July 2012 - openSUSE Security Announce

[security-announce] SUSE-SU-2012:0927-1: important: Security update for xrdp
by opensuse-security＠opensuse.org 31 Jul '12

31 Jul '12

SUSE Security Update: Security update for xrdp ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0927-1 Rating: important References: #764044 Affected Products: SUSE Linux Enterprise Server 11 SP2 for VMware SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Desktop 11 SP2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: The XRDP service was changed so that the default crypto level in XRDP was changed from "low" to "high". This switches from using a 40 bit encryption to a 128 bit two-way encryption. Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 11 SP2 for VMware: zypper in -t patch slessp2-xrdp-6511 - SUSE Linux Enterprise Server 11 SP2: zypper in -t patch slessp2-xrdp-6511 - SUSE Linux Enterprise Desktop 11 SP2: zypper in -t patch sledsp2-xrdp-6511 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Server 11 SP2 for VMware (i586 x86_64): xrdp-0.4.1-28.19.1 - SUSE Linux Enterprise Server 11 SP2 (i586 x86_64): xrdp-0.4.1-28.19.1 - SUSE Linux Enterprise Desktop 11 SP2 (i586 x86_64): xrdp-0.4.1-28.19.1 References: https://bugzilla.novell.com/764044 http://download.novell.com/patch/finder/?keywords=2ce52b092c823f641524602d7… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2012:0924-1: critical: xulrunner to 14.0.1
by opensuse-security＠opensuse.org 30 Jul '12

30 Jul '12

openSUSE Security Update: xulrunner to 14.0.1 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0924-1 Rating: critical References: #771583 Cross-References: CVE-2012-1948 CVE-2012-1949 CVE-2012-1950 CVE-2012-1951 CVE-2012-1952 CVE-2012-1953 CVE-2012-1954 CVE-2012-1955 CVE-2012-1957 CVE-2012-1958 CVE-2012-1959 CVE-2012-1960 CVE-2012-1961 CVE-2012-1962 CVE-2012-1963 CVE-2012-1965 CVE-2012-1966 CVE-2012-1967 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes 18 vulnerabilities is now available. Description: Mozilla XULRunner was updated to 14.0.1, fixing bugs and security issues: Following security issues were fixed: MFSA 2012-42: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code. CVE-2012-1949: Brian Smith, Gary Kwong, Christian Holler, Jesse Ruderman, Christoph Diehl, Chris Jones, Brad Lassey, and Kyle Huey reported memory safety problems and crashes that affect Firefox 13. CVE-2012-1948: Benoit Jacob, Jesse Ruderman, Christian Holler, and Bill McCloskey reported memory safety problems and crashes that affect Firefox ESR 10 and Firefox 13. MFSA 2012-43 / CVE-2012-1950: Security researcher Mario Gomes andresearch firm Code Audit Labs reported a mechanism to short-circuit page loads through drag and drop to the addressbar by canceling the page load. This causes the address of the previously site entered to be displayed in the addressbar instead of the currently loaded page. This could lead to potential phishing attacks on users. MFSA 2012-44 Google security researcher Abhishek Arya used the Address Sanitizer tool to uncover four issues: two use-after-free problems, one out of bounds read bug, and a bad cast. The first use-after-free problem is caused when an array of nsSMILTimeValueSpec objects is destroyed but attempts are made to call into objects in this array later. The second use-after-free problem is in nsDocument::AdoptNode when it adopts into an empty document and then adopts into another document, emptying the first one. The heap buffer overflow is in ElementAnimations when data is read off of end of an array and then pointers are dereferenced. The bad cast happens when nsTableFrame::InsertFrames is called with frames in aFrameList that are a mix of row group frames and column group frames. AppendFrames is not able to handle this mix. All four of these issues are potentially exploitable. CVE-2012-1951: Heap-use-after-free in nsSMILTimeValueSpec::IsEventBased CVE-2012-1954: Heap-use-after-free in nsDocument::AdoptNode CVE-2012-1953: Out of bounds read in ElementAnimations::EnsureStyleRuleFor CVE-2012-1952: Bad cast in nsTableFrame::InsertFrames MFSA 2012-45 / CVE-2012-1955: Security researcher Mariusz Mlynski reported an issue with spoofing of the location property. In this issue, calls to history.forward and history.back are used to navigate to a site while displaying the previous site in the addressbar but changing the baseURI to the newer site. This can be used for phishing by allowing the user input form or other data on the newer, attacking, site while appearing to be on the older, displayed site. MFSA 2012-46 / CVE-2012-1966: Mozilla security researcher moz_bug_r_a4 reported a cross-site scripting (XSS) attack through the context menu using a data: URL. In this issue, context menu functionality ("View Image", "Show only this frame", and "View background image") are disallowed in a javascript: URL but allowed in a data: URL, allowing for XSS. This can lead to arbitrary code execution. MFSA 2012-47 / CVE-2012-1957: Security researcher Mario Heiderich reported that javascript could be executed in the HTML feed-view using tag within the RSS . This problem is due to tags not being filtered out during parsing and can lead to a potential cross-site scripting (XSS) attack. The flaw existed in a parser utility class and could affect other parts of the browser or add-ons which rely on that class to sanitize untrusted input. MFSA 2012-48 / CVE-2012-1958: Security researcher Arthur Gerkis used the Address Sanitizer tool to find a use-after-free in nsGlobalWindow::PageHidden when mFocusedContent is released and oldFocusedContent is used afterwards. This use-after-free could possibly allow for remote code execution. MFSA 2012-49 / CVE-2012-1959: Mozilla developer Bobby Holley found that same-compartment security wrappers (SCSW) can be bypassed by passing them to another compartment. Cross-compartment wrappers often do not go through SCSW, but have a filtering policy built into them. When an object is wrapped cross-compartment, the SCSW is stripped off and, when the object is read read back, it is not known that SCSW was previously present, resulting in a bypassing of SCSW. This could result in untrusted content having access to the XBL that implements browser functionality. MFSA 2012-50 / CVE-2012-1960: Google developer Tony Payne reported an out of bounds (OOB) read in QCMS, Mozilla’s color management library. With a carefully crafted color profile portions of a user's memory could be incorporated into a transformed image and possibly deciphered. MFSA 2012-51 / CVE-2012-1961: Bugzilla developer Frédéric Buclin reported that the "X-Frame-Options header is ignored when the value is duplicated, for example X-Frame-Options: SAMEORIGIN, SAMEORIGIN. This duplication occurs for unknown reasons on some websites and when it occurs results in Mozilla browsers not being protected against possible clickjacking attacks on those pages. MFSA 2012-52 / CVE-2012-1962: Security researcher Bill Keese reported a memory corruption. This is caused by JSDependentString::undepend changing a dependent string into a fixed string when there are additional dependent strings relying on the same base. When the undepend occurs during conversion, the base data is freed, leaving other dependent strings with dangling pointers. This can lead to a potentially exploitable crash. MFSA 2012-53 / CVE-2012-1963: Security researcher Karthikeyan Bhargavan of Prosecco at INRIA reported Content Security Policy (CSP) 1.0 implementation errors. CSP violation reports generated by Firefox and sent to the "report-uri" location include sensitive data within the "blocked-uri" parameter. These include fragment components and query strings even if the "blocked-uri" parameter has a different origin than the protected resource. This can be used to retrieve a user's OAuth 2.0 access tokens and OpenID credentials by malicious sites. MFSA 2012-54 / CVE-2012-1964: Security Researcher Matt McCutchen reported that a clickjacking attack using the certificate warning page. A man-in-the-middle (MITM) attacker can use an iframe to display its own certificate error warning page (about:certerror) with the "Add Exception" button of a real warning page from a malicious site. This can mislead users to adding a certificate exception for a different site than the perceived one. This can lead to compromised communications with the user perceived site through the MITM attack once the certificate exception has been added. MFSA 2012-55 / CVE-2012-1965: Security researchers Mario Gomes and Soroush Dalili reported that since Mozilla allows the pseudo-protocol feed: to prefix any valid URL, it is possible to construct feed:javascript: URLs that will execute scripts in some contexts. On some sites it may be possible to use this to evade output filtering that would otherwise strip javascript: URLs and thus contribute to cross-site scripting (XSS) problems on these sites. MFSA 2012-56 / CVE-2012-1967: Mozilla security researcher moz_bug_r_a4 reported a arbitrary code execution attack using a javascript: URL. The Gecko engine features a JavaScript sandbox utility that allows the browser or add-ons to safely execute script in the context of a web page. In certain cases, javascript: URLs are executed in such a sandbox with insufficient context that can allow those scripts to escape from the sandbox and run with elevated privilege. This can lead to arbitrary code execution. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-465 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): mozilla-js-14.0.1-2.32.2 mozilla-js-debuginfo-14.0.1-2.32.2 xulrunner-14.0.1-2.32.2 xulrunner-buildsymbols-14.0.1-2.32.2 xulrunner-debuginfo-14.0.1-2.32.2 xulrunner-debugsource-14.0.1-2.32.2 xulrunner-devel-14.0.1-2.32.2 xulrunner-devel-debuginfo-14.0.1-2.32.2 - openSUSE 12.1 (x86_64): mozilla-js-32bit-14.0.1-2.32.2 mozilla-js-debuginfo-32bit-14.0.1-2.32.2 xulrunner-32bit-14.0.1-2.32.2 xulrunner-debuginfo-32bit-14.0.1-2.32.2 - openSUSE 12.1 (ia64): mozilla-js-debuginfo-x86-14.0.1-2.32.2 mozilla-js-x86-14.0.1-2.32.2 xulrunner-debuginfo-x86-14.0.1-2.32.2 xulrunner-x86-14.0.1-2.32.2 References: http://support.novell.com/security/cve/CVE-2012-1948.html http://support.novell.com/security/cve/CVE-2012-1949.html http://support.novell.com/security/cve/CVE-2012-1950.html http://support.novell.com/security/cve/CVE-2012-1951.html http://support.novell.com/security/cve/CVE-2012-1952.html http://support.novell.com/security/cve/CVE-2012-1953.html http://support.novell.com/security/cve/CVE-2012-1954.html http://support.novell.com/security/cve/CVE-2012-1955.html http://support.novell.com/security/cve/CVE-2012-1957.html http://support.novell.com/security/cve/CVE-2012-1958.html http://support.novell.com/security/cve/CVE-2012-1959.html http://support.novell.com/security/cve/CVE-2012-1960.html http://support.novell.com/security/cve/CVE-2012-1961.html http://support.novell.com/security/cve/CVE-2012-1962.html http://support.novell.com/security/cve/CVE-2012-1963.html http://support.novell.com/security/cve/CVE-2012-1965.html http://support.novell.com/security/cve/CVE-2012-1966.html http://support.novell.com/security/cve/CVE-2012-1967.html https://bugzilla.novell.com/771583 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2012:0917-1: important: MozillaThunderbird: update to Thunderbird 14.0
by opensuse-security＠opensuse.org 27 Jul '12

