March 2012 - openSUSE Security Announce

[security-announce] SUSE-SU-2012:0437-1: critical: Security update for flash-player
by opensuse-security＠opensuse.org 30 Mar '12

30 Mar '12

SUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0437-1 Rating: critical References: #754689 Cross-References: CVE-2012-0773 Affected Products: SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP1 SUSE Linux Enterprise Desktop 10 SP4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. It includes two new package versions. Description: Adobe Flash Player 11.1.102.63 fixes a memory corruption vulnerability in the NetStream class that could have lead to code execution (CVE-2012-0773). Security Issue reference: * CVE-2012-0773 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0773 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Desktop 11 SP2: zypper in -t patch sledsp1-flash-player-6059 - SUSE Linux Enterprise Desktop 11 SP1: zypper in -t patch sledsp1-flash-player-6059 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Desktop 11 SP2 (i586 x86_64) [New Version: 11.2.202.228]: flash-player-11.2.202.228-0.3.1 - SUSE Linux Enterprise Desktop 11 SP1 (i586 x86_64) [New Version: 11.2.202.228]: flash-player-11.2.202.228-0.3.1 - SUSE Linux Enterprise Desktop 10 SP4 (i586) [New Version: 10.3.183.18]: flash-player-10.3.183.18-0.5.2 References: http://support.novell.com/security/cve/CVE-2012-0773.html https://bugzilla.novell.com/754689 http://download.novell.com/patch/finder/?keywords=03280de9cddaad9751a835216… http://download.novell.com/patch/finder/?keywords=144a85c0189094a03103ec101… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2012:0427-1: critical: flash-player update
by opensuse-security＠opensuse.org 29 Mar '12

29 Mar '12

openSUSE Security Update: flash-player update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0427-1 Rating: critical References: #754689 Cross-References: CVE-2012-0773 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Adobe Flash Player 11.1.102.63 fixes a memory corruption vulnerability in the NetStream class that could lead to code execution Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-184 - openSUSE 11.4: zypper in -t patch openSUSE-2012-184 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): flash-player-11.2.202.228-12.1 flash-player-gnome-11.2.202.228-12.1 flash-player-kde4-11.2.202.228-12.1 - openSUSE 11.4 (i586 x86_64): flash-player-11.2.202.228-6.1 flash-player-gnome-11.2.202.228-6.1 flash-player-kde4-11.2.202.228-6.1 References: http://support.novell.com/security/cve/CVE-2012-0773.html https://bugzilla.novell.com/754689 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2012:0426-1: important: update for php5
by opensuse-security＠opensuse.org 29 Mar '12

29 Mar '12

openSUSE Security Update: update for php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0426-1 Rating: important References: #728671 #733590 #736169 #738221 #741520 #741859 #742273 #742806 #743308 #744966 #746661 #749111 Cross-References: CVE-2011-1466 CVE-2011-4153 CVE-2011-4566 CVE-2011-4885 CVE-2012-0057 CVE-2012-0781 CVE-2012-0788 CVE-2012-0789 CVE-2012-0807 CVE-2012-0830 CVE-2012-0831 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that solves 11 vulnerabilities and has one errata is now available. Description: php5 security update Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-182 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): apache2-mod_php5-5.3.8-4.9.2 apache2-mod_php5-debuginfo-5.3.8-4.9.2 php5-5.3.8-4.9.2 php5-bcmath-5.3.8-4.9.2 php5-bcmath-debuginfo-5.3.8-4.9.2 php5-bz2-5.3.8-4.9.2 php5-bz2-debuginfo-5.3.8-4.9.2 php5-calendar-5.3.8-4.9.2 php5-calendar-debuginfo-5.3.8-4.9.2 php5-ctype-5.3.8-4.9.2 php5-ctype-debuginfo-5.3.8-4.9.2 php5-curl-5.3.8-4.9.2 php5-curl-debuginfo-5.3.8-4.9.2 php5-dba-5.3.8-4.9.2 php5-dba-debuginfo-5.3.8-4.9.2 php5-debuginfo-5.3.8-4.9.2 php5-debugsource-5.3.8-4.9.2 php5-devel-5.3.8-4.9.2 php5-dom-5.3.8-4.9.2 php5-dom-debuginfo-5.3.8-4.9.2 php5-enchant-5.3.8-4.9.2 php5-enchant-debuginfo-5.3.8-4.9.2 php5-exif-5.3.8-4.9.2 php5-exif-debuginfo-5.3.8-4.9.2 php5-fastcgi-5.3.8-4.9.2 php5-fastcgi-debuginfo-5.3.8-4.9.2 php5-fileinfo-5.3.8-4.9.2 php5-fileinfo-debuginfo-5.3.8-4.9.2 php5-fpm-5.3.8-4.9.2 php5-fpm-debuginfo-5.3.8-4.9.2 php5-ftp-5.3.8-4.9.2 php5-ftp-debuginfo-5.3.8-4.9.2 php5-gd-5.3.8-4.9.2 php5-gd-debuginfo-5.3.8-4.9.2 php5-gettext-5.3.8-4.9.2 php5-gettext-debuginfo-5.3.8-4.9.2 php5-gmp-5.3.8-4.9.2 php5-gmp-debuginfo-5.3.8-4.9.2 php5-iconv-5.3.8-4.9.2 php5-iconv-debuginfo-5.3.8-4.9.2 php5-imap-5.3.8-4.9.2 php5-imap-debuginfo-5.3.8-4.9.2 php5-intl-5.3.8-4.9.2 php5-intl-debuginfo-5.3.8-4.9.2 php5-json-5.3.8-4.9.2 php5-json-debuginfo-5.3.8-4.9.2 php5-ldap-5.3.8-4.9.2 php5-ldap-debuginfo-5.3.8-4.9.2 php5-mbstring-5.3.8-4.9.2 php5-mbstring-debuginfo-5.3.8-4.9.2 php5-mcrypt-5.3.8-4.9.2 php5-mcrypt-debuginfo-5.3.8-4.9.2 php5-mssql-5.3.8-4.9.2 php5-mssql-debuginfo-5.3.8-4.9.2 php5-mysql-5.3.8-4.9.2 php5-mysql-debuginfo-5.3.8-4.9.2 php5-odbc-5.3.8-4.9.2 php5-odbc-debuginfo-5.3.8-4.9.2 php5-openssl-5.3.8-4.9.2 php5-openssl-debuginfo-5.3.8-4.9.2 php5-pcntl-5.3.8-4.9.2 php5-pcntl-debuginfo-5.3.8-4.9.2 php5-pdo-5.3.8-4.9.2 php5-pdo-debuginfo-5.3.8-4.9.2 php5-pgsql-5.3.8-4.9.2 php5-pgsql-debuginfo-5.3.8-4.9.2 php5-phar-5.3.8-4.9.2 php5-phar-debuginfo-5.3.8-4.9.2 php5-posix-5.3.8-4.9.2 php5-posix-debuginfo-5.3.8-4.9.2 php5-pspell-5.3.8-4.9.2 php5-pspell-debuginfo-5.3.8-4.9.2 php5-readline-5.3.8-4.9.2 php5-readline-debuginfo-5.3.8-4.9.2 php5-shmop-5.3.8-4.9.2 php5-shmop-debuginfo-5.3.8-4.9.2 php5-snmp-5.3.8-4.9.2 php5-snmp-debuginfo-5.3.8-4.9.2 php5-soap-5.3.8-4.9.2 php5-soap-debuginfo-5.3.8-4.9.2 php5-sockets-5.3.8-4.9.2 php5-sockets-debuginfo-5.3.8-4.9.2 php5-sqlite-5.3.8-4.9.2 php5-sqlite-debuginfo-5.3.8-4.9.2 php5-suhosin-5.3.8-4.9.2 php5-suhosin-debuginfo-5.3.8-4.9.2 php5-sysvmsg-5.3.8-4.9.2 php5-sysvmsg-debuginfo-5.3.8-4.9.2 php5-sysvsem-5.3.8-4.9.2 php5-sysvsem-debuginfo-5.3.8-4.9.2 php5-sysvshm-5.3.8-4.9.2 php5-sysvshm-debuginfo-5.3.8-4.9.2 php5-tidy-5.3.8-4.9.2 php5-tidy-debuginfo-5.3.8-4.9.2 php5-tokenizer-5.3.8-4.9.2 php5-tokenizer-debuginfo-5.3.8-4.9.2 php5-wddx-5.3.8-4.9.2 php5-wddx-debuginfo-5.3.8-4.9.2 php5-xmlreader-5.3.8-4.9.2 php5-xmlreader-debuginfo-5.3.8-4.9.2 php5-xmlrpc-5.3.8-4.9.2 php5-xmlrpc-debuginfo-5.3.8-4.9.2 php5-xmlwriter-5.3.8-4.9.2 php5-xmlwriter-debuginfo-5.3.8-4.9.2 php5-xsl-5.3.8-4.9.2 php5-xsl-debuginfo-5.3.8-4.9.2 php5-zip-5.3.8-4.9.2 php5-zip-debuginfo-5.3.8-4.9.2 php5-zlib-5.3.8-4.9.2 php5-zlib-debuginfo-5.3.8-4.9.2 - openSUSE 12.1 (noarch): php5-pear-5.3.8-4.9.2 References: http://support.novell.com/security/cve/CVE-2011-1466.html http://support.novell.com/security/cve/CVE-2011-4153.html http://support.novell.com/security/cve/CVE-2011-4566.html http://support.novell.com/security/cve/CVE-2011-4885.html http://support.novell.com/security/cve/CVE-2012-0057.html http://support.novell.com/security/cve/CVE-2012-0781.html http://support.novell.com/security/cve/CVE-2012-0788.html http://support.novell.com/security/cve/CVE-2012-0789.html http://support.novell.com/security/cve/CVE-2012-0807.html http://support.novell.com/security/cve/CVE-2012-0830.html http://support.novell.com/security/cve/CVE-2012-0831.html https://bugzilla.novell.com/728671 https://bugzilla.novell.com/733590 https://bugzilla.novell.com/736169 https://bugzilla.novell.com/738221 https://bugzilla.novell.com/741520 https://bugzilla.novell.com/741859 https://bugzilla.novell.com/742273 https://bugzilla.novell.com/742806 https://bugzilla.novell.com/743308 https://bugzilla.novell.com/744966 https://bugzilla.novell.com/746661 https://bugzilla.novell.com/749111 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:0425-1: critical: Security update for Mozilla Firefox
by opensuse-security＠opensuse.org 29 Mar '12

