May 2012 - openSUSE Security Announce - openSUSE Mailing Lists

[security-announce] SUSE-SU-2012:0604-1: critical: Security update for PHP5
by opensuse-security＠opensuse.org 09 May '12

09 May '12

SUSE Security Update: Security update for PHP5 ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0604-1 Rating: critical References: #752030 #760536 Cross-References: CVE-2012-1172 CVE-2012-1823 CVE-2012-2311 Affected Products: SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Server 11 SP2 for VMware SUSE Linux Enterprise Server 11 SP2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update fixes several security issues in PHP5: * CVE-2012-1172: A directory traversal bug has been fixed in PHP5 * CVE-2012-1823, CVE-2012-2311: A command injection was possible when PHP5 was operated in CGI mode using commandline options. This problem does not affect PHP5 in the normal Apache module mode setup. Security Issue references: * CVE-2012-1172 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1172 > * CVE-2012-1823 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1823 > * CVE-2012-2311 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2311 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11 SP2: zypper in -t patch sdksp2-apache2-mod_php53-6251 - SUSE Linux Enterprise Server 11 SP2 for VMware: zypper in -t patch slessp2-apache2-mod_php53-6251 - SUSE Linux Enterprise Server 11 SP2: zypper in -t patch slessp2-apache2-mod_php53-6251 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11 SP2 (i586 ia64 ppc64 s390x x86_64): php53-devel-5.3.8-0.27.1 php53-imap-5.3.8-0.27.1 php53-posix-5.3.8-0.27.1 php53-readline-5.3.8-0.27.1 php53-sockets-5.3.8-0.27.1 php53-sqlite-5.3.8-0.27.1 php53-tidy-5.3.8-0.27.1 - SUSE Linux Enterprise Server 11 SP2 for VMware (i586 x86_64): apache2-mod_php53-5.3.8-0.27.1 php53-5.3.8-0.27.1 php53-bcmath-5.3.8-0.27.1 php53-bz2-5.3.8-0.27.1 php53-calendar-5.3.8-0.27.1 php53-ctype-5.3.8-0.27.1 php53-curl-5.3.8-0.27.1 php53-dba-5.3.8-0.27.1 php53-dom-5.3.8-0.27.1 php53-exif-5.3.8-0.27.1 php53-fastcgi-5.3.8-0.27.1 php53-fileinfo-5.3.8-0.27.1 php53-ftp-5.3.8-0.27.1 php53-gd-5.3.8-0.27.1 php53-gettext-5.3.8-0.27.1 php53-gmp-5.3.8-0.27.1 php53-iconv-5.3.8-0.27.1 php53-intl-5.3.8-0.27.1 php53-json-5.3.8-0.27.1 php53-ldap-5.3.8-0.27.1 php53-mbstring-5.3.8-0.27.1 php53-mcrypt-5.3.8-0.27.1 php53-mysql-5.3.8-0.27.1 php53-odbc-5.3.8-0.27.1 php53-openssl-5.3.8-0.27.1 php53-pcntl-5.3.8-0.27.1 php53-pdo-5.3.8-0.27.1 php53-pear-5.3.8-0.27.1 php53-pgsql-5.3.8-0.27.1 php53-pspell-5.3.8-0.27.1 php53-shmop-5.3.8-0.27.1 php53-snmp-5.3.8-0.27.1 php53-soap-5.3.8-0.27.1 php53-suhosin-5.3.8-0.27.1 php53-sysvmsg-5.3.8-0.27.1 php53-sysvsem-5.3.8-0.27.1 php53-sysvshm-5.3.8-0.27.1 php53-tokenizer-5.3.8-0.27.1 php53-wddx-5.3.8-0.27.1 php53-xmlreader-5.3.8-0.27.1 php53-xmlrpc-5.3.8-0.27.1 php53-xmlwriter-5.3.8-0.27.1 php53-xsl-5.3.8-0.27.1 php53-zip-5.3.8-0.27.1 php53-zlib-5.3.8-0.27.1 - SUSE Linux Enterprise Server 11 SP2 (i586 ia64 ppc64 s390x x86_64): apache2-mod_php53-5.3.8-0.27.1 php53-5.3.8-0.27.1 php53-bcmath-5.3.8-0.27.1 php53-bz2-5.3.8-0.27.1 php53-calendar-5.3.8-0.27.1 php53-ctype-5.3.8-0.27.1 php53-curl-5.3.8-0.27.1 php53-dba-5.3.8-0.27.1 php53-dom-5.3.8-0.27.1 php53-exif-5.3.8-0.27.1 php53-fastcgi-5.3.8-0.27.1 php53-fileinfo-5.3.8-0.27.1 php53-ftp-5.3.8-0.27.1 php53-gd-5.3.8-0.27.1 php53-gettext-5.3.8-0.27.1 php53-gmp-5.3.8-0.27.1 php53-iconv-5.3.8-0.27.1 php53-intl-5.3.8-0.27.1 php53-json-5.3.8-0.27.1 php53-ldap-5.3.8-0.27.1 php53-mbstring-5.3.8-0.27.1 php53-mcrypt-5.3.8-0.27.1 php53-mysql-5.3.8-0.27.1 php53-odbc-5.3.8-0.27.1 php53-openssl-5.3.8-0.27.1 php53-pcntl-5.3.8-0.27.1 php53-pdo-5.3.8-0.27.1 php53-pear-5.3.8-0.27.1 php53-pgsql-5.3.8-0.27.1 php53-pspell-5.3.8-0.27.1 php53-shmop-5.3.8-0.27.1 php53-snmp-5.3.8-0.27.1 php53-soap-5.3.8-0.27.1 php53-suhosin-5.3.8-0.27.1 php53-sysvmsg-5.3.8-0.27.1 php53-sysvsem-5.3.8-0.27.1 php53-sysvshm-5.3.8-0.27.1 php53-tokenizer-5.3.8-0.27.1 php53-wddx-5.3.8-0.27.1 php53-xmlreader-5.3.8-0.27.1 php53-xmlrpc-5.3.8-0.27.1 php53-xmlwriter-5.3.8-0.27.1 php53-xsl-5.3.8-0.27.1 php53-zip-5.3.8-0.27.1 php53-zlib-5.3.8-0.27.1 References: http://support.novell.com/security/cve/CVE-2012-1172.html http://support.novell.com/security/cve/CVE-2012-1823.html http://support.novell.com/security/cve/CVE-2012-2311.html https://bugzilla.novell.com/752030 https://bugzilla.novell.com/760536 http://download.novell.com/patch/finder/?keywords=62b6d31a520c266c62fd06d0b… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:0603-1: important: Security update for IBM Java 1.6.0
by opensuse-security＠opensuse.org 09 May '12

