March 2012 - openSUSE Security - openSUSE Mailing Lists

[opensuse-security] [SpamBLK] Authentication required for mail: [security-announce] openSUSE-SU-2012:0331-1: important: flash-player (rln9z0k8qbib59tjwecm)
by exp＠whitemail.de 07 Mar '12

07 Mar '12

(deutsche version, siehe unten) The following email has been queued: From: opensuse-security(a)opensuse.org To: exp(a)whitemail.de Subject: [security-announce] openSUSE-SU-2012:0331-1: important: flash-player Date: Wed Mar 7 17:09:37 2012 The person you tried to send this email to is using SpamBLK to prevent spam. SpamBLK is based on the dynamic whitelist technology. Only emails from known senders are accepted for delivery. To add your email address to the users address book and to allow further delivery of your email please click the link below: http://www.spamblk.net/cgi-bin/auth.pl?id=10004&token=rln9z0k8qbib59tjwecm&… If you don't click the link above your previous email will be deleted. -------------------------------------------------------------- :::::::::::::: DEUTSCHE VERSION ::::::::::::::: -------------------------------------------------------------- Sie haben versucht folgendes Email zu versenden: Von: opensuse-security(a)opensuse.org An: exp(a)whitemail.de Betreff: [security-announce] openSUSE-SU-2012:0331-1: important: flash-player Datum: Wed Mar 7 17:09:37 2012 Der Empfaenger dieser Email verwendet SpamBLK um effektiv gegen die Flut von Spam Emails vorzugehen. SpamBLK basiert auf dem dynamischen Whitelist Prinzip. Ausschliesslich Emails von, im Adressbuch des Users eingetragenen, Emailadressen werden diesem zugestellt. Um Ihre Emailadresse zum Adressbuch des Users hinzuzufuegen, muessen Sie auf den folgenden Link klicken. Ihre urspruengliche Email wird dann automatisch weitergeleitet. http://www.spamblk.de/cgi-bin/auth.pl?id=10004&token=rln9z0k8qbib59tjwecm&l… Sollten Sie den Link nicht anklicken so wird das oben aufgefuehrte Email geloescht und nicht an den Empfaenger ausgeliefert. ------------------------------------------------- : : : SpamBLK - The Ultimate Anti-Spam Solution (http://www.spamblk.de) : : : -- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-security+owner(a)opensuse.org

1 0

[opensuse-security] Re: [security-announce] SUSE-SU-2012:0325-1: important: Security update for puppet
by Mark Cowley 07 Mar '12

07 Mar '12

Hello Security Team, Today there were several security announcements such as the one below where a number of products are listed as "...SP1 FOR SP2". This seems like a mistake/bug so I wanted to bring it to your attention. Regards, Mark >>> On 3/6/2012 at 2:08 PM, in message <20120306210833.795893217D(a)maintenance.suse.de>, <opensuse-security(a)opensuse.org> wrote: > SUSE Security Update: Security update for puppet > ____________________________________________________________________________ > __ > > Announcement ID: SUSE-SU-2012:0325-1 > Rating: important > References: #747657 > Cross-References: CVE-2012-1053 CVE-2012-1054 > Affected Products: > SUSE Linux Enterprise Server 11 SP1 for VMware > SUSE Linux Enterprise Server 11 SP1 FOR SP2 > SUSE Linux Enterprise Server 11 SP1 > SUSE Linux Enterprise Desktop 11 SP1 FOR SP2 > SUSE Linux Enterprise Desktop 11 SP1 > ____________________________________________________________________________ > __ > > An update that fixes two vulnerabilities is now available. > It includes one version update. > > Description: > > > This update of puppet fixes two vulnerabilities that could > potentially be exploited by local attackers to escalate > privileges due to improper privilege dropping and file > handling issues (symlink flaws) in puppet (CVE-2012-1053, > CVE-2012-1054). > > Security Issue references: > > * CVE-2012-1053 > <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1053 > > > * CVE-2012-1054 > <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1054 > > > > > Patch Instructions: > > To install this SUSE Security Update use YaST online_update. > Alternatively you can run the command listed for your product: > > - SUSE Linux Enterprise Server 11 SP1 for VMware: > > zypper in -t patch slessp1-puppet-5876 > > - SUSE Linux Enterprise Server 11 SP1 FOR SP2: > > zypper in -t patch slessp1fsp2-puppet-5876 > > - SUSE Linux Enterprise Server 11 SP1: > > zypper in -t patch slessp1-puppet-5876 > > - SUSE Linux Enterprise Desktop 11 SP1 FOR SP2: > > zypper in -t patch sledsp1fsp2-puppet-5876 > > - SUSE Linux Enterprise Desktop 11 SP1: > > zypper in -t patch sledsp1-puppet-5876 > > To bring your system up-to-date, use "zypper patch". > > > Package List: > > - SUSE Linux Enterprise Server 11 SP1 for VMware (i586 x86_64) [New > Version: 2.6.12]: > > puppet-2.6.12-0.12.1 > puppet-server-2.6.12-0.12.1 > > - SUSE Linux Enterprise Server 11 SP1 FOR SP2 (i586 ia64 ppc64 s390x > x86_64) [New Version: 2.6.12]: > > puppet-2.6.12-0.12.1 > puppet-server-2.6.12-0.12.1 > > - SUSE Linux Enterprise Server 11 SP1 (i586 ia64 ppc64 s390x x86_64) [New > Version: 2.6.12]: > > puppet-2.6.12-0.12.1 > puppet-server-2.6.12-0.12.1 > > - SUSE Linux Enterprise Desktop 11 SP1 FOR SP2 (i586 x86_64) [New Version: > 2.6.12]: > > puppet-2.6.12-0.12.1 > > - SUSE Linux Enterprise Desktop 11 SP1 (i586 x86_64) [New Version: > 2.6.12]: > > puppet-2.6.12-0.12.1 > > > References: > > http://support.novell.com/security/cve/CVE-2012-1053.html > http://support.novell.com/security/cve/CVE-2012-1054.html > https://bugzilla.novell.com/747657 > > http://download.novell.com/patch/finder/?keywords=810c76edc7112af5e466c9d5b… > e5aa1 > > -- > To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org > For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org -- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-security+owner(a)opensuse.org