29 Mar '12

SUSE Security Update: Security update for Mozilla Firefox ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0425-1 Rating: critical References: #752168 Affected Products: SUSE Linux Enterprise Server 10 SP4 SUSE Linux Enterprise Desktop 10 SP4 SLE SDK 10 SP4 ______________________________________________________________________________ An update that contains security fixes can now be installed. It includes four new package versions. Description: Mozilla Firefox was updated to 3.6.28 to fix various bugs and security issues. The following security issues have been fixed: * MFSA 2012-19: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code. In general these flaws cannot be exploited through email in the Thunderbird and SeaMonkey products because scripting is disabled, but are potentially a risk in browser or browser-like contexts in those products. References Bob Clary reported two bugs that causes crashes that affected Firefox 3.6, Firefox ESR, and Firefox 10. CVE-2012-0461 Christian Holler, Jesse Ruderman, Nils, Michael Bebenita, Dindog, and David Anderson reported memory safety problems and crashes that affect Firefox ESR and Firefox 10. CVE-2012-0462 Jeff Walden reported a memory safety problem in the array.join function. This bug was independently reported by Vincenzo Iozzo via TippingPoint's Zero Day Initiative Pwn2Own contest. CVE-2012-0464 Masayuki Nakano reported a memory safety problem that affected Mobile Firefox 10. CVE-2012-0463 * MFSA 2012-16 / CVE-2012-0458: Security researcher Mariusz Mlynski reported that an attacker able to convince a potential victim to set a new home page by dragging a link to the "home" button can set that user's home page to a javascript: URL. Once this is done the attacker's page can cause repeated crashes of the browser, eventually getting the script URL loaded in the privileged about:sessionrestore context. * MFSA 2012-14 / CVE-2012-0457 / CVE-2012-0456: Security researcher Atte Kettunen from OUSPG found two issues with Firefox's handling of SVG using the Address Sanitizer tool. The first issue, critically rated, is a use-after-free in SVG animation that could potentially lead to arbitrary code execution. The second issue is rated moderate and is an out of bounds read in SVG Filters. This could potentially incorporate data from the user's memory, making it accessible to the page content. * MFSA 2012-13 / CVE-2012-0455: Firefox prevents the dropping of javascript: links onto a frame to prevent malicious sites from tricking users into performing a cross-site scripting (XSS) attacks on themselves. Security researcher Soroush Dalili reported a way to bypass this protection. The full overview can be found on Mozillas security page at: http://www.mozilla.org/security/announce/ <http://www.mozilla.org/security/announce/> Package List: - SUSE Linux Enterprise Server 10 SP4 (i586 ia64 ppc s390x x86_64) [New Version: 1.9.2.28,3.13.3 and 4.9.0]: mozilla-nspr-4.9.0-0.6.1 mozilla-nspr-devel-4.9.0-0.6.1 mozilla-nss-3.13.3-0.5.1 mozilla-nss-devel-3.13.3-0.5.1 mozilla-nss-tools-3.13.3-0.5.1 mozilla-xulrunner192-1.9.2.28-0.7.1 mozilla-xulrunner192-gnome-1.9.2.28-0.7.1 mozilla-xulrunner192-translations-1.9.2.28-0.7.1 - SUSE Linux Enterprise Server 10 SP4 (i586 ia64 ppc s390x) [New Version: 3.6.28]: MozillaFirefox-3.6.28-0.5.2 MozillaFirefox-translations-3.6.28-0.5.2 - SUSE Linux Enterprise Server 10 SP4 (s390x x86_64) [New Version: 1.9.2.28,3.13.3 and 4.9.0]: mozilla-nspr-32bit-4.9.0-0.6.1 mozilla-nss-32bit-3.13.3-0.5.1 mozilla-xulrunner192-32bit-1.9.2.28-0.7.1 mozilla-xulrunner192-gnome-32bit-1.9.2.28-0.7.1 mozilla-xulrunner192-translations-32bit-1.9.2.28-0.7.1 - SUSE Linux Enterprise Server 10 SP4 (ia64) [New Version: 3.13.3 and 4.9.0]: mozilla-nspr-x86-4.9.0-0.6.1 mozilla-nss-x86-3.13.3-0.5.1 - SUSE Linux Enterprise Server 10 SP4 (ppc) [New Version: 3.13.3 and 4.9.0]: mozilla-nspr-64bit-4.9.0-0.6.1 mozilla-nss-64bit-3.13.3-0.5.1 - SUSE Linux Enterprise Desktop 10 SP4 (i586 x86_64) [New Version: 1.9.2.28,3.13.3 and 4.9.0]: mozilla-nspr-4.9.0-0.6.1 mozilla-nspr-devel-4.9.0-0.6.1 mozilla-nss-3.13.3-0.5.1 mozilla-nss-devel-3.13.3-0.5.1 mozilla-nss-tools-3.13.3-0.5.1 mozilla-xulrunner192-1.9.2.28-0.7.1 mozilla-xulrunner192-gnome-1.9.2.28-0.7.1 mozilla-xulrunner192-translations-1.9.2.28-0.7.1 - SUSE Linux Enterprise Desktop 10 SP4 (x86_64) [New Version: 1.9.2.28,3.13.3 and 4.9.0]: mozilla-nspr-32bit-4.9.0-0.6.1 mozilla-nss-32bit-3.13.3-0.5.1 mozilla-xulrunner192-32bit-1.9.2.28-0.7.1 mozilla-xulrunner192-gnome-32bit-1.9.2.28-0.7.1 mozilla-xulrunner192-translations-32bit-1.9.2.28-0.7.1 - SUSE Linux Enterprise Desktop 10 SP4 (i586) [New Version: 3.6.28]: MozillaFirefox-3.6.28-0.5.2 MozillaFirefox-translations-3.6.28-0.5.2 - SLE SDK 10 SP4 (i586 ia64 ppc s390x x86_64) [New Version: 3.13.3]: mozilla-nss-tools-3.13.3-0.5.1 - SLE SDK 10 SP4 (i586 ia64 ppc s390x): MozillaFirefox-branding-upstream-3.6.28-0.5.2 References: https://bugzilla.novell.com/752168 http://download.novell.com/patch/finder/?keywords=3cbbf6dfa64d498549bb143a5… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:0424-1: critical: Security update for Mozilla Firefox
by opensuse-security＠opensuse.org 28 Mar '12

