August 2012 - openSUSE Security Announce

[security-announce] openSUSE-SU-2012:1065-1: critical: MozillaFirefox: Update to version 15
by opensuse-security＠opensuse.org 30 Aug '12

30 Aug '12

openSUSE Security Update: MozillaFirefox: Update to version 15 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1065-1 Rating: critical References: #777588 Cross-References: CVE-2012-1956 CVE-2012-1970 CVE-2012-1972 CVE-2012-1973 CVE-2012-1974 CVE-2012-1975 CVE-2012-1976 CVE-2012-3956 CVE-2012-3957 CVE-2012-3958 CVE-2012-3959 CVE-2012-3960 CVE-2012-3961 CVE-2012-3962 CVE-2012-3963 CVE-2012-3964 CVE-2012-3965 CVE-2012-3966 CVE-2012-3967 CVE-2012-3968 CVE-2012-3969 CVE-2012-3970 CVE-2012-3971 CVE-2012-3972 CVE-2012-3973 CVE-2012-3975 CVE-2012-3976 CVE-2012-3978 CVE-2012-3980 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that fixes 29 vulnerabilities is now available. Description: Mozilla Firefox, Thunderbird, xulrunner, seamonkey 15.0 update (bnc#777588) * MFSA 2012-57/CVE-2012-1970 Miscellaneous memory safety hazards * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1 975 CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE- 2012-3959 CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE- 2012-3964 Use-after-free issues found using Address Sanitizer * MFSA 2012-59/CVE-2012-1956 (bmo#756719) Location object can be shadowed using Object.defineProperty * MFSA 2012-60/CVE-2012-3965 (bmo#769108) Escalation of privilege through about:newtab * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793) Memory corruption with bitmap format images with negative height * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968 WebGL use-after-free and memory corruption * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970 SVG buffer overflow and use-after-free issues * MFSA 2012-64/CVE-2012-3971 Graphite 2 memory corruption * MFSA 2012-65/CVE-2012-3972 (bmo#746855) Out-of-bounds read in format-number in XSLT * MFSA 2012-66/CVE-2012-3973 (bmo#757128) HTTPMonitor extension allows for remote debugging without explicit activation * MFSA 2012-68/CVE-2012-3975 (bmo#770684) DOMParser loads linked resources in extensions when parsing text/html * MFSA 2012-69/CVE-2012-3976 (bmo#768568) Incorrect site SSL certificate data display * MFSA 2012-70/CVE-2012-3978 (bmo#770429) Location object security checks bypassed by chrome code * MFSA 2012-72/CVE-2012-3980 (bmo#771859) Web console eval capable of executing chrome-privileged code - fix HTML5 video crash with GStreamer enabled (bmo#761030) - GStreamer is only used for MP4 (no WebM, OGG) - updated filelist - moved browser specific preferences to correct location Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-538 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): MozillaFirefox-15.0-2.7.1 MozillaFirefox-branding-upstream-15.0-2.7.1 MozillaFirefox-buildsymbols-15.0-2.7.1 MozillaFirefox-debuginfo-15.0-2.7.1 MozillaFirefox-debugsource-15.0-2.7.1 MozillaFirefox-devel-15.0-2.7.1 MozillaFirefox-translations-common-15.0-2.7.1 MozillaFirefox-translations-other-15.0-2.7.1 MozillaThunderbird-15.0-49.9.1 MozillaThunderbird-buildsymbols-15.0-49.9.1 MozillaThunderbird-debuginfo-15.0-49.9.1 MozillaThunderbird-debugsource-15.0-49.9.1 MozillaThunderbird-devel-15.0-49.9.1 MozillaThunderbird-devel-debuginfo-15.0-49.9.1 MozillaThunderbird-translations-common-15.0-49.9.1 MozillaThunderbird-translations-other-15.0-49.9.1 enigmail-1.4.4+15.0-49.9.1 enigmail-debuginfo-1.4.4+15.0-49.9.1 libfreebl3-3.13.6-2.7.1 libfreebl3-debuginfo-3.13.6-2.7.1 libsoftokn3-3.13.6-2.7.1 libsoftokn3-debuginfo-3.13.6-2.7.1 mozilla-js-15.0-2.8.1 mozilla-js-debuginfo-15.0-2.8.1 mozilla-nss-3.13.6-2.7.1 mozilla-nss-certs-3.13.6-2.7.1 mozilla-nss-certs-debuginfo-3.13.6-2.7.1 mozilla-nss-debuginfo-3.13.6-2.7.1 mozilla-nss-debugsource-3.13.6-2.7.1 mozilla-nss-devel-3.13.6-2.7.1 mozilla-nss-sysinit-3.13.6-2.7.1 mozilla-nss-sysinit-debuginfo-3.13.6-2.7.1 mozilla-nss-tools-3.13.6-2.7.1 mozilla-nss-tools-debuginfo-3.13.6-2.7.1 seamonkey-2.12-2.8.1 seamonkey-debuginfo-2.12-2.8.1 seamonkey-debugsource-2.12-2.8.1 seamonkey-dom-inspector-2.12-2.8.1 seamonkey-irc-2.12-2.8.1 seamonkey-translations-common-2.12-2.8.1 seamonkey-translations-other-2.12-2.8.1 seamonkey-venkman-2.12-2.8.1 xulrunner-15.0-2.8.1 xulrunner-buildsymbols-15.0-2.8.1 xulrunner-debuginfo-15.0-2.8.1 xulrunner-debugsource-15.0-2.8.1 xulrunner-devel-15.0-2.8.1 xulrunner-devel-debuginfo-15.0-2.8.1 - openSUSE 12.2 (x86_64): libfreebl3-32bit-3.13.6-2.7.1 libfreebl3-debuginfo-32bit-3.13.6-2.7.1 libsoftokn3-32bit-3.13.6-2.7.1 libsoftokn3-debuginfo-32bit-3.13.6-2.7.1 mozilla-js-32bit-15.0-2.8.1 mozilla-js-debuginfo-32bit-15.0-2.8.1 mozilla-nss-32bit-3.13.6-2.7.1 mozilla-nss-certs-32bit-3.13.6-2.7.1 mozilla-nss-certs-debuginfo-32bit-3.13.6-2.7.1 mozilla-nss-debuginfo-32bit-3.13.6-2.7.1 mozilla-nss-sysinit-32bit-3.13.6-2.7.1 mozilla-nss-sysinit-debuginfo-32bit-3.13.6-2.7.1 xulrunner-32bit-15.0-2.8.1 xulrunner-debuginfo-32bit-15.0-2.8.1 References: http://support.novell.com/security/cve/CVE-2012-1956.html http://support.novell.com/security/cve/CVE-2012-1970.html http://support.novell.com/security/cve/CVE-2012-1972.html http://support.novell.com/security/cve/CVE-2012-1973.html http://support.novell.com/security/cve/CVE-2012-1974.html http://support.novell.com/security/cve/CVE-2012-1975.html http://support.novell.com/security/cve/CVE-2012-1976.html http://support.novell.com/security/cve/CVE-2012-3956.html http://support.novell.com/security/cve/CVE-2012-3957.html http://support.novell.com/security/cve/CVE-2012-3958.html http://support.novell.com/security/cve/CVE-2012-3959.html http://support.novell.com/security/cve/CVE-2012-3960.html http://support.novell.com/security/cve/CVE-2012-3961.html http://support.novell.com/security/cve/CVE-2012-3962.html http://support.novell.com/security/cve/CVE-2012-3963.html http://support.novell.com/security/cve/CVE-2012-3964.html http://support.novell.com/security/cve/CVE-2012-3965.html http://support.novell.com/security/cve/CVE-2012-3966.html http://support.novell.com/security/cve/CVE-2012-3967.html http://support.novell.com/security/cve/CVE-2012-3968.html http://support.novell.com/security/cve/CVE-2012-3969.html http://support.novell.com/security/cve/CVE-2012-3970.html http://support.novell.com/security/cve/CVE-2012-3971.html http://support.novell.com/security/cve/CVE-2012-3972.html http://support.novell.com/security/cve/CVE-2012-3973.html http://support.novell.com/security/cve/CVE-2012-3975.html http://support.novell.com/security/cve/CVE-2012-3976.html http://support.novell.com/security/cve/CVE-2012-3978.html http://support.novell.com/security/cve/CVE-2012-3980.html https://bugzilla.novell.com/777588 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2012:1064-1: critical: MozillaFirefox: Update to version 15
by opensuse-security＠opensuse.org 30 Aug '12