27 Jul '12

openSUSE Security Update: MozillaThunderbird: update to Thunderbird 14.0 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0917-1 Rating: important References: #771583 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: Mozilla Thunderbird was updated to version 14.0 (bnc#771583) * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948 Miscellaneous memory safety hazards * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1 952 Gecko memory corruption * MFSA 2012-45/CVE-2012-1955 (bmo#757376) Spoofing issue with location * MFSA 2012-47/CVE-2012-1957 (bmo#750096) Improper filtering of javascript in HTML feed-view * MFSA 2012-48/CVE-2012-1958 (bmo#750820) use-after-free in nsGlobalWindow::PageHidden * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559) Same-compartment Security Wrappers can be bypassed * MFSA 2012-50/CVE-2012-1960 (bmo#761014) Out of bounds read in QCMS * MFSA 2012-51/CVE-2012-1961 (bmo#761655) X-Frame-Options header ignored when duplicated * MFSA 2012-52/CVE-2012-1962 (bmo#764296) JSDependentString::undepend string conversion results in memory corruption * MFSA 2012-53/CVE-2012-1963 (bmo#767778) Content Security Policy 1.0 implementation errors cause data leakage * MFSA 2012-56/CVE-2012-1967 (bmo#758344) Code execution through javascript: URLs * relicensed to MPL-2.0 - update Enigmail to 1.4.3 - no crashreport on %arm, fixing build Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-443 - openSUSE 11.4: zypper in -t patch openSUSE-2012-443 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (x86_64): MozillaThunderbird-14.0-33.26.1 MozillaThunderbird-buildsymbols-14.0-33.26.1 MozillaThunderbird-debuginfo-14.0-33.26.1 MozillaThunderbird-debugsource-14.0-33.26.1 MozillaThunderbird-devel-14.0-33.26.1 MozillaThunderbird-devel-debuginfo-14.0-33.26.1 MozillaThunderbird-translations-common-14.0-33.26.1 MozillaThunderbird-translations-other-14.0-33.26.1 enigmail-1.4.3+14.0-33.26.1 enigmail-debuginfo-1.4.3+14.0-33.26.1 - openSUSE 12.1 (i586): MozillaThunderbird-14.0-33.26.2 MozillaThunderbird-buildsymbols-14.0-33.26.2 MozillaThunderbird-debuginfo-14.0-33.26.2 MozillaThunderbird-debugsource-14.0-33.26.2 MozillaThunderbird-devel-14.0-33.26.2 MozillaThunderbird-devel-debuginfo-14.0-33.26.2 MozillaThunderbird-translations-common-14.0-33.26.2 MozillaThunderbird-translations-other-14.0-33.26.2 enigmail-1.4.3+14.0-33.26.2 enigmail-debuginfo-1.4.3+14.0-33.26.2 - openSUSE 11.4 (x86_64): MozillaThunderbird-14.0-24.1 MozillaThunderbird-buildsymbols-14.0-24.1 MozillaThunderbird-debuginfo-14.0-24.1 MozillaThunderbird-debugsource-14.0-24.1 MozillaThunderbird-devel-14.0-24.1 MozillaThunderbird-devel-debuginfo-14.0-24.1 MozillaThunderbird-translations-common-14.0-24.1 MozillaThunderbird-translations-other-14.0-24.1 enigmail-1.4.3+14.0-24.1 enigmail-debuginfo-1.4.3+14.0-24.1 - openSUSE 11.4 (i586): MozillaThunderbird-14.0-24.2 MozillaThunderbird-buildsymbols-14.0-24.2 MozillaThunderbird-debuginfo-14.0-24.2 MozillaThunderbird-debugsource-14.0-24.2 MozillaThunderbird-devel-14.0-24.2 MozillaThunderbird-devel-debuginfo-14.0-24.2 MozillaThunderbird-translations-common-14.0-24.2 MozillaThunderbird-translations-other-14.0-24.2 enigmail-1.4.3+14.0-24.2 enigmail-debuginfo-1.4.3+14.0-24.2 References: https://bugzilla.novell.com/771583 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:0903-1: important: Security update for libexif
by opensuse-security＠opensuse.org 23 Jul '12

23 Jul '12

SUSE Security Update: Security update for libexif ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0903-1 Rating: important References: #771229 Cross-References: CVE-2012-2812 CVE-2012-2813 CVE-2012-2814 CVE-2012-2836 CVE-2012-2837 CVE-2012-2840 CVE-2012-2841 Affected Products: SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP1 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP1 for VMware SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP1 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: Various overflows and other security related bugs in libexif were found by the Google Security team and fixed by the libexif developers. Security Issue references: * CVE-2012-2812 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2812 > * CVE-2012-2813 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2813 > * CVE-2012-2814 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2814 > * CVE-2012-2836 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2836 > * CVE-2012-2837 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2837 > * CVE-2012-2840 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2840 > * CVE-2012-2841 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2841 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11 SP2: zypper in -t patch sdksp1-libexif-6568 - SUSE Linux Enterprise Software Development Kit 11 SP1: zypper in -t patch sdksp1-libexif-6568 - SUSE Linux Enterprise Server 11 SP2: zypper in -t patch slessp1-libexif-6568 - SUSE Linux Enterprise Server 11 SP1 for VMware: zypper in -t patch slessp1-libexif-6568 - SUSE Linux Enterprise Server 11 SP1: zypper in -t patch slessp1-libexif-6568 - SUSE Linux Enterprise Desktop 11 SP2: zypper in -t patch sledsp1-libexif-6568 - SUSE Linux Enterprise Desktop 11 SP1: zypper in -t patch sledsp1-libexif-6568 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11 SP2 (i586 ia64 ppc64 s390x x86_64): libexif-devel-0.6.17-2.14.1 - SUSE Linux Enterprise Software Development Kit 11 SP1 (i586 ia64 ppc64 s390x x86_64): libexif-devel-0.6.17-2.14.1 - SUSE Linux Enterprise Server 11 SP2 (i586 ia64 ppc64 s390x x86_64): libexif-0.6.17-2.14.1 - SUSE Linux Enterprise Server 11 SP2 (ppc64 s390x x86_64): libexif-32bit-0.6.17-2.14.1 - SUSE Linux Enterprise Server 11 SP2 (ia64): libexif-x86-0.6.17-2.14.1 - SUSE Linux Enterprise Server 11 SP1 for VMware (i586 x86_64): libexif-0.6.17-2.14.1 - SUSE Linux Enterprise Server 11 SP1 for VMware (x86_64): libexif-32bit-0.6.17-2.14.1 - SUSE Linux Enterprise Server 11 SP1 (i586 ia64 ppc64 s390x x86_64): libexif-0.6.17-2.14.1 - SUSE Linux Enterprise Server 11 SP1 (ppc64 s390x x86_64): libexif-32bit-0.6.17-2.14.1 - SUSE Linux Enterprise Server 11 SP1 (ia64): libexif-x86-0.6.17-2.14.1 - SUSE Linux Enterprise Desktop 11 SP2 (i586 x86_64): libexif-0.6.17-2.14.1 - SUSE Linux Enterprise Desktop 11 SP2 (x86_64): libexif-32bit-0.6.17-2.14.1 - SUSE Linux Enterprise Desktop 11 SP1 (i586 x86_64): libexif-0.6.17-2.14.1 - SUSE Linux Enterprise Desktop 11 SP1 (x86_64): libexif-32bit-0.6.17-2.14.1 References: http://support.novell.com/security/cve/CVE-2012-2812.html http://support.novell.com/security/cve/CVE-2012-2813.html http://support.novell.com/security/cve/CVE-2012-2814.html http://support.novell.com/security/cve/CVE-2012-2836.html http://support.novell.com/security/cve/CVE-2012-2837.html http://support.novell.com/security/cve/CVE-2012-2840.html http://support.novell.com/security/cve/CVE-2012-2841.html https://bugzilla.novell.com/771229 http://download.novell.com/patch/finder/?keywords=795efea468ff4df45b9a7a62e… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:0902-1: important: Security update for libexif
by opensuse-security＠opensuse.org 23 Jul '12

23 Jul '12

SUSE Security Update: Security update for libexif ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0902-1 Rating: important References: #771229 Cross-References: CVE-2012-2812 CVE-2012-2814 CVE-2012-2836 CVE-2012-2837 CVE-2012-2841 Affected Products: SUSE Linux Enterprise Server 10 SP4 SUSE Linux Enterprise Desktop 10 SP4 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: Various overflows and other security related bugs in libexif were found by the Google Security team and fixed by the libexif developers. Security Issue references: * CVE-2012-2812 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2812 > * CVE-2012-2814 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2814 > * CVE-2012-2836 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2836 > * CVE-2012-2837 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2837 > * CVE-2012-2841 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2841 > Package List: - SUSE Linux Enterprise Server 10 SP4 (i586 ia64 ppc s390x x86_64): libexif-0.6.13-20.14.1 - SUSE Linux Enterprise Server 10 SP4 (s390x x86_64): libexif-32bit-0.6.13-20.14.1 - SUSE Linux Enterprise Server 10 SP4 (ia64): libexif-x86-0.6.13-20.14.1 - SUSE Linux Enterprise Server 10 SP4 (ppc): libexif-64bit-0.6.13-20.14.1 - SUSE Linux Enterprise Desktop 10 SP4 (i586 x86_64): libexif-0.6.13-20.14.1 - SUSE Linux Enterprise Desktop 10 SP4 (x86_64): libexif-32bit-0.6.13-20.14.1 References: http://support.novell.com/security/cve/CVE-2012-2812.html http://support.novell.com/security/cve/CVE-2012-2814.html http://support.novell.com/security/cve/CVE-2012-2836.html http://support.novell.com/security/cve/CVE-2012-2837.html http://support.novell.com/security/cve/CVE-2012-2841.html https://bugzilla.novell.com/771229 http://download.novell.com/patch/finder/?keywords=9eed174e86533459e960c872b… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2012:0899-1: critical: MozillaFirefox to 14.0.1
by opensuse-security＠opensuse.org 23 Jul '12