28 Mar '12

SUSE Security Update: Security update for Mozilla Firefox ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0424-1 Rating: critical References: #745017 #750044 Cross-References: CVE-2012-0451 CVE-2012-0454 CVE-2012-0455 CVE-2012-0456 CVE-2012-0457 CVE-2012-0458 CVE-2012-0459 CVE-2012-0460 CVE-2012-0461 CVE-2012-0462 CVE-2012-0463 CVE-2012-0464 Affected Products: SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP1 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP1 for VMware SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP1 ______________________________________________________________________________ An update that fixes 12 vulnerabilities is now available. It includes three new package versions. Description: Mozilla Firefox was updated to 10.0.3 ESR to fix various bugs and security issues. The following security issues have been fixed: * MFSA 2012-19: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code. In general these flaws cannot be exploited through email in the Thunderbird and SeaMonkey products because scripting is disabled, but are potentially a risk in browser or browser-like contexts in those products. References: Bob Clary reported two bugs that causes crashes that affected Firefox 3.6, Firefox ESR, and Firefox 10. CVE-2012-0461 Christian Holler, Jesse Ruderman, Nils, Michael Bebenita, Dindog, and David Anderson reported memory safety problems and crashes that affect Firefox ESR and Firefox 10. CVE-2012-0462 Jeff Walden reported a memory safety problem in the array.join function. This bug was independently reported by Vincenzo Iozzo via TippingPoint's Zero Day Initiative Pwn2Own contest. CVE-2012-0464 Masayuki Nakano reported a memory safety problem that affected Mobile Firefox * CVE-2012-0463 * MFSA 2012-18 / CVE-2012-0460: Mozilla developer Matt Brubeck reported that window.fullScreen is writeable by untrusted content now that the DOM fullscreen API is enabled. Because window.fullScreen does not include mozRequestFullscreen's security protections, it could be used for UI spoofing. This code change makes window.fullScreen read only by untrusted content, forcing the use of the DOM fullscreen API in normal usage. Firefox 3.6 and Thunderbird 3.1 are not affected by this vulnerability. * MFSA 2012-17 / CVE-2012-0459: Mozilla community member Daniel Glazman of Disruptive Innovations reported a crash when accessing a keyframe's cssText after dynamic modification. This crash may be potentially exploitable. Firefox 3.6 and Thunderbird 3.1 are not affected by this vulnerability. * MFSA 2012-16 / CVE-2012-0458: Security researcher Mariusz Mlynski reported that an attacker able to convince a potential victim to set a new home page by dragging a link to the "home" button can set that user's home page to a javascript: URL. Once this is done the attacker's page can cause repeated crashes of the browser, eventually getting the script URL loaded in the privileged about:sessionrestore context. * MFSA 2012-15 / CVE-2012-0451: Security Researcher Mike Brooks of Sitewatch reported that if multiple Content Security Policy (CSP) headers are present on a page, they have an additive effect page policy. Using carriage return line feed (CRLF) injection, a new CSP rule can be introduced which allows for cross-site scripting (XSS) on sites with a separate header injection vulnerability. Firefox 3.6 and Thunderbird 3.1 are not affected by this vulnerability. * MFSA 2012-14 / CVE-2012-0457 / CVE-2012-0456: Security researcher Atte Kettunen from OUSPG found two issues with Firefox's handling of SVG using the Address Sanitizer tool. The first issue, critically rated, is a use-after-free in SVG animation that could potentially lead to arbitrary code execution. The second issue is rated moderate and is an out of bounds read in SVG Filters. This could potentially incorporate data from the user's memory, making it accessible to the page content. * MFSA 2012-13 / CVE-2012-0455: Firefox prevents the dropping of javascript: links onto a frame to prevent malicious sites from tricking users into performing a cross-site scripting (XSS) attacks on themselves. Security researcher Soroush Dalili reported a way to bypass this protection. * MFSA 2012-12 / CVE-2012-0454: Security researchers Blair Strang and Scott Bell of Security Assessment found that when a parent window spawns and closes a child window that uses the file open dialog, a crash can be induced in shlwapi.dll on 32-bit Windows 7 systems. This crash may be potentially exploitable. Firefox 3.6 and Thunderbird 3.1 are not affected by this vulnerability. * Reworked the KDE4 integration. bnc#745017 Security Issue references: * CVE-2012-0461 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0461 > * CVE-2012-0462 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0462 > * CVE-2012-0464 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0464 > * CVE-2012-0463 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0463 > * CVE-2012-0460 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0460 > * CVE-2012-0459 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0459 > * CVE-2012-0458 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0458 > * CVE-2012-0451 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0451 > * CVE-2012-0457 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0457 > * CVE-2012-0456 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0456 > * CVE-2012-0455 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0455 > * CVE-2012-0454 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0454 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11 SP2: zypper in -t patch sdksp1-MozillaFirefox-6007 - SUSE Linux Enterprise Software Development Kit 11 SP1: zypper in -t patch sdksp1-MozillaFirefox-6007 - SUSE Linux Enterprise Server 11 SP2: zypper in -t patch slessp1-MozillaFirefox-6007 - SUSE Linux Enterprise Server 11 SP1 for VMware: zypper in -t patch slessp1-MozillaFirefox-6007 - SUSE Linux Enterprise Server 11 SP1: zypper in -t patch slessp1-MozillaFirefox-6007 - SUSE Linux Enterprise Desktop 11 SP2: zypper in -t patch sledsp1-MozillaFirefox-6007 - SUSE Linux Enterprise Desktop 11 SP1: zypper in -t patch sledsp1-MozillaFirefox-6007 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11 SP2 (i586 ia64 ppc64 s390x x86_64) [New Version: 3.13.3 and 4.9.0]: mozilla-nspr-devel-4.9.0-0.3.1 mozilla-nss-devel-3.13.3-0.2.1 - SUSE Linux Enterprise Software Development Kit 11 SP1 (i586 ia64 ppc64 s390x x86_64) [New Version: 3.13.3 and 4.9.0]: mozilla-nspr-devel-4.9.0-0.3.1 mozilla-nss-devel-3.13.3-0.2.1 - SUSE Linux Enterprise Server 11 SP2 (i586 ia64 ppc64 s390x x86_64) [New Version: 10.0.3,3.13.3 and 4.9.0]: MozillaFirefox-10.0.3-0.7.1 MozillaFirefox-translations-10.0.3-0.7.1 libfreebl3-3.13.3-0.2.1 mozilla-nspr-4.9.0-0.3.1 mozilla-nss-3.13.3-0.2.1 mozilla-nss-tools-3.13.3-0.2.1 - SUSE Linux Enterprise Server 11 SP2 (ppc64 s390x x86_64) [New Version: 3.13.3 and 4.9.0]: libfreebl3-32bit-3.13.3-0.2.1 mozilla-nspr-32bit-4.9.0-0.3.1 mozilla-nss-32bit-3.13.3-0.2.1 - SUSE Linux Enterprise Server 11 SP2 (ia64) [New Version: 3.13.3 and 4.9.0]: libfreebl3-x86-3.13.3-0.2.1 mozilla-nspr-x86-4.9.0-0.3.1 mozilla-nss-x86-3.13.3-0.2.1 - SUSE Linux Enterprise Server 11 SP1 for VMware (i586 x86_64) [New Version: 10.0.3,3.13.3 and 4.9.0]: MozillaFirefox-10.0.3-0.7.1 MozillaFirefox-translations-10.0.3-0.7.1 libfreebl3-3.13.3-0.2.1 mozilla-nspr-4.9.0-0.3.1 mozilla-nss-3.13.3-0.2.1 mozilla-nss-tools-3.13.3-0.2.1 - SUSE Linux Enterprise Server 11 SP1 for VMware (x86_64) [New Version: 3.13.3 and 4.9.0]: libfreebl3-32bit-3.13.3-0.2.1 mozilla-nspr-32bit-4.9.0-0.3.1 mozilla-nss-32bit-3.13.3-0.2.1 - SUSE Linux Enterprise Server 11 SP1 (i586 ia64 ppc64 s390x x86_64) [New Version: 10.0.3,3.13.3 and 4.9.0]: MozillaFirefox-10.0.3-0.7.1 MozillaFirefox-translations-10.0.3-0.7.1 libfreebl3-3.13.3-0.2.1 mozilla-nspr-4.9.0-0.3.1 mozilla-nss-3.13.3-0.2.1 mozilla-nss-tools-3.13.3-0.2.1 - SUSE Linux Enterprise Server 11 SP1 (ppc64 s390x x86_64) [New Version: 3.13.3 and 4.9.0]: libfreebl3-32bit-3.13.3-0.2.1 mozilla-nspr-32bit-4.9.0-0.3.1 mozilla-nss-32bit-3.13.3-0.2.1 - SUSE Linux Enterprise Server 11 SP1 (ia64) [New Version: 3.13.3 and 4.9.0]: libfreebl3-x86-3.13.3-0.2.1 mozilla-nspr-x86-4.9.0-0.3.1 mozilla-nss-x86-3.13.3-0.2.1 - SUSE Linux Enterprise Desktop 11 SP2 (i586 x86_64) [New Version: 10.0.3,3.13.3 and 4.9.0]: MozillaFirefox-10.0.3-0.7.1 MozillaFirefox-translations-10.0.3-0.7.1 libfreebl3-3.13.3-0.2.1 mozilla-nspr-4.9.0-0.3.1 mozilla-nss-3.13.3-0.2.1 mozilla-nss-tools-3.13.3-0.2.1 - SUSE Linux Enterprise Desktop 11 SP2 (x86_64) [New Version: 3.13.3 and 4.9.0]: libfreebl3-32bit-3.13.3-0.2.1 mozilla-nspr-32bit-4.9.0-0.3.1 mozilla-nss-32bit-3.13.3-0.2.1 - SUSE Linux Enterprise Desktop 11 SP1 (i586 x86_64) [New Version: 10.0.3,3.13.3 and 4.9.0]: MozillaFirefox-10.0.3-0.7.1 MozillaFirefox-translations-10.0.3-0.7.1 libfreebl3-3.13.3-0.2.1 mozilla-nspr-4.9.0-0.3.1 mozilla-nss-3.13.3-0.2.1 mozilla-nss-tools-3.13.3-0.2.1 - SUSE Linux Enterprise Desktop 11 SP1 (x86_64) [New Version: 3.13.3 and 4.9.0]: libfreebl3-32bit-3.13.3-0.2.1 mozilla-nspr-32bit-4.9.0-0.3.1 mozilla-nss-32bit-3.13.3-0.2.1 References: http://support.novell.com/security/cve/CVE-2012-0451.html http://support.novell.com/security/cve/CVE-2012-0454.html http://support.novell.com/security/cve/CVE-2012-0455.html http://support.novell.com/security/cve/CVE-2012-0456.html http://support.novell.com/security/cve/CVE-2012-0457.html http://support.novell.com/security/cve/CVE-2012-0458.html http://support.novell.com/security/cve/CVE-2012-0459.html http://support.novell.com/security/cve/CVE-2012-0460.html http://support.novell.com/security/cve/CVE-2012-0461.html http://support.novell.com/security/cve/CVE-2012-0462.html http://support.novell.com/security/cve/CVE-2012-0463.html http://support.novell.com/security/cve/CVE-2012-0464.html https://bugzilla.novell.com/745017 https://bugzilla.novell.com/750044 http://download.novell.com/patch/finder/?keywords=19608dcf2d85bd752570d6368… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:0411-1: important: Security update for PHP5
by opensuse-security＠opensuse.org 24 Mar '12

