Linux Enterprise Desktop 11 SP3 (x86_64): libgnutls26-32bit-2.4.1-24.39.47.1 References: http://support.novell.com/security/cve/CVE-2013-2116.html https://bugzilla.novell.com/821818 http://download.novell.com/patch/finder/?keywords=adf9719f0b0ed0da7989b5e53… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2013:1143-1: important: xulrunner: 17.0.7esr
by opensuse-security＠opensuse.org 04 Jul '13

04 Jul '13

openSUSE Security Update: xulrunner: 17.0.7esr ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1143-1 Rating: important References: #825935 Cross-References: CVE-2013-1682 CVE-2013-1684 CVE-2013-1685 CVE-2013-1686 CVE-2013-1687 CVE-2013-1690 CVE-2013-1692 CVE-2013-1693 CVE-2013-1694 CVE-2013-1697 Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that fixes 10 vulnerabilities is now available. Description: Mozilla xulrunner was update to 17.0.7esr (bnc#825935) Security issues fixed: * MFSA 2013-49/CVE-2013-1682 Miscellaneous memory safety hazards * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686 Memory corruption found using Address Sanitizer * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823) Privileged content access and execution via XBL * MFSA 2013-53/CVE-2013-1690 (bmo#857883) Execution of unmapped memory through onreadystatechange event * MFSA 2013-54/CVE-2013-1692 (bmo#866915) Data in the body of XHR HEAD requests leads to CSRF attacks * MFSA 2013-55/CVE-2013-1693 (bmo#711043) SVG filters can lead to information disclosure * MFSA 2013-56/CVE-2013-1694 (bmo#848535) PreserveWrapper has inconsistent behavior * MFSA 2013-59/CVE-2013-1697 (bmo#858101) XrayWrappers can be bypassed to run user defined methods in a privileged context Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-555 - openSUSE 12.2: zypper in -t patch openSUSE-2013-555 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): mozilla-js-17.0.7-1.20.1 mozilla-js-debuginfo-17.0.7-1.20.1 xulrunner-17.0.7-1.20.1 xulrunner-buildsymbols-17.0.7-1.20.1 xulrunner-debuginfo-17.0.7-1.20.1 xulrunner-debugsource-17.0.7-1.20.1 xulrunner-devel-17.0.7-1.20.1 xulrunner-devel-debuginfo-17.0.7-1.20.1 - openSUSE 12.3 (x86_64): mozilla-js-32bit-17.0.7-1.20.1 mozilla-js-debuginfo-32bit-17.0.7-1.20.1 xulrunner-32bit-17.0.7-1.20.1 xulrunner-debuginfo-32bit-17.0.7-1.20.1 - openSUSE 12.2 (i586 x86_64): mozilla-js-17.0.7-2.46.1 mozilla-js-debuginfo-17.0.7-2.46.1 xulrunner-17.0.7-2.46.1 xulrunner-buildsymbols-17.0.7-2.46.1 xulrunner-debuginfo-17.0.7-2.46.1 xulrunner-debugsource-17.0.7-2.46.1 xulrunner-devel-17.0.7-2.46.1 xulrunner-devel-debuginfo-17.0.7-2.46.1 - openSUSE 12.2 (x86_64): mozilla-js-32bit-17.0.7-2.46.1 mozilla-js-debuginfo-32bit-17.0.7-2.46.1 xulrunner-32bit-17.0.7-2.46.1 xulrunner-debuginfo-32bit-17.0.7-2.46.1 References: http://support.novell.com/security/cve/CVE-2013-1682.html http://support.novell.com/security/cve/CVE-2013-1684.html http://support.novell.com/security/cve/CVE-2013-1685.html http://support.novell.com/security/cve/CVE-2013-1686.html http://support.novell.com/security/cve/CVE-2013-1687.html http://support.novell.com/security/cve/CVE-2013-1690.html http://support.novell.com/security/cve/CVE-2013-1692.html http://support.novell.com/security/cve/CVE-2013-1693.html http://support.novell.com/security/cve/CVE-2013-1694.html http://support.novell.com/security/cve/CVE-2013-1697.html https://bugzilla.novell.com/825935 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2013:1142-1: important: MozillaFirefox: Update to Firefox 22.0 release
by opensuse-security＠opensuse.org 04 Jul '13