09 May '12

SUSE Security Update: Security update for IBM Java 1.6.0 ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0603-1 Rating: important References: #752306 #758470 Cross-References: CVE-2011-3563 CVE-2011-5035 CVE-2012-0497 CVE-2012-0498 CVE-2012-0499 CVE-2012-0500 CVE-2012-0501 CVE-2012-0502 CVE-2012-0503 CVE-2012-0505 CVE-2012-0506 CVE-2012-0507 Affected Products: SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP1 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP1 for VMware SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server 10 SP4 SUSE Linux Enterprise Java 11 SP1 SUSE Linux Enterprise Java 10 SP4 ______________________________________________________________________________ An update that fixes 12 vulnerabilities is now available. Description: IBM Java 1.6.0 has been updated to SR10-FP1, fixing various security issues. More information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/ <http://www.ibm.com/developerworks/java/jdk/alerts/> Security Issue references: * CVE-2012-0502 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0502 > * CVE-2012-0503 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0503 > * CVE-2012-0506 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0506 > * CVE-2012-0507 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0507 > * CVE-2011-3563 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3563 > * CVE-2012-0500 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0500 > * CVE-2012-0497 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0497 > * CVE-2012-0498 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0498 > * CVE-2012-0499 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0499 > * CVE-2012-0500 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0500 > * CVE-2012-0501 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0501 > * CVE-2012-0505 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0505 > * CVE-2011-5035 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-5035 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11 SP2: zypper in -t patch sdksp1-java-1_6_0-ibm-6225 - SUSE Linux Enterprise Software Development Kit 11 SP1: zypper in -t patch sdksp1-java-1_6_0-ibm-6225 - SUSE Linux Enterprise Server 11 SP2: zypper in -t patch slessp1-java-1_6_0-ibm-6225 - SUSE Linux Enterprise Server 11 SP1 for VMware: zypper in -t patch slessp1-java-1_6_0-ibm-6225 - SUSE Linux Enterprise Server 11 SP1: zypper in -t patch slessp1-java-1_6_0-ibm-6225 - SUSE Linux Enterprise Java 11 SP1: zypper in -t patch slejsp1-java-1_6_0-ibm-6225 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11 SP2 (i586 ppc64 s390x x86_64): java-1_6_0-ibm-devel-1.6.0_sr10.1-0.3.1 - SUSE Linux Enterprise Software Development Kit 11 SP2 (i586 x86_64): java-1_6_0-ibm-1.6.0_sr10.1-0.3.1 java-1_6_0-ibm-fonts-1.6.0_sr10.1-0.3.1 - SUSE Linux Enterprise Software Development Kit 11 SP1 (i586 ppc64 s390x x86_64): java-1_6_0-ibm-devel-1.6.0_sr10.1-0.3.1 - SUSE Linux Enterprise Software Development Kit 11 SP1 (i586 x86_64): java-1_6_0-ibm-1.6.0_sr10.1-0.3.1 java-1_6_0-ibm-fonts-1.6.0_sr10.1-0.3.1 - SUSE Linux Enterprise Server 11 SP2 (i586 ppc64 s390x x86_64): java-1_6_0-ibm-1.6.0_sr10.1-0.3.1 java-1_6_0-ibm-fonts-1.6.0_sr10.1-0.3.1 java-1_6_0-ibm-jdbc-1.6.0_sr10.1-0.3.1 - SUSE Linux Enterprise Server 11 SP2 (i586 x86_64): java-1_6_0-ibm-plugin-1.6.0_sr10.1-0.3.1 - SUSE Linux Enterprise Server 11 SP2 (i586): java-1_6_0-ibm-alsa-1.6.0_sr10.1-0.3.1 - SUSE Linux Enterprise Server 11 SP1 for VMware (i586 x86_64): java-1_6_0-ibm-1.6.0_sr10.1-0.3.1 java-1_6_0-ibm-fonts-1.6.0_sr10.1-0.3.1 java-1_6_0-ibm-jdbc-1.6.0_sr10.1-0.3.1 java-1_6_0-ibm-plugin-1.6.0_sr10.1-0.3.1 - SUSE Linux Enterprise Server 11 SP1 for VMware (i586): java-1_6_0-ibm-alsa-1.6.0_sr10.1-0.3.1 - SUSE Linux Enterprise Server 11 SP1 (i586 ppc64 s390x x86_64): java-1_6_0-ibm-1.6.0_sr10.1-0.3.1 java-1_6_0-ibm-fonts-1.6.0_sr10.1-0.3.1 java-1_6_0-ibm-jdbc-1.6.0_sr10.1-0.3.1 - SUSE Linux Enterprise Server 11 SP1 (i586 x86_64): java-1_6_0-ibm-plugin-1.6.0_sr10.1-0.3.1 - SUSE Linux Enterprise Server 11 SP1 (i586): java-1_6_0-ibm-alsa-1.6.0_sr10.1-0.3.1 - SUSE Linux Enterprise Server 10 SP4 (i586 ppc s390x x86_64): java-1_6_0-ibm-1.6.0_sr10.1-0.11.1 java-1_6_0-ibm-devel-1.6.0_sr10.1-0.11.1 java-1_6_0-ibm-fonts-1.6.0_sr10.1-0.11.1 java-1_6_0-ibm-jdbc-1.6.0_sr10.1-0.11.1 - SUSE Linux Enterprise Server 10 SP4 (i586 ppc x86_64): java-1_6_0-ibm-plugin-1.6.0_sr10.1-0.11.1 - SUSE Linux Enterprise Server 10 SP4 (s390x x86_64): java-1_6_0-ibm-32bit-1.6.0_sr10.1-0.11.1 java-1_6_0-ibm-devel-32bit-1.6.0_sr10.1-0.11.1 - SUSE Linux Enterprise Server 10 SP4 (x86_64): java-1_6_0-ibm-alsa-32bit-1.6.0_sr10.1-0.11.1 java-1_6_0-ibm-plugin-32bit-1.6.0_sr10.1-0.11.1 - SUSE Linux Enterprise Server 10 SP4 (i586): java-1_6_0-ibm-alsa-1.6.0_sr10.1-0.11.1 - SUSE Linux Enterprise Server 10 SP4 (ppc): java-1_6_0-ibm-64bit-1.6.0_sr10.1-0.11.1 - SUSE Linux Enterprise Java 11 SP1 (i586 ppc64 s390x x86_64): java-1_6_0-ibm-1.6.0_sr10.1-0.3.1 java-1_6_0-ibm-devel-1.6.0_sr10.1-0.3.1 java-1_6_0-ibm-fonts-1.6.0_sr10.1-0.3.1 java-1_6_0-ibm-jdbc-1.6.0_sr10.1-0.3.1 - SUSE Linux Enterprise Java 11 SP1 (i586 x86_64): java-1_6_0-ibm-plugin-1.6.0_sr10.1-0.3.1 - SUSE Linux Enterprise Java 11 SP1 (i586): java-1_6_0-ibm-alsa-1.6.0_sr10.1-0.3.1 - SUSE Linux Enterprise Java 10 SP4 (x86_64): java-1_6_0-ibm-1.6.0_sr10.1-0.11.1 java-1_6_0-ibm-devel-1.6.0_sr10.1-0.11.1 java-1_6_0-ibm-fonts-1.6.0_sr10.1-0.11.1 java-1_6_0-ibm-jdbc-1.6.0_sr10.1-0.11.1 java-1_6_0-ibm-plugin-1.6.0_sr10.1-0.11.1 References: http://support.novell.com/security/cve/CVE-2011-3563.html http://support.novell.com/security/cve/CVE-2011-5035.html http://support.novell.com/security/cve/CVE-2012-0497.html http://support.novell.com/security/cve/CVE-2012-0498.html http://support.novell.com/security/cve/CVE-2012-0499.html http://support.novell.com/security/cve/CVE-2012-0500.html http://support.novell.com/security/cve/CVE-2012-0501.html http://support.novell.com/security/cve/CVE-2012-0502.html http://support.novell.com/security/cve/CVE-2012-0503.html http://support.novell.com/security/cve/CVE-2012-0505.html http://support.novell.com/security/cve/CVE-2012-0506.html http://support.novell.com/security/cve/CVE-2012-0507.html https://bugzilla.novell.com/752306 https://bugzilla.novell.com/758470 http://download.novell.com/patch/finder/?keywords=3e69c82d3033515d0a8d556f0… http://download.novell.com/patch/finder/?keywords=4a2ddc2bdb6d3293049475e39… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:0602-1: important: Security update for IBM Java 1.6.0
by opensuse-security＠opensuse.org 09 May '12

