October 2012 - openSUSE Security Announce

[security-announce] openSUSE-SU-2012:1330-1: important: kernel: security and bugfix update
by opensuse-security＠opensuse.org 12 Oct '12

12 Oct '12

openSUSE Security Update: kernel: security and bugfix update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1330-1 Rating: important References: #762693 #765230 #771392 #772566 #772831 #772923 #773406 #774523 #774859 #776925 #778630 #779432 #780624 #781134 Cross-References: CVE-2012-3412 CVE-2012-3520 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that solves two vulnerabilities and has 12 fixes is now available. Description: This kernel update to 3.4.11 fixes various bugs and security issues. The changes up to 3.4.11 contain both security and bugfixes and are not explicitly listed here. Following security issues were fixed: CVE-2012-3520: Force passing credentials, otherwise local services could be fooled to assume requests coming from root. CVE-2012-3412: Do not allow extreme TSO parameters in the sfc driver and tcp stack. Following non-security bugs were fixed: - nbd: clear waiting_queue on shutdown (bnc#778630). - NFS: avoid warning from nfs_drop_nlink (bnc#780624). - net: do not disable sg for packets requiring no checksum (bnc#774859). - sfc: Fix maximum number of TSO segments and minimum TX queue size (bnc#774523 CVE-2012-3412). - net: Allow driver to limit number of GSO segments per skb (bnc#774523 CVE-2012-3412). - drm/nouveau: fix booting with plymouth + dumb support (bnc#771392). - memcg: warn on deeper hierarchies with use_hierarchy==0 (bnc#781134). - Linux 3.4.11. - Update config files. - Refresh patches.suse/scsi-error-test-unit-ready-timeout. - Btrfs: fix tree log remove space corner case (bnc#779432) - irq_remap: disable IRQ remapping if any IOAPIC lacks an IOMMU. - Linux 3.4.10. - Linux 3.4.9. - kABI: protect struct irq_desc. - Linux 3.4.8. - kABI: sdhci, remove inclusion. - reiserfs: fix deadlock with nfs racing on create/lookup (bnc#762693). - Properly update Xen patches to 3.4.7. - Refresh other Xen patches (bnc#772831). - config: enable various ARM errata workarounds to improve stability - Import kabi files for 12.2 - rpm/config.sh: Build the KOTD against 12.2 - ASoC: omap: Add missing modules aliases to get sound working on omap devices. - Update config files to fix build - rt2800: add chipset revision RT5390R support (bnc#772566). - reiserfs: fix deadlocks with quotas - ACPI, APEI: Fixup common access width firmware bug (bnc#765230). - i2c/busses: Fix build error if CONFIG_I2C_DESIGNWARE_PLATFORM=y and CONFIG_I2C_DESIGN. - Update ARM configs to match kernel 3.4.7 - Update ARM omap2plus config to match kernel 3.4.7 and add Smartreflex support (auto voltage) - ALSA: hda - Fix mute-LED GPIO initialization for IDT codecs (bnc#772923). - ALSA: hda - Fix polarity of mute LED on HP Mini 210 (bnc#772923). - Linux 3.4.7. - Refresh patches.suse/dm-raid45-26-Nov-2009.patch. - Enable RTL8150 for omap2plus Generic USB Network device that also works fine on ARM, so enable it - update RNDIS_OID_GEN_RNDIS_CONFIG_PARAMETER patch name - Drivers: hv: Cleanup the guest ID computation. - hyperv: Add a check for ring_size value. - hyperv: Add error handling to rndis_filter_device_add(). - Drivers: hv: Change the hex constant to a decimal constant. - hyperv: Add support for setting