23 Jul '12

openSUSE Security Update: MozillaFirefox to 14.0.1 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0899-1 Rating: critical References: #771583 Cross-References: CVE-2012-1948 CVE-2012-1949 CVE-2012-1950 CVE-2012-1951 CVE-2012-1952 CVE-2012-1953 CVE-2012-1954 CVE-2012-1955 CVE-2012-1957 CVE-2012-1958 CVE-2012-1959 CVE-2012-1961 CVE-2012-1962 CVE-2012-1963 CVE-2012-1964 CVE-2012-1965 CVE-2012-1966 CVE-2012-1967 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes 18 vulnerabilities is now available. Description: MozillaFirefox was updated to 14.0.1 to fix various bugs and security issues. Following security issues were fixed: MFSA 2012-42: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code. CVE-2012-1949: Brian Smith, Gary Kwong, Christian Holler, Jesse Ruderman, Christoph Diehl, Chris Jones, Brad Lassey, and Kyle Huey reported memory safety problems and crashes that affect Firefox 13. CVE-2012-1948: Benoit Jacob, Jesse Ruderman, Christian Holler, and Bill McCloskey reported memory safety problems and crashes that affect Firefox ESR 10 and Firefox 13. MFSA 2012-43 / CVE-2012-1950: Security researcher Mario Gomes andresearch firm Code Audit Labs reported a mechanism to short-circuit page loads through drag and drop to the addressbar by canceling the page load. This causes the address of the previously site entered to be displayed in the addressbar instead of the currently loaded page. This could lead to potential phishing attacks on users. MFSA 2012-44 Google security researcher Abhishek Arya used the Address Sanitizer tool to uncover four issues: two use-after-free problems, one out of bounds read bug, and a bad cast. The first use-after-free problem is caused when an array of nsSMILTimeValueSpec objects is destroyed but attempts are made to call into objects in this array later. The second use-after-free problem is in nsDocument::AdoptNode when it adopts into an empty document and then adopts into another document, emptying the first one. The heap buffer overflow is in ElementAnimations when data is read off of end of an array and then pointers are dereferenced. The bad cast happens when nsTableFrame::InsertFrames is called with frames in aFrameList that are a mix of row group frames and column group frames. AppendFrames is not able to handle this mix. All four of these issues are potentially exploitable. CVE-2012-1951: Heap-use-after-free in nsSMILTimeValueSpec::IsEventBased CVE-2012-1954: Heap-use-after-free in nsDocument::AdoptNode CVE-2012-1953: Out of bounds read in ElementAnimations::EnsureStyleRuleFor CVE-2012-1952: Bad cast in nsTableFrame::InsertFrames MFSA 2012-45 / CVE-2012-1955: Security researcher Mariusz Mlynski reported an issue with spoofing of the location property. In this issue, calls to history.forward and history.back are used to navigate to a site while displaying the previous site in the addressbar but changing the baseURI to the newer site. This can be used for phishing by allowing the user input form or other data on the newer, attacking, site while appearing to be on the older, displayed site. MFSA 2012-46 / CVE-2012-1966: Mozilla security researcher moz_bug_r_a4 reported a cross-site scripting (XSS) attack through the context menu using a data: URL. In this issue, context menu functionality ("View Image", "Show only this frame", and "View background image") are disallowed in a javascript: URL but allowed in a data: URL, allowing for XSS. This can lead to arbitrary code execution. MFSA 2012-47 / CVE-2012-1957: Security researcher Mario Heiderich reported that javascript could be executed in the HTML feed-view using <embed> tag within the RSS <description>. This problem is due to <embed> tags not being filtered out during parsing and can lead to a potential cross-site scripting (XSS) attack. The flaw existed in a parser utility class and could affect other parts of the browser or add-ons which rely on that class to sanitize untrusted input. MFSA 2012-48 / CVE-2012-1958: Security researcher Arthur Gerkis used the Address Sanitizer tool to find a use-after-free in nsGlobalWindow::PageHidden when mFocusedContent is released and oldFocusedContent is used afterwards. This use-after-free could possibly allow for remote code execution. MFSA 2012-49 / CVE-2012-1959: Mozilla developer Bobby Holley found that same-compartment security wrappers (SCSW) can be bypassed by passing them to another compartment. Cross-compartment wrappers often do not go through SCSW, but have a filtering policy built into them. When an object is wrapped cross-compartment, the SCSW is stripped off and, when the object is read read back, it is not known that SCSW was previously present, resulting in a bypassing of SCSW. This could result in untrusted content having access to the XBL that implements browser functionality. MFSA 2012-50 / CVE-2012-1960: Google developer Tony Payne reported an out of bounds (OOB) read in QCMS, Mozilla’s color management library. With a carefully crafted color profile portions of a user's memory could be incorporated into a transformed image and possibly deciphered. MFSA 2012-51 / CVE-2012-1961: Bugzilla developer Frédéric Buclin reported that the "X-Frame-Options header is ignored when the value is duplicated, for example X-Frame-Options: SAMEORIGIN, SAMEORIGIN. This duplication occurs for unknown reasons on some websites and when it occurs results in Mozilla browsers not being protected against possible clickjacking attacks on those pages. MFSA 2012-52 / CVE-2012-1962: Security researcher Bill Keese reported a memory corruption. This is caused by JSDependentString::undepend changing a dependent string into a fixed string when there are additional dependent strings relying on the same base. When the undepend occurs during conversion, the base data is freed, leaving other dependent strings with dangling pointers. This can lead to a potentially exploitable crash. MFSA 2012-53 / CVE-2012-1963: Security researcher Karthikeyan Bhargavan of Prosecco at INRIA reported Content Security Policy (CSP) 1.0 implementation errors. CSP violation reports generated by Firefox and sent to the "report-uri" location include sensitive data within the "blocked-uri" parameter. These include fragment components and query strings even if the "blocked-uri" parameter has a different origin than the protected resource. This can be used to retrieve a user's OAuth 2.0 access tokens and OpenID credentials by malicious sites. MFSA 2012-54 / CVE-2012-1964: Security Researcher Matt McCutchen reported that a clickjacking attack using the certificate warning page. A man-in-the-middle (MITM) attacker can use an iframe to display its own certificate error warning page (about:certerror) with the "Add Exception" button of a real warning page from a malicious site. This can mislead users to adding a certificate exception for a different site than the perceived one. This can lead to compromised communications with the user perceived site through the MITM attack once the certificate exception has been added. MFSA 2012-55 / CVE-2012-1965: Security researchers Mario Gomes and Soroush Dalili reported that since Mozilla allows the pseudo-protocol feed: to prefix any valid URL, it is possible to construct feed:javascript: URLs that will execute scripts in some contexts. On some sites it may be possible to use this to evade output filtering that would otherwise strip javascript: URLs and thus contribute to cross-site scripting (XSS) problems on these sites. MFSA 2012-56 / CVE-2012-1967: Mozilla security researcher moz_bug_r_a4 reported a arbitrary code execution attack using a javascript: URL. The Gecko engine features a JavaScript sandbox utility that allows the browser or add-ons to safely execute script in the context of a web page. In certain cases, javascript: URLs are executed in such a sandbox with insufficient context that can allow those scripts to escape from the sandbox and run with elevated privilege. This can lead to arbitrary code execution. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-410 - openSUSE 11.4: zypper in -t patch openSUSE-2012-410 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): MozillaFirefox-14.0.1-2.33.1 MozillaFirefox-branding-upstream-14.0.1-2.33.1 MozillaFirefox-buildsymbols-14.0.1-2.33.1 MozillaFirefox-debuginfo-14.0.1-2.33.1 MozillaFirefox-debugsource-14.0.1-2.33.1 MozillaFirefox-devel-14.0.1-2.33.1 MozillaFirefox-translations-common-14.0.1-2.33.1 MozillaFirefox-translations-other-14.0.1-2.33.1 - openSUSE 11.4 (i586 x86_64): MozillaFirefox-14.0.1-28.1 MozillaFirefox-branding-upstream-14.0.1-28.1 MozillaFirefox-buildsymbols-14.0.1-28.1 MozillaFirefox-debuginfo-14.0.1-28.1 MozillaFirefox-debugsource-14.0.1-28.1 MozillaFirefox-devel-14.0.1-28.1 MozillaFirefox-translations-common-14.0.1-28.1 MozillaFirefox-translations-other-14.0.1-28.1 References: http://support.novell.com/security/cve/CVE-2012-1948.html http://support.novell.com/security/cve/CVE-2012-1949.html http://support.novell.com/security/cve/CVE-2012-1950.html http://support.novell.com/security/cve/CVE-2012-1951.html http://support.novell.com/security/cve/CVE-2012-1952.html http://support.novell.com/security/cve/CVE-2012-1953.html http://support.novell.com/security/cve/CVE-2012-1954.html http://support.novell.com/security/cve/CVE-2012-1955.html http://support.novell.com/security/cve/CVE-2012-1957.html http://support.novell.com/security/cve/CVE-2012-1958.html http://support.novell.com/security/cve/CVE-2012-1959.html http://support.novell.com/security/cve/CVE-2012-1961.html http://support.novell.com/security/cve/CVE-2012-1962.html http://support.novell.com/security/cve/CVE-2012-1963.html http://support.novell.com/security/cve/CVE-2012-1964.html http://support.novell.com/security/cve/CVE-2012-1965.html http://support.novell.com/security/cve/CVE-2012-1966.html http://support.novell.com/security/cve/CVE-2012-1967.html https://bugzilla.novell.com/771583 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:0896-1: important: Security update for Mozilla Firefox
by opensuse-security＠opensuse.org 21 Jul '12