09 May '12

SUSE Security Update: Security update for IBM Java 1.6.0 ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0602-1 Rating: important References: #755397 #758470 Cross-References: CVE-2011-3389 CVE-2011-3557 CVE-2011-3560 CVE-2011-3563 CVE-2012-0498 CVE-2012-0499 CVE-2012-0501 CVE-2012-0502 CVE-2012-0503 CVE-2012-0505 CVE-2012-0506 CVE-2012-0507 Affected Products: SUSE Linux Enterprise Server 10 SP4 SUSE Linux Enterprise Java 10 SP4 SUSE Linux Enterprise Desktop 10 SP4 ______________________________________________________________________________ An update that fixes 12 vulnerabilities is now available. Description: IBM Java 1.5.0 has been updated to SR13-FP1, fixing various security issues. More information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/ <http://www.ibm.com/developerworks/java/jdk/alerts/> Security Issue references: * CVE-2012-0502 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0502 > * CVE-2012-0503 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0503 > * CVE-2012-0506 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0506 > * CVE-2012-0507 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0507 > * CVE-2011-3563 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3563 > * CVE-2012-0498 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0498 > * CVE-2012-0499 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0499 > * CVE-2012-0501 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0501 > * CVE-2012-0505 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0505 > Package List: - SUSE Linux Enterprise Server 10 SP4 (i586 ppc s390x x86_64): java-1_5_0-ibm-1.5.0_sr13.1-0.8.3 java-1_5_0-ibm-devel-1.5.0_sr13.1-0.8.3 java-1_5_0-ibm-fonts-1.5.0_sr13.1-0.8.3 - SUSE Linux Enterprise Server 10 SP4 (s390x x86_64): java-1_5_0-ibm-32bit-1.5.0_sr13.1-0.8.3 java-1_5_0-ibm-devel-32bit-1.5.0_sr13.1-0.8.3 - SUSE Linux Enterprise Server 10 SP4 (i586 ppc): java-1_5_0-ibm-jdbc-1.5.0_sr13.1-0.8.3 java-1_5_0-ibm-plugin-1.5.0_sr13.1-0.8.3 - SUSE Linux Enterprise Server 10 SP4 (x86_64): java-1_5_0-ibm-alsa-32bit-1.5.0_sr13.1-0.8.3 - SUSE Linux Enterprise Server 10 SP4 (i586): java-1_5_0-ibm-alsa-1.5.0_sr13.1-0.8.3 - SUSE Linux Enterprise Server 10 SP4 (ppc): java-1_5_0-ibm-64bit-1.5.0_sr13.1-0.8.3 - SUSE Linux Enterprise Java 10 SP4 (i586 ppc s390x x86_64): java-1_5_0-ibm-1.5.0_sr13.1-0.8.3 java-1_5_0-ibm-devel-1.5.0_sr13.1-0.8.3 java-1_5_0-ibm-fonts-1.5.0_sr13.1-0.8.3 - SUSE Linux Enterprise Java 10 SP4 (ppc): java-1_5_0-ibm-jdbc-1.5.0_sr13.1-0.8.3 java-1_5_0-ibm-plugin-1.5.0_sr13.1-0.8.3 - SUSE Linux Enterprise Desktop 10 SP4 (i586 x86_64): java-1_5_0-ibm-1.5.0_sr13.1-0.8.3 java-1_5_0-ibm-demo-1.5.0_sr13.1-0.8.3 java-1_5_0-ibm-devel-1.5.0_sr13.1-0.8.3 java-1_5_0-ibm-fonts-1.5.0_sr13.1-0.8.3 java-1_5_0-ibm-src-1.5.0_sr13.1-0.8.3 - SUSE Linux Enterprise Desktop 10 SP4 (x86_64): java-1_5_0-ibm-32bit-1.5.0_sr13.1-0.8.3 java-1_5_0-ibm-alsa-32bit-1.5.0_sr13.1-0.8.3 java-1_5_0-ibm-devel-32bit-1.5.0_sr13.1-0.8.3 - SUSE Linux Enterprise Desktop 10 SP4 (i586): java-1_5_0-ibm-alsa-1.5.0_sr13.1-0.8.3 java-1_5_0-ibm-jdbc-1.5.0_sr13.1-0.8.3 java-1_5_0-ibm-plugin-1.5.0_sr13.1-0.8.3 References: http://support.novell.com/security/cve/CVE-2011-3389.html http://support.novell.com/security/cve/CVE-2011-3557.html http://support.novell.com/security/cve/CVE-2011-3560.html http://support.novell.com/security/cve/CVE-2011-3563.html http://support.novell.com/security/cve/CVE-2012-0498.html http://support.novell.com/security/cve/CVE-2012-0499.html http://support.novell.com/security/cve/CVE-2012-0501.html http://support.novell.com/security/cve/CVE-2012-0502.html http://support.novell.com/security/cve/CVE-2012-0503.html http://support.novell.com/security/cve/CVE-2012-0505.html http://support.novell.com/security/cve/CVE-2012-0506.html http://support.novell.com/security/cve/CVE-2012-0507.html https://bugzilla.novell.com/755397 https://bugzilla.novell.com/758470 http://download.novell.com/patch/finder/?keywords=37f9fa06a81529e81613e3989… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:0598-2: critical: Security update for PHP5
by opensuse-security＠opensuse.org 09 May '12