04 Jul '13

openSUSE Security Update: MozillaFirefox: Update to Firefox 22.0 release ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1142-1 Rating: important References: #825935 Cross-References: CVE-2013-1682 CVE-2013-1683 CVE-2013-1684 CVE-2013-1685 CVE-2013-1686 CVE-2013-1687 CVE-2013-1688 CVE-2013-1690 CVE-2013-1692 CVE-2013-1693 CVE-2013-1694 CVE-2013-1695 CVE-2013-1696 CVE-2013-1697 CVE-2013-1698 CVE-2013-1699 Affected Products: openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that fixes 16 vulnerabilities is now available. Description: MozillaFirefox was updated to Firefox 22.0 (bnc#825935) Following security issues were fixed: * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683 Miscellaneous memory safety hazards * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686 Memory corruption found using Address Sanitizer * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823) Privileged content access and execution via XBL * MFSA 2013-52/CVE-2013-1688 (bmo#873966) Arbitrary code execution within Profiler * MFSA 2013-53/CVE-2013-1690 (bmo#857883) Execution of unmapped memory through onreadystatechange event * MFSA 2013-54/CVE-2013-1692 (bmo#866915) Data in the body of XHR HEAD requests leads to CSRF attacks * MFSA 2013-55/CVE-2013-1693 (bmo#711043) SVG filters can lead to information disclosure * MFSA 2013-56/CVE-2013-1694 (bmo#848535) PreserveWrapper has inconsistent behavior * MFSA 2013-57/CVE-2013-1695 (bmo#849791) Sandbox restrictions not applied to nested frame elements * MFSA 2013-58/CVE-2013-1696 (bmo#761667) X-Frame-Options ignored when using server push with multi-part responses * MFSA 2013-59/CVE-2013-1697 (bmo#858101) XrayWrappers can be bypassed to run user defined methods in a privileged context * MFSA 2013-60/CVE-2013-1698 (bmo#876044) getUserMedia permission dialog incorrectly displays location * MFSA 2013-61/CVE-2013-1699 (bmo#840882) Homograph domain spoofing in .com, .net and .name Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-556 - openSUSE 12.2: zypper in -t patch openSUSE-2013-556 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): MozillaFirefox-22.0-1.25.1 MozillaFirefox-branding-upstream-22.0-1.25.1 MozillaFirefox-buildsymbols-22.0-1.25.1 MozillaFirefox-debuginfo-22.0-1.25.1 MozillaFirefox-debugsource-22.0-1.25.1 MozillaFirefox-devel-22.0-1.25.1 MozillaFirefox-translations-common-22.0-1.25.1 MozillaFirefox-translations-other-22.0-1.25.1 mozilla-nspr-4.9.6-1.10.1 mozilla-nspr-debuginfo-4.9.6-1.10.1 mozilla-nspr-debugsource-4.9.6-1.10.1 mozilla-nspr-devel-4.9.6-1.10.1 - openSUSE 12.3 (x86_64): mozilla-nspr-32bit-4.9.6-1.10.1 mozilla-nspr-debuginfo-32bit-4.9.6-1.10.1 - openSUSE 12.2 (i586 x86_64): MozillaFirefox-22.0-2.51.1 MozillaFirefox-branding-upstream-22.0-2.51.1 MozillaFirefox-buildsymbols-22.0-2.51.1 MozillaFirefox-debuginfo-22.0-2.51.1 MozillaFirefox-debugsource-22.0-2.51.1 MozillaFirefox-devel-22.0-2.51.1 MozillaFirefox-translations-common-22.0-2.51.1 MozillaFirefox-translations-other-22.0-2.51.1 References: http://support.novell.com/security/cve/CVE-2013-1682.html http://support.novell.com/security/cve/CVE-2013-1683.html http://support.novell.com/security/cve/CVE-2013-1684.html http://support.novell.com/security/cve/CVE-2013-1685.html http://support.novell.com/security/cve/CVE-2013-1686.html http://support.novell.com/security/cve/CVE-2013-1687.html http://support.novell.com/security/cve/CVE-2013-1688.html http://support.novell.com/security/cve/CVE-2013-1690.html http://support.novell.com/security/cve/CVE-2013-1692.html http://support.novell.com/security/cve/CVE-2013-1693.html http://support.novell.com/security/cve/CVE-2013-1694.html http://support.novell.com/security/cve/CVE-2013-1695.html http://support.novell.com/security/cve/CVE-2013-1696.html http://support.novell.com/security/cve/CVE-2013-1697.html http://support.novell.com/security/cve/CVE-2013-1698.html http://support.novell.com/security/cve/CVE-2013-1699.html https://bugzilla.novell.com/825935 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0