21 Jul '12

SUSE Security Update: Security update for Mozilla Firefox ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0896-1 Rating: important References: #771583 Cross-References: CVE-2012-1948 CVE-2012-1949 CVE-2012-1950 CVE-2012-1951 CVE-2012-1952 CVE-2012-1953 CVE-2012-1954 CVE-2012-1955 CVE-2012-1957 CVE-2012-1958 CVE-2012-1959 CVE-2012-1961 CVE-2012-1962 CVE-2012-1963 CVE-2012-1964 CVE-2012-1965 CVE-2012-1966 CVE-2012-1967 Affected Products: SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP1 for VMware SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP1 ______________________________________________________________________________ An update that fixes 18 vulnerabilities is now available. It includes two new package versions. Description: MozillaFirefox has been updated to the 10.0.6ESR security release fixing various bugs and several security issues, some critical. The following security issues have been fixed: * MFSA 2012-42: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code. * CVE-2012-1948: Benoit Jacob, Jesse Ruderman, Christian Holler, and Bill McCloskey reported memory safety problems and crashes that affect Firefox ESR 10 and Firefox 13. * MFSA 2012-43 / CVE-2012-1950: Security researcher Mario Gomes andresearch firm Code Audit Labs reported a mechanism to short-circuit page loads through drag and drop to the addressbar by canceling the page load. This causes the address of the previously site entered to be displayed in the addressbar instead of the currently loaded page. This could lead to potential phishing attacks on users. * MFSA 2012-44 Google security researcher Abhishek Arya used the Address Sanitizer tool to uncover four issues: two use-after-free problems, one out of bounds read bug, and a bad cast. The first use-afte.r-free problem is caused when an array of nsSMILTimeValueSpec objects is destroyed but attempts are made to call into objects in this array later. The second use-after-free problem is in nsDocument::AdoptNode when it adopts into an empty document and then adopts into another document, emptying the first one. The heap buffer overflow is in ElementAnimations when data is read off of end of an array and then pointers are dereferenced. The bad cast happens when nsTableFrame::InsertFrames is called with frames in aFrameList that are a mix of row group frames and column group frames. AppendFrames is not able to handle this mix. All four of these issues are potentially exploitable. o CVE-2012-1951: Heap-use-after-free in nsSMILTimeValueSpec::IsEventBased o CVE-2012-1954: Heap-use-after-free in nsDocument::AdoptNode o CVE-2012-1953: Out of bounds read in ElementAnimations::EnsureStyleRuleFor o CVE-2012-1952: Bad cast in nsTableFrame::InsertFrames * MFSA 2012-45 / CVE-2012-1955: Security researcher Mariusz Mlynski reported an issue with spoofing of the location property. In this issue, calls to history.forward and history.back are used to navigate to a site while displaying the previous site in the addressbar but changing the baseURI to the newer site. This can be used for phishing by allowing the user input form or other data on the newer, attacking, site while appearing to be on the older, displayed site. * MFSA 2012-46 / CVE-2012-1966: Mozilla security researcher moz_bug_r_a4 reported a cross-site scripting (XSS) attack through the context menu using a data: URL. In this issue, context menu functionality ("View Image", "Show only this frame", and "View background image") are disallowed in a javascript: URL but allowed in a data: URL, allowing for XSS. This can lead to arbitrary code execution. * MFSA 2012-47 / CVE-2012-1957: Security researcher Mario Heiderich reported that javascript could be executed in the HTML feed-view using tag within the RSS . This problem is due to tags not being filtered out during parsing and can lead to a potential cross-site scripting (XSS) attack. The flaw existed in a parser utility class and could affect other parts of the browser or add-ons which rely on that class to sanitize untrusted input. * MFSA 2012-48 / CVE-2012-1958: Security researcher Arthur Gerkis used the Address Sanitizer tool to find a use-after-free in nsGlobalWindow::PageHidden when mFocusedContent is released and oldFocusedContent is used afterwards. This use-after-free could possibly allow for remote code execution. * MFSA 2012-49 / CVE-2012-1959: Mozilla developer Bobby Holley found that same-compartment security wrappers (SCSW) can be bypassed by passing them to another compartment. Cross-compartment wrappers often do not go through SCSW, but have a filtering policy built into them. When an object is wrapped cross-compartment, the SCSW is stripped off and, when the object is read read back, it is not known that SCSW was previously present, resulting in a bypassing of SCSW. This could result in untrusted content having access to the XBL that implements browser functionality. * MFSA 2012-50 / CVE-2012-1960: Google developer Tony Payne reported an out of bounds (OOB) read in QCMS, Mozilla's color management library. With a carefully crafted color profile portions of a user's memory could be incorporated into a transformed image and possibly deciphered. * MFSA 2012-51 / CVE-2012-1961: Bugzilla developer Frederic Buclin reported that the "X-Frame-Options header is ignored when the value is duplicated, for example X-Frame-Options: SAMEORIGIN, SAMEORIGIN. This duplication occurs for unknown reasons on some websites and when it occurs results in Mozilla browsers not being protected against possible clickjacking attacks on those pages. * MFSA 2012-52 / CVE-2012-1962: Security researcher Bill Keese reported a memory corruption. This is caused by JSDependentString::undepend changing a dependent string into a fixed string when there are additional dependent strings relying on the same base. When the undepend occurs during conversion, the base data is freed, leaving other dependent strings with dangling pointers. This can lead to a potentially exploitable crash. * MFSA 2012-53 / CVE-2012-1963: Security researcher Karthikeyan Bhargavan of Prosecco at INRIA reported Content Security Policy (CSP) 1.0 implementation errors. CSP violation reports generated by Firefox and sent to the "report-uri" location include sensitive data within the "blocked-uri" parameter. These include fragment components and query strings even if the "blocked-uri" parameter has a different origin than the protected resource. This can be used to retrieve a user's OAuth 2.0 access tokens and OpenID credentials by malicious sites. * MFSA 2012-54 / CVE-2012-1964: Security Researcher Matt McCutchen reported that a clickjacking attack using the certificate warning page. A man-in-the-middle (MITM) attacker can use an iframe to display its own certificate error warning page (about:certerror) with the "Add Exception" button of a real warning page from a malicious site. This can mislead users to adding a certificate exception for a different site than the perceived one. This can lead to compromised communications with the user perceived site through the MITM attack once the certificate exception has been added. * MFSA 2012-55 / CVE-2012-1965: Security researchers Mario Gomes and Soroush Dalili reported that since Mozilla allows the pseudo-protocol feed: to prefix any valid URL, it is possible to construct feed:javascript: URLs that will execute scripts in some contexts. On some sites it may be possible to use this to evade output filtering that would otherwise strip javascript: URLs and thus contribute to cross-site scripting (XSS) problems on these sites. * MFSA 2012-56 / CVE-2012-1967: Mozilla security researcher moz_bug_r_a4 reported a arbitrary code execution attack using a javascript: URL. The Gecko engine features a JavaScript sandbox utility that allows the browser or add-ons to safely execute script in the context of a web page. In certain cases, javascript: URLs are executed in such a sandbox with insufficient context that can allow those scripts to escape from the sandbox and run with elevated privilege. This can lead to arbitrary code execution. Security Issue references: * CVE-2012-1967 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1967 > * CVE-2012-1948 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1948 > * CVE-2012-1949 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1949 > * CVE-2012-1951 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1951 > * CVE-2012-1952 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1952 > * CVE-2012-1953 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1953 > * CVE-2012-1954 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1954 > * CVE-2012-1966 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1966 > * CVE-2012-1958 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1958 > * CVE-2012-1959 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1959 > * CVE-2012-1962 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1962 > * CVE-2012-1950 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1950 > * CVE-2012-1955 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1955 > * CVE-2012-1957 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1957 > * CVE-2012-1961 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1961 > * CVE-2012-1963 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1963 > * CVE-2012-1964 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1964 > * CVE-2012-1965 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1965 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 11 SP2: zypper in -t patch slessp1-firefox-201207-6574 - SUSE Linux Enterprise Server 11 SP1 for VMware: zypper in -t patch slessp1-firefox-201207-6574 - SUSE Linux Enterprise Server 11 SP1: zypper in -t patch slessp1-firefox-201207-6574 - SUSE Linux Enterprise Desktop 11 SP2: zypper in -t patch sledsp1-firefox-201207-6574 - SUSE Linux Enterprise Desktop 11 SP1: zypper in -t patch sledsp1-firefox-201207-6574 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Server 11 SP2 (i586 ia64 ppc64 s390x x86_64) [New Version: 10.0.6 and 7]: MozillaFirefox-10.0.6-0.4.1 MozillaFirefox-branding-SLED-7-0.6.7.70 MozillaFirefox-translations-10.0.6-0.4.1 - SUSE Linux Enterprise Server 11 SP1 for VMware (i586 x86_64) [New Version: 10.0.6]: MozillaFirefox-10.0.6-0.4.1 MozillaFirefox-translations-10.0.6-0.4.1 - SUSE Linux Enterprise Server 11 SP1 (i586 ia64 ppc64 s390x x86_64) [New Version: 10.0.6 and 7]: MozillaFirefox-10.0.6-0.4.1 MozillaFirefox-branding-SLED-7-0.6.7.70 MozillaFirefox-translations-10.0.6-0.4.1 - SUSE Linux Enterprise Desktop 11 SP2 (i586 x86_64) [New Version: 10.0.6 and 7]: MozillaFirefox-10.0.6-0.4.1 MozillaFirefox-branding-SLED-7-0.6.7.70 MozillaFirefox-translations-10.0.6-0.4.1 - SUSE Linux Enterprise Desktop 11 SP1 (i586 x86_64) [New Version: 10.0.6 and 7]: MozillaFirefox-10.0.6-0.4.1 MozillaFirefox-branding-SLED-7-0.6.7.70 MozillaFirefox-translations-10.0.6-0.4.1 References: http://support.novell.com/security/cve/CVE-2012-1948.html http://support.novell.com/security/cve/CVE-2012-1949.html http://support.novell.com/security/cve/CVE-2012-1950.html http://support.novell.com/security/cve/CVE-2012-1951.html http://support.novell.com/security/cve/CVE-2012-1952.html http://support.novell.com/security/cve/CVE-2012-1953.html http://support.novell.com/security/cve/CVE-2012-1954.html http://support.novell.com/security/cve/CVE-2012-1955.html http://support.novell.com/security/cve/CVE-2012-1957.html http://support.novell.com/security/cve/CVE-2012-1958.html http://support.novell.com/security/cve/CVE-2012-1959.html http://support.novell.com/security/cve/CVE-2012-1961.html http://support.novell.com/security/cve/CVE-2012-1962.html http://support.novell.com/security/cve/CVE-2012-1963.html http://support.novell.com/security/cve/CVE-2012-1964.html http://support.novell.com/security/cve/CVE-2012-1965.html http://support.novell.com/security/cve/CVE-2012-1966.html http://support.novell.com/security/cve/CVE-2012-1967.html https://bugzilla.novell.com/771583 http://download.novell.com/patch/finder/?keywords=0b1471bd5af6e54566551a32a… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:0895-1: important: Security update for Mozilla Firefox
by opensuse-security＠opensuse.org 20 Jul '12