09 May '12

SUSE Security Update: Security update for PHP5 ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0598-2 Rating: critical References: #752030 #753778 #760536 Cross-References: CVE-2012-1172 CVE-2012-1823 CVE-2012-2311 Affected Products: SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP1 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP1 for VMware SUSE Linux Enterprise Server 11 SP1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. It includes one version update. Description: This update fixes several security issues in PHP5: * CVE-2012-1172: A directory traversal bug has been fixed in PHP5. * CVE-2012-1823, CVE-2012-2311: A command injection was possible when PHP5 was operated in CGI mode using commandline options. This problem does not affect PHP5 in the normal apache module mode setup. * Also a pack/unpacking bug on big endian 64bit architectures (ppc64 and s390x) has been fixed. bnc#753778 Security Issue references: * CVE-2012-1172 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1172 > * CVE-2012-1823 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1823 > * CVE-2012-2311 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2311 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11 SP2: zypper in -t patch sdksp1-apache2-mod_php5-6252 - SUSE Linux Enterprise Software Development Kit 11 SP1: zypper in -t patch sdksp1-apache2-mod_php5-6252 - SUSE Linux Enterprise Server 11 SP2: zypper in -t patch slessp1-apache2-mod_php5-6252 - SUSE Linux Enterprise Server 11 SP1 for VMware: zypper in -t patch slessp1-apache2-mod_php5-6252 - SUSE Linux Enterprise Server 11 SP1: zypper in -t patch slessp1-apache2-mod_php5-6252 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11 SP2 (i586 ia64 ppc64 s390x x86_64) [New Version: 5.2.14]: php5-devel-5.2.14-0.7.30.38.1 php5-imap-5.2.14-0.7.30.38.1 php5-ncurses-5.2.14-0.7.30.38.1 php5-posix-5.2.14-0.7.30.38.1 php5-readline-5.2.14-0.7.30.38.1 php5-sockets-5.2.14-0.7.30.38.1 php5-sqlite-5.2.14-0.7.30.38.1 php5-tidy-5.2.14-0.7.30.38.1 - SUSE Linux Enterprise Software Development Kit 11 SP2 (i586 x86_64) [New Version: 5.2.14]: apache2-mod_php5-5.2.14-0.7.30.38.1 php5-5.2.14-0.7.30.38.1 php5-bcmath-5.2.14-0.7.30.38.1 php5-bz2-5.2.14-0.7.30.38.1 php5-calendar-5.2.14-0.7.30.38.1 php5-ctype-5.2.14-0.7.30.38.1 php5-curl-5.2.14-0.7.30.38.1 php5-dba-5.2.14-0.7.30.38.1 php5-dbase-5.2.14-0.7.30.38.1 php5-dom-5.2.14-0.7.30.38.1 php5-exif-5.2.14-0.7.30.38.1 php5-fastcgi-5.2.14-0.7.30.38.1 php5-ftp-5.2.14-0.7.30.38.1 php5-gd-5.2.14-0.7.30.38.1 php5-gettext-5.2.14-0.7.30.38.1 php5-gmp-5.2.14-0.7.30.38.1 php5-hash-5.2.14-0.7.30.38.1 php5-iconv-5.2.14-0.7.30.38.1 php5-json-5.2.14-0.7.30.38.1 php5-ldap-5.2.14-0.7.30.38.1 php5-mbstring-5.2.14-0.7.30.38.1 php5-mcrypt-5.2.14-0.7.30.38.1 php5-mysql-5.2.14-0.7.30.38.1 php5-odbc-5.2.14-0.7.30.38.1 php5-openssl-5.2.14-0.7.30.38.1 php5-pcntl-5.2.14-0.7.30.38.1 php5-pdo-5.2.14-0.7.30.38.1 php5-pear-5.2.14-0.7.30.38.1 php5-pgsql-5.2.14-0.7.30.38.1 php5-pspell-5.2.14-0.7.30.38.1 php5-shmop-5.2.14-0.7.30.38.1 php5-snmp-5.2.14-0.7.30.38.1 php5-soap-5.2.14-0.7.30.38.1 php5-suhosin-5.2.14-0.7.30.38.1 php5-sysvmsg-5.2.14-0.7.30.38.1 php5-sysvsem-5.2.14-0.7.30.38.1 php5-sysvshm-5.2.14-0.7.30.38.1 php5-tokenizer-5.2.14-0.7.30.38.1 php5-wddx-5.2.14-0.7.30.38.1 php5-xmlreader-5.2.14-0.7.30.38.1 php5-xmlrpc-5.2.14-0.7.30.38.1 php5-xmlwriter-5.2.14-0.7.30.38.1 php5-xsl-5.2.14-0.7.30.38.1 php5-zip-5.2.14-0.7.30.38.1 php5-zlib-5.2.14-0.7.30.38.1 - SUSE Linux Enterprise Software Development Kit 11 SP1 (i586 ia64 ppc64 s390x x86_64) [New Version: 5.2.14]: php5-devel-5.2.14-0.7.30.38.1 php5-imap-5.2.14-0.7.30.38.1 php5-ncurses-5.2.14-0.7.30.38.1 php5-posix-5.2.14-0.7.30.38.1 php5-readline-5.2.14-0.7.30.38.1 php5-sockets-5.2.14-0.7.30.38.1 php5-sqlite-5.2.14-0.7.30.38.1 php5-tidy-5.2.14-0.7.30.38.1 - SUSE Linux Enterprise Software Development Kit 11 SP1 (i586 x86_64) [New Version: 5.2.14]: apache2-mod_php5-5.2.14-0.7.30.38.1 php5-5.2.14-0.7.30.38.1 php5-bcmath-5.2.14-0.7.30.38.1 php5-bz2-5.2.14-0.7.30.38.1 php5-calendar-5.2.14-0.7.30.38.1 php5-ctype-5.2.14-0.7.30.38.1 php5-curl-5.2.14-0.7.30.38.1 php5-dba-5.2.14-0.7.30.38.1 php5-dbase-5.2.14-0.7.30.38.1 php5-dom-5.2.14-0.7.30.38.1 php5-exif-5.2.14-0.7.30.38.1 php5-fastcgi-5.2.14-0.7.30.38.1 php5-ftp-5.2.14-0.7.30.38.1 php5-gd-5.2.14-0.7.30.38.1 php5-gettext-5.2.14-0.7.30.38.1 php5-gmp-5.2.14-0.7.30.38.1 php5-hash-5.2.14-0.7.30.38.1 php5-iconv-5.2.14-0.7.30.38.1 php5-json-5.2.14-0.7.30.38.1 php5-ldap-5.2.14-0.7.30.38.1 php5-mbstring-5.2.14-0.7.30.38.1 php5-mcrypt-5.2.14-0.7.30.38.1 php5-mysql-5.2.14-0.7.30.38.1 php5-odbc-5.2.14-0.7.30.38.1 php5-openssl-5.2.14-0.7.30.38.1 php5-pcntl-5.2.14-0.7.30.38.1 php5-pdo-5.2.14-0.7.30.38.1 php5-pear-5.2.14-0.7.30.38.1 php5-pgsql-5.2.14-0.7.30.38.1 php5-pspell-5.2.14-0.7.30.38.1 php5-shmop-5.2.14-0.7.30.38.1 php5-snmp-5.2.14-0.7.30.38.1 php5-soap-5.2.14-0.7.30.38.1 php5-suhosin-5.2.14-0.7.30.38.1 php5-sysvmsg-5.2.14-0.7.30.38.1 php5-sysvsem-5.2.14-0.7.30.38.1 php5-sysvshm-5.2.14-0.7.30.38.1 php5-tokenizer-5.2.14-0.7.30.38.1 php5-wddx-5.2.14-0.7.30.38.1 php5-xmlreader-5.2.14-0.7.30.38.1 php5-xmlrpc-5.2.14-0.7.30.38.1 php5-xmlwriter-5.2.14-0.7.30.38.1 php5-xsl-5.2.14-0.7.30.38.1 php5-zip-5.2.14-0.7.30.38.1 php5-zlib-5.2.14-0.7.30.38.1 - SUSE Linux Enterprise Server 11 SP2 (i586 ia64 ppc64 s390x x86_64) [New Version: 5.2.14]: apache2-mod_php5-5.2.14-0.7.30.38.1 php5-5.2.14-0.7.30.38.1 php5-bcmath-5.2.14-0.7.30.38.1 php5-bz2-5.2.14-0.7.30.38.1 php5-calendar-5.2.14-0.7.30.38.1 php5-ctype-5.2.14-0.7.30.38.1 php5-curl-5.2.14-0.7.30.38.1 php5-dba-5.2.14-0.7.30.38.1 php5-dbase-5.2.14-0.7.30.38.1 php5-dom-5.2.14-0.7.30.38.1 php5-exif-5.2.14-0.7.30.38.1 php5-fastcgi-5.2.14-0.7.30.38.1 php5-ftp-5.2.14-0.7.30.38.1 php5-gd-5.2.14-0.7.30.38.1 php5-gettext-5.2.14-0.7.30.38.1 php5-gmp-5.2.14-0.7.30.38.1 php5-hash-5.2.14-0.7.30.38.1 php5-iconv-5.2.14-0.7.30.38.1 php5-json-5.2.14-0.7.30.38.1 php5-ldap-5.2.14-0.7.30.38.1 php5-mbstring-5.2.14-0.7.30.38.1 php5-mcrypt-5.2.14-0.7.30.38.1 php5-mysql-5.2.14-0.7.30.38.1 php5-odbc-5.2.14-0.7.30.38.1 php5-openssl-5.2.14-0.7.30.38.1 php5-pcntl-5.2.14-0.7.30.38.1 php5-pdo-5.2.14-0.7.30.38.1 php5-pear-5.2.14-0.7.30.38.1 php5-pgsql-5.2.14-0.7.30.38.1 php5-pspell-5.2.14-0.7.30.38.1 php5-shmop-5.2.14-0.7.30.38.1 php5-snmp-5.2.14-0.7.30.38.1 php5-soap-5.2.14-0.7.30.38.1 php5-suhosin-5.2.14-0.7.30.38.1 php5-sysvmsg-5.2.14-0.7.30.38.1 php5-sysvsem-5.2.14-0.7.30.38.1 php5-sysvshm-5.2.14-0.7.30.38.1 php5-tokenizer-5.2.14-0.7.30.38.1 php5-wddx-5.2.14-0.7.30.38.1 php5-xmlreader-5.2.14-0.7.30.38.1 php5-xmlrpc-5.2.14-0.7.30.38.1 php5-xmlwriter-5.2.14-0.7.30.38.1 php5-xsl-5.2.14-0.7.30.38.1 php5-zip-5.2.14-0.7.30.38.1 php5-zlib-5.2.14-0.7.30.38.1 - SUSE Linux Enterprise Server 11 SP1 for VMware (i586 x86_64) [New Version: 5.2.14]: apache2-mod_php5-5.2.14-0.7.30.38.1 php5-5.2.14-0.7.30.38.1 php5-bcmath-5.2.14-0.7.30.38.1 php5-bz2-5.2.14-0.7.30.38.1 php5-calendar-5.2.14-0.7.30.38.1 php5-ctype-5.2.14-0.7.30.38.1 php5-curl-5.2.14-0.7.30.38.1 php5-dba-5.2.14-0.7.30.38.1 php5-dbase-5.2.14-0.7.30.38.1 php5-dom-5.2.14-0.7.30.38.1 php5-exif-5.2.14-0.7.30.38.1 php5-fastcgi-5.2.14-0.7.30.38.1 php5-ftp-5.2.14-0.7.30.38.1 php5-gd-5.2.14-0.7.30.38.1 php5-gettext-5.2.14-0.7.30.38.1 php5-gmp-5.2.14-0.7.30.38.1 php5-hash-5.2.14-0.7.30.38.1 php5-iconv-5.2.14-0.7.30.38.1 php5-json-5.2.14-0.7.30.38.1 php5-ldap-5.2.14-0.7.30.38.1 php5-mbstring-5.2.14-0.7.30.38.1 php5-mcrypt-5.2.14-0.7.30.38.1 php5-mysql-5.2.14-0.7.30.38.1 php5-odbc-5.2.14-0.7.30.38.1 php5-openssl-5.2.14-0.7.30.38.1 php5-pcntl-5.2.14-0.7.30.38.1 php5-pdo-5.2.14-0.7.30.38.1 php5-pear-5.2.14-0.7.30.38.1 php5-pgsql-5.2.14-0.7.30.38.1 php5-pspell-5.2.14-0.7.30.38.1 php5-shmop-5.2.14-0.7.30.38.1 php5-snmp-5.2.14-0.7.30.38.1 php5-soap-5.2.14-0.7.30.38.1 php5-suhosin-5.2.14-0.7.30.38.1 php5-sysvmsg-5.2.14-0.7.30.38.1 php5-sysvsem-5.2.14-0.7.30.38.1 php5-sysvshm-5.2.14-0.7.30.38.1 php5-tokenizer-5.2.14-0.7.30.38.1 php5-wddx-5.2.14-0.7.30.38.1 php5-xmlreader-5.2.14-0.7.30.38.1 php5-xmlrpc-5.2.14-0.7.30.38.1 php5-xmlwriter-5.2.14-0.7.30.38.1 php5-xsl-5.2.14-0.7.30.38.1 php5-zip-5.2.14-0.7.30.38.1 php5-zlib-5.2.14-0.7.30.38.1 - SUSE Linux Enterprise Server 11 SP1 (i586 ia64 ppc64 s390x x86_64) [New Version: 5.2.14]: apache2-mod_php5-5.2.14-0.7.30.38.1 php5-5.2.14-0.7.30.38.1 php5-bcmath-5.2.14-0.7.30.38.1 php5-bz2-5.2.14-0.7.30.38.1 php5-calendar-5.2.14-0.7.30.38.1 php5-ctype-5.2.14-0.7.30.38.1 php5-curl-5.2.14-0.7.30.38.1 php5-dba-5.2.14-0.7.30.38.1 php5-dbase-5.2.14-0.7.30.38.1 php5-dom-5.2.14-0.7.30.38.1 php5-exif-5.2.14-0.7.30.38.1 php5-fastcgi-5.2.14-0.7.30.38.1 php5-ftp-5.2.14-0.7.30.38.1 php5-gd-5.2.14-0.7.30.38.1 php5-gettext-5.2.14-0.7.30.38.1 php5-gmp-5.2.14-0.7.30.38.1 php5-hash-5.2.14-0.7.30.38.1 php5-iconv-5.2.14-0.7.30.38.1 php5-json-5.2.14-0.7.30.38.1 php5-ldap-5.2.14-0.7.30.38.1 php5-mbstring-5.2.14-0.7.30.38.1 php5-mcrypt-5.2.14-0.7.30.38.1 php5-mysql-5.2.14-0.7.30.38.1 php5-odbc-5.2.14-0.7.30.38.1 php5-openssl-5.2.14-0.7.30.38.1 php5-pcntl-5.2.14-0.7.30.38.1 php5-pdo-5.2.14-0.7.30.38.1 php5-pear-5.2.14-0.7.30.38.1 php5-pgsql-5.2.14-0.7.30.38.1 php5-pspell-5.2.14-0.7.30.38.1 php5-shmop-5.2.14-0.7.30.38.1 php5-snmp-5.2.14-0.7.30.38.1 php5-soap-5.2.14-0.7.30.38.1 php5-suhosin-5.2.14-0.7.30.38.1 php5-sysvmsg-5.2.14-0.7.30.38.1 php5-sysvsem-5.2.14-0.7.30.38.1 php5-sysvshm-5.2.14-0.7.30.38.1 php5-tokenizer-5.2.14-0.7.30.38.1 php5-wddx-5.2.14-0.7.30.38.1 php5-xmlreader-5.2.14-0.7.30.38.1 php5-xmlrpc-5.2.14-0.7.30.38.1 php5-xmlwriter-5.2.14-0.7.30.38.1 php5-xsl-5.2.14-0.7.30.38.1 php5-zip-5.2.14-0.7.30.38.1 php5-zlib-5.2.14-0.7.30.38.1 References: http://support.novell.com/security/cve/CVE-2012-1172.html http://support.novell.com/security/cve/CVE-2012-1823.html http://support.novell.com/security/cve/CVE-2012-2311.html https://bugzilla.novell.com/752030 https://bugzilla.novell.com/753778 https://bugzilla.novell.com/760536 http://download.novell.com/patch/finder/?keywords=2f2ba1954f1a36ab698da6e60… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:0598-1: critical: Security update for PHP5
by opensuse-security＠opensuse.org 09 May '12