30 Aug '12

openSUSE Security Update: MozillaFirefox: Update to version 15 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1064-1 Rating: critical References: #777588 Cross-References: CVE-2012-1956 CVE-2012-1970 CVE-2012-1972 CVE-2012-1973 CVE-2012-1974 CVE-2012-1975 CVE-2012-1976 CVE-2012-3956 CVE-2012-3957 CVE-2012-3958 CVE-2012-3959 CVE-2012-3960 CVE-2012-3961 CVE-2012-3962 CVE-2012-3963 CVE-2012-3964 CVE-2012-3965 CVE-2012-3966 CVE-2012-3967 CVE-2012-3968 CVE-2012-3969 CVE-2012-3970 CVE-2012-3971 CVE-2012-3972 CVE-2012-3973 CVE-2012-3975 CVE-2012-3976 CVE-2012-3978 CVE-2012-3980 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes 29 vulnerabilities is now available. Description: Mozilla Firefox, Thunderbird, xulrunner, seamonkey 15.0 update (bnc#777588) * MFSA 2012-57/CVE-2012-1970 Miscellaneous memory safety hazards * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1 975 CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE- 2012-3959 CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE- 2012-3964 Use-after-free issues found using Address Sanitizer * MFSA 2012-59/CVE-2012-1956 (bmo#756719) Location object can be shadowed using Object.defineProperty * MFSA 2012-60/CVE-2012-3965 (bmo#769108) Escalation of privilege through about:newtab * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793) Memory corruption with bitmap format images with negative height * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968 WebGL use-after-free and memory corruption * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970 SVG buffer overflow and use-after-free issues * MFSA 2012-64/CVE-2012-3971 Graphite 2 memory corruption * MFSA 2012-65/CVE-2012-3972 (bmo#746855) Out-of-bounds read in format-number in XSLT * MFSA 2012-66/CVE-2012-3973 (bmo#757128) HTTPMonitor extension allows for remote debugging without explicit activation * MFSA 2012-68/CVE-2012-3975 (bmo#770684) DOMParser loads linked resources in extensions when parsing text/html * MFSA 2012-69/CVE-2012-3976 (bmo#768568) Incorrect site SSL certificate data display * MFSA 2012-70/CVE-2012-3978 (bmo#770429) Location object security checks bypassed by chrome code * MFSA 2012-72/CVE-2012-3980 (bmo#771859) Web console eval capable of executing chrome-privileged code - fix HTML5 video crash with GStreamer enabled (bmo#761030) - GStreamer is only used for MP4 (no WebM, OGG) - updated filelist - moved browser specific preferences to correct location Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-534 - openSUSE 11.4: zypper in -t patch openSUSE-2012-534 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): MozillaFirefox-15.0-2.36.1 MozillaFirefox-branding-upstream-15.0-2.36.1 MozillaFirefox-buildsymbols-15.0-2.36.1 MozillaFirefox-debuginfo-15.0-2.36.1 MozillaFirefox-debugsource-15.0-2.36.1 MozillaFirefox-devel-15.0-2.36.1 MozillaFirefox-translations-common-15.0-2.36.1 MozillaFirefox-translations-other-15.0-2.36.1 MozillaThunderbird-15.0-33.29.1 MozillaThunderbird-buildsymbols-15.0-33.29.1 MozillaThunderbird-debuginfo-15.0-33.29.1 MozillaThunderbird-debugsource-15.0-33.29.1 MozillaThunderbird-devel-15.0-33.29.1 MozillaThunderbird-devel-debuginfo-15.0-33.29.1 MozillaThunderbird-translations-common-15.0-33.29.1 MozillaThunderbird-translations-other-15.0-33.29.1 enigmail-1.4.4+15.0-33.29.1 enigmail-debuginfo-1.4.4+15.0-33.29.1 libfreebl3-3.13.6-9.17.1 libfreebl3-debuginfo-3.13.6-9.17.1 libsoftokn3-3.13.6-9.17.1 libsoftokn3-debuginfo-3.13.6-9.17.1 mozilla-js-15.0-2.35.1 mozilla-js-debuginfo-15.0-2.35.1 mozilla-nspr-4.9.2-3.6.1 mozilla-nspr-debuginfo-4.9.2-3.6.1 mozilla-nspr-debugsource-4.9.2-3.6.1 mozilla-nspr-devel-4.9.2-3.6.1 mozilla-nss-3.13.6-9.17.1 mozilla-nss-certs-3.13.6-9.17.1 mozilla-nss-certs-debuginfo-3.13.6-9.17.1 mozilla-nss-debuginfo-3.13.6-9.17.1 mozilla-nss-debugsource-3.13.6-9.17.1 mozilla-nss-devel-3.13.6-9.17.1 mozilla-nss-sysinit-3.13.6-9.17.1 mozilla-nss-sysinit-debuginfo-3.13.6-9.17.1 mozilla-nss-tools-3.13.6-9.17.1 mozilla-nss-tools-debuginfo-3.13.6-9.17.1 seamonkey-2.12-2.27.1 seamonkey-debuginfo-2.12-2.27.1 seamonkey-debugsource-2.12-2.27.1 seamonkey-dom-inspector-2.12-2.27.1 seamonkey-irc-2.12-2.27.1 seamonkey-translations-common-2.12-2.27.1 seamonkey-translations-other-2.12-2.27.1 seamonkey-venkman-2.12-2.27.1 xulrunner-15.0-2.35.1 xulrunner-buildsymbols-15.0-2.35.1 xulrunner-debuginfo-15.0-2.35.1 xulrunner-debugsource-15.0-2.35.1 xulrunner-devel-15.0-2.35.1 xulrunner-devel-debuginfo-15.0-2.35.1 - openSUSE 12.1 (x86_64): libfreebl3-32bit-3.13.6-9.17.1 libfreebl3-debuginfo-32bit-3.13.6-9.17.1 libsoftokn3-32bit-3.13.6-9.17.1 libsoftokn3-debuginfo-32bit-3.13.6-9.17.1 mozilla-js-32bit-15.0-2.35.1 mozilla-js-debuginfo-32bit-15.0-2.35.1 mozilla-nspr-32bit-4.9.2-3.6.1 mozilla-nspr-debuginfo-32bit-4.9.2-3.6.1 mozilla-nss-32bit-3.13.6-9.17.1 mozilla-nss-certs-32bit-3.13.6-9.17.1 mozilla-nss-certs-debuginfo-32bit-3.13.6-9.17.1 mozilla-nss-debuginfo-32bit-3.13.6-9.17.1 mozilla-nss-sysinit-32bit-3.13.6-9.17.1 mozilla-nss-sysinit-debuginfo-32bit-3.13.6-9.17.1 xulrunner-32bit-15.0-2.35.1 xulrunner-debuginfo-32bit-15.0-2.35.1 - openSUSE 12.1 (ia64): libfreebl3-debuginfo-x86-3.13.6-9.17.1 libfreebl3-x86-3.13.6-9.17.1 libsoftokn3-debuginfo-x86-3.13.6-9.17.1 libsoftokn3-x86-3.13.6-9.17.1 mozilla-js-debuginfo-x86-15.0-2.35.1 mozilla-js-x86-15.0-2.35.1 mozilla-nspr-debuginfo-x86-4.9.2-3.6.1 mozilla-nspr-x86-4.9.2-3.6.1 mozilla-nss-certs-debuginfo-x86-3.13.6-9.17.1 mozilla-nss-certs-x86-3.13.6-9.17.1 mozilla-nss-debuginfo-x86-3.13.6-9.17.1 mozilla-nss-sysinit-debuginfo-x86-3.13.6-9.17.1 mozilla-nss-sysinit-x86-3.13.6-9.17.1 mozilla-nss-x86-3.13.6-9.17.1 xulrunner-debuginfo-x86-15.0-2.35.1 xulrunner-x86-15.0-2.35.1 - openSUSE 11.4 (i586 x86_64): MozillaFirefox-15.0-31.1 MozillaFirefox-branding-upstream-15.0-31.1 MozillaFirefox-buildsymbols-15.0-31.1 MozillaFirefox-debuginfo-15.0-31.1 MozillaFirefox-debugsource-15.0-31.1 MozillaFirefox-devel-15.0-31.1 MozillaFirefox-translations-common-15.0-31.1 MozillaFirefox-translations-other-15.0-31.1 MozillaThunderbird-15.0-27.1 MozillaThunderbird-buildsymbols-15.0-27.1 MozillaThunderbird-debuginfo-15.0-27.1 MozillaThunderbird-debugsource-15.0-27.1 MozillaThunderbird-devel-15.0-27.1 MozillaThunderbird-devel-debuginfo-15.0-27.1 MozillaThunderbird-translations-common-15.0-27.1 MozillaThunderbird-translations-other-15.0-27.1 enigmail-1.4.4+15.0-27.1 enigmail-debuginfo-1.4.4+15.0-27.1 libfreebl3-3.13.6-47.1 libfreebl3-debuginfo-3.13.6-47.1 libsoftokn3-3.13.6-47.1 libsoftokn3-debuginfo-3.13.6-47.1 mozilla-nspr-4.9.2-16.1 mozilla-nspr-debuginfo-4.9.2-16.1 mozilla-nspr-debugsource-4.9.2-16.1 mozilla-nspr-devel-4.9.2-16.1 mozilla-nss-3.13.6-47.1 mozilla-nss-certs-3.13.6-47.1 mozilla-nss-certs-debuginfo-3.13.6-47.1 mozilla-nss-debuginfo-3.13.6-47.1 mozilla-nss-debugsource-3.13.6-47.1 mozilla-nss-devel-3.13.6-47.1 mozilla-nss-sysinit-3.13.6-47.1 mozilla-nss-sysinit-debuginfo-3.13.6-47.1 mozilla-nss-tools-3.13.6-47.1 mozilla-nss-tools-debuginfo-3.13.6-47.1 seamonkey-2.12-27.1 seamonkey-debuginfo-2.12-27.1 seamonkey-debugsource-2.12-27.1 seamonkey-dom-inspector-2.12-27.1 seamonkey-irc-2.12-27.1 seamonkey-translations-common-2.12-27.1 seamonkey-translations-other-2.12-27.1 seamonkey-venkman-2.12-27.1 - openSUSE 11.4 (x86_64): libfreebl3-32bit-3.13.6-47.1 libfreebl3-debuginfo-32bit-3.13.6-47.1 libsoftokn3-32bit-3.13.6-47.1 libsoftokn3-debuginfo-32bit-3.13.6-47.1 mozilla-nspr-32bit-4.9.2-16.1 mozilla-nspr-debuginfo-32bit-4.9.2-16.1 mozilla-nss-32bit-3.13.6-47.1 mozilla-nss-certs-32bit-3.13.6-47.1 mozilla-nss-certs-debuginfo-32bit-3.13.6-47.1 mozilla-nss-debuginfo-32bit-3.13.6-47.1 mozilla-nss-sysinit-32bit-3.13.6-47.1 mozilla-nss-sysinit-debuginfo-32bit-3.13.6-47.1 - openSUSE 11.4 (ia64): libfreebl3-debuginfo-x86-3.13.6-47.1 libfreebl3-x86-3.13.6-47.1 libsoftokn3-debuginfo-x86-3.13.6-47.1 libsoftokn3-x86-3.13.6-47.1 mozilla-nspr-debuginfo-x86-4.9.2-16.1 mozilla-nspr-x86-4.9.2-16.1 mozilla-nss-certs-debuginfo-x86-3.13.6-47.1 mozilla-nss-certs-x86-3.13.6-47.1 mozilla-nss-debuginfo-x86-3.13.6-47.1 mozilla-nss-sysinit-debuginfo-x86-3.13.6-47.1 mozilla-nss-sysinit-x86-3.13.6-47.1 mozilla-nss-x86-3.13.6-47.1 References: http://support.novell.com/security/cve/CVE-2012-1956.html http://support.novell.com/security/cve/CVE-2012-1970.html http://support.novell.com/security/cve/CVE-2012-1972.html http://support.novell.com/security/cve/CVE-2012-1973.html http://support.novell.com/security/cve/CVE-2012-1974.html http://support.novell.com/security/cve/CVE-2012-1975.html http://support.novell.com/security/cve/CVE-2012-1976.html http://support.novell.com/security/cve/CVE-2012-3956.html http://support.novell.com/security/cve/CVE-2012-3957.html http://support.novell.com/security/cve/CVE-2012-3958.html http://support.novell.com/security/cve/CVE-2012-3959.html http://support.novell.com/security/cve/CVE-2012-3960.html http://support.novell.com/security/cve/CVE-2012-3961.html http://support.novell.com/security/cve/CVE-2012-3962.html http://support.novell.com/security/cve/CVE-2012-3963.html http://support.novell.com/security/cve/CVE-2012-3964.html http://support.novell.com/security/cve/CVE-2012-3965.html http://support.novell.com/security/cve/CVE-2012-3966.html http://support.novell.com/security/cve/CVE-2012-3967.html http://support.novell.com/security/cve/CVE-2012-3968.html http://support.novell.com/security/cve/CVE-2012-3969.html http://support.novell.com/security/cve/CVE-2012-3970.html http://support.novell.com/security/cve/CVE-2012-3971.html http://support.novell.com/security/cve/CVE-2012-3972.html http://support.novell.com/security/cve/CVE-2012-3973.html http://support.novell.com/security/cve/CVE-2012-3975.html http://support.novell.com/security/cve/CVE-2012-3976.html http://support.novell.com/security/cve/CVE-2012-3978.html http://support.novell.com/security/cve/CVE-2012-3980.html https://bugzilla.novell.com/777588 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2012:1061-1: important: calligra: security and bugfix update.
by opensuse-security＠opensuse.org 30 Aug '12