24 Mar '12

SUSE Security Update: Security update for PHP5 ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0411-1 Rating: important References: #741520 #741859 #742273 #742806 #743308 #744966 #746661 #749111 Cross-References: CVE-2011-4153 CVE-2011-4885 CVE-2012-0057 CVE-2012-0781 CVE-2012-0788 CVE-2012-0789 CVE-2012-0807 CVE-2012-0830 CVE-2012-0831 Affected Products: SUSE Linux Enterprise Server 10 SP4 SLE SDK 10 SP4 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: This update of php5 fixes multiple security flaws: * CVE-2011-4153, missing checks of return values could allow remote attackers to cause a denial of service (NULL pointer dereference) * CVE-2011-4885, denial of service via hash collisions * CVE-2012-0057, specially crafted XSLT stylesheets could allow remote attackers to create arbitrary files with arbitrary content * CVE-2012-0781, remote attackers can cause a denial of service via specially crafted input to an application that attempts to perform Tidy::diagnose operations * CVE-2012-0788, applications that use a PDO driver were prone to denial of service flaws which could be exploited remotely * CVE-2012-0789, memory leak in the timezone functionality could allow remote attackers to cause a denial of service (memory consumption) * CVE-2012-0807, a stack based buffer overflow in php5's Suhosin extension could allow remote attackers to execute arbitrary code via a long string that is used in a Set-Cookie HTTP header * CVE-2012-0830, this fixes an incorrect fix for CVE-2011-4885 which could allow remote attackers to execute arbitrary code via a request containing a large number of variables * CVE-2012-0831, temporary changes to the magic_quotes_gpc directive during the importing of environment variables is not properly performed which makes it easier for remote attackers to conduct SQL injections Security Issue references: * CVE-2011-4153 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4153 > * CVE-2011-4885 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4885 > * CVE-2012-0057 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0057 > * CVE-2012-0781 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0781 > * CVE-2012-0788 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0788 > * CVE-2012-0789 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0789 > * CVE-2012-0807 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0807 > * CVE-2012-0830 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0830 > * CVE-2012-0831 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0831 > Package List: - SUSE Linux Enterprise Server 10 SP4 (i586 ia64 ppc s390x x86_64): apache2-mod_php5-5.2.14-0.26.3 php5-5.2.14-0.26.3 php5-bcmath-5.2.14-0.26.3 php5-bz2-5.2.14-0.26.3 php5-calendar-5.2.14-0.26.3 php5-ctype-5.2.14-0.26.3 php5-curl-5.2.14-0.26.3 php5-dba-5.2.14-0.26.3 php5-dbase-5.2.14-0.26.3 php5-devel-5.2.14-0.26.3 php5-dom-5.2.14-0.26.3 php5-exif-5.2.14-0.26.3 php5-fastcgi-5.2.14-0.26.3 php5-ftp-5.2.14-0.26.3 php5-gd-5.2.14-0.26.3 php5-gettext-5.2.14-0.26.3 php5-gmp-5.2.14-0.26.3 php5-hash-5.2.14-0.26.3 php5-iconv-5.2.14-0.26.3 php5-imap-5.2.14-0.26.3 php5-json-5.2.14-0.26.3 php5-ldap-5.2.14-0.26.3 php5-mbstring-5.2.14-0.26.3 php5-mcrypt-5.2.14-0.26.3 php5-mhash-5.2.14-0.26.3 php5-mysql-5.2.14-0.26.3 php5-ncurses-5.2.14-0.26.3 php5-odbc-5.2.14-0.26.3 php5-openssl-5.2.14-0.26.3 php5-pcntl-5.2.14-0.26.3 php5-pdo-5.2.14-0.26.3 php5-pear-5.2.14-0.26.3 php5-pgsql-5.2.14-0.26.3 php5-posix-5.2.14-0.26.3 php5-pspell-5.2.14-0.26.3 php5-shmop-5.2.14-0.26.3 php5-snmp-5.2.14-0.26.3 php5-soap-5.2.14-0.26.3 php5-sockets-5.2.14-0.26.3 php5-sqlite-5.2.14-0.26.3 php5-suhosin-5.2.14-0.26.3 php5-sysvmsg-5.2.14-0.26.3 php5-sysvsem-5.2.14-0.26.3 php5-sysvshm-5.2.14-0.26.3 php5-tokenizer-5.2.14-0.26.3 php5-wddx-5.2.14-0.26.3 php5-xmlreader-5.2.14-0.26.3 php5-xmlrpc-5.2.14-0.26.3 php5-xsl-5.2.14-0.26.3 php5-zlib-5.2.14-0.26.3 - SLE SDK 10 SP4 (i586 ia64 ppc s390x x86_64): apache2-mod_php5-5.2.14-0.26.3 php5-5.2.14-0.26.3 php5-bcmath-5.2.14-0.26.3 php5-bz2-5.2.14-0.26.3 php5-calendar-5.2.14-0.26.3 php5-ctype-5.2.14-0.26.3 php5-curl-5.2.14-0.26.3 php5-dba-5.2.14-0.26.3 php5-dbase-5.2.14-0.26.3 php5-devel-5.2.14-0.26.3 php5-dom-5.2.14-0.26.3 php5-exif-5.2.14-0.26.3 php5-fastcgi-5.2.14-0.26.3 php5-ftp-5.2.14-0.26.3 php5-gd-5.2.14-0.26.3 php5-gettext-5.2.14-0.26.3 php5-gmp-5.2.14-0.26.3 php5-hash-5.2.14-0.26.3 php5-iconv-5.2.14-0.26.3 php5-imap-5.2.14-0.26.3 php5-ldap-5.2.14-0.26.3 php5-mbstring-5.2.14-0.26.3 php5-mcrypt-5.2.14-0.26.3 php5-mhash-5.2.14-0.26.3 php5-mysql-5.2.14-0.26.3 php5-ncurses-5.2.14-0.26.3 php5-odbc-5.2.14-0.26.3 php5-openssl-5.2.14-0.26.3 php5-pcntl-5.2.14-0.26.3 php5-pdo-5.2.14-0.26.3 php5-pear-5.2.14-0.26.3 php5-pgsql-5.2.14-0.26.3 php5-posix-5.2.14-0.26.3 php5-pspell-5.2.14-0.26.3 php5-shmop-5.2.14-0.26.3 php5-snmp-5.2.14-0.26.3 php5-soap-5.2.14-0.26.3 php5-sockets-5.2.14-0.26.3 php5-sqlite-5.2.14-0.26.3 php5-suhosin-5.2.14-0.26.3 php5-sysvmsg-5.2.14-0.26.3 php5-sysvsem-5.2.14-0.26.3 php5-sysvshm-5.2.14-0.26.3 php5-tidy-5.2.14-0.26.3 php5-tokenizer-5.2.14-0.26.3 php5-wddx-5.2.14-0.26.3 php5-xmlreader-5.2.14-0.26.3 php5-xmlrpc-5.2.14-0.26.3 php5-xsl-5.2.14-0.26.3 php5-zlib-5.2.14-0.26.3 References: http://support.novell.com/security/cve/CVE-2011-4153.html http://support.novell.com/security/cve/CVE-2011-4885.html http://support.novell.com/security/cve/CVE-2012-0057.html http://support.novell.com/security/cve/CVE-2012-0781.html http://support.novell.com/security/cve/CVE-2012-0788.html http://support.novell.com/security/cve/CVE-2012-0789.html http://support.novell.com/security/cve/CVE-2012-0807.html http://support.novell.com/security/cve/CVE-2012-0830.html http://support.novell.com/security/cve/CVE-2012-0831.html https://bugzilla.novell.com/741520 https://bugzilla.novell.com/741859 https://bugzilla.novell.com/742273 https://bugzilla.novell.com/742806 https://bugzilla.novell.com/743308 https://bugzilla.novell.com/744966 https://bugzilla.novell.com/746661 https://bugzilla.novell.com/749111 http://download.novell.com/patch/finder/?keywords=12fa3ee1e0074dc69ed195ba3… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2012:0374-1: important: update for chromium, v8
by opensuse-security＠opensuse.org 16 Mar '12