MAC from within guests. - net/hyperv: Use wait_event on outstanding sends during device removal. - hv: add RNDIS_OID_GEN_RNDIS_CONFIG_PARAMETER. - Refresh patches.suse/SUSE-bootsplash. Fix wrong vfree() (bnc#773406) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-700 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): kernel-default-3.4.11-2.16.1 kernel-default-base-3.4.11-2.16.1 kernel-default-base-debuginfo-3.4.11-2.16.1 kernel-default-debuginfo-3.4.11-2.16.1 kernel-default-debugsource-3.4.11-2.16.1 kernel-default-devel-3.4.11-2.16.1 kernel-default-devel-debuginfo-3.4.11-2.16.1 kernel-syms-3.4.11-2.16.1 - openSUSE 12.2 (i686 x86_64): kernel-debug-3.4.11-2.16.1 kernel-debug-base-3.4.11-2.16.1 kernel-debug-base-debuginfo-3.4.11-2.16.1 kernel-debug-debuginfo-3.4.11-2.16.1 kernel-debug-debugsource-3.4.11-2.16.1 kernel-debug-devel-3.4.11-2.16.1 kernel-debug-devel-debuginfo-3.4.11-2.16.1 kernel-desktop-3.4.11-2.16.1 kernel-desktop-base-3.4.11-2.16.1 kernel-desktop-base-debuginfo-3.4.11-2.16.1 kernel-desktop-debuginfo-3.4.11-2.16.1 kernel-desktop-debugsource-3.4.11-2.16.1 kernel-desktop-devel-3.4.11-2.16.1 kernel-desktop-devel-debuginfo-3.4.11-2.16.1 kernel-ec2-3.4.11-2.16.1 kernel-ec2-base-3.4.11-2.16.1 kernel-ec2-base-debuginfo-3.4.11-2.16.1 kernel-ec2-debuginfo-3.4.11-2.16.1 kernel-ec2-debugsource-3.4.11-2.16.1 kernel-ec2-devel-3.4.11-2.16.1 kernel-ec2-devel-debuginfo-3.4.11-2.16.1 kernel-ec2-extra-3.4.11-2.16.1 kernel-ec2-extra-debuginfo-3.4.11-2.16.1 kernel-trace-3.4.11-2.16.1 kernel-trace-base-3.4.11-2.16.1 kernel-trace-base-debuginfo-3.4.11-2.16.1 kernel-trace-debuginfo-3.4.11-2.16.1 kernel-trace-debugsource-3.4.11-2.16.1 kernel-trace-devel-3.4.11-2.16.1 kernel-trace-devel-debuginfo-3.4.11-2.16.1 kernel-vanilla-3.4.11-2.16.1 kernel-vanilla-debuginfo-3.4.11-2.16.1 kernel-vanilla-debugsource-3.4.11-2.16.1 kernel-vanilla-devel-3.4.11-2.16.1 kernel-vanilla-devel-debuginfo-3.4.11-2.16.1 kernel-xen-3.4.11-2.16.1 kernel-xen-base-3.4.11-2.16.1 kernel-xen-base-debuginfo-3.4.11-2.16.1 kernel-xen-debuginfo-3.4.11-2.16.1 kernel-xen-debugsource-3.4.11-2.16.1 kernel-xen-devel-3.4.11-2.16.1 kernel-xen-devel-debuginfo-3.4.11-2.16.1 - openSUSE 12.2 (noarch): kernel-devel-3.4.11-2.16.1 kernel-docs-3.4.11-2.16.2 kernel-source-3.4.11-2.16.1 kernel-source-vanilla-3.4.11-2.16.1 - openSUSE 12.2 (i686): kernel-pae-3.4.11-2.16.1 kernel-pae-base-3.4.11-2.16.1 kernel-pae-base-debuginfo-3.4.11-2.16.1 kernel-pae-debuginfo-3.4.11-2.16.1 kernel-pae-debugsource-3.4.11-2.16.1 kernel-pae-devel-3.4.11-2.16.1 kernel-pae-devel-debuginfo-3.4.11-2.16.1 References: http://support.novell.com/security/cve/CVE-2012-3412.html http://support.novell.com/security/cve/CVE-2012-3520.html https://bugzilla.novell.com/762693 https://bugzilla.novell.com/765230 https://bugzilla.novell.com/771392 https://bugzilla.novell.com/772566 https://bugzilla.novell.com/772831 https://bugzilla.novell.com/772923 https://bugzilla.novell.com/773406 https://bugzilla.novell.com/774523 https://bugzilla.novell.com/774859 https://bugzilla.novell.com/776925 https://bugzilla.novell.com/778630 https://bugzilla.novell.com/779432 https://bugzilla.novell.com/780624 https://bugzilla.novell.com/781134 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:1326-1: critical: Security update for flash-player
by opensuse-security＠opensuse.org 10 Oct '12