09 May '12

SUSE Security Update: Security update for PHP5 ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0598-1 Rating: critical References: #752030 #753778 #760536 Cross-References: CVE-2012-1172 CVE-2012-1823 CVE-2012-2311 Affected Products: SUSE Linux Enterprise Server 10 SP4 SLE SDK 10 SP4 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update fixes several security issues in PHP5: * CVE-2012-1172: A directory traversal bug has been fixed in php5. * CVE-2012-1823, CVE-2012-2311: A command injection was possible when PHP5 was operated in CGI mode using commandline options. This problem does not affect PHP5 in the normal Apache module mode setup. * Also a pack/unpacking bug on big endian 64bit architectures (ppc64 and s390x) has been fixed. bnc#753778 Security Issue references: * CVE-2012-1172 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1172 > * CVE-2012-1823 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1823 > * CVE-2012-2311 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2311 > Package List: - SUSE Linux Enterprise Server 10 SP4 (i586 ia64 ppc s390x x86_64): apache2-mod_php5-5.2.14-0.32.1 php5-5.2.14-0.32.1 php5-bcmath-5.2.14-0.32.1 php5-bz2-5.2.14-0.32.1 php5-calendar-5.2.14-0.32.1 php5-ctype-5.2.14-0.32.1 php5-curl-5.2.14-0.32.1 php5-dba-5.2.14-0.32.1 php5-dbase-5.2.14-0.32.1 php5-devel-5.2.14-0.32.1 php5-dom-5.2.14-0.32.1 php5-exif-5.2.14-0.32.1 php5-fastcgi-5.2.14-0.32.1 php5-ftp-5.2.14-0.32.1 php5-gd-5.2.14-0.32.1 php5-gettext-5.2.14-0.32.1 php5-gmp-5.2.14-0.32.1 php5-hash-5.2.14-0.32.1 php5-iconv-5.2.14-0.32.1 php5-imap-5.2.14-0.32.1 php5-json-5.2.14-0.32.1 php5-ldap-5.2.14-0.32.1 php5-mbstring-5.2.14-0.32.1 php5-mcrypt-5.2.14-0.32.1 php5-mhash-5.2.14-0.32.1 php5-mysql-5.2.14-0.32.1 php5-ncurses-5.2.14-0.32.1 php5-odbc-5.2.14-0.32.1 php5-openssl-5.2.14-0.32.1 php5-pcntl-5.2.14-0.32.1 php5-pdo-5.2.14-0.32.1 php5-pear-5.2.14-0.32.1 php5-pgsql-5.2.14-0.32.1 php5-posix-5.2.14-0.32.1 php5-pspell-5.2.14-0.32.1 php5-shmop-5.2.14-0.32.1 php5-snmp-5.2.14-0.32.1 php5-soap-5.2.14-0.32.1 php5-sockets-5.2.14-0.32.1 php5-sqlite-5.2.14-0.32.1 php5-suhosin-5.2.14-0.32.1 php5-sysvmsg-5.2.14-0.32.1 php5-sysvsem-5.2.14-0.32.1 php5-sysvshm-5.2.14-0.32.1 php5-tokenizer-5.2.14-0.32.1 php5-wddx-5.2.14-0.32.1 php5-xmlreader-5.2.14-0.32.1 php5-xmlrpc-5.2.14-0.32.1 php5-xsl-5.2.14-0.32.1 php5-zlib-5.2.14-0.32.1 - SLE SDK 10 SP4 (i586 ia64 ppc s390x x86_64): apache2-mod_php5-5.2.14-0.32.1 php5-5.2.14-0.32.1 php5-bcmath-5.2.14-0.32.1 php5-bz2-5.2.14-0.32.1 php5-calendar-5.2.14-0.32.1 php5-ctype-5.2.14-0.32.1 php5-curl-5.2.14-0.32.1 php5-dba-5.2.14-0.32.1 php5-dbase-5.2.14-0.32.1 php5-devel-5.2.14-0.32.1 php5-dom-5.2.14-0.32.1 php5-exif-5.2.14-0.32.1 php5-fastcgi-5.2.14-0.32.1 php5-ftp-5.2.14-0.32.1 php5-gd-5.2.14-0.32.1 php5-gettext-5.2.14-0.32.1 php5-gmp-5.2.14-0.32.1 php5-hash-5.2.14-0.32.1 php5-iconv-5.2.14-0.32.1 php5-imap-5.2.14-0.32.1 php5-ldap-5.2.14-0.32.1 php5-mbstring-5.2.14-0.32.1 php5-mcrypt-5.2.14-0.32.1 php5-mhash-5.2.14-0.32.1 php5-mysql-5.2.14-0.32.1 php5-ncurses-5.2.14-0.32.1 php5-odbc-5.2.14-0.32.1 php5-openssl-5.2.14-0.32.1 php5-pcntl-5.2.14-0.32.1 php5-pdo-5.2.14-0.32.1 php5-pear-5.2.14-0.32.1 php5-pgsql-5.2.14-0.32.1 php5-posix-5.2.14-0.32.1 php5-pspell-5.2.14-0.32.1 php5-shmop-5.2.14-0.32.1 php5-snmp-5.2.14-0.32.1 php5-soap-5.2.14-0.32.1 php5-sockets-5.2.14-0.32.1 php5-sqlite-5.2.14-0.32.1 php5-suhosin-5.2.14-0.32.1 php5-sysvmsg-5.2.14-0.32.1 php5-sysvsem-5.2.14-0.32.1 php5-sysvshm-5.2.14-0.32.1 php5-tidy-5.2.14-0.32.1 php5-tokenizer-5.2.14-0.32.1 php5-wddx-5.2.14-0.32.1 php5-xmlreader-5.2.14-0.32.1 php5-xmlrpc-5.2.14-0.32.1 php5-xsl-5.2.14-0.32.1 php5-zlib-5.2.14-0.32.1 References: http://support.novell.com/security/cve/CVE-2012-1172.html http://support.novell.com/security/cve/CVE-2012-1823.html http://support.novell.com/security/cve/CVE-2012-2311.html https://bugzilla.novell.com/752030 https://bugzilla.novell.com/753778 https://bugzilla.novell.com/760536 http://download.novell.com/patch/finder/?keywords=4c521fa4b1380a2123c60bdf8… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:0592-2: critical: Security update for flash-player
by opensuse-security＠opensuse.org 08 May '12