20 Jul '12

SUSE Security Update: Security update for Mozilla Firefox ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0895-1 Rating: important References: #712248 #771583 Cross-References: CVE-2012-1948 CVE-2012-1949 CVE-2012-1950 CVE-2012-1951 CVE-2012-1952 CVE-2012-1953 CVE-2012-1954 CVE-2012-1955 CVE-2012-1957 CVE-2012-1958 CVE-2012-1959 CVE-2012-1961 CVE-2012-1962 CVE-2012-1963 CVE-2012-1964 CVE-2012-1965 CVE-2012-1966 CVE-2012-1967 Affected Products: SUSE Linux Enterprise Server 10 SP4 SUSE Linux Enterprise Desktop 10 SP4 SLE SDK 10 SP4 ______________________________________________________________________________ An update that fixes 18 vulnerabilities is now available. It includes one version update. Description: MozillaFirefox have been updated to the 10.0.6ESR security release fixing various bugs and several security issues, some critical. The ollowing security issues have been fixed: * MFSA 2012-42: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code. * CVE-2012-1948: Benoit Jacob, Jesse Ruderman, Christian Holler, and Bill McCloskey reported memory safety problems and crashes that affect Firefox ESR 10 and Firefox 13. * MFSA 2012-43 / CVE-2012-1950: Security researcher Mario Gomes andresearch firm Code Audit Labs reported a mechanism to short-circuit page loads through drag and drop to the addressbar by canceling the page load. This causes the address of the previously site entered to be displayed in the addressbar instead of the currently loaded page. This could lead to potential phishing attacks on users. * MFSA 2012-44 Google security researcher Abhishek Arya used the Address Sanitizer tool to uncover four issues: two use-after-free problems, one out of bounds read bug, and a bad cast. The first use-afte.r-free problem is caused when an array of nsSMILTimeValueSpec objects is destroyed but attempts are made to call into objects in this array later. The second use-after-free problem is in nsDocument::AdoptNode when it adopts into an empty document and then adopts into another document, emptying the first one. The heap buffer overflow is in ElementAnimations when data is read off of end of an array and then pointers are dereferenced. The bad cast happens when nsTableFrame::InsertFrames is called with frames in aFrameList that are a mix of row group frames and column group frames. AppendFrames is not able to handle this mix. All four of these issues are potentially exploitable. o CVE-2012-1951: Heap-use-after-free in nsSMILTimeValueSpec::IsEventBased o CVE-2012-1954: Heap-use-after-free in nsDocument::AdoptNode o CVE-2012-1953: Out of bounds read in ElementAnimations::EnsureStyleRuleFor o CVE-2012-1952: Bad cast in nsTableFrame::InsertFrames * MFSA 2012-45 / CVE-2012-1955: Security researcher Mariusz Mlynski reported an issue with spoofing of the location property. In this issue, calls to history.forward and history.back are used to navigate to a site while displaying the previous site in the addressbar but changing the baseURI to the newer site. This can be used for phishing by allowing the user input form or other data on the newer, attacking, site while appearing to be on the older, displayed site. * MFSA 2012-46 / CVE-2012-1966: Mozilla security researcher moz_bug_r_a4 reported a cross-site scripting (XSS) attack through the context menu using a data: URL. In this issue, context menu functionality ("View Image", "Show only this frame", and "View background image") are disallowed in a javascript: URL but allowed in a data: URL, allowing for XSS. This can lead to arbitrary code execution. * MFSA 2012-47 / CVE-2012-1957: Security researcher Mario Heiderich reported that javascript could be executed in the HTML feed-view using tag within the RSS . This problem is due to tags not being filtered out during parsing and can lead to a potential cross-site scripting (XSS) attack. The flaw existed in a parser utility class and could affect other parts of the browser or add-ons which rely on that class to sanitize untrusted input. * MFSA 2012-48 / CVE-2012-1958: Security researcher Arthur Gerkis used the Address Sanitizer tool to find a use-after-free in nsGlobalWindow::PageHidden when mFocusedContent is released and oldFocusedContent is used afterwards. This use-after-free could possibly allow for remote code execution. * MFSA 2012-49 / CVE-2012-1959: Mozilla developer Bobby Holley found that same-compartment security wrappers (SCSW) can be bypassed by passing them to another compartment. Cross-compartment wrappers often do not go through SCSW, but have a filtering policy built into them. When an object is wrapped cross-compartment, the SCSW is stripped off and, when the object is read read back, it is not known that SCSW was previously present, resulting in a bypassing of SCSW. This could result in untrusted content having access to the XBL that implements browser functionality. * MFSA 2012-50 / CVE-2012-1960: Google developer Tony Payne reported an out of bounds (OOB) read in QCMS, Mozilla's color management library. With a carefully crafted color profile portions of a user's memory could be incorporated into a transformed image and possibly deciphered. * MFSA 2012-51 / CVE-2012-1961: Bugzilla developer Frederic Buclin reported that the "X-Frame-Options header is ignored when the value is duplicated, for example X-Frame-Options: SAMEORIGIN, SAMEORIGIN. This duplication occurs for unknown reasons on some websites and when it occurs results in Mozilla browsers not being protected against possible clickjacking attacks on those pages. * MFSA 2012-52 / CVE-2012-1962: Security researcher Bill Keese reported a memory corruption. This is caused by JSDependentString::undepend changing a dependent string into a fixed string when there are additional dependent strings relying on the same base. When the undepend occurs during conversion, the base data is freed, leaving other dependent strings with dangling pointers. This can lead to a potentially exploitable crash. * MFSA 2012-53 / CVE-2012-1963: Security researcher Karthikeyan Bhargavan of Prosecco at INRIA reported Content Security Policy (CSP) 1.0 implementation errors. CSP violation reports generated by Firefox and sent to the "report-uri" location include sensitive data within the "blocked-uri" parameter. These include fragment components and query strings even if the "blocked-uri" parameter has a different origin than the protected resource. This can be used to retrieve a user's OAuth 2.0 access tokens and OpenID credentials by malicious sites. * MFSA 2012-54 / CVE-2012-1964: Security Researcher Matt McCutchen reported that a clickjacking attack using the certificate warning page. A man-in-the-middle (MITM) attacker can use an iframe to display its own certificate error warning page (about:certerror) with the "Add Exception" button of a real warning page from a malicious site. This can mislead users to adding a certificate exception for a different site than the perceived one. This can lead to compromised communications with the user perceived site through the MITM attack once the certificate exception has been added. * MFSA 2012-55 / CVE-2012-1965: Security researchers Mario Gomes and Soroush Dalili reported that since Mozilla allows the pseudo-protocol feed: to prefix any valid URL, it is possible to construct feed:javascript: URLs that will execute scripts in some contexts. On some sites it may be possible to use this to evade output filtering that would otherwise strip javascript: URLs and thus contribute to cross-site scripting (XSS) problems on these sites. * MFSA 2012-56 / CVE-2012-1967: Mozilla security researcher moz_bug_r_a4 reported a arbitrary code execution attack using a javascript: URL. The Gecko engine features a JavaScript sandbox utility that allows the browser or add-ons to safely execute script in the context of a web page. In certain cases, javascript: URLs are executed in such a sandbox with insufficient context that can allow those scripts to escape from the sandbox and run with elevated privilege. This can lead to arbitrary code execution. Security Issue references: * CVE-2012-1967 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1967 > * CVE-2012-1948 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1948 > * CVE-2012-1949 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1949 > * CVE-2012-1951 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1951 > * CVE-2012-1952 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1952 > * CVE-2012-1953 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1953 > * CVE-2012-1954 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1954 > * CVE-2012-1966 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1966 > * CVE-2012-1958 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1958 > * CVE-2012-1959 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1959 > * CVE-2012-1962 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1962 > * CVE-2012-1950 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1950 > * CVE-2012-1955 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1955 > * CVE-2012-1957 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1957 > * CVE-2012-1961 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1961 > * CVE-2012-1963 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1963 > * CVE-2012-1964 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1964 > * CVE-2012-1965 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1965 > Package List: - SUSE Linux Enterprise Server 10 SP4 (i586 ia64 ppc s390x x86_64): firefox3-gtk2-2.10.6-0.12.1 - SUSE Linux Enterprise Server 10 SP4 (i586 ia64 ppc s390x) [New Version: 7]: MozillaFirefox-10.0.6-0.6.1 MozillaFirefox-branding-SLED-7-0.8.25 MozillaFirefox-translations-10.0.6-0.6.1 - SUSE Linux Enterprise Server 10 SP4 (s390x x86_64): firefox3-gtk2-32bit-2.10.6-0.12.1 - SUSE Linux Enterprise Desktop 10 SP4 (i586 x86_64): firefox3-gtk2-2.10.6-0.12.1 - SUSE Linux Enterprise Desktop 10 SP4 (x86_64): firefox3-gtk2-32bit-2.10.6-0.12.1 - SUSE Linux Enterprise Desktop 10 SP4 (i586) [New Version: 7]: MozillaFirefox-10.0.6-0.6.1 MozillaFirefox-branding-SLED-7-0.8.25 MozillaFirefox-translations-10.0.6-0.6.1 - SLE SDK 10 SP4 (i586 ia64 ppc s390x x86_64): firefox3-gtk2-devel-2.10.6-0.12.1 firefox3-gtk2-doc-2.10.6-0.12.1 - SLE SDK 10 SP4 (i586 ia64 ppc s390x): MozillaFirefox-branding-upstream-10.0.6-0.6.1 References: http://support.novell.com/security/cve/CVE-2012-1948.html http://support.novell.com/security/cve/CVE-2012-1949.html http://support.novell.com/security/cve/CVE-2012-1950.html http://support.novell.com/security/cve/CVE-2012-1951.html http://support.novell.com/security/cve/CVE-2012-1952.html http://support.novell.com/security/cve/CVE-2012-1953.html http://support.novell.com/security/cve/CVE-2012-1954.html http://support.novell.com/security/cve/CVE-2012-1955.html http://support.novell.com/security/cve/CVE-2012-1957.html http://support.novell.com/security/cve/CVE-2012-1958.html http://support.novell.com/security/cve/CVE-2012-1959.html http://support.novell.com/security/cve/CVE-2012-1961.html http://support.novell.com/security/cve/CVE-2012-1962.html http://support.novell.com/security/cve/CVE-2012-1963.html http://support.novell.com/security/cve/CVE-2012-1964.html http://support.novell.com/security/cve/CVE-2012-1965.html http://support.novell.com/security/cve/CVE-2012-1966.html http://support.novell.com/security/cve/CVE-2012-1967.html https://bugzilla.novell.com/712248 https://bugzilla.novell.com/771583 http://download.novell.com/patch/finder/?keywords=96da6f10cbe978aeccb3ac8d9… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:0894-1: important: Security update for libtiff
by opensuse-security＠opensuse.org 19 Jul '12