10 Oct '12

SUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:1326-1 Rating: critical References: #784168 Cross-References: CVE-2012-5248 CVE-2012-5249 CVE-2012-5250 CVE-2012-5251 CVE-2012-5252 CVE-2012-5253 CVE-2012-5254 CVE-2012-5255 CVE-2012-5256 CVE-2012-5257 CVE-2012-5258 CVE-2012-5259 CVE-2012-5260 CVE-2012-5261 CVE-2012-5262 CVE-2012-5263 CVE-2012-5264 CVE-2012-5265 CVE-2012-5266 CVE-2012-5267 CVE-2012-5268 CVE-2012-5269 CVE-2012-5270 CVE-2012-5271 CVE-2012-5272 Affected Products: SUSE Linux Enterprise Desktop 10 SP4 ______________________________________________________________________________ An update that fixes 25 vulnerabilities is now available. It includes one version update. Description: flash player was updated to version 11.2.202.243 fixing a lot of security issues: CVE-2012-5248, CVE-2012-5249, CVE-2012-5250, CVE-2012-5251, CVE-2012-5252, CVE-2012-5253, CVE-2012-5254, CVE-2012-5255, CVE-2012-5256, CVE-2012-5257, CVE-2012-5258, CVE-2012-5259, CVE-2012-5260, CVE-2012-5261, CVE-2012-5262, CVE-2012-5263, CVE-2012-5264, CVE-2012-5265, CVE-2012-5266, CVE-2012-5267, CVE-2012-5268, CVE-2012-5269, CVE-2012-5270, CVE-2012-5271, CVE-2012-5272 Please visit http://www.adobe.com/support/security/bulletins/apsb12-22.ht ml <http://www.adobe.com/support/security/bulletins/apsb12-22.h tml> for details. Security Issue references: * CVE-2012-5248 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5248 > * CVE-2012-5249 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5249 > * CVE-2012-5250 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5250 > * CVE-2012-5251 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5251 > * CVE-2012-5253 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5253 > * CVE-2012-5254 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5254 > * CVE-2012-5255 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5255 > * CVE-2012-5257 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5257 > * CVE-2012-5259 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5259 > * CVE-2012-5260 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5260 > * CVE-2012-5262 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5262 > * CVE-2012-5264 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5264 > * CVE-2012-5265 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5265 > * CVE-2012-5266 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5266 > * CVE-2012-5252 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5252 > * CVE-2012-5256 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5256 > * CVE-2012-5258 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5258 > * CVE-2012-5261 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5261 > * CVE-2012-5263 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5263 > * CVE-2012-5267 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5267 > * CVE-2012-5268 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5268 > * CVE-2012-5269 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5269 > * CVE-2012-5270 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5270 > * CVE-2012-5271 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5271 > * CVE-2012-5272 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5272 > Package List: - SUSE Linux Enterprise Desktop 10 SP4 (i586) [New Version: 11.2.202.243]: flash-player-11.2.202.243-0.5.1 References: http://support.novell.com/security/cve/CVE-2012-5248.html http://support.novell.com/security/cve/CVE-2012-5249.html http://support.novell.com/security/cve/CVE-2012-5250.html http://support.novell.com/security/cve/CVE-2012-5251.html http://support.novell.com/security/cve/CVE-2012-5252.html http://support.novell.com/security/cve/CVE-2012-5253.html http://support.novell.com/security/cve/CVE-2012-5254.html http://support.novell.com/security/cve/CVE-2012-5255.html http://support.novell.com/security/cve/CVE-2012-5256.html http://support.novell.com/security/cve/CVE-2012-5257.html http://support.novell.com/security/cve/CVE-2012-5258.html http://support.novell.com/security/cve/CVE-2012-5259.html http://support.novell.com/security/cve/CVE-2012-5260.html http://support.novell.com/security/cve/CVE-2012-5261.html http://support.novell.com/security/cve/CVE-2012-5262.html http://support.novell.com/security/cve/CVE-2012-5263.html http://support.novell.com/security/cve/CVE-2012-5264.html http://support.novell.com/security/cve/CVE-2012-5265.html http://support.novell.com/security/cve/CVE-2012-5266.html http://support.novell.com/security/cve/CVE-2012-5267.html http://support.novell.com/security/cve/CVE-2012-5268.html http://support.novell.com/security/cve/CVE-2012-5269.html http://support.novell.com/security/cve/CVE-2012-5270.html http://support.novell.com/security/cve/CVE-2012-5271.html http://support.novell.com/security/cve/CVE-2012-5272.html https://bugzilla.novell.com/784168 http://download.novell.com/patch/finder/?keywords=9861c635f16f057af9420d20f… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2012:1324-1: critical: flash-player: Update to 11.2.202.243
by opensuse-security＠opensuse.org 10 Oct '12