30 Aug '12

openSUSE Security Update: calligra: security and bugfix update. ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1061-1 Rating: important References: #774534 Cross-References: CVE-2012-3456 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Fix buffer overflow in MS Word ODF filter among other non-security related bugs. Also a version update to 2.4.3 happened: * Words: - Always show vertical scroll bar to avoid race condition (kde#301076) - Do not save with an attribue that makes LibreOffice and OpenOffice crash (kde#298689 ) * Kexi: - Fixed import from csv when “Start at Line” value changed (kde#302209) - Set limit to 255 characters for Text type (VARCHAR) (kde#301277 and 301136) + - Remove limits for Text data type, leave as option (kde#301277) - Fixed data saving when focus policy for one of widgets is NoFocus (kde#301109) * Krita: - Read and set the resolution for psd images * Charts: - Fix load/save styles of all shapes (title,subtitle,axistitles,footer,etc.) - Lines in the chart should be displayed (kde#271771) - Combined Bar and Line Charts only show bars (Trendlines not supported) (kde#288537) - Load/save chart type for each dataset (kde#271771 and 288537) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-533 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): calligra-2.4.3-2.4.1 calligra-braindump-2.4.3-2.4.1 calligra-braindump-debuginfo-2.4.3-2.4.1 calligra-debuginfo-2.4.3-2.4.1 calligra-debugsource-2.4.3-2.4.1 calligra-devel-2.4.3-2.4.1 calligra-flow-2.4.3-2.4.1 calligra-flow-debuginfo-2.4.3-2.4.1 calligra-karbon-2.4.3-2.4.1 calligra-karbon-debuginfo-2.4.3-2.4.1 calligra-kexi-2.4.3-2.4.1 calligra-kexi-debuginfo-2.4.3-2.4.1 calligra-kexi-mssql-driver-2.4.3-2.4.1 calligra-kexi-mssql-driver-debuginfo-2.4.3-2.4.1 calligra-kexi-mysql-driver-2.4.3-2.4.1 calligra-kexi-mysql-driver-debuginfo-2.4.3-2.4.1 calligra-kexi-postgresql-driver-2.4.3-2.4.1 calligra-kexi-postgresql-driver-debuginfo-2.4.3-2.4.1 calligra-kexi-spreadsheet-import-2.4.3-2.4.1 calligra-kexi-spreadsheet-import-debuginfo-2.4.3-2.4.1 calligra-kexi-xbase-driver-2.4.3-2.4.1 calligra-kexi-xbase-driver-debuginfo-2.4.3-2.4.1 calligra-krita-2.4.3-2.4.1 calligra-krita-debuginfo-2.4.3-2.4.1 calligra-kthesaurus-2.4.3-2.4.1 calligra-kthesaurus-debuginfo-2.4.3-2.4.1 calligra-plan-2.4.3-2.4.1 calligra-plan-debuginfo-2.4.3-2.4.1 calligra-sheets-2.4.3-2.4.1 calligra-sheets-debuginfo-2.4.3-2.4.1 calligra-stage-2.4.3-2.4.1 calligra-stage-debuginfo-2.4.3-2.4.1 calligra-tools-2.4.3-2.4.1 calligra-tools-debuginfo-2.4.3-2.4.1 calligra-words-2.4.3-2.4.1 calligra-words-debuginfo-2.4.3-2.4.1 - openSUSE 12.2 (noarch): calligra-doc-2.4.3-2.4.1 References: http://support.novell.com/security/cve/CVE-2012-3456.html https://bugzilla.novell.com/774534 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:1044-1: important: Security update for Xen
by opensuse-security＠opensuse.org 27 Aug '12