08 May '12

SUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0592-2 Rating: critical References: #757428 #758645 #760777 Cross-References: CVE-2012-0779 Affected Products: SUSE Linux Enterprise Desktop 10 SP4 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. It includes one version update. Description: Flash Player was updated to version 11.2.202.233, fixing a critical security problem. Security Issue reference: * CVE-2012-0779 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0779 > Package List: - SUSE Linux Enterprise Desktop 10 SP4 (i586) [New Version: 11.2.202.235]: flash-player-11.2.202.235-0.5.1 References: http://support.novell.com/security/cve/CVE-2012-0779.html https://bugzilla.novell.com/757428 https://bugzilla.novell.com/758645 https://bugzilla.novell.com/760777 http://download.novell.com/patch/finder/?keywords=025c02b675ee613406e80e984… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2012:0594-1: critical: update for flash-player
by opensuse-security＠opensuse.org 08 May '12

08 May '12

openSUSE Security Update: update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0594-1 Rating: critical References: #758645 #760777 Cross-References: CVE-2012-0779 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: flash-player update to 11.2.202.235 fixes a potential remote code execution vulnerability Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-262 - openSUSE 11.4: zypper in -t patch openSUSE-2012-262 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): flash-player-11.2.202.235-21.1 flash-player-gnome-11.2.202.235-21.1 flash-player-kde4-11.2.202.235-21.1 - openSUSE 11.4 (i586 x86_64): flash-player-11.2.202.235-14.1 flash-player-gnome-11.2.202.235-14.1 flash-player-kde4-11.2.202.235-14.1 References: http://support.novell.com/security/cve/CVE-2012-0779.html https://bugzilla.novell.com/758645 https://bugzilla.novell.com/760777 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:0591-1: important: Security update for Samba
by opensuse-security＠opensuse.org 07 May '12

07 May '12

SUSE Security Update: Security update for Samba ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0591-1 Rating: important References: #757080 #757576 Cross-References: CVE-2012-2111 Affected Products: SUSE Linux Enterprise Server 10 GPLv3 Extras ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update of Samba fixes the following security issue: * CVE-2012-2111: Ensure that users cannot hand out their own privileges to everyone, only administrators are allowed to do that. Security Issue reference: * CVE-2012-2111 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2111 > Package List: - SUSE Linux Enterprise Server 10 GPLv3 Extras (i586 ia64 ppc s390x x86_64): libnetapi-devel-3.4.3-0.43.1 libnetapi0-3.4.3-0.43.1 libtalloc-devel-3.4.3-0.43.1 libtalloc1-3.4.3-0.43.1 libtdb-devel-3.4.3-0.43.1 libtdb1-3.4.3-0.43.1 libwbclient-devel-3.4.3-0.43.1 libwbclient0-3.4.3-0.43.1 samba-gplv3-3.4.3-0.43.1 samba-gplv3-client-3.4.3-0.43.1 samba-gplv3-krb-printing-3.4.3-0.43.1 samba-gplv3-winbind-3.4.3-0.43.1 - SUSE Linux Enterprise Server 10 GPLv3 Extras (noarch): samba-gplv3-doc-3.4.3-0.43.1 References: http://support.novell.com/security/cve/CVE-2012-2111.html https://bugzilla.novell.com/757080 https://bugzilla.novell.com/757576 http://download.novell.com/patch/finder/?keywords=ef33002197942af3c42590677… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2012:0590-1: critical: update for php5
by opensuse-security＠opensuse.org 07 May '12