10 Oct '12

openSUSE Security Update: flash-player: Update to 11.2.202.243 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1324-1 Rating: critical References: #784168 Cross-References: CVE-2012-5252 CVE-2012-5256 CVE-2012-5260 CVE-2012-5264 CVE-2012-5268 CVE-2012-5272 CVE-2012-5248 CVE-2012-5249 CVE-2012-5250 CVE-2012-5251 CVE-2012-5253 CVE-2012-5254 CVE-2012-5255 CVE-2012-5257 CVE-2012-5258 CVE-2012-5259 CVE-2012-5261 CVE-2012-5262 CVE-2012-5263 CVE-2012-5265 CVE-2012-5266 CVE-2012-5267 CVE-2012-5269 CVE-2012-5270 CVE-2012-5271 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes 25 vulnerabilities is now available. Description: Flash Player was updated to 11.2.202.243 * CVE-2012-5248, CVE-2012-5249, CVE-2012-5250, CVE-2012-5251, CVE-2012-5252, CVE-2012-5253, CVE-2012-5254, CVE-2012-5255, CVE-2012-5256, CVE-2012-5257, CVE-2012-5258, CVE-2012-5259, CVE-2012-5260, CVE-2012-5261, CVE-2012-5262, CVE-2012-5263, CVE-2012-5264, CVE-2012-5265, CVE-2012-5266, CVE-2012-5267, CVE-2012-5268, CVE-2012-5269, CVE-2012-5270, CVE-2012-5271, CVE-2012-5272 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-697 - openSUSE 11.4: zypper in -t patch openSUSE-2012-697 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): flash-player-11.2.202.243-30.1 flash-player-gnome-11.2.202.243-30.1 flash-player-kde4-11.2.202.243-30.1 - openSUSE 11.4 (i586 x86_64): flash-player-11.2.202.243-23.1 flash-player-gnome-11.2.202.243-23.1 flash-player-kde4-11.2.202.243-23.1 References: http://support.novell.com/security/cve/ CVE-2012-5252.html http://support.novell.com/security/cve/ CVE-2012-5256.html http://support.novell.com/security/cve/ CVE-2012-5260.html http://support.novell.com/security/cve/ CVE-2012-5264.html http://support.novell.com/security/cve/ CVE-2012-5268.html http://support.novell.com/security/cve/ CVE-2012-5272.html http://support.novell.com/security/cve/CVE-2012-5248.html http://support.novell.com/security/cve/CVE-2012-5249.html http://support.novell.com/security/cve/CVE-2012-5250.html http://support.novell.com/security/cve/CVE-2012-5251.html http://support.novell.com/security/cve/CVE-2012-5253.html http://support.novell.com/security/cve/CVE-2012-5254.html http://support.novell.com/security/cve/CVE-2012-5255.html http://support.novell.com/security/cve/CVE-2012-5257.html http://support.novell.com/security/cve/CVE-2012-5258.html http://support.novell.com/security/cve/CVE-2012-5259.html http://support.novell.com/security/cve/CVE-2012-5261.html http://support.novell.com/security/cve/CVE-2012-5262.html http://support.novell.com/security/cve/CVE-2012-5263.html http://support.novell.com/security/cve/CVE-2012-5265.html http://support.novell.com/security/cve/CVE-2012-5266.html http://support.novell.com/security/cve/CVE-2012-5267.html http://support.novell.com/security/cve/CVE-2012-5269.html http://support.novell.com/security/cve/CVE-2012-5270.html http://support.novell.com/security/cve/CVE-2012-5271.html https://bugzilla.novell.com/784168 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:1320-1: important: Security update for qemu
by opensuse-security＠opensuse.org 09 Oct '12

09 Oct '12

SUSE Security Update: Security update for qemu ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:1320-1 Rating: important References: #740165 #777084 Cross-References: CVE-2012-0029 CVE-2012-3515 Affected Products: SUSE Studio Onsite 1.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: The qemu vt100 emulation was affected by a problem where specific vt100 sequences could have been used by guest users to affect the host. (CVE-2012-3515 aka XSA-17). CVE-2012-0029: A buffer overflow in the e1000 device emulation was fixed Security Issue references: * CVE-2012-3515 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3515 > * CVE-2012-0029 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0029 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Studio Onsite 1.2: zypper in -t patch slestso12-qemu-6852 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Studio Onsite 1.2 (x86_64): qemu-0.10.1-0.5.7.1 References: http://support.novell.com/security/cve/CVE-2012-0029.html http://support.novell.com/security/cve/CVE-2012-3515.html https://bugzilla.novell.com/740165 https://bugzilla.novell.com/777084 http://download.novell.com/patch/finder/?keywords=86d45c23c62093dbb012d29f0… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2012:1289-1: important: ghostscript
by opensuse-security＠opensuse.org 04 Oct '12