1 0

[opensuse-security] [SpamBLK] Authentication required for mail: [security-announce] SUSE-SU-2012:0326-1: important: Security update for libvorbis (wvecflmq7dusb4azjau8)
by exp＠whitemail.de 06 Mar '12

06 Mar '12

(deutsche version, siehe unten) The following email has been queued: From: opensuse-security(a)opensuse.org To: exp(a)whitemail.de Subject: [security-announce] SUSE-SU-2012:0326-1: important: Security update for libvorbis Date: Tue Mar 6 23:09:39 2012 The person you tried to send this email to is using SpamBLK to prevent spam. SpamBLK is based on the dynamic whitelist technology. Only emails from known senders are accepted for delivery. To add your email address to the users address book and to allow further delivery of your email please click the link below: http://www.spamblk.net/cgi-bin/auth.pl?id=10004&token=wvecflmq7dusb4azjau8&… If you don't click the link above your previous email will be deleted. -------------------------------------------------------------- :::::::::::::: DEUTSCHE VERSION ::::::::::::::: -------------------------------------------------------------- Sie haben versucht folgendes Email zu versenden: Von: opensuse-security(a)opensuse.org An: exp(a)whitemail.de Betreff: [security-announce] SUSE-SU-2012:0326-1: important: Security update for libvorbis Datum: Tue Mar 6 23:09:39 2012 Der Empfaenger dieser Email verwendet SpamBLK um effektiv gegen die Flut von Spam Emails vorzugehen. SpamBLK basiert auf dem dynamischen Whitelist Prinzip. Ausschliesslich Emails von, im Adressbuch des Users eingetragenen, Emailadressen werden diesem zugestellt. Um Ihre Emailadresse zum Adressbuch des Users hinzuzufuegen, muessen Sie auf den folgenden Link klicken. Ihre urspruengliche Email wird dann automatisch weitergeleitet. http://www.spamblk.de/cgi-bin/auth.pl?id=10004&token=wvecflmq7dusb4azjau8&l… Sollten Sie den Link nicht anklicken so wird das oben aufgefuehrte Email geloescht und nicht an den Empfaenger ausgeliefert. ------------------------------------------------- : : : SpamBLK - The Ultimate Anti-Spam Solution (http://www.spamblk.de) : : : -- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-security+owner(a)opensuse.org

1 0

[opensuse-security] [SpamBLK] Authentication required for mail: [security-announce] SUSE-SU-2012:0325-1: important: Security update for puppet (69qvtno0jjry99hecq0g)
by exp＠whitemail.de 06 Mar '12