07 May '12

openSUSE Security Update: update for php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0590-1 Rating: critical References: #760536 Cross-References: CVE-2012-1823 CVE-2012-2311 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: when used in CGI mode remote attackers could inject command line arguments to php Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-261 - openSUSE 11.4: zypper in -t patch openSUSE-2012-261 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): apache2-mod_php5-5.3.8-4.15.2 apache2-mod_php5-debuginfo-5.3.8-4.15.2 php5-5.3.8-4.15.2 php5-bcmath-5.3.8-4.15.2 php5-bcmath-debuginfo-5.3.8-4.15.2 php5-bz2-5.3.8-4.15.2 php5-bz2-debuginfo-5.3.8-4.15.2 php5-calendar-5.3.8-4.15.2 php5-calendar-debuginfo-5.3.8-4.15.2 php5-ctype-5.3.8-4.15.2 php5-ctype-debuginfo-5.3.8-4.15.2 php5-curl-5.3.8-4.15.2 php5-curl-debuginfo-5.3.8-4.15.2 php5-dba-5.3.8-4.15.2 php5-dba-debuginfo-5.3.8-4.15.2 php5-debuginfo-5.3.8-4.15.2 php5-debugsource-5.3.8-4.15.2 php5-devel-5.3.8-4.15.2 php5-dom-5.3.8-4.15.2 php5-dom-debuginfo-5.3.8-4.15.2 php5-enchant-5.3.8-4.15.2 php5-enchant-debuginfo-5.3.8-4.15.2 php5-exif-5.3.8-4.15.2 php5-exif-debuginfo-5.3.8-4.15.2 php5-fastcgi-5.3.8-4.15.2 php5-fastcgi-debuginfo-5.3.8-4.15.2 php5-fileinfo-5.3.8-4.15.2 php5-fileinfo-debuginfo-5.3.8-4.15.2 php5-fpm-5.3.8-4.15.2 php5-fpm-debuginfo-5.3.8-4.15.2 php5-ftp-5.3.8-4.15.2 php5-ftp-debuginfo-5.3.8-4.15.2 php5-gd-5.3.8-4.15.2 php5-gd-debuginfo-5.3.8-4.15.2 php5-gettext-5.3.8-4.15.2 php5-gettext-debuginfo-5.3.8-4.15.2 php5-gmp-5.3.8-4.15.2 php5-gmp-debuginfo-5.3.8-4.15.2 php5-iconv-5.3.8-4.15.2 php5-iconv-debuginfo-5.3.8-4.15.2 php5-imap-5.3.8-4.15.2 php5-imap-debuginfo-5.3.8-4.15.2 php5-intl-5.3.8-4.15.2 php5-intl-debuginfo-5.3.8-4.15.2 php5-json-5.3.8-4.15.2 php5-json-debuginfo-5.3.8-4.15.2 php5-ldap-5.3.8-4.15.2 php5-ldap-debuginfo-5.3.8-4.15.2 php5-mbstring-5.3.8-4.15.2 php5-mbstring-debuginfo-5.3.8-4.15.2 php5-mcrypt-5.3.8-4.15.2 php5-mcrypt-debuginfo-5.3.8-4.15.2 php5-mssql-5.3.8-4.15.2 php5-mssql-debuginfo-5.3.8-4.15.2 php5-mysql-5.3.8-4.15.2 php5-mysql-debuginfo-5.3.8-4.15.2 php5-odbc-5.3.8-4.15.2 php5-odbc-debuginfo-5.3.8-4.15.2 php5-openssl-5.3.8-4.15.2 php5-openssl-debuginfo-5.3.8-4.15.2 php5-pcntl-5.3.8-4.15.2 php5-pcntl-debuginfo-5.3.8-4.15.2 php5-pdo-5.3.8-4.15.2 php5-pdo-debuginfo-5.3.8-4.15.2 php5-pgsql-5.3.8-4.15.2 php5-pgsql-debuginfo-5.3.8-4.15.2 php5-phar-5.3.8-4.15.2 php5-phar-debuginfo-5.3.8-4.15.2 php5-posix-5.3.8-4.15.2 php5-posix-debuginfo-5.3.8-4.15.2 php5-pspell-5.3.8-4.15.2 php5-pspell-debuginfo-5.3.8-4.15.2 php5-readline-5.3.8-4.15.2 php5-readline-debuginfo-5.3.8-4.15.2 php5-shmop-5.3.8-4.15.2 php5-shmop-debuginfo-5.3.8-4.15.2 php5-snmp-5.3.8-4.15.2 php5-snmp-debuginfo-5.3.8-4.15.2 php5-soap-5.3.8-4.15.2 php5-soap-debuginfo-5.3.8-4.15.2 php5-sockets-5.3.8-4.15.2 php5-sockets-debuginfo-5.3.8-4.15.2 php5-sqlite-5.3.8-4.15.2 php5-sqlite-debuginfo-5.3.8-4.15.2 php5-suhosin-5.3.8-4.15.2 php5-suhosin-debuginfo-5.3.8-4.15.2 php5-sysvmsg-5.3.8-4.15.2 php5-sysvmsg-debuginfo-5.3.8-4.15.2 php5-sysvsem-5.3.8-4.15.2 php5-sysvsem-debuginfo-5.3.8-4.15.2 php5-sysvshm-5.3.8-4.15.2 php5-sysvshm-debuginfo-5.3.8-4.15.2 php5-tidy-5.3.8-4.15.2 php5-tidy-debuginfo-5.3.8-4.15.2 php5-tokenizer-5.3.8-4.15.2 php5-tokenizer-debuginfo-5.3.8-4.15.2 php5-wddx-5.3.8-4.15.2 php5-wddx-debuginfo-5.3.8-4.15.2 php5-xmlreader-5.3.8-4.15.2 php5-xmlreader-debuginfo-5.3.8-4.15.2 php5-xmlrpc-5.3.8-4.15.2 php5-xmlrpc-debuginfo-5.3.8-4.15.2 php5-xmlwriter-5.3.8-4.15.2 php5-xmlwriter-debuginfo-5.3.8-4.15.2 php5-xsl-5.3.8-4.15.2 php5-xsl-debuginfo-5.3.8-4.15.2 php5-zip-5.3.8-4.15.2 php5-zip-debuginfo-5.3.8-4.15.2 php5-zlib-5.3.8-4.15.2 php5-zlib-debuginfo-5.3.8-4.15.2 - openSUSE 12.1 (noarch): php5-pear-5.3.8-4.15.2 - openSUSE 11.4 (i586 x86_64): apache2-mod_php5-5.3.5-332.1 apache2-mod_php5-debuginfo-5.3.5-332.1 php5-5.3.5-332.1 php5-bcmath-5.3.5-332.1 php5-bcmath-debuginfo-5.3.5-332.1 php5-bz2-5.3.5-332.1 php5-bz2-debuginfo-5.3.5-332.1 php5-calendar-5.3.5-332.1 php5-calendar-debuginfo-5.3.5-332.1 php5-ctype-5.3.5-332.1 php5-ctype-debuginfo-5.3.5-332.1 php5-curl-5.3.5-332.1 php5-curl-debuginfo-5.3.5-332.1 php5-dba-5.3.5-332.1 php5-dba-debuginfo-5.3.5-332.1 php5-debuginfo-5.3.5-332.1 php5-debugsource-5.3.5-332.1 php5-devel-5.3.5-332.1 php5-dom-5.3.5-332.1 php5-dom-debuginfo-5.3.5-332.1 php5-enchant-5.3.5-332.1 php5-enchant-debuginfo-5.3.5-332.1 php5-exif-5.3.5-332.1 php5-exif-debuginfo-5.3.5-332.1 php5-fastcgi-5.3.5-332.1 php5-fastcgi-debuginfo-5.3.5-332.1 php5-fileinfo-5.3.5-332.1 php5-fileinfo-debuginfo-5.3.5-332.1 php5-fpm-5.3.5-332.1 php5-fpm-debuginfo-5.3.5-332.1 php5-ftp-5.3.5-332.1 php5-ftp-debuginfo-5.3.5-332.1 php5-gd-5.3.5-332.1 php5-gd-debuginfo-5.3.5-332.1 php5-gettext-5.3.5-332.1 php5-gettext-debuginfo-5.3.5-332.1 php5-gmp-5.3.5-332.1 php5-gmp-debuginfo-5.3.5-332.1 php5-hash-5.3.5-332.1 php5-hash-debuginfo-5.3.5-332.1 php5-iconv-5.3.5-332.1 php5-iconv-debuginfo-5.3.5-332.1 php5-imap-5.3.5-332.1 php5-imap-debuginfo-5.3.5-332.1 php5-intl-5.3.5-332.1 php5-intl-debuginfo-5.3.5-332.1 php5-json-5.3.5-332.1 php5-json-debuginfo-5.3.5-332.1 php5-ldap-5.3.5-332.1 php5-ldap-debuginfo-5.3.5-332.1 php5-mbstring-5.3.5-332.1 php5-mbstring-debuginfo-5.3.5-332.1 php5-mcrypt-5.3.5-332.1 php5-mcrypt-debuginfo-5.3.5-332.1 php5-mysql-5.3.5-332.1 php5-mysql-debuginfo-5.3.5-332.1 php5-odbc-5.3.5-332.1 php5-odbc-debuginfo-5.3.5-332.1 php5-openssl-5.3.5-332.1 php5-openssl-debuginfo-5.3.5-332.1 php5-pcntl-5.3.5-332.1 php5-pcntl-debuginfo-5.3.5-332.1 php5-pdo-5.3.5-332.1 php5-pdo-debuginfo-5.3.5-332.1 php5-pgsql-5.3.5-332.1 php5-pgsql-debuginfo-5.3.5-332.1 php5-phar-5.3.5-332.1 php5-phar-debuginfo-5.3.5-332.1 php5-posix-5.3.5-332.1 php5-posix-debuginfo-5.3.5-332.1 php5-pspell-5.3.5-332.1 php5-pspell-debuginfo-5.3.5-332.1 php5-readline-5.3.5-332.1 php5-readline-debuginfo-5.3.5-332.1 php5-shmop-5.3.5-332.1 php5-shmop-debuginfo-5.3.5-332.1 php5-snmp-5.3.5-332.1 php5-snmp-debuginfo-5.3.5-332.1 php5-soap-5.3.5-332.1 php5-soap-debuginfo-5.3.5-332.1 php5-sockets-5.3.5-332.1 php5-sockets-debuginfo-5.3.5-332.1 php5-sqlite-5.3.5-332.1 php5-sqlite-debuginfo-5.3.5-332.1 php5-suhosin-5.3.5-332.1 php5-suhosin-debuginfo-5.3.5-332.1 php5-sysvmsg-5.3.5-332.1 php5-sysvmsg-debuginfo-5.3.5-332.1 php5-sysvsem-5.3.5-332.1 php5-sysvsem-debuginfo-5.3.5-332.1 php5-sysvshm-5.3.5-332.1 php5-sysvshm-debuginfo-5.3.5-332.1 php5-tidy-5.3.5-332.1 php5-tidy-debuginfo-5.3.5-332.1 php5-tokenizer-5.3.5-332.1 php5-tokenizer-debuginfo-5.3.5-332.1 php5-wddx-5.3.5-332.1 php5-wddx-debuginfo-5.3.5-332.1 php5-xmlreader-5.3.5-332.1 php5-xmlreader-debuginfo-5.3.5-332.1 php5-xmlrpc-5.3.5-332.1 php5-xmlrpc-debuginfo-5.3.5-332.1 php5-xmlwriter-5.3.5-332.1 php5-xmlwriter-debuginfo-5.3.5-332.1 php5-xsl-5.3.5-332.1 php5-xsl-debuginfo-5.3.5-332.1 php5-zip-5.3.5-332.1 php5-zip-debuginfo-5.3.5-332.1 php5-zlib-5.3.5-332.1 php5-zlib-debuginfo-5.3.5-332.1 - openSUSE 11.4 (noarch): php5-pear-5.3.5-332.1 References: http://support.novell.com/security/cve/CVE-2012-1823.html http://support.novell.com/security/cve/CVE-2012-2311.html https://bugzilla.novell.com/760536 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2012:0583-1: important: update for samba
by opensuse-security＠opensuse.org 04 May '12