04 Oct '12

openSUSE Security Update: ghostscript ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1289-1 Rating: important References: #779700 Cross-References: CVE-2012-4405 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The following security issue was fixed in ghostscript: Multiple integer underflows in the icmLut_allocate function in International Color Consortium (ICC) Format library (icclib), as used in Ghostscript 9.06 and Argyll Color Management System, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted (1) PostScript or (2) PDF file with embedded images, which triggers a heap-based buffer overflow. NOTE: this issue is also described as an array index error. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch openSUSE-2012-668 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): ghostscript-devel-9.00-4.48.1 ghostscript-ijs-devel-9.00-4.48.1 ghostscript-library-9.00-4.48.1 ghostscript-library-debuginfo-9.00-4.48.1 ghostscript-library-debugsource-9.00-4.48.1 ghostscript-x11-9.00-4.48.1 ghostscript-x11-debuginfo-9.00-4.48.1 libgimpprint-4.2.7-334.48.1 libgimpprint-debuginfo-4.2.7-334.48.1 libgimpprint-devel-4.2.7-334.48.1 - openSUSE 11.4 (noarch): ghostscript-fonts-other-9.00-4.48.1 ghostscript-fonts-rus-9.00-4.48.1 ghostscript-fonts-std-9.00-4.48.1 References: http://support.novell.com/security/cve/CVE-2012-4405.html https://bugzilla.novell.com/779700 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2012:1287-1: important: update for dbus-1, dbus-1-x11
by opensuse-security＠opensuse.org 04 Oct '12

04 Oct '12

openSUSE Security Update: update for dbus-1, dbus-1-x11 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1287-1 Rating: important References: #697105 Cross-References: CVE-2012-3524 Affected Products: openSUSE 12.2 openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update fixed CVE-2012-3524 (getenv() vulnerability), which can be used by local attackers to escalate privileges to root. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-670 - openSUSE 12.1: zypper in -t patch openSUSE-2012-670 - openSUSE 11.4: zypper in -t patch openSUSE-2012-670 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): dbus-1-1.5.12-4.6.1 dbus-1-debuginfo-1.5.12-4.6.1 dbus-1-debugsource-1.5.12-4.6.1 dbus-1-devel-1.5.12-4.6.1 dbus-1-x11-1.5.12-4.6.1 dbus-1-x11-debuginfo-1.5.12-4.6.1 dbus-1-x11-debugsource-1.5.12-4.6.1 libdbus-1-3-1.5.12-4.6.1 libdbus-1-3-debuginfo-1.5.12-4.6.1 - openSUSE 12.2 (x86_64): dbus-1-32bit-1.5.12-4.6.1 dbus-1-debuginfo-32bit-1.5.12-4.6.1 dbus-1-devel-32bit-1.5.12-4.6.1 libdbus-1-3-32bit-1.5.12-4.6.1 libdbus-1-3-debuginfo-32bit-1.5.12-4.6.1 - openSUSE 12.2 (noarch): dbus-1-devel-doc-1.5.12-4.6.1 - openSUSE 12.1 (i586 x86_64): dbus-1-1.5.8-2.6.1 dbus-1-debuginfo-1.5.8-2.6.1 dbus-1-debugsource-1.5.8-2.6.1 dbus-1-devel-1.5.8-2.6.1 dbus-1-x11-1.5.8-2.6.1 dbus-1-x11-debuginfo-1.5.8-2.6.1 dbus-1-x11-debugsource-1.5.8-2.6.1 - openSUSE 12.1 (x86_64): dbus-1-32bit-1.5.8-2.6.1 dbus-1-debuginfo-32bit-1.5.8-2.6.1 dbus-1-devel-32bit-1.5.8-2.6.1 - openSUSE 12.1 (noarch): dbus-1-devel-doc-1.5.8-2.6.1 - openSUSE 12.1 (ia64): dbus-1-debuginfo-x86-1.5.8-2.6.1 dbus-1-x86-1.5.8-2.6.1 - openSUSE 11.4 (i586 x86_64): dbus-1-1.4.1-7.27.1 dbus-1-debuginfo-1.4.1-7.27.1 dbus-1-debugsource-1.4.1-7.27.1 dbus-1-devel-1.4.1-7.27.1 - openSUSE 11.4 (x86_64): dbus-1-32bit-1.4.1-7.27.1 dbus-1-debuginfo-32bit-1.4.1-7.27.1 dbus-1-devel-32bit-1.4.1-7.27.1 - openSUSE 11.4 (noarch): dbus-1-devel-doc-1.4.1-7.27.1 - openSUSE 11.4 (ia64): dbus-1-debuginfo-x86-1.4.1-7.27.1 dbus-1-x86-1.4.1-7.27.1 References: http://support.novell.com/security/cve/CVE-2012-3524.html https://bugzilla.novell.com/697105 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0