16 Mar '12

openSUSE Security Update: update for chromium, v8 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0374-1 Rating: important References: #750407 #751466 #751738 Cross-References: CVE-2011-3031 CVE-2011-3032 CVE-2011-3033 CVE-2011-3034 CVE-2011-3035 CVE-2011-3036 CVE-2011-3037 CVE-2011-3038 CVE-2011-3039 CVE-2011-3040 CVE-2011-3041 CVE-2011-3042 CVE-2011-3043 CVE-2011-3044 CVE-2011-3046 CVE-2011-3047 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes 16 vulnerabilities is now available. Description: Changes in chromium: - Update to 19.0.1066 * Fixed Chrome install/update resets Google search preferences (Issue: 105390) * Don't trigger accelerated compositing on 3D CSS when using swiftshader (Issue: 116401) * Fixed a GPU crash (Issue: 116096) * More fixes for Back button frequently hangs (Issue: 93427) * Bastion now works (Issue: 116285) * Fixed Composited layer sorting irregularity with accelerated canvas (Issue: 102943) * Fixed Composited layer sorting irregularity with accelerated canvas (Issue: 102943) * Fixed Google Feedback causes render process to use too much memory (Issue: 114489) * Fixed after upgrade, some pages are rendered as blank (Issue: 109888) * Fixed Pasting text into a single-line text field shouldn't keep literal newlines (Issue: 106551) - Security Fixes: * Critical CVE-2011-3047: Errant plug-in load and GPU process memory corruption * Critical CVE-2011-3046: UXSS and bad history navigation. - Update to 19.0.1060 * Fixed NTP signed in state is missing (Issue: 112676) * Fixed gmail seems to redraw itself (all white) occasionally (Issue: 111263) * Focus "OK" button on Javascript dialogs (Issue: 111015) * Fixed Back button frequently hangs (Issue: 93427) * Increase the buffer size to fix muted playback rate (Issue: 108239) * Fixed Empty span with line-height renders with non-zero height (Issue: 109811) * Marked the Certum Trusted Network CA as an issuer of extended-validation (EV) certificates. * Fixed importing of bookmarks, history, etc. from Firefox 10+. * Fixed issues - 114001, 110785, 114168, 114598, 111663, 113636, 112676 * Fixed several crashes (Issues: 111376, 108688, 114391) * Fixed Firefox browser in Import Bookmarks and Settings drop-down (Issue: 114476) * Sync: Sessions aren't associating pre-existing tabs (Issue: 113319) * Fixed All "Extensions" make an entry under the "NTP Apps" page (Issue: 113672) - Security Fixes (bnc#750407): * High CVE-2011-3031: Use-after-free in v8 element wrapper. * High CVE-2011-3032: Use-after-free in SVG value handling. * High CVE-2011-3033: Buffer overflow in the Skia drawing library. * High CVE-2011-3034: Use-after-free in SVG document handling. * High CVE-2011-3035: Use-after-free in SVG use handling. * High CVE-2011-3036: Bad cast in line box handling. * High CVE-2011-3037: Bad casts in anonymous block splitting. * High CVE-2011-3038: Use-after-free in multi-column handling. * High CVE-2011-3039: Use-after-free in quote handling. * High CVE-2011-3040: Out-of-bounds read in text handling. * High CVE-2011-3041: Use-after-free in class attribute handling. * High CVE-2011-3042: Use-after-free in table section handling. * High CVE-2011-3043: Use-after-free in flexbox with floats. * High CVE-2011-3044: Use-after-free with SVG animation elements. Changes in v8: - Update to 3.9.13.0 * Add code kind check before preparing for OSR. (issue 1900, 115073) * Pass zone explicitly to zone-allocation on x64 and ARM. (issue 1802) * Port string construct stub to x64. (issue 849) * Performance and stability improvements on all platforms. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-165 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): chromium-19.0.1066.0-1.11.2 chromium-debuginfo-19.0.1066.0-1.11.2 chromium-debugsource-19.0.1066.0-1.11.2 chromium-desktop-gnome-19.0.1066.0-1.11.2 chromium-desktop-kde-19.0.1066.0-1.11.2 chromium-suid-helper-19.0.1066.0-1.11.2 chromium-suid-helper-debuginfo-19.0.1066.0-1.11.2 libv8-3-3.9.13.0-1.15.1 libv8-3-debuginfo-3.9.13.0-1.15.1 v8-debugsource-3.9.13.0-1.15.1 v8-devel-3.9.13.0-1.15.1 v8-private-headers-devel-3.9.13.0-1.15.1 References: http://support.novell.com/security/cve/CVE-2011-3031.html http://support.novell.com/security/cve/CVE-2011-3032.html http://support.novell.com/security/cve/CVE-2011-3033.html http://support.novell.com/security/cve/CVE-2011-3034.html http://support.novell.com/security/cve/CVE-2011-3035.html http://support.novell.com/security/cve/CVE-2011-3036.html http://support.novell.com/security/cve/CVE-2011-3037.html http://support.novell.com/security/cve/CVE-2011-3038.html http://support.novell.com/security/cve/CVE-2011-3039.html http://support.novell.com/security/cve/CVE-2011-3040.html http://support.novell.com/security/cve/CVE-2011-3041.html http://support.novell.com/security/cve/CVE-2011-3042.html http://support.novell.com/security/cve/CVE-2011-3043.html http://support.novell.com/security/cve/CVE-2011-3044.html http://support.novell.com/security/cve/CVE-2011-3046.html http://support.novell.com/security/cve/CVE-2011-3047.html https://bugzilla.novell.com/750407 https://bugzilla.novell.com/751466 https://bugzilla.novell.com/751738 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:0364-1: important: Security update for Real Time Linux Kernel
by opensuse-security＠opensuse.org 14 Mar '12