04 May '12

openSUSE Security Update: update for samba ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0583-1 Rating: important References: #757576 Cross-References: CVE-2012-2111 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: - docs-xml: fix default name resolve order; (bso#7564). - s3-aio-fork: Fix a segfault in vfs_aio_fork; (bso#8836). - docs: remove whitespace in example samba.ldif; (bso#8789). - s3-smbd: move print_backend_init() behind init_system_info(); (bso#8845). - s3-docs: Prepend '/' to filename argument; (bso#8826). - Restrict self granting privileges where security=ads for Samba post-3.3.16; CVE-2012-2111; (bnc#757576). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-258 - openSUSE 11.4: zypper in -t patch openSUSE-2012-258 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): ldapsmb-1.34b-34.12.1 libldb-devel-1.0.2-34.12.1 libldb1-1.0.2-34.12.1 libldb1-debuginfo-1.0.2-34.12.1 libnetapi-devel-3.6.3-34.12.1 libnetapi0-3.6.3-34.12.1 libnetapi0-debuginfo-3.6.3-34.12.1 libsmbclient-devel-3.6.3-34.12.1 libsmbclient0-3.6.3-34.12.1 libsmbclient0-debuginfo-3.6.3-34.12.1 libsmbsharemodes-devel-3.6.3-34.12.1 libsmbsharemodes0-3.6.3-34.12.1 libsmbsharemodes0-debuginfo-3.6.3-34.12.1 libtalloc-devel-2.0.5-34.12.1 libtalloc2-2.0.5-34.12.1 libtalloc2-debuginfo-2.0.5-34.12.1 libtdb-devel-1.2.9-34.12.1 libtdb1-1.2.9-34.12.1 libtdb1-debuginfo-1.2.9-34.12.1 libtevent-devel-0.9.11-34.12.1 libtevent0-0.9.11-34.12.1 libtevent0-debuginfo-0.9.11-34.12.1 libwbclient-devel-3.6.3-34.12.1 libwbclient0-3.6.3-34.12.1 libwbclient0-debuginfo-3.6.3-34.12.1 samba-3.6.3-34.12.1 samba-client-3.6.3-34.12.1 samba-client-debuginfo-3.6.3-34.12.1 samba-debuginfo-3.6.3-34.12.1 samba-debugsource-3.6.3-34.12.1 samba-devel-3.6.3-34.12.1 samba-krb-printing-3.6.3-34.12.1 samba-krb-printing-debuginfo-3.6.3-34.12.1 samba-winbind-3.6.3-34.12.1 samba-winbind-debuginfo-3.6.3-34.12.1 - openSUSE 12.1 (x86_64): libldb1-32bit-1.0.2-34.12.1 libldb1-debuginfo-32bit-1.0.2-34.12.1 libsmbclient0-32bit-3.6.3-34.12.1 libsmbclient0-debuginfo-32bit-3.6.3-34.12.1 libtalloc2-32bit-2.0.5-34.12.1 libtalloc2-debuginfo-32bit-2.0.5-34.12.1 libtdb1-32bit-1.2.9-34.12.1 libtdb1-debuginfo-32bit-1.2.9-34.12.1 libtevent0-32bit-0.9.11-34.12.1 libtevent0-debuginfo-32bit-0.9.11-34.12.1 libwbclient0-32bit-3.6.3-34.12.1 libwbclient0-debuginfo-32bit-3.6.3-34.12.1 samba-32bit-3.6.3-34.12.1 samba-client-32bit-3.6.3-34.12.1 samba-client-debuginfo-32bit-3.6.3-34.12.1 samba-debuginfo-32bit-3.6.3-34.12.1 samba-winbind-32bit-3.6.3-34.12.1 samba-winbind-debuginfo-32bit-3.6.3-34.12.1 - openSUSE 12.1 (noarch): samba-doc-3.6.3-34.12.1 - openSUSE 12.1 (ia64): libldb1-debuginfo-x86-1.0.2-34.12.1 libldb1-x86-1.0.2-34.12.1 libsmbclient0-debuginfo-x86-3.6.3-34.12.1 libsmbclient0-x86-3.6.3-34.12.1 libtalloc2-debuginfo-x86-2.0.5-34.12.1 libtalloc2-x86-2.0.5-34.12.1 libtdb1-debuginfo-x86-1.2.9-34.12.1 libtdb1-x86-1.2.9-34.12.1 libtevent0-debuginfo-x86-0.9.11-34.12.1 libtevent0-x86-0.9.11-34.12.1 libwbclient0-debuginfo-x86-3.6.3-34.12.1 libwbclient0-x86-3.6.3-34.12.1 samba-client-debuginfo-x86-3.6.3-34.12.1 samba-client-x86-3.6.3-34.12.1 samba-debuginfo-x86-3.6.3-34.12.1 samba-winbind-debuginfo-x86-3.6.3-34.12.1 samba-winbind-x86-3.6.3-34.12.1 samba-x86-3.6.3-34.12.1 - openSUSE 11.4 (i586 x86_64): ldapsmb-1.34b-115.1 libldb-devel-1.0.2-115.1 libldb1-1.0.2-115.1 libldb1-debuginfo-1.0.2-115.1 libnetapi-devel-3.6.3-115.1 libnetapi0-3.6.3-115.1 libnetapi0-debuginfo-3.6.3-115.1 libsmbclient-devel-3.6.3-115.1 libsmbclient0-3.6.3-115.1 libsmbclient0-debuginfo-3.6.3-115.1 libsmbsharemodes-devel-3.6.3-115.1 libsmbsharemodes0-3.6.3-115.1 libsmbsharemodes0-debuginfo-3.6.3-115.1 libtalloc-devel-2.0.5-115.1 libtalloc2-2.0.5-115.1 libtalloc2-debuginfo-2.0.5-115.1 libtdb-devel-1.2.9-115.1 libtdb1-1.2.9-115.1 libtdb1-debuginfo-1.2.9-115.1 libtevent-devel-0.9.11-115.1 libtevent0-0.9.11-115.1 libtevent0-debuginfo-0.9.11-115.1 libwbclient-devel-3.6.3-115.1 libwbclient0-3.6.3-115.1 libwbclient0-debuginfo-3.6.3-115.1 samba-3.6.3-115.1 samba-client-3.6.3-115.1 samba-client-debuginfo-3.6.3-115.1 samba-debuginfo-3.6.3-115.1 samba-debugsource-3.6.3-115.1 samba-devel-3.6.3-115.1 samba-krb-printing-3.6.3-115.1 samba-krb-printing-debuginfo-3.6.3-115.1 samba-winbind-3.6.3-115.1 samba-winbind-debuginfo-3.6.3-115.1 - openSUSE 11.4 (x86_64): libldb1-32bit-1.0.2-115.1 libldb1-debuginfo-32bit-1.0.2-115.1 libsmbclient0-32bit-3.6.3-115.1 libsmbclient0-debuginfo-32bit-3.6.3-115.1 libtalloc2-32bit-2.0.5-115.1 libtalloc2-debuginfo-32bit-2.0.5-115.1 libtdb1-32bit-1.2.9-115.1 libtdb1-debuginfo-32bit-1.2.9-115.1 libtevent0-32bit-0.9.11-115.1 libtevent0-debuginfo-32bit-0.9.11-115.1 libwbclient0-32bit-3.6.3-115.1 libwbclient0-debuginfo-32bit-3.6.3-115.1 samba-32bit-3.6.3-115.1 samba-client-32bit-3.6.3-115.1 samba-client-debuginfo-32bit-3.6.3-115.1 samba-debuginfo-32bit-3.6.3-115.1 samba-winbind-32bit-3.6.3-115.1 samba-winbind-debuginfo-32bit-3.6.3-115.1 - openSUSE 11.4 (noarch): samba-doc-3.6.3-115.1 - openSUSE 11.4 (ia64): libldb1-debuginfo-x86-1.0.2-115.1 libldb1-x86-1.0.2-115.1 libsmbclient0-debuginfo-x86-3.6.3-115.1 libsmbclient0-x86-3.6.3-115.1 libtalloc2-debuginfo-x86-2.0.5-115.1 libtalloc2-x86-2.0.5-115.1 libtdb1-debuginfo-x86-1.2.9-115.1 libtdb1-x86-1.2.9-115.1 libtevent0-debuginfo-x86-0.9.11-115.1 libtevent0-x86-0.9.11-115.1 libwbclient0-debuginfo-x86-3.6.3-115.1 libwbclient0-x86-3.6.3-115.1 samba-client-debuginfo-x86-3.6.3-115.1 samba-client-x86-3.6.3-115.1 samba-debuginfo-x86-3.6.3-115.1 samba-winbind-debuginfo-x86-3.6.3-115.1 samba-winbind-x86-3.6.3-115.1 samba-x86-3.6.3-115.1 References: http://support.novell.com/security/cve/CVE-2012-2111.html https://bugzilla.novell.com/757576 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0