27 Aug '12

SUSE Security Update: Security update for Xen ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:1044-1 Rating: important References: #744771 #746702 #762484 #762963 #773393 #773401 Cross-References: CVE-2012-2625 CVE-2012-3432 CVE-2012-3433 Affected Products: SUSE Linux Enterprise Software Development Kit 11 SP1 SUSE Linux Enterprise Server 11 SP1 for VMware SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Desktop 11 SP1 ______________________________________________________________________________ An update that solves three vulnerabilities and has three fixes is now available. It includes one version update. Description: Xen was updated to fix several security issues: * CVE-2012-3433: A xen HVM guest destroy p2m teardown host DoS vulnerability was fixed, where malicious guest could lock/crash the host. * CVE-2012-3432: A xen HVM guest user mode MMIO emulation DoS was fixed. * CVE-2012-2625: The xen pv bootloader doesn't check the size of the bzip2 or lzma compressed kernel, leading to denial of service (crash). Also the following bug in XEN was fixed: * bnc#746702 - Xen HVM DomU crash during Windows Server 2008 R2 install, when maxmem > memory This update also included bugfixes for: * vm-install: - bnc#762963 - ReaR: Unable to recover a paravirtualized XEN guest Security Issue references: * CVE-2012-3432 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3432 > * CVE-2012-3433 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3433 > * CVE-2012-2625 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2625 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11 SP1: zypper in -t patch sdksp1-xen-201208-6653 - SUSE Linux Enterprise Server 11 SP1 for VMware: zypper in -t patch slessp1-xen-201208-6653 - SUSE Linux Enterprise Server 11 SP1: zypper in -t patch slessp1-xen-201208-6653 - SUSE Linux Enterprise Desktop 11 SP1: zypper in -t patch sledsp1-xen-201208-6653 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11 SP1 (i586 x86_64): xen-devel-4.0.3_21548_08-0.7.1 - SUSE Linux Enterprise Server 11 SP1 for VMware (i586 x86_64): xen-kmp-trace-4.0.3_21548_08_2.6.32.59_0.7-0.7.1 - SUSE Linux Enterprise Server 11 SP1 (i586 x86_64) [New Version: 0.4.34]: vm-install-0.4.34-0.3.1 xen-4.0.3_21548_08-0.7.1 xen-doc-html-4.0.3_21548_08-0.7.1 xen-doc-pdf-4.0.3_21548_08-0.7.1 xen-kmp-default-4.0.3_21548_08_2.6.32.59_0.7-0.7.1 xen-kmp-trace-4.0.3_21548_08_2.6.32.59_0.7-0.7.1 xen-libs-4.0.3_21548_08-0.7.1 xen-tools-4.0.3_21548_08-0.7.1 xen-tools-domU-4.0.3_21548_08-0.7.1 - SUSE Linux Enterprise Server 11 SP1 (i586): xen-kmp-pae-4.0.3_21548_08_2.6.32.59_0.7-0.7.1 - SUSE Linux Enterprise Desktop 11 SP1 (i586 x86_64) [New Version: 0.4.34]: vm-install-0.4.34-0.3.1 xen-4.0.3_21548_08-0.7.1 xen-kmp-default-4.0.3_21548_08_2.6.32.59_0.7-0.7.1 xen-libs-4.0.3_21548_08-0.7.1 xen-tools-4.0.3_21548_08-0.7.1 xen-tools-domU-4.0.3_21548_08-0.7.1 - SUSE Linux Enterprise Desktop 11 SP1 (i586): xen-kmp-pae-4.0.3_21548_08_2.6.32.59_0.7-0.7.1 References: http://support.novell.com/security/cve/CVE-2012-2625.html http://support.novell.com/security/cve/CVE-2012-3432.html http://support.novell.com/security/cve/CVE-2012-3433.html https://bugzilla.novell.com/744771 https://bugzilla.novell.com/746702 https://bugzilla.novell.com/762484 https://bugzilla.novell.com/762963 https://bugzilla.novell.com/773393 https://bugzilla.novell.com/773401 http://download.novell.com/patch/finder/?keywords=872c7f98262a167c6598ea04d… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:1043-1: important: Security update for Xen and libvirt
by opensuse-security＠opensuse.org 27 Aug '12

27 Aug '12

SUSE Security Update: Security update for Xen and libvirt ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:1043-1 Rating: important References: #746702 #762484 #762963 #764982 #766283 #773393 #773401 #773955 Cross-References: CVE-2012-3432 Affected Products: SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Desktop 11 SP2 ______________________________________________________________________________ An update that solves one vulnerability and has 7 fixes is now available. It includes one version update. Description: Xen was updated to fix several security issues: * CVE-2012-3433: A xen HVM guest destroy p2m teardown host DoS vulnerability was fixed, where malicious guest could lock/crash the host. * CVE-2012-3432: A xen HVM guest user mode MMIO emulation DoS was fixed. * CVE-2012-2625: The xen pv bootloader doesn't check the size of the bzip2 or lzma compressed kernel, leading to denial of service (crash). Also the following bug in XEN has been fixed: * bnc#746702 - Xen HVM DomU crash during Windows Server 2008 R2 install, when maxmem > memory This update also included bugfixes for: * vm-install: - bnc#762963 - ReaR: Unable to recover a paravirtualized XEN guest * virt-manager - SLE11-SP2 ONLY * bnc#764982 - virt-manager fails to start after upgrade to SLES11 SP2 from SLES10 Security Issue reference: * CVE-2012-3432 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3432 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11 SP2: zypper in -t patch sdksp2-xen-201208-6640 - SUSE Linux Enterprise Server 11 SP2: zypper in -t patch slessp2-xen-201208-6640 - SUSE Linux Enterprise Desktop 11 SP2: zypper in -t patch sledsp2-xen-201208-6640 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11 SP2 (x86_64): libvirt-devel-0.9.6-0.21.3 libvirt-devel-32bit-0.9.6-0.21.3 xen-devel-4.1.2_20-0.5.2 - SUSE Linux Enterprise Server 11 SP2 (x86_64) [New Version: 0.5.10]: libvirt-0.9.6-0.21.3 libvirt-client-0.9.6-0.21.3 libvirt-client-32bit-0.9.6-0.21.3 libvirt-doc-0.9.6-0.21.3 libvirt-python-0.9.6-0.21.3 virt-manager-0.9.0-3.19.1 vm-install-0.5.10-0.5.1 xen-4.1.2_20-0.5.2 xen-doc-html-4.1.2_20-0.5.2 xen-doc-pdf-4.1.2_20-0.5.2 xen-kmp-default-4.1.2_20_3.0.38_0.5-0.5.2 xen-kmp-trace-4.1.2_20_3.0.38_0.5-0.5.2 xen-libs-32bit-4.1.2_20-0.5.2 xen-libs-4.1.2_20-0.5.2 xen-tools-4.1.2_20-0.5.2 xen-tools-domU-4.1.2_20-0.5.2 - SUSE Linux Enterprise Desktop 11 SP2 (x86_64) [New Version: 0.5.10]: libvirt-0.9.6-0.21.3 libvirt-client-0.9.6-0.21.3 libvirt-client-32bit-0.9.6-0.21.3 libvirt-doc-0.9.6-0.21.3 libvirt-python-0.9.6-0.21.3 virt-manager-0.9.0-3.19.1 vm-install-0.5.10-0.5.1 xen-4.1.2_20-0.5.2 xen-doc-html-4.1.2_20-0.5.2 xen-doc-pdf-4.1.2_20-0.5.2 xen-kmp-default-4.1.2_20_3.0.38_0.5-0.5.2 xen-kmp-trace-4.1.2_20_3.0.38_0.5-0.5.2 xen-libs-32bit-4.1.2_20-0.5.2 xen-libs-4.1.2_20-0.5.2 xen-tools-4.1.2_20-0.5.2 xen-tools-domU-4.1.2_20-0.5.2 References: http://support.novell.com/security/cve/CVE-2012-3432.html https://bugzilla.novell.com/746702 https://bugzilla.novell.com/762484 https://bugzilla.novell.com/762963 https://bugzilla.novell.com/764982 https://bugzilla.novell.com/766283 https://bugzilla.novell.com/773393 https://bugzilla.novell.com/773401 https://bugzilla.novell.com/773955 http://download.novell.com/patch/finder/?keywords=6aa25504d39edb169f3b6d3e1… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:1038-1: important: Security update for gimp
by opensuse-security＠opensuse.org 24 Aug '12