14 Mar '12

SUSE Security Update: Security update for Real Time Linux Kernel ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0364-1 Rating: important References: #590980 #591293 #651219 #653260 #698450 #699709 #707096 #707288 #708877 #711203 #711539 #712366 #714001 #716901 #722406 #726788 #732021 #734056 #745881 Cross-References: CVE-2010-3873 CVE-2011-1576 CVE-2011-1577 CVE-2011-1833 CVE-2011-2203 CVE-2011-2918 CVE-2011-2928 CVE-2011-3191 CVE-2011-3353 CVE-2011-4081 CVE-2011-4110 CVE-2011-4326 Affected Products: SUSE Linux Enterprise Real Time 11 SP1 ______________________________________________________________________________ An update that solves 12 vulnerabilities and has 7 fixes is now available. It includes one version update. Description: The SUSE Linux Enterprise Server 11 SP1 Realtime kernel was updated to 2.6.33.20 to fix various bugs and security issues. The following security issues have been fixed: * CVE-2011-4110: KEYS: Fix a NULL pointer deref in the user-defined key type, which allowed local attackers to Oops the kernel. * CVE-2011-4081: Avoid potential NULL pointer deref in ghash, which allowed local attackers to Oops the kernel. * CVE-2010-3873: When using X.25 communication a malicious sender could corrupt data structures, causing crashes or potential code execution. Please note that X.25 needs to be setup to make this effective, which these days is usually not the case. * CVE-2011-2203: A NULL ptr dereference on mounting corrupt hfs filesystems was fixed which could be used by local attackers to crash the kernel. * CVE-2011-3191: A malicious CIFS server could cause a integer overflow on the local machine on directory index operations, in turn causing memory corruption. * CVE-2011-3353: In the fuse filesystem, FUSE_NOTIFY_INVAL_ENTRY did not check the length of the write so the message processing could overrun and result in a BUG_ON() in fuse_copy_fill(). This flaw could be used by local users able to mount FUSE filesystems to crash the system. * CVE-2011-4326: A bug was found in the way headroom check was performed in udp6_ufo_fragment() function. A remote attacker could use this flaw to crash the system. * CVE-2011-1576: The Generic Receive Offload (GRO) implementation in the Linux kernel allowed remote attackers to cause a denial of service via crafted VLAN packets that are processed by the napi_reuse_skb function, leading to (1) a memory leak or (2) memory corruption, a different vulnerability than CVE-2011-1478. * CVE-2011-1833: Added a kernel option to ensure ecryptfs is mounting only on paths belonging to the current ui, which would have allowed local attackers to potentially gain privileges via symlink attacks. * CVE-2011-2918: In the perf framework software event overflows could deadlock or delete an uninitialized timer. Included in Linux 2.6.32.19 stable update: * CVE-2011-2928: The befs_follow_link function in fs/befs/linuxvfs.c in the Linux kernel did not validate the length attribute of long symlinks, which allowed local users to cause a denial of service (incorrect pointer dereference and OOPS) by accessing a long symlink on a malformed Be filesystem. * CVE-2011-3353: In the fuse filesystem, FUSE_NOTIFY_INVAL_ENTRY did not check the length of the write so the message processing could overrun and result in a BUG_ON() in fuse_copy_fill(). This flaw could be used by local users able to mount FUSE filesystems to crash the system. * CVE-2011-1577: The Linux kernel automatically evaluated partition tables of storage devices. The code for evaluating EFI GUID partitions (in fs/partitions/efi.c) contained a bug that causes a kernel oops on certain corrupted GUID partition tables, which might be used by local attackers to crash the kernel or potentially execute code. The following non security bugs have been fixed: * Fix DL980G7 numa enumeration problem. HP bios SRAT table contains more entries (256) than SLERT NR_CPUS (128). Pull in mainline fixes to always parse the entire table, regardless of configured NR_CPUS. * x86, acpi: Parse all SRAT cpu entries even above the cpu number limitation (bnc#745881). * x86, ia64, acpi: Clean up x86-ism in drivers/acpi/numa.c (bnc#745881). * rt, timerfd: fix timerfd_settime() livelock. * Fix build failure on 12.1 systems. CONFIG_BUILD_DOCSRC builds Documentation/video4linux but without reference to local includes, thus build only succeeds on older SUSE releases where linux-glibc-devel provides (obsolete) videodev.h. Add upstream patch which drops support for v4lgrab.c which is safe as sample executable is not packaged in any released rpm. * Add missing references symset for the rt flavor (bnc#722406#c69). * Pick up SP1 82576 ET2 Quad Port driver addon. Pick up I350 as well, since it's just recognition of a follow-on part for 82580. * igb: Add support for 82576 ET2 Quad Port Server Adapter (bnc#591293, bnc#722406). * igb: add support for Intel I350 Gigabit Network Connection (bnc#590980). * Fix regression introduced by backport of mainline commit 43fa5460 * sched/rt: Migrate equal priority tasks to available CPUs. * sched: fix broken SCHED_RESET_ON_FORK handling (bnc#708877). * sched: Fix rt_rq runtime leakage bug (bnc#707096). Security Issue references: * CVE-2011-4110 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4110 > * CVE-2011-4081 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4081 > * CVE-2010-3873 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3873 > * CVE-2011-2203 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2203 > * CVE-2011-3191 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3191 > * CVE-2011-3353 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3353 > * CVE-2011-4326 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4326 > * CVE-2011-1576 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1576 > * CVE-2011-1833 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1833 > * CVE-2011-2918 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2918 > * CVE-2011-2928 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2928 > * CVE-2011-3353 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3353 > * CVE-2011-1577 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1577 > Indications: Everyone using the Real Time Linux Kernel on x86_64 architecture should update. Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Real Time 11 SP1: zypper in -t patch slertesp1-kernel-5802 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Real Time 11 SP1 (x86_64) [New Version: 2.6.33.20]: brocade-bna-kmp-rt-2.1.0.0_2.6.33.20_rt31_0.3-0.2.34 cluster-network-kmp-rt-1.4_2.6.33.20_rt31_0.3-2.5.28 cluster-network-kmp-rt_trace-1.4_2.6.33.20_rt31_0.3-2.5.28 drbd-kmp-rt-8.3.11_2.6.33.20_rt31_0.3-0.3.28 drbd-kmp-rt_trace-8.3.11_2.6.33.20_rt31_0.3-0.3.28 iscsitarget-kmp-rt-1.4.19_2.6.33.20_rt31_0.3-0.9.11.2 kernel-rt-2.6.33.20-0.3.1 kernel-rt-base-2.6.33.20-0.3.1 kernel-rt-devel-2.6.33.20-0.3.1 kernel-rt_trace-2.6.33.20-0.3.1 kernel-rt_trace-base-2.6.33.20-0.3.1 kernel-rt_trace-devel-2.6.33.20-0.3.1 kernel-source-rt-2.6.33.20-0.3.1 kernel-syms-rt-2.6.33.20-0.3.1 ocfs2-kmp-rt-1.6_2.6.33.20_rt31_0.3-0.4.2.28 ocfs2-kmp-rt_trace-1.6_2.6.33.20_rt31_0.3-0.4.2.28 ofed-kmp-rt-1.5.2_2.6.33.20_rt31_0.3-0.9.13.15 References: http://support.novell.com/security/cve/CVE-2010-3873.html http://support.novell.com/security/cve/CVE-2011-1576.html http://support.novell.com/security/cve/CVE-2011-1577.html http://support.novell.com/security/cve/CVE-2011-1833.html http://support.novell.com/security/cve/CVE-2011-2203.html http://support.novell.com/security/cve/CVE-2011-2918.html http://support.novell.com/security/cve/CVE-2011-2928.html http://support.novell.com/security/cve/CVE-2011-3191.html http://support.novell.com/security/cve/CVE-2011-3353.html http://support.novell.com/security/cve/CVE-2011-4081.html http://support.novell.com/security/cve/CVE-2011-4110.html http://support.novell.com/security/cve/CVE-2011-4326.html https://bugzilla.novell.com/590980 https://bugzilla.novell.com/591293 https://bugzilla.novell.com/651219 https://bugzilla.novell.com/653260 https://bugzilla.novell.com/698450 https://bugzilla.novell.com/699709 https://bugzilla.novell.com/707096 https://bugzilla.novell.com/707288 https://bugzilla.novell.com/708877 https://bugzilla.novell.com/711203 https://bugzilla.novell.com/711539 https://bugzilla.novell.com/712366 https://bugzilla.novell.com/714001 https://bugzilla.novell.com/716901 https://bugzilla.novell.com/722406 https://bugzilla.novell.com/726788 https://bugzilla.novell.com/732021 https://bugzilla.novell.com/734056 https://bugzilla.novell.com/745881 http://download.novell.com/patch/finder/?keywords=2e813f9c7b45c2dd561fb51cf… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:0348-1: critical: Security update for Samba
by opensuse-security＠opensuse.org 09 Mar '12