19 Jul '12

SUSE Security Update: Security update for libtiff ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0894-1 Rating: important References: #767852 #767854 Cross-References: CVE-2012-2088 CVE-2012-2113 Affected Products: SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP1 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP1 for VMware SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server 10 SP4 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP1 SUSE Linux Enterprise Desktop 10 SP4 SLE SDK 10 SP4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: The following issue has been fixed: * Specially crafted tiff files could have caused overflows in libtiff (CVE-2012-2088, CVE-2012-2113). Security Issue references: * CVE-2012-2088 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2088 > * CVE-2012-2113 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2113 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11 SP2: zypper in -t patch sdksp1-libtiff-devel-6475 - SUSE Linux Enterprise Software Development Kit 11 SP1: zypper in -t patch sdksp1-libtiff-devel-6475 - SUSE Linux Enterprise Server 11 SP2: zypper in -t patch slessp1-libtiff-devel-6475 - SUSE Linux Enterprise Server 11 SP1 for VMware: zypper in -t patch slessp1-libtiff-devel-6475 - SUSE Linux Enterprise Server 11 SP1: zypper in -t patch slessp1-libtiff-devel-6475 - SUSE Linux Enterprise Desktop 11 SP2: zypper in -t patch sledsp1-libtiff-devel-6475 - SUSE Linux Enterprise Desktop 11 SP1: zypper in -t patch sledsp1-libtiff-devel-6475 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11 SP2 (i586 ia64 ppc64 s390x x86_64): libtiff-devel-3.8.2-141.146.1 - SUSE Linux Enterprise Software Development Kit 11 SP2 (ppc64 s390x x86_64): libtiff-devel-32bit-3.8.2-141.146.1 - SUSE Linux Enterprise Software Development Kit 11 SP1 (i586 ia64 ppc64 s390x x86_64): libtiff-devel-3.8.2-141.146.1 - SUSE Linux Enterprise Software Development Kit 11 SP1 (ppc64 s390x x86_64): libtiff-devel-32bit-3.8.2-141.146.1 - SUSE Linux Enterprise Server 11 SP2 (i586 ia64 ppc64 s390x x86_64): libtiff3-3.8.2-141.146.1 tiff-3.8.2-141.146.1 - SUSE Linux Enterprise Server 11 SP2 (ppc64 s390x x86_64): libtiff3-32bit-3.8.2-141.146.1 - SUSE Linux Enterprise Server 11 SP2 (ia64): libtiff3-x86-3.8.2-141.146.1 - SUSE Linux Enterprise Server 11 SP1 for VMware (i586 x86_64): libtiff3-3.8.2-141.146.1 tiff-3.8.2-141.146.1 - SUSE Linux Enterprise Server 11 SP1 for VMware (x86_64): libtiff3-32bit-3.8.2-141.146.1 - SUSE Linux Enterprise Server 11 SP1 (i586 ia64 ppc64 s390x x86_64): libtiff3-3.8.2-141.146.1 tiff-3.8.2-141.146.1 - SUSE Linux Enterprise Server 11 SP1 (ppc64 s390x x86_64): libtiff3-32bit-3.8.2-141.146.1 - SUSE Linux Enterprise Server 11 SP1 (ia64): libtiff3-x86-3.8.2-141.146.1 - SUSE Linux Enterprise Server 10 SP4 (i586 ia64 ppc s390x x86_64): libtiff-3.8.2-5.28.1 libtiff-devel-3.8.2-5.28.1 tiff-3.8.2-5.28.1 - SUSE Linux Enterprise Server 10 SP4 (s390x x86_64): libtiff-32bit-3.8.2-5.28.1 libtiff-devel-32bit-3.8.2-5.28.1 - SUSE Linux Enterprise Server 10 SP4 (ia64): libtiff-x86-3.8.2-5.28.1 - SUSE Linux Enterprise Server 10 SP4 (ppc): libtiff-64bit-3.8.2-5.28.1 libtiff-devel-64bit-3.8.2-5.28.1 - SUSE Linux Enterprise Desktop 11 SP2 (i586 x86_64): libtiff3-3.8.2-141.146.1 - SUSE Linux Enterprise Desktop 11 SP2 (x86_64): libtiff3-32bit-3.8.2-141.146.1 - SUSE Linux Enterprise Desktop 11 SP1 (i586 x86_64): libtiff3-3.8.2-141.146.1 - SUSE Linux Enterprise Desktop 11 SP1 (x86_64): libtiff3-32bit-3.8.2-141.146.1 - SUSE Linux Enterprise Desktop 10 SP4 (i586 x86_64): libtiff-3.8.2-5.28.1 libtiff-devel-3.8.2-5.28.1 tiff-3.8.2-5.28.1 - SUSE Linux Enterprise Desktop 10 SP4 (x86_64): libtiff-32bit-3.8.2-5.28.1 - SLE SDK 10 SP4 (i586 ia64 ppc s390x x86_64): libtiff-devel-3.8.2-5.28.1 - SLE SDK 10 SP4 (s390x x86_64): libtiff-devel-32bit-3.8.2-5.28.1 - SLE SDK 10 SP4 (ppc): libtiff-devel-64bit-3.8.2-5.28.1 References: http://support.novell.com/security/cve/CVE-2012-2088.html http://support.novell.com/security/cve/CVE-2012-2113.html https://bugzilla.novell.com/767852 https://bugzilla.novell.com/767854 http://download.novell.com/patch/finder/?keywords=bb00258755d4c0881387cfdfc… http://download.novell.com/patch/finder/?keywords=eb87a9a1df36e6f2c25af8a7f… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:0890-1: important: Security update for pidgin, finch and libpurple
by opensuse-security＠opensuse.org 18 Jul '12

18 Jul '12

SUSE Security Update: Security update for pidgin, finch and libpurple ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0890-1 Rating: important References: #770304 Cross-References: CVE-2012-3374 Affected Products: SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP1 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP1 SUSE Linux Enterprise Desktop 10 SP4 SLE SDK 10 SP4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update of pidgin fixes a stack-based buffer overflow in the MXit protocol which could have potentially been exploited by remote attackers to execute arbitrary code in the context of the user running pidgin (CVE-2012-3374). Security Issue reference: * CVE-2012-3374 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3374 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11 SP2: zypper in -t patch sdksp1-finch-6534 - SUSE Linux Enterprise Software Development Kit 11 SP1: zypper in -t patch sdksp1-finch-6534 - SUSE Linux Enterprise Desktop 11 SP2: zypper in -t patch sledsp1-finch-6534 - SUSE Linux Enterprise Desktop 11 SP1: zypper in -t patch sledsp1-finch-6534 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11 SP2 (i586 ia64 ppc64 s390x x86_64): finch-2.6.6-0.17.1 finch-devel-2.6.6-0.17.1 libpurple-2.6.6-0.17.1 libpurple-devel-2.6.6-0.17.1 libpurple-lang-2.6.6-0.17.1 pidgin-2.6.6-0.17.1 pidgin-devel-2.6.6-0.17.1 - SUSE Linux Enterprise Software Development Kit 11 SP1 (i586 ia64 ppc64 s390x x86_64): finch-2.6.6-0.17.1 finch-devel-2.6.6-0.17.1 libpurple-2.6.6-0.17.1 libpurple-devel-2.6.6-0.17.1 libpurple-lang-2.6.6-0.17.1 pidgin-2.6.6-0.17.1 pidgin-devel-2.6.6-0.17.1 - SUSE Linux Enterprise Desktop 11 SP2 (i586 x86_64): finch-2.6.6-0.17.1 libpurple-2.6.6-0.17.1 libpurple-lang-2.6.6-0.17.1 libpurple-meanwhile-2.6.6-0.17.1 libpurple-tcl-2.6.6-0.17.1 pidgin-2.6.6-0.17.1 - SUSE Linux Enterprise Desktop 11 SP1 (i586 x86_64): finch-2.6.6-0.17.1 libpurple-2.6.6-0.17.1 libpurple-lang-2.6.6-0.17.1 libpurple-meanwhile-2.6.6-0.17.1 libpurple-tcl-2.6.6-0.17.1 pidgin-2.6.6-0.17.1 - SUSE Linux Enterprise Desktop 10 SP4 (i586 x86_64): finch-2.6.6-0.18.1 libpurple-2.6.6-0.18.1 pidgin-2.6.6-0.18.1 - SLE SDK 10 SP4 (i586 ia64 ppc s390x x86_64): finch-2.6.6-0.18.1 finch-devel-2.6.6-0.18.1 libpurple-2.6.6-0.18.1 libpurple-devel-2.6.6-0.18.1 pidgin-2.6.6-0.18.1 pidgin-devel-2.6.6-0.18.1 References: http://support.novell.com/security/cve/CVE-2012-3374.html https://bugzilla.novell.com/770304 http://download.novell.com/patch/finder/?keywords=6cdbffccfb7e818b850e497dc… http://download.novell.com/patch/finder/?keywords=a738afec13eba5d4d2ab0d2b9… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2012:0886-1: critical: xen
by opensuse-security＠opensuse.org 18 Jul '12