06 Mar '12

(deutsche version, siehe unten) The following email has been queued: From: opensuse-security(a)opensuse.org To: exp(a)whitemail.de Subject: [security-announce] SUSE-SU-2012:0325-1: important: Security update for puppet Date: Tue Mar 6 22:09:29 2012 The person you tried to send this email to is using SpamBLK to prevent spam. SpamBLK is based on the dynamic whitelist technology. Only emails from known senders are accepted for delivery. To add your email address to the users address book and to allow further delivery of your email please click the link below: http://www.spamblk.net/cgi-bin/auth.pl?id=10004&token=69qvtno0jjry99hecq0g&… If you don't click the link above your previous email will be deleted. -------------------------------------------------------------- :::::::::::::: DEUTSCHE VERSION ::::::::::::::: -------------------------------------------------------------- Sie haben versucht folgendes Email zu versenden: Von: opensuse-security(a)opensuse.org An: exp(a)whitemail.de Betreff: [security-announce] SUSE-SU-2012:0325-1: important: Security update for puppet Datum: Tue Mar 6 22:09:29 2012 Der Empfaenger dieser Email verwendet SpamBLK um effektiv gegen die Flut von Spam Emails vorzugehen. SpamBLK basiert auf dem dynamischen Whitelist Prinzip. Ausschliesslich Emails von, im Adressbuch des Users eingetragenen, Emailadressen werden diesem zugestellt. Um Ihre Emailadresse zum Adressbuch des Users hinzuzufuegen, muessen Sie auf den folgenden Link klicken. Ihre urspruengliche Email wird dann automatisch weitergeleitet. http://www.spamblk.de/cgi-bin/auth.pl?id=10004&token=69qvtno0jjry99hecq0g&l… Sollten Sie den Link nicht anklicken so wird das oben aufgefuehrte Email geloescht und nicht an den Empfaenger ausgeliefert. ------------------------------------------------- : : : SpamBLK - The Ultimate Anti-Spam Solution (http://www.spamblk.de) : : : -- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-security+owner(a)opensuse.org

1 0

[opensuse-security] Albrecht Theurer/Haupt- und Personalamt/LHS/DE ist außer Haus.
by u10t005＠stuttgart.de 06 Mar '12

06 Mar '12

Ich werde ab 06.03.2012 nicht im Büro sein. Ich kehre zurück am 07.03.2012. -- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-security+owner(a)opensuse.org

1 0

[opensuse-security] [SpamBLK] Authentication required for mail: [security-announce] SUSE-SU-2012:0114-2: important: Security update for IBM Java 1.6.0 (x29u2dngxhrejss4aee6)
by exp＠whitemail.de 06 Mar '12

06 Mar '12

(deutsche version, siehe unten) The following email has been queued: From: opensuse-security(a)opensuse.org To: exp(a)whitemail.de Subject: [security-announce] SUSE-SU-2012:0114-2: important: Security update for IBM Java 1.6.0 Date: Tue Mar 6 21:10:26 2012 The person you tried to send this email to is using SpamBLK to prevent spam. SpamBLK is based on the dynamic whitelist technology. Only emails from known senders are accepted for delivery. To add your email address to the users address book and to allow further delivery of your email please click the link below: http://www.spamblk.net/cgi-bin/auth.pl?id=10004&token=x29u2dngxhrejss4aee6&… If you don't click the link above your previous email will be deleted. -------------------------------------------------------------- :::::::::::::: DEUTSCHE VERSION ::::::::::::::: -------------------------------------------------------------- Sie haben versucht folgendes Email zu versenden: Von: opensuse-security(a)opensuse.org An: exp(a)whitemail.de Betreff: [security-announce] SUSE-SU-2012:0114-2: important: Security update for IBM Java 1.6.0 Datum: Tue Mar 6 21:10:26 2012 Der Empfaenger dieser Email verwendet SpamBLK um effektiv gegen die Flut von Spam Emails vorzugehen. SpamBLK basiert auf dem dynamischen Whitelist Prinzip. Ausschliesslich Emails von, im Adressbuch des Users eingetragenen, Emailadressen werden diesem zugestellt. Um Ihre Emailadresse zum Adressbuch des Users hinzuzufuegen, muessen Sie auf den folgenden Link klicken. Ihre urspruengliche Email wird dann automatisch weitergeleitet. http://www.spamblk.de/cgi-bin/auth.pl?id=10004&token=x29u2dngxhrejss4aee6&l… Sollten Sie den Link nicht anklicken so wird das oben aufgefuehrte Email geloescht und nicht an den Empfaenger ausgeliefert. ------------------------------------------------- : : : SpamBLK - The Ultimate Anti-Spam Solution (http://www.spamblk.de) : : : -- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-security+owner(a)opensuse.org

1 0