24 Aug '12

SUSE Security Update: Security update for gimp ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:1038-1 Rating: important References: #724628 Cross-References: CVE-2012-3481 Affected Products: SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP1 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP1 SUSE Linux Enterprise Desktop 10 SP4 SLE SDK 10 SP4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update of The Gimp fixes a heap overflow that could have been exploited by attackers to cause a Denial of Service (application crash) or to potentially execute arbitrary code (CVE-2012-3481). Security Issue reference: * CVE-2012-3481 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3481 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11 SP2: zypper in -t patch sdksp1-gimp-6712 - SUSE Linux Enterprise Software Development Kit 11 SP1: zypper in -t patch sdksp1-gimp-6712 - SUSE Linux Enterprise Desktop 11 SP2: zypper in -t patch sledsp1-gimp-6712 - SUSE Linux Enterprise Desktop 11 SP1: zypper in -t patch sledsp1-gimp-6712 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11 SP2 (i586 ia64 ppc64 s390x x86_64): gimp-2.6.2-3.34.39.1 gimp-devel-2.6.2-3.34.39.1 gimp-lang-2.6.2-3.34.39.1 gimp-plugins-python-2.6.2-3.34.39.1 - SUSE Linux Enterprise Software Development Kit 11 SP1 (i586 ia64 ppc64 s390x x86_64): gimp-2.6.2-3.34.39.1 gimp-devel-2.6.2-3.34.39.1 gimp-lang-2.6.2-3.34.39.1 gimp-plugins-python-2.6.2-3.34.39.1 - SUSE Linux Enterprise Desktop 11 SP2 (i586 x86_64): gimp-2.6.2-3.34.39.1 gimp-lang-2.6.2-3.34.39.1 gimp-plugins-python-2.6.2-3.34.39.1 - SUSE Linux Enterprise Desktop 11 SP1 (i586 x86_64): gimp-2.6.2-3.34.39.1 gimp-lang-2.6.2-3.34.39.1 gimp-plugins-python-2.6.2-3.34.39.1 - SUSE Linux Enterprise Desktop 10 SP4 (i586 x86_64): gimp-2.2.10-22.46.1 gimp-devel-2.2.10-22.46.1 - SLE SDK 10 SP4 (i586 ia64 ppc s390x x86_64): gimp-2.2.10-22.46.1 gimp-devel-2.2.10-22.46.1 References: http://support.novell.com/security/cve/CVE-2012-3481.html https://bugzilla.novell.com/724628 http://download.novell.com/patch/finder/?keywords=12c9a930398cff75c99abf194… http://download.novell.com/patch/finder/?keywords=e035e67d5f659aef60e434860… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:1034-1: important: Security update for php5
by opensuse-security＠opensuse.org 24 Aug '12