18 Jul '12

openSUSE Security Update: xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0886-1 Rating: critical References: #757537 #757970 #764077 Cross-References: CVE-2012-0217 CVE-2012-0218 CVE-2012-2934 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update of XEN fixed multiple security flaws that could be exploited by local attackers to cause a Denial of Service or potentially escalate privileges. Additionally, several other upstream changes were backported. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-403 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): xen-debugsource-4.1.2_17-1.10.1 xen-devel-4.1.2_17-1.10.1 xen-kmp-default-4.1.2_17_k3.1.10_1.16-1.10.1 xen-kmp-default-debuginfo-4.1.2_17_k3.1.10_1.16-1.10.1 xen-kmp-desktop-4.1.2_17_k3.1.10_1.16-1.10.1 xen-kmp-desktop-debuginfo-4.1.2_17_k3.1.10_1.16-1.10.1 xen-libs-4.1.2_17-1.10.1 xen-libs-debuginfo-4.1.2_17-1.10.1 xen-tools-domU-4.1.2_17-1.10.1 xen-tools-domU-debuginfo-4.1.2_17-1.10.1 - openSUSE 12.1 (x86_64): xen-4.1.2_17-1.10.1 xen-doc-html-4.1.2_17-1.10.1 xen-doc-pdf-4.1.2_17-1.10.1 xen-libs-32bit-4.1.2_17-1.10.1 xen-libs-debuginfo-32bit-4.1.2_17-1.10.1 xen-tools-4.1.2_17-1.10.1 xen-tools-debuginfo-4.1.2_17-1.10.1 - openSUSE 12.1 (ia64): xen-libs-debuginfo-x86-4.1.2_17-1.10.1 xen-libs-x86-4.1.2_17-1.10.1 - openSUSE 12.1 (i586): xen-kmp-pae-4.1.2_17_k3.1.10_1.16-1.10.1 xen-kmp-pae-debuginfo-4.1.2_17_k3.1.10_1.16-1.10.1 References: http://support.novell.com/security/cve/CVE-2012-0217.html http://support.novell.com/security/cve/CVE-2012-0218.html http://support.novell.com/security/cve/CVE-2012-2934.html https://bugzilla.novell.com/757537 https://bugzilla.novell.com/757970 https://bugzilla.novell.com/764077 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:0881-1: important: Security update for java-1_4_2-ibm-sap
by opensuse-security＠opensuse.org 16 Jul '12

16 Jul '12

SUSE Security Update: Security update for java-1_4_2-ibm-sap ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0881-1 Rating: important References: #768611 Affected Products: SUSE Linux Enterprise for SAP Applications 11 SP1 SUSE Linux Enterprise Java 11 SP1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: IBM Java 1.4.2 SR13 FP12 has been released which fixes various bugs and security issues. For more information see http://www.ibm.com/developerworks/java/jdk/alerts/ <http://www.ibm.com/developerworks/java/jdk/alerts/> CVEs addressed: CVE-2011-3563 CVE-2012-0499 CVE-2012-0502 CVE-2012-0503 CVE-2012-0505 CVE-2012-0506 Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise for SAP Applications 11 SP1: zypper in -t patch slesapp1-java-1_4_2-ibm-sap-6476 - SUSE Linux Enterprise Java 11 SP1: zypper in -t patch slejsp1-java-1_4_2-ibm-sap-6476 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise for SAP Applications 11 SP1 (x86_64): java-1_4_2-ibm-sap-1.4.2_sr13.12-0.3.1 java-1_4_2-ibm-sap-devel-1.4.2_sr13.12-0.3.1 - SUSE Linux Enterprise Java 11 SP1 (x86_64): java-1_4_2-ibm-sap-1.4.2_sr13.12-0.3.1 java-1_4_2-ibm-sap-devel-1.4.2_sr13.12-0.3.1 References: https://bugzilla.novell.com/768611 http://download.novell.com/patch/finder/?keywords=94625ebb99bafb508860512c2… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:0741-6: important: Security update for bind
by opensuse-security＠opensuse.org 13 Jul '12

13 Jul '12

SUSE Security Update: Security update for bind ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0741-6 Rating: important References: #765315 Cross-References: CVE-2012-1667 Affected Products: SUSE CORE 9 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The following issue has been fixed: * Records with zero length rdata field could have crashed named or disclose portions of memory to clients (CVE-2012-1667). Security Issue reference: * CVE-2012-1667 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1667 > Package List: - SUSE CORE 9 (i586 s390 s390x x86_64): bind-9.3.4-4.16 bind-devel-9.3.4-4.16 bind-utils-9.3.4-4.16 - SUSE CORE 9 (x86_64): bind-utils-32bit-9-201207061338 - SUSE CORE 9 (s390x): bind-utils-32bit-9-201207061342 References: http://support.novell.com/security/cve/CVE-2012-1667.html https://bugzilla.novell.com/765315 http://download.novell.com/patch/finder/?keywords=2f883f124c996f4e73d94255f… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2012:0865-1: important: update for opera
by opensuse-security＠opensuse.org 11 Jul '12

11 Jul '12

openSUSE Security Update: update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0865-1 Rating: important References: #767045 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: - update to 12.00 * full changelog available at: http://www.opera.com/docs/changelogs/unix/1120/ - fixes [bnc#767045] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-379 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): opera-12.00-16.1 opera-gtk-12.00-16.1 opera-kde4-12.00-16.1 References: https://bugzilla.novell.com/767045 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2012:0860-1: important: mysql (CVE-2012-2122)
by opensuse-security＠opensuse.org 11 Jul '12

11 Jul '12

openSUSE Security Update: mysql (CVE-2012-2122) ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0860-1 Rating: important References: #765092 Cross-References: CVE-2012-2122 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Fixing CVE-2012-2122: authentication bypass due to incorrect type casting Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-378 - openSUSE 11.4: zypper in -t patch openSUSE-2012-378 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): libmysqlclusterclient16-7.1.22-2.7.1 libmysqlclusterclient16-debuginfo-7.1.22-2.7.1 libmysqlclusterclient_r16-7.1.22-2.7.1 libmysqlclusterclient_r16-debuginfo-7.1.22-2.7.1 mysql-cluster-7.1.22-2.7.1 mysql-cluster-bench-7.1.22-2.7.1 mysql-cluster-bench-debuginfo-7.1.22-2.7.1 mysql-cluster-client-7.1.22-2.7.1 mysql-cluster-client-debuginfo-7.1.22-2.7.1 mysql-cluster-debug-7.1.22-2.7.1 mysql-cluster-debug-debuginfo-7.1.22-2.7.1 mysql-cluster-debuginfo-7.1.22-2.7.1 mysql-cluster-debugsource-7.1.22-2.7.1 mysql-cluster-ndb-extra-7.1.22-2.7.1 mysql-cluster-ndb-extra-debuginfo-7.1.22-2.7.1 mysql-cluster-ndb-management-7.1.22-2.7.1 mysql-cluster-ndb-management-debuginfo-7.1.22-2.7.1 mysql-cluster-ndb-storage-7.1.22-2.7.1 mysql-cluster-ndb-storage-debuginfo-7.1.22-2.7.1 mysql-cluster-ndb-tools-7.1.22-2.7.1 mysql-cluster-ndb-tools-debuginfo-7.1.22-2.7.1 mysql-cluster-test-7.1.22-2.7.1 mysql-cluster-test-debuginfo-7.1.22-2.7.1 mysql-cluster-tools-7.1.22-2.7.1 mysql-cluster-tools-debuginfo-7.1.22-2.7.1 - openSUSE 11.4 (i586 x86_64): libmysqlclusterclient16-7.1.22-55.1 libmysqlclusterclient16-debuginfo-7.1.22-55.1 libmysqlclusterclient_r16-7.1.22-55.1 libmysqlclusterclient_r16-debuginfo-7.1.22-55.1 mysql-cluster-7.1.22-55.1 mysql-cluster-bench-7.1.22-55.1 mysql-cluster-bench-debuginfo-7.1.22-55.1 mysql-cluster-client-7.1.22-55.1 mysql-cluster-client-debuginfo-7.1.22-55.1 mysql-cluster-debug-7.1.22-55.1 mysql-cluster-debug-debuginfo-7.1.22-55.1 mysql-cluster-debuginfo-7.1.22-55.1 mysql-cluster-debugsource-7.1.22-55.1 mysql-cluster-ndb-extra-7.1.22-55.1 mysql-cluster-ndb-extra-debuginfo-7.1.22-55.1 mysql-cluster-ndb-management-7.1.22-55.1 mysql-cluster-ndb-management-debuginfo-7.1.22-55.1 mysql-cluster-ndb-storage-7.1.22-55.1 mysql-cluster-ndb-storage-debuginfo-7.1.22-55.1 mysql-cluster-ndb-tools-7.1.22-55.1 mysql-cluster-ndb-tools-debuginfo-7.1.22-55.1 mysql-cluster-test-7.1.22-55.1 mysql-cluster-test-debuginfo-7.1.22-55.1 mysql-cluster-tools-7.1.22-55.1 mysql-cluster-tools-debuginfo-7.1.22-55.1 References: http://support.novell.com/security/cve/CVE-2012-2122.html https://bugzilla.novell.com/765092 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:0840-1: important: Security update for PHP5
by opensuse-security＠opensuse.org 05 Jul '12