09 Mar '12

SUSE Security Update: Security update for Samba ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0348-1 Rating: critical References: #550002 #561894 #577868 #592198 #599873 #605935 #611927 #613459 #637218 #652620 #670431 #705241 #708503 #747934 Cross-References: CVE-2012-0870 Affected Products: SUSE Linux Enterprise Server 10 SP2 ______________________________________________________________________________ An update that solves one vulnerability and has 13 fixes is now available. It includes one version update. Description: This Samba file server update fixes various security issues: * CVE-2012-0870: A heap-based buffer overflow that could be exploited by remote, unauthenticated attackers to crash the smbd daemon or potentially execute arbitrary code via specially crafted SMB AndX request packets. * CVE-2011-2694: A cross site scripting problem in SWAT was fixed. * CVE-2011-0719: Fixed a possible denial of service caused by memory corruption. * CVE-2010-3069: Fix buffer overflow in sid_parse() to correctly check the input lengths when reading a binary representation of a Windows Security ID (SID). * CVE-2010-2063: Addressed possible buffer overrun in chain_reply code of pre-3.4 versions. * CVE-2010-1642: An uninitialized variable read could have caused an smbd crash. * CVE-2010-0787: Take extra care that a mount point of mount.cifs isn't changed during mount; Also the following bugs have been fixed: * Add Provides samba-client-gplv2 and samba-doc-gplv2 to pre-3.2 versions; (bnc#652620). * Initialize workgroup of nmblookup as empty string. * Fix trusts with Windows 2008R2 DCs; (bnc#613459); (bnc#599873); (bnc#592198); (bso#6697). * Document "wide links" defaults to "no" in the smb.conf man page for versions pre-3.4.6; (bnc#577868). * Allow forced pw change even with min pw age; (bnc#561894). Security Issue reference: * CVE-2012-0870 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0870 > Package List: - SUSE Linux Enterprise Server 10 SP2 (i586 s390x x86_64) [New Version: 3.0.32]: cifs-mount-3.0.32-0.20.1 libmsrpc-3.0.32-0.20.1 libmsrpc-devel-3.0.32-0.20.1 libsmbclient-3.0.32-0.20.1 libsmbclient-devel-3.0.32-0.20.1 samba-3.0.32-0.20.1 samba-client-3.0.32-0.20.1 samba-krb-printing-3.0.32-0.20.1 samba-python-3.0.32-0.20.1 samba-vscan-0.3.6b-42.85.20.1 samba-winbind-3.0.32-0.20.1 - SUSE Linux Enterprise Server 10 SP2 (s390x x86_64) [New Version: 3.0.32]: libsmbclient-32bit-3.0.32-0.20.1 samba-32bit-3.0.32-0.20.1 samba-client-32bit-3.0.32-0.20.1 samba-winbind-32bit-3.0.32-0.20.1 - SUSE Linux Enterprise Server 10 SP2 (noarch) [New Version: 3.0.32]: samba-doc-3.0.32-0.20.1 References: http://support.novell.com/security/cve/CVE-2012-0870.html https://bugzilla.novell.com/550002 https://bugzilla.novell.com/561894 https://bugzilla.novell.com/577868 https://bugzilla.novell.com/592198 https://bugzilla.novell.com/599873 https://bugzilla.novell.com/605935 https://bugzilla.novell.com/611927 https://bugzilla.novell.com/613459 https://bugzilla.novell.com/637218 https://bugzilla.novell.com/652620 https://bugzilla.novell.com/670431 https://bugzilla.novell.com/705241 https://bugzilla.novell.com/708503 https://bugzilla.novell.com/747934 http://download.novell.com/patch/finder/?keywords=7647f10c23183441620c089df… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:0338-1: critical: Security update for Samba
by opensuse-security＠opensuse.org 08 Mar '12

08 Mar '12

SUSE Security Update: Security update for Samba ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0338-1 Rating: critical References: #747934 Cross-References: CVE-2012-0870 Affected Products: SUSE CORE 9 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update of Samba fixes a heap-based buffer overflow that could be exploited by remote, unauthenticated attackers to crash the smbd daemon or potentially execute arbitrary code via specially crafted SMB AndX request packets (CVE-2012-0870). Security Issue reference: * CVE-2012-0870 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0870 > Package List: - SUSE CORE 9 (i586 s390 s390x x86_64): libsmbclient-3.0.26a-0.21 libsmbclient-devel-3.0.26a-0.21 samba-3.0.26a-0.21 samba-client-3.0.26a-0.21 samba-doc-3.0.26a-0.21 samba-pdb-3.0.26a-0.21 samba-python-3.0.26a-0.21 samba-vscan-0.3.6b-0.49 samba-winbind-3.0.26a-0.21 - SUSE CORE 9 (x86_64): libsmbclient-32bit-9-201202240204 samba-32bit-9-201202240204 samba-client-32bit-9-201202240204 samba-winbind-32bit-9-201202240204 - SUSE CORE 9 (s390x): libsmbclient-32bit-9-201202240207 samba-32bit-9-201202240207 samba-client-32bit-9-201202240207 samba-winbind-32bit-9-201202240207 References: http://support.novell.com/security/cve/CVE-2012-0870.html https://bugzilla.novell.com/747934 http://download.novell.com/patch/finder/?keywords=77fff45aa383e336358627a07… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0