24 Aug '12

SUSE Security Update: Security update for php5 ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:1034-1 Rating: important References: #772580 #772582 Cross-References: CVE-2012-2688 CVE-2012-3365 Affected Products: SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP1 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP1 for VMware SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server 10 SP4 SLE SDK 10 SP4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. It includes one version update. Description: This update fixes two security issues of PHP5: * Potential overflow in _php_stream_scandir. (CVE-2012-2688 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2688 > ) * open_basedir bypass via SQLite extension. (CVE-2012-3365 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3365 > ) Indications: Everyone using PHP5 should update.. Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11 SP2: zypper in -t patch sdksp1-apache2-mod_php5-6627 - SUSE Linux Enterprise Software Development Kit 11 SP1: zypper in -t patch sdksp1-apache2-mod_php5-6627 - SUSE Linux Enterprise Server 11 SP2: zypper in -t patch slessp1-apache2-mod_php5-6627 - SUSE Linux Enterprise Server 11 SP1 for VMware: zypper in -t patch slessp1-apache2-mod_php5-6627 - SUSE Linux Enterprise Server 11 SP1: zypper in -t patch slessp1-apache2-mod_php5-6627 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11 SP2 (i586 ia64 ppc64 s390x x86_64) [New Version: 5.2.14]: php5-devel-5.2.14-0.7.30.42.1 php5-imap-5.2.14-0.7.30.42.1 php5-ncurses-5.2.14-0.7.30.42.1 php5-posix-5.2.14-0.7.30.42.1 php5-readline-5.2.14-0.7.30.42.1 php5-sockets-5.2.14-0.7.30.42.1 php5-sqlite-5.2.14-0.7.30.42.1 php5-tidy-5.2.14-0.7.30.42.1 - SUSE Linux Enterprise Software Development Kit 11 SP2 (i586 x86_64) [New Version: 5.2.14]: apache2-mod_php5-5.2.14-0.7.30.42.1 php5-5.2.14-0.7.30.42.1 php5-bcmath-5.2.14-0.7.30.42.1 php5-bz2-5.2.14-0.7.30.42.1 php5-calendar-5.2.14-0.7.30.42.1 php5-ctype-5.2.14-0.7.30.42.1 php5-curl-5.2.14-0.7.30.42.1 php5-dba-5.2.14-0.7.30.42.1 php5-dbase-5.2.14-0.7.30.42.1 php5-dom-5.2.14-0.7.30.42.1 php5-exif-5.2.14-0.7.30.42.1 php5-fastcgi-5.2.14-0.7.30.42.1 php5-ftp-5.2.14-0.7.30.42.1 php5-gd-5.2.14-0.7.30.42.1 php5-gettext-5.2.14-0.7.30.42.1 php5-gmp-5.2.14-0.7.30.42.1 php5-hash-5.2.14-0.7.30.42.1 php5-iconv-5.2.14-0.7.30.42.1 php5-json-5.2.14-0.7.30.42.1 php5-ldap-5.2.14-0.7.30.42.1 php5-mbstring-5.2.14-0.7.30.42.1 php5-mcrypt-5.2.14-0.7.30.42.1 php5-mysql-5.2.14-0.7.30.42.1 php5-odbc-5.2.14-0.7.30.42.1 php5-openssl-5.2.14-0.7.30.42.1 php5-pcntl-5.2.14-0.7.30.42.1 php5-pdo-5.2.14-0.7.30.42.1 php5-pear-5.2.14-0.7.30.42.1 php5-pgsql-5.2.14-0.7.30.42.1 php5-pspell-5.2.14-0.7.30.42.1 php5-shmop-5.2.14-0.7.30.42.1 php5-snmp-5.2.14-0.7.30.42.1 php5-soap-5.2.14-0.7.30.42.1 php5-suhosin-5.2.14-0.7.30.42.1 php5-sysvmsg-5.2.14-0.7.30.42.1 php5-sysvsem-5.2.14-0.7.30.42.1 php5-sysvshm-5.2.14-0.7.30.42.1 php5-tokenizer-5.2.14-0.7.30.42.1 php5-wddx-5.2.14-0.7.30.42.1 php5-xmlreader-5.2.14-0.7.30.42.1 php5-xmlrpc-5.2.14-0.7.30.42.1 php5-xmlwriter-5.2.14-0.7.30.42.1 php5-xsl-5.2.14-0.7.30.42.1 php5-zip-5.2.14-0.7.30.42.1 php5-zlib-5.2.14-0.7.30.42.1 - SUSE Linux Enterprise Software Development Kit 11 SP1 (i586 ia64 ppc64 s390x x86_64) [New Version: 5.2.14]: php5-devel-5.2.14-0.7.30.42.1 php5-imap-5.2.14-0.7.30.42.1 php5-ncurses-5.2.14-0.7.30.42.1 php5-posix-5.2.14-0.7.30.42.1 php5-readline-5.2.14-0.7.30.42.1 php5-sockets-5.2.14-0.7.30.42.1 php5-sqlite-5.2.14-0.7.30.42.1 php5-tidy-5.2.14-0.7.30.42.1 - SUSE Linux Enterprise Software Development Kit 11 SP1 (i586 x86_64) [New Version: 5.2.14]: apache2-mod_php5-5.2.14-0.7.30.42.1 php5-5.2.14-0.7.30.42.1 php5-bcmath-5.2.14-0.7.30.42.1 php5-bz2-5.2.14-0.7.30.42.1 php5-calendar-5.2.14-0.7.30.42.1 php5-ctype-5.2.14-0.7.30.42.1 php5-curl-5.2.14-0.7.30.42.1 php5-dba-5.2.14-0.7.30.42.1 php5-dbase-5.2.14-0.7.30.42.1 php5-dom-5.2.14-0.7.30.42.1 php5-exif-5.2.14-0.7.30.42.1 php5-fastcgi-5.2.14-0.7.30.42.1 php5-ftp-5.2.14-0.7.30.42.1 php5-gd-5.2.14-0.7.30.42.1 php5-gettext-5.2.14-0.7.30.42.1 php5-gmp-5.2.14-0.7.30.42.1 php5-hash-5.2.14-0.7.30.42.1 php5-iconv-5.2.14-0.7.30.42.1 php5-json-5.2.14-0.7.30.42.1 php5-ldap-5.2.14-0.7.30.42.1 php5-mbstring-5.2.14-0.7.30.42.1 php5-mcrypt-5.2.14-0.7.30.42.1 php5-mysql-5.2.14-0.7.30.42.1 php5-odbc-5.2.14-0.7.30.42.1 php5-openssl-5.2.14-0.7.30.42.1 php5-pcntl-5.2.14-0.7.30.42.1 php5-pdo-5.2.14-0.7.30.42.1 php5-pear-5.2.14-0.7.30.42.1 php5-pgsql-5.2.14-0.7.30.42.1 php5-pspell-5.2.14-0.7.30.42.1 php5-shmop-5.2.14-0.7.30.42.1 php5-snmp-5.2.14-0.7.30.42.1 php5-soap-5.2.14-0.7.30.42.1 php5-suhosin-5.2.14-0.7.30.42.1 php5-sysvmsg-5.2.14-0.7.30.42.1 php5-sysvsem-5.2.14-0.7.30.42.1 php5-sysvshm-5.2.14-0.7.30.42.1 php5-tokenizer-5.2.14-0.7.30.42.1 php5-wddx-5.2.14-0.7.30.42.1 php5-xmlreader-5.2.14-0.7.30.42.1 php5-xmlrpc-5.2.14-0.7.30.42.1 php5-xmlwriter-5.2.14-0.7.30.42.1 php5-xsl-5.2.14-0.7.30.42.1 php5-zip-5.2.14-0.7.30.42.1 php5-zlib-5.2.14-0.7.30.42.1 - SUSE Linux Enterprise Server 11 SP2 (i586 ia64 ppc64 s390x x86_64) [New Version: 5.2.14]: apache2-mod_php5-5.2.14-0.7.30.42.1 php5-5.2.14-0.7.30.42.1 php5-bcmath-5.2.14-0.7.30.42.1 php5-bz2-5.2.14-0.7.30.42.1 php5-calendar-5.2.14-0.7.30.42.1 php5-ctype-5.2.14-0.7.30.42.1 php5-curl-5.2.14-0.7.30.42.1 php5-dba-5.2.14-0.7.30.42.1 php5-dbase-5.2.14-0.7.30.42.1 php5-dom-5.2.14-0.7.30.42.1 php5-exif-5.2.14-0.7.30.42.1 php5-fastcgi-5.2.14-0.7.30.42.1 php5-ftp-5.2.14-0.7.30.42.1 php5-gd-5.2.14-0.7.30.42.1 php5-gettext-5.2.14-0.7.30.42.1 php5-gmp-5.2.14-0.7.30.42.1 php5-hash-5.2.14-0.7.30.42.1 php5-iconv-5.2.14-0.7.30.42.1 php5-json-5.2.14-0.7.30.42.1 php5-ldap-5.2.14-0.7.30.42.1 php5-mbstring-5.2.14-0.7.30.42.1 php5-mcrypt-5.2.14-0.7.30.42.1 php5-mysql-5.2.14-0.7.30.42.1 php5-odbc-5.2.14-0.7.30.42.1 php5-openssl-5.2.14-0.7.30.42.1 php5-pcntl-5.2.14-0.7.30.42.1 php5-pdo-5.2.14-0.7.30.42.1 php5-pear-5.2.14-0.7.30.42.1 php5-pgsql-5.2.14-0.7.30.42.1 php5-pspell-5.2.14-0.7.30.42.1 php5-shmop-5.2.14-0.7.30.42.1 php5-snmp-5.2.14-0.7.30.42.1 php5-soap-5.2.14-0.7.30.42.1 php5-suhosin-5.2.14-0.7.30.42.1 php5-sysvmsg-5.2.14-0.7.30.42.1 php5-sysvsem-5.2.14-0.7.30.42.1 php5-sysvshm-5.2.14-0.7.30.42.1 php5-tokenizer-5.2.14-0.7.30.42.1 