05 Jul '12

SUSE Security Update: Security update for PHP5 ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0840-1 Rating: important References: #761631 #763814 #766798 Cross-References: CVE-2012-2143 CVE-2012-2335 CVE-2012-2336 CVE-2012-2386 Affected Products: SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Server 11 SP2 for VMware SUSE Linux Enterprise Server 11 SP2 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: PHP5 was updated with incremental fixes to the previous update. * CVE-2012-2335: Additional unsafe cgi wrapper scripts are also fixed now. * CVE-2012-2336: Even more commandline option handling is filtered, which could lead to crashes of the php interpreter. * CVE-2012-2386: heap based buffer overflow in php's phar extension * CVE-2012-2143: The crypt() implementation ignored wide characters, leading to shorter effective password lengths. Note: With this update applied affected passwords will no longer work and need to be set again. Security Issue references: * CVE-2012-2335 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2335 > * CVE-2012-2336 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2336 > * CVE-2012-2386 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2386 > * CVE-2012-2143 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2143 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11 SP2: zypper in -t patch sdksp2-apache2-mod_php53-6440 - SUSE Linux Enterprise Server 11 SP2 for VMware: zypper in -t patch slessp2-apache2-mod_php53-6440 - SUSE Linux Enterprise Server 11 SP2: zypper in -t patch slessp2-apache2-mod_php53-6440 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11 SP2 (i586 ia64 ppc64 s390x x86_64): php53-devel-5.3.8-0.33.2 php53-imap-5.3.8-0.33.2 php53-posix-5.3.8-0.33.2 php53-readline-5.3.8-0.33.2 php53-sockets-5.3.8-0.33.2 php53-sqlite-5.3.8-0.33.2 php53-tidy-5.3.8-0.33.2 - SUSE Linux Enterprise Server 11 SP2 for VMware (i586 x86_64): apache2-mod_php53-5.3.8-0.33.2 php53-5.3.8-0.33.2 php53-bcmath-5.3.8-0.33.2 php53-bz2-5.3.8-0.33.2 php53-calendar-5.3.8-0.33.2 php53-ctype-5.3.8-0.33.2 php53-curl-5.3.8-0.33.2 php53-dba-5.3.8-0.33.2 php53-dom-5.3.8-0.33.2 php53-exif-5.3.8-0.33.2 php53-fastcgi-5.3.8-0.33.2 php53-fileinfo-5.3.8-0.33.2 php53-ftp-5.3.8-0.33.2 php53-gd-5.3.8-0.33.2 php53-gettext-5.3.8-0.33.2 php53-gmp-5.3.8-0.33.2 php53-iconv-5.3.8-0.33.2 php53-intl-5.3.8-0.33.2 php53-json-5.3.8-0.33.2 php53-ldap-5.3.8-0.33.2 php53-mbstring-5.3.8-0.33.2 php53-mcrypt-5.3.8-0.33.2 php53-mysql-5.3.8-0.33.2 php53-odbc-5.3.8-0.33.2 php53-openssl-5.3.8-0.33.2 php53-pcntl-5.3.8-0.33.2 php53-pdo-5.3.8-0.33.2 php53-pear-5.3.8-0.33.2 php53-pgsql-5.3.8-0.33.2 php53-pspell-5.3.8-0.33.2 php53-shmop-5.3.8-0.33.2 php53-snmp-5.3.8-0.33.2 php53-soap-5.3.8-0.33.2 php53-suhosin-5.3.8-0.33.2 php53-sysvmsg-5.3.8-0.33.2 php53-sysvsem-5.3.8-0.33.2 php53-sysvshm-5.3.8-0.33.2 php53-tokenizer-5.3.8-0.33.2 php53-wddx-5.3.8-0.33.2 php53-xmlreader-5.3.8-0.33.2 php53-xmlrpc-5.3.8-0.33.2 php53-xmlwriter-5.3.8-0.33.2 php53-xsl-5.3.8-0.33.2 php53-zip-5.3.8-0.33.2 php53-zlib-5.3.8-0.33.2 - SUSE Linux Enterprise Server 11 SP2 (i586 ia64 ppc64 s390x x86_64): apache2-mod_php53-5.3.8-0.33.2 php53-5.3.8-0.33.2 php53-bcmath-5.3.8-0.33.2 php53-bz2-5.3.8-0.33.2 php53-calendar-5.3.8-0.33.2 php53-ctype-5.3.8-0.33.2 php53-curl-5.3.8-0.33.2 php53-dba-5.3.8-0.33.2 php53-dom-5.3.8-0.33.2 php53-exif-5.3.8-0.33.2 php53-fastcgi-5.3.8-0.33.2 php53-fileinfo-5.3.8-0.33.2 php53-ftp-5.3.8-0.33.2 php53-gd-5.3.8-0.33.2 php53-gettext-5.3.8-0.33.2 php53-gmp-5.3.8-0.33.2 php53-iconv-5.3.8-0.33.2 php53-intl-5.3.8-0.33.2 php53-json-5.3.8-0.33.2 php53-ldap-5.3.8-0.33.2 php53-mbstring-5.3.8-0.33.2 php53-mcrypt-5.3.8-0.33.2 php53-mysql-5.3.8-0.33.2 php53-odbc-5.3.8-0.33.2 php53-openssl-5.3.8-0.33.2 php53-pcntl-5.3.8-0.33.2 php53-pdo-5.3.8-0.33.2 php53-pear-5.3.8-0.33.2 php53-pgsql-5.3.8-0.33.2 php53-pspell-5.3.8-0.33.2 php53-shmop-5.3.8-0.33.2 php53-snmp-5.3.8-0.33.2 php53-soap-5.3.8-0.33.2 php53-suhosin-5.3.8-0.33.2 php53-sysvmsg-5.3.8-0.33.2 php53-sysvsem-5.3.8-0.33.2 php53-sysvshm-5.3.8-0.33.2 php53-tokenizer-5.3.8-0.33.2 php53-wddx-5.3.8-0.33.2 php53-xmlreader-5.3.8-0.33.2 php53-xmlrpc-5.3.8-0.33.2 php53-xmlwriter-5.3.8-0.33.2 php53-xsl-5.3.8-0.33.2 php53-zip-5.3.8-0.33.2 php53-zlib-5.3.8-0.33.2 References: http://support.novell.com/security/cve/CVE-2012-2143.html http://support.novell.com/security/cve/CVE-2012-2335.html http://support.novell.com/security/cve/CVE-2012-2336.html http://support.novell.com/security/cve/CVE-2012-2386.html https://bugzilla.novell.com/761631 https://bugzilla.novell.com/763814 https://bugzilla.novell.com/766798 http://download.novell.com/patch/finder/?keywords=493f50e026887ac9d2afb3216… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2012:0833-1: important: ClamAV: 0.97.5 update
by opensuse-security＠opensuse.org 04 Jul '12

04 Jul '12

openSUSE Security Update: ClamAV: 0.97.5 update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0833-1 Rating: important References: #767574 Cross-References: CVE-2012-1457 CVE-2012-1458 CVE-2012-1459 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update addresses possible evasion cases in some archive formats and stability issues in portions of the bytecode engine. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-362 - openSUSE 11.4: zypper in -t patch openSUSE-2012-362 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): clamav-0.97.5-4.1 clamav-debuginfo-0.97.5-4.1 clamav-debugsource-0.97.5-4.1 - openSUSE 12.1 (noarch): clamav-db-0.97.5-4.1 - openSUSE 11.4 (i586 x86_64): clamav-0.97.5-10.1 clamav-debuginfo-0.97.5-10.1 clamav-debugsource-0.97.5-10.1 - openSUSE 11.4 (noarch): clamav-db-0.97.5-10.1 References: http://support.novell.com/security/cve/CVE-2012-1457.html http://support.novell.com/security/cve/CVE-2012-1458.html http://support.novell.com/security/cve/CVE-2012-1459.html https://bugzilla.novell.com/767574 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2012:0828-1: critical: java-1_6_0-openjdk: critical
by opensuse-security＠opensuse.org 04 Jul '12

04 Jul '12

openSUSE Security Update: java-1_6_0-openjdk: critical ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0828-1 Rating: critical References: #766802 Cross-References: CVE-2012-1711 CVE-2012-1713 CVE-2012-1716 CVE-2012-1717 CVE-2012-1718 CVE-2012-1719 CVE-2012-1723 CVE-2012-1724 CVE-2012-1725 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: This version upgrade of java-1_6_0-openjdk fixes multiple security flaws: - S7079902, CVE-2012-1711: Refine CORBA data models - S7143606, CVE-2012-1717: File.createTempFile should be improved for temporary files created by the platform. - S7143614, CVE-2012-1716: SynthLookAndFeel stability improvement - S7143617, CVE-2012-1713: Improve fontmanager layout lookup operations - S7143851, CVE-2012-1719: Improve IIOP stub and tie generation in RMIC - S7143872, CVE-2012-1718: Improve certificate extension processing - S7152811, CVE-2012-1723: Issues in client compiler - S7157609, CVE-2012-1724: Issues with loop - S7160757, CVE-2012-1725: Problem with hotspot runtime_classfile Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-368 - openSUSE 11.4: zypper in -t patch openSUSE-2012-368 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): java-1_6_0-openjdk-1.6.0.0_b24.1.11.3-6.2 java-1_6_0-openjdk-debuginfo-1.6.0.0_b24.1.11.3-6.2 java-1_6_0-openjdk-debugsource-1.6.0.0_b24.1.11.3-6.2 java-1_6_0-openjdk-demo-1.6.0.0_b24.1.11.3-6.2 java-1_6_0-openjdk-demo-debuginfo-1.6.0.0_b24.1.11.3-6.2 java-1_6_0-openjdk-devel-1.6.0.0_b24.1.11.3-6.2 java-1_6_0-openjdk-devel-debuginfo-1.6.0.0_b24.1.11.3-6.2 java-1_6_0-openjdk-javadoc-1.6.0.0_b24.1.11.3-6.2 java-1_6_0-openjdk-src-1.6.0.0_b24.1.11.3-6.2 - openSUSE 11.4 (i586 x86_64): java-1_6_0-openjdk-1.6.0.0_b24.1.11.3-0.11.2 java-1_6_0-openjdk-debuginfo-1.6.0.0_b24.1.11.3-0.11.2 java-1_6_0-openjdk-debugsource-1.6.0.0_b24.1.11.3-0.11.2 java-1_6_0-openjdk-demo-1.6.0.0_b24.1.11.3-0.11.2 java-1_6_0-openjdk-demo-debuginfo-1.6.0.0_b24.1.11.3-0.11.2 java-1_6_0-openjdk-devel-1.6.0.0_b24.1.11.3-0.11.2 java-1_6_0-openjdk-devel-debuginfo-1.6.0.0_b24.1.11.3-0.11.2 java-1_6_0-openjdk-javadoc-1.6.0.0_b24.1.11.3-0.11.2 java-1_6_0-openjdk-src-1.6.0.0_b24.1.11.3-0.11.2 References: http://support.novell.com/security/cve/CVE-2012-1711.html http://support.novell.com/security/cve/CVE-2012-1713.html http://support.novell.com/security/cve/CVE-2012-1716.html http://support.novell.com/security/cve/CVE-2012-1717.html http://support.novell.com/security/cve/CVE-2012-1718.html http://support.novell.com/security/cve/CVE-2012-1719.html http://support.novell.com/security/cve/CVE-2012-1723.html http://support.novell.com/security/cve/CVE-2012-1724.html http://support.novell.com/security/cve/CVE-2012-1725.html https://bugzilla.novell.com/766802 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:0814-1: important: Security update for cobbler
by opensuse-security＠opensuse.org 03 Jul '12

03 Jul '12

SUSE Security Update: Security update for cobbler ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0814-1 Rating: important References: #763610 Cross-References: CVE-2012-2395 Affected Products: SUSE Manager Client Tools for SLE 11 SP1 SUSE Manager 1.2 for SLE 11 SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update of cobbler fixes a remote code execution flaw which could have been exploited through cobbler's XMLRPC API (CVE-2012-2395). Security Issue references: * CVE-2012-2395 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2395 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Manager Client Tools for SLE 11 SP1: zypper in -t patch slesctsp1-cobbler-6378 - SUSE Manager 1.2 for SLE 11 SP1: zypper in -t patch sleman12sp1-cobbler-6378 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Manager Client Tools for SLE 11 SP1 (x86_64): koan-2.0.10-0.38.1 - SUSE Manager 1.2 for SLE 11 SP1 (x86_64): cobbler-2.0.10-0.38.1 References: http://support.novell.com/security/cve/CVE-2012-2395.html https://bugzilla.novell.com/763610 http://download.novell.com/patch/finder/?keywords=a80df9eb737ded8b7bd7a02f5… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0