php5-wddx-5.2.14-0.7.30.42.1 php5-xmlreader-5.2.14-0.7.30.42.1 php5-xmlrpc-5.2.14-0.7.30.42.1 php5-xmlwriter-5.2.14-0.7.30.42.1 php5-xsl-5.2.14-0.7.30.42.1 php5-zip-5.2.14-0.7.30.42.1 php5-zlib-5.2.14-0.7.30.42.1 - SUSE Linux Enterprise Server 11 SP1 for VMware (i586 x86_64) [New Version: 5.2.14]: apache2-mod_php5-5.2.14-0.7.30.42.1 php5-5.2.14-0.7.30.42.1 php5-bcmath-5.2.14-0.7.30.42.1 php5-bz2-5.2.14-0.7.30.42.1 php5-calendar-5.2.14-0.7.30.42.1 php5-ctype-5.2.14-0.7.30.42.1 php5-curl-5.2.14-0.7.30.42.1 php5-dba-5.2.14-0.7.30.42.1 php5-dbase-5.2.14-0.7.30.42.1 php5-dom-5.2.14-0.7.30.42.1 php5-exif-5.2.14-0.7.30.42.1 php5-fastcgi-5.2.14-0.7.30.42.1 php5-ftp-5.2.14-0.7.30.42.1 php5-gd-5.2.14-0.7.30.42.1 php5-gettext-5.2.14-0.7.30.42.1 php5-gmp-5.2.14-0.7.30.42.1 php5-hash-5.2.14-0.7.30.42.1 php5-iconv-5.2.14-0.7.30.42.1 php5-json-5.2.14-0.7.30.42.1 php5-ldap-5.2.14-0.7.30.42.1 php5-mbstring-5.2.14-0.7.30.42.1 php5-mcrypt-5.2.14-0.7.30.42.1 php5-mysql-5.2.14-0.7.30.42.1 php5-odbc-5.2.14-0.7.30.42.1 php5-openssl-5.2.14-0.7.30.42.1 php5-pcntl-5.2.14-0.7.30.42.1 php5-pdo-5.2.14-0.7.30.42.1 php5-pear-5.2.14-0.7.30.42.1 php5-pgsql-5.2.14-0.7.30.42.1 php5-pspell-5.2.14-0.7.30.42.1 php5-shmop-5.2.14-0.7.30.42.1 php5-snmp-5.2.14-0.7.30.42.1 php5-soap-5.2.14-0.7.30.42.1 php5-suhosin-5.2.14-0.7.30.42.1 php5-sysvmsg-5.2.14-0.7.30.42.1 php5-sysvsem-5.2.14-0.7.30.42.1 php5-sysvshm-5.2.14-0.7.30.42.1 php5-tokenizer-5.2.14-0.7.30.42.1 php5-wddx-5.2.14-0.7.30.42.1 php5-xmlreader-5.2.14-0.7.30.42.1 php5-xmlrpc-5.2.14-0.7.30.42.1 php5-xmlwriter-5.2.14-0.7.30.42.1 php5-xsl-5.2.14-0.7.30.42.1 php5-zip-5.2.14-0.7.30.42.1 php5-zlib-5.2.14-0.7.30.42.1 - SUSE Linux Enterprise Server 11 SP1 (i586 ia64 ppc64 s390x x86_64) [New Version: 5.2.14]: apache2-mod_php5-5.2.14-0.7.30.42.1 php5-5.2.14-0.7.30.42.1 php5-bcmath-5.2.14-0.7.30.42.1 php5-bz2-5.2.14-0.7.30.42.1 php5-calendar-5.2.14-0.7.30.42.1 php5-ctype-5.2.14-0.7.30.42.1 php5-curl-5.2.14-0.7.30.42.1 php5-dba-5.2.14-0.7.30.42.1 php5-dbase-5.2.14-0.7.30.42.1 php5-dom-5.2.14-0.7.30.42.1 php5-exif-5.2.14-0.7.30.42.1 php5-fastcgi-5.2.14-0.7.30.42.1 php5-ftp-5.2.14-0.7.30.42.1 php5-gd-5.2.14-0.7.30.42.1 php5-gettext-5.2.14-0.7.30.42.1 php5-gmp-5.2.14-0.7.30.42.1 php5-hash-5.2.14-0.7.30.42.1 php5-iconv-5.2.14-0.7.30.42.1 php5-json-5.2.14-0.7.30.42.1 php5-ldap-5.2.14-0.7.30.42.1 php5-mbstring-5.2.14-0.7.30.42.1 php5-mcrypt-5.2.14-0.7.30.42.1 php5-mysql-5.2.14-0.7.30.42.1 php5-odbc-5.2.14-0.7.30.42.1 php5-openssl-5.2.14-0.7.30.42.1 php5-pcntl-5.2.14-0.7.30.42.1 php5-pdo-5.2.14-0.7.30.42.1 php5-pear-5.2.14-0.7.30.42.1 php5-pgsql-5.2.14-0.7.30.42.1 php5-pspell-5.2.14-0.7.30.42.1 php5-shmop-5.2.14-0.7.30.42.1 php5-snmp-5.2.14-0.7.30.42.1 php5-soap-5.2.14-0.7.30.42.1 php5-suhosin-5.2.14-0.7.30.42.1 php5-sysvmsg-5.2.14-0.7.30.42.1 php5-sysvsem-5.2.14-0.7.30.42.1 php5-sysvshm-5.2.14-0.7.30.42.1 php5-tokenizer-5.2.14-0.7.30.42.1 php5-wddx-5.2.14-0.7.30.42.1 php5-xmlreader-5.2.14-0.7.30.42.1 php5-xmlrpc-5.2.14-0.7.30.42.1 php5-xmlwriter-5.2.14-0.7.30.42.1 php5-xsl-5.2.14-0.7.30.42.1 php5-zip-5.2.14-0.7.30.42.1 php5-zlib-5.2.14-0.7.30.42.1 - SUSE Linux Enterprise Server 10 SP4 (i586 ia64 ppc s390x x86_64): apache2-mod_php5-5.2.14-0.36.1 php5-5.2.14-0.36.1 php5-bcmath-5.2.14-0.36.1 php5-bz2-5.2.14-0.36.1 php5-calendar-5.2.14-0.36.1 php5-ctype-5.2.14-0.36.1 php5-curl-5.2.14-0.36.1 php5-dba-5.2.14-0.36.1 php5-dbase-5.2.14-0.36.1 php5-devel-5.2.14-0.36.1 php5-dom-5.2.14-0.36.1 php5-exif-5.2.14-0.36.1 php5-fastcgi-5.2.14-0.36.1 php5-ftp-5.2.14-0.36.1 php5-gd-5.2.14-0.36.1 php5-gettext-5.2.14-0.36.1 php5-gmp-5.2.14-0.36.1 php5-hash-5.2.14-0.36.1 php5-iconv-5.2.14-0.36.1 php5-imap-5.2.14-0.36.1 php5-json-5.2.14-0.36.1 php5-ldap-5.2.14-0.36.1 php5-mbstring-5.2.14-0.36.1 php5-mcrypt-5.2.14-0.36.1 php5-mhash-5.2.14-0.36.1 php5-mysql-5.2.14-0.36.1 php5-ncurses-5.2.14-0.36.1 php5-odbc-5.2.14-0.36.1 php5-openssl-5.2.14-0.36.1 php5-pcntl-5.2.14-0.36.1 php5-pdo-5.2.14-0.36.1 php5-pear-5.2.14-0.36.1 php5-pgsql-5.2.14-0.36.1 php5-posix-5.2.14-0.36.1 php5-pspell-5.2.14-0.36.1 php5-shmop-5.2.14-0.36.1 php5-snmp-5.2.14-0.36.1 php5-soap-5.2.14-0.36.1 php5-sockets-5.2.14-0.36.1 php5-sqlite-5.2.14-0.36.1 php5-suhosin-5.2.14-0.36.1 php5-sysvmsg-5.2.14-0.36.1 php5-sysvsem-5.2.14-0.36.1 php5-sysvshm-5.2.14-0.36.1 php5-tokenizer-5.2.14-0.36.1 php5-wddx-5.2.14-0.36.1 php5-xmlreader-5.2.14-0.36.1 php5-xmlrpc-5.2.14-0.36.1 php5-xsl-5.2.14-0.36.1 php5-zlib-5.2.14-0.36.1 - SLE SDK 10 SP4 (i586 ia64 ppc s390x x86_64): apache2-mod_php5-5.2.14-0.36.1 php5-5.2.14-0.36.1 php5-bcmath-5.2.14-0.36.1 php5-bz2-5.2.14-0.36.1 php5-calendar-5.2.14-0.36.1 php5-ctype-5.2.14-0.36.1 php5-curl-5.2.14-0.36.1 php5-dba-5.2.14-0.36.1 php5-dbase-5.2.14-0.36.1 php5-devel-5.2.14-0.36.1 php5-dom-5.2.14-0.36.1 php5-exif-5.2.14-0.36.1 php5-fastcgi-5.2.14-0.36.1 php5-ftp-5.2.14-0.36.1 php5-gd-5.2.14-0.36.1 php5-gettext-5.2.14-0.36.1 php5-gmp-5.2.14-0.36.1 php5-hash-5.2.14-0.36.1 php5-iconv-5.2.14-0.36.1 php5-imap-5.2.14-0.36.1 php5-ldap-5.2.14-0.36.1 php5-mbstring-5.2.14-0.36.1 php5-mcrypt-5.2.14-0.36.1 php5-mhash-5.2.14-0.36.1 php5-mysql-5.2.14-0.36.1 php5-ncurses-5.2.14-0.36.1 php5-odbc-5.2.14-0.36.1 php5-openssl-5.2.14-0.36.1 php5-pcntl-5.2.14-0.36.1 php5-pdo-5.2.14-0.36.1 php5-pear-5.2.14-0.36.1 php5-pgsql-5.2.14-0.36.1 php5-posix-5.2.14-0.36.1 php5-pspell-5.2.14-0.36.1 php5-shmop-5.2.14-0.36.1 php5-snmp-5.2.14-0.36.1 php5-soap-5.2.14-0.36.1 php5-sockets-5.2.14-0.36.1 php5-sqlite-5.2.14-0.36.1 php5-suhosin-5.2.14-0.36.1 php5-sysvmsg-5.2.14-0.36.1 php5-sysvsem-5.2.14-0.36.1 php5-sysvshm-5.2.14-0.36.1 php5-tidy-5.2.14-0.36.1 php5-tokenizer-5.2.14-0.36.1 php5-wddx-5.2.14-0.36.1 php5-xmlreader-5.2.14-0.36.1 php5-xmlrpc-5.2.14-0.36.1 php5-xsl-5.2.14-0.36.1 php5-zlib-5.2.14-0.36.1 References: http://support.novell.com/security/cve/CVE-2012-2688.html http://support.novell.com/security/cve/CVE-2012-3365.html https://bugzilla.novell.com/772580 https://bugzilla.novell.com/772582 http://download.novell.com/patch/finder/?keywords=f1cb3933c34c88daac7ac3933… http://download.novell.com/patch/finder/?keywords=fc638212971731cdbc6514110… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:1033-1: important: Security update for PHP5
by opensuse-security＠opensuse.org 24 Aug '12

24 Aug '12

SUSE Security Update: Security update for PHP5 ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:1033-1 Rating: important References: #769785 #772580 #772582 Cross-References: CVE-2012-2688 CVE-2012-3365 Affected Products: SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Server 11 SP2 for VMware SUSE Linux Enterprise Server 11 SP2 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: Three security bugs have been fixed in PHP5. * CVE-2012-2688: php5: potential overflow in _php_stream_scandir * CVE-2012-3365: open_basedir bypass via SQLite extension * CVE-2012-3450: An out of band read sql denial of service has been fixed (bnc#769785) Security Issue reference: * CVE-2012-2688 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2688 > * CVE-2012-3365 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3365 > * CVE-2012-3450 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3450 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11 SP2: zypper in -t patch sdksp2-apache2-mod_php53-6634 - SUSE Linux Enterprise Server 11 SP2 for VMware: zypper in -t patch slessp2-apache2-mod_php53-6634 - SUSE Linux Enterprise Server 11 SP2: zypper in -t patch slessp2-apache2-mod_php53-6634 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11 SP2 (i586 ia64 ppc64 s390x x86_64): php53-devel-5.3.8-0.35.1 php53-imap-5.3.8-0.35.1 php53-posix-5.3.8-0.35.1 php53-readline-5.3.8-0.35.1 php53-sockets-5.3.8-0.35.1 php53-sqlite-5.3.8-0.35.1 php53-tidy-5.3.8-0.35.1 - SUSE Linux Enterprise Server 11 SP2 for VMware (i586 x86_64): apache2-mod_php53-5.3.8-0.35.1 php53-5.3.8-0.35.1 php53-bcmath-5.3.8-0.35.1 php53-bz2-5.3.8-0.35.1 php53-calendar-5.3.8-0.35.1 php53-ctype-5.3.8-0.35.1 php53-curl-5.3.8-0.35.1 php53-dba-5.3.8-0.35.1 php53-dom-5.3.8-0.35.1 php53-exif-5.3.8-0.35.1 php53-fastcgi-5.3.8-0.35.1 php53-fileinfo-5.3.8-0.35.1 php53-ftp-5.3.8-0.35.1 php53-gd-5.3.8-0.35.1 php53-gettext-5.3.8-0.35.1 php53-gmp-5.3.8-0.35.1 php53-iconv-5.3.8-0.35.1 php53-intl-5.3.8-0.35.1 php53-json-5.3.8-0.35.1 php53-ldap-5.3.8-0.35.1 php53-mbstring-5.3.8-0.35.1 php53-mcrypt-5.3.8-0.35.1 php53-mysql-5.3.8-0.35.1 php53-odbc-5.3.8-0.35.1 php53-openssl-5.3.8-0.35.1 php53-pcntl-5.3.8-0.35.1 php53-pdo-5.3.8-0.35.1 php53-pear-5.3.8-0.35.1 php53-pgsql-5.3.8-0.35.1 php53-pspell-5.3.8-0.35.1 php53-shmop-5.3.8-0.35.1 php53-snmp-5.3.8-0.35.1 php53-soap-5.3.8-0.35.1 php53-suhosin-5.3.8-0.35.1 php53-sysvmsg-5.3.8-0.35.1 php53-sysvsem-5.3.8-0.35.1 php53-sysvshm-5.3.8-0.35.1 php53-tokenizer-5.3.8-0.35.1 php53-wddx-5.3.8-0.35.1 php53-xmlreader-5.3.8-0.35.1 php53-xmlrpc-5.3.8-0.35.1 php53-xmlwriter-5.3.8-0.35.1 php53-xsl-5.3.8-0.35.1 php53-zip-5.3.8-0.35.1 php53-zlib-5.3.8-0.35.1 - SUSE Linux Enterprise Server 11 SP2 (i586 ia64 ppc64 s390x x86_64): apache2-mod_php53-5.3.8-0.35.1 php53-5.3.8-0.35.1 php53-bcmath-5.3.8-0.35.1 php53-bz2-5.3.8-0.35.1 php53-calendar-5.3.8-0.35.1 php53-ctype-5.3.8-0.35.1 php53-curl-5.3.8-0.35.1 php53-dba-5.3.8-0.35.1 php53-dom-5.3.8-0.35.1 php53-exif-5.3.8-0.35.1 php53-fastcgi-5.3.8-0.35.1 php53-fileinfo-5.3.8-0.35.1 php53-ftp-5.3.8-0.35.1 php53-gd-5.3.8-0.35.1 php53-gettext-5.3.8-0.35.1 php53-gmp-5.3.8-0.35.1 php53-iconv-5.3.8-0.35.1 php53-intl-5.3.8-0.35.1 php53-json-5.3.8-0.35.1 php53-ldap-5.3.8-0.35.1 php53-mbstring-5.3.8-0.35.1 php53-mcrypt-5.3.8-0.35.1 php53-mysql-5.3.8-0.35.1 php53-odbc-5.3.8-0.35.1 php53-openssl-5.3.8-0.35.1 php53-pcntl-5.3.8-0.35.1 php53-pdo-5.3.8-0.35.1 php53-pear-5.3.8-0.35.1 php53-pgsql-5.3.8-0.35.1 php53-pspell-5.3.8-0.35.1 php53-shmop-5.3.8-0.35.1 php53-snmp-5.3.8-0.35.1 php53-soap-5.3.8-0.35.1 php53-suhosin-5.3.8-0.35.1 php53-sysvmsg-5.3.8-0.35.1 php53-sysvsem-5.3.8-0.35.1 php53-sysvshm-5.3.8-0.35.1 php53-tokenizer-5.3.8-0.35.1 php53-wddx-5.3.8-0.35.1 php53-xmlreader-5.3.8-0.35.1 php53-xmlrpc-5.3.8-0.35.1 php53-xmlwriter-5.3.8-0.35.1 php53-xsl-5.3.8-0.35.1 php53-zip-5.3.8-0.35.1 php53-zlib-5.3.8-0.35.1 References: http://support.novell.com/security/cve/CVE-2012-2688.html http://support.novell.com/security/cve/CVE-2012-3365.html https://bugzilla.novell.com/769785 https://bugzilla.novell.com/772580 https://bugzilla.novell.com/772582 http://download.novell.com/patch/finder/?keywords=420b5b682c991063fad653127… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:1029-1: important: Security update for gimp
by opensuse-security＠opensuse.org 23 Aug '12

23 Aug '12

SUSE Security Update: Security update for gimp ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:1029-1 Rating: important References: #775433 Cross-References: CVE-2012-3403 Affected Products: SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP1 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update of The Gimp fixes a heap overflow that could have been exploited by attackers to cause a Denial of Service (application crash) or even to potentially execute arbitrary code (CVE-2012-3403). Security Issue reference: * CVE-2012-3403 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3403 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11 SP2: zypper in -t patch sdksp1-gimp-6683 - SUSE Linux Enterprise Software Development Kit 11 SP1: zypper in -t patch sdksp1-gimp-6683 - SUSE Linux Enterprise Desktop 11 SP2: zypper in -t patch sledsp1-gimp-6683 - SUSE Linux Enterprise Desktop 11 SP1: zypper in -t patch sledsp1-gimp-6683 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11 SP2 (i586 ia64 ppc64 s390x x86_64): gimp-2.6.2-3.34.37.1 gimp-devel-2.6.2-3.34.37.1 gimp-lang-2.6.2-3.34.37.1 gimp-plugins-python-2.6.2-3.34.37.1 - SUSE Linux Enterprise Software Development Kit 11 SP1 (i586 ia64 ppc64 s390x x86_64): gimp-2.6.2-3.34.37.1 gimp-devel-2.6.2-3.34.37.1 gimp-lang-2.6.2-3.34.37.1 gimp-plugins-python-2.6.2-3.34.37.1 - SUSE Linux Enterprise Desktop 11 SP2 (i586 x86_64): gimp-2.6.2-3.34.37.1 gimp-lang-2.6.2-3.34.37.1 gimp-plugins-python-2.6.2-3.34.37.1 - SUSE Linux Enterprise Desktop 11 SP1 (i586 x86_64): gimp-2.6.2-3.34.37.1 gimp-lang-2.6.2-3.34.37.1 gimp-plugins-python-2.6.2-3.34.37.1 References: http://support.novell.com/security/cve/CVE-2012-3403.html https://bugzilla.novell.com/775433 http://download.novell.com/patch/finder/?keywords=ca4c519bd6348192da66901f8… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:1027-1: important: Security update for gimp
by opensuse-security＠opensuse.org 23 Aug '12

23 Aug '12

SUSE Security Update: Security update for gimp ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:1027-1 Rating: important References: #775429 Cross-References: CVE-2012-3403 Affected Products: SUSE Linux Enterprise Desktop 10 SP4 SLE SDK 10 SP4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update of The Gimp fixes a heap overflow that could have been exploited by attackers to cause a Denial of Service (application crash) or even to potentially execute arbitrary code (CVE-2012-3402). Security Issue reference: * CVE-2012-3403 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3403 > Package List: - SUSE Linux Enterprise Desktop 10 SP4 (i586 x86_64): gimp-2.2.10-22.44.1 gimp-devel-2.2.10-22.44.1 - SLE SDK 10 SP4 (i586 ia64 ppc s390x x86_64): gimp-2.2.10-22.44.1 gimp-devel-2.2.10-22.44.1 References: http://support.novell.com/security/cve/CVE-2012-3403.html https://bugzilla.novell.com/775429 http://download.novell.com/patch/finder/?keywords=5d18ef4dd81fda3effcb7cb85… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0