September 2012 - openSUSE Security Announce

[security-announce] SUSE-SU-2012:1148-1: critical: Security update for OpenJDK
by opensuse-security＠opensuse.org 12 Sep '12

12 Sep '12

SUSE Security Update: Security update for OpenJDK ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:1148-1 Rating: critical References: #777499 Cross-References: CVE-2012-0547 CVE-2012-1682 Affected Products: SUSE Linux Enterprise Desktop 11 SP2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: The following security issues have been fixed: * S7162476, CVE-2012-1682: XMLDecoder security issue via ClassFinder * S7163201, CVE-2012-0547: Simplify toolkit internals references Security Issue references: * CVE-2012-1682 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1682 > * CVE-2012-0547 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0547 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Desktop 11 SP2: zypper in -t patch sledsp2-java-1_6_0-openjdk-6772 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Desktop 11 SP2 (i586 x86_64): java-1_6_0-openjdk-1.6.0.0_b24.1.11.4-0.3.1 java-1_6_0-openjdk-demo-1.6.0.0_b24.1.11.4-0.3.1 java-1_6_0-openjdk-devel-1.6.0.0_b24.1.11.4-0.3.1 References: http://support.novell.com/security/cve/CVE-2012-0547.html http://support.novell.com/security/cve/CVE-2012-1682.html https://bugzilla.novell.com/777499 http://download.novell.com/patch/finder/?keywords=3a2f76ea954e211ebdec52367… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:1135-1: important: Security update for Xen
by opensuse-security＠opensuse.org 07 Sep '12

07 Sep '12

SUSE Security Update: Security update for Xen ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:1135-1 Rating: important References: #762484 #777084 #777090 Cross-References: CVE-2012-2625 CVE-2012-3494 CVE-2012-3515 Affected Products: SUSE Linux Enterprise Server 10 SP4 SUSE Linux Enterprise Desktop 10 SP4 SLE SDK 10 SP4 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: XEN was updated to fix multiple bugs and security issues. The following security issues have been fixed: * CVE-2012-3494: xen: hypercall set_debugreg vulnerability (XSA-12) * CVE-2012-3515: xen: Qemu VT100 emulation vulnerability (XSA-17) * CVE-2012-2625: xen: pv bootloader doesn't check the size of the bzip2 or lzma compressed kernel, leading to denial of service Security Issue references: * CVE-2012-3494 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3494 > * CVE-2012-3515 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3515 > * CVE-2012-2625 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2625 > Indications: Everyone using XEN should update. Package List: - SUSE Linux Enterprise Server 10 SP4 (i586 x86_64): xen-3.2.3_17040_40-0.7.2 xen-devel-3.2.3_17040_40-0.7.2 xen-doc-html-3.2.3_17040_40-0.7.2 xen-doc-pdf-3.2.3_17040_40-0.7.2 xen-doc-ps-3.2.3_17040_40-0.7.2 xen-kmp-debug-3.2.3_17040_40_2.6.16.60_0.97.32-0.7.2 xen-kmp-default-3.2.3_17040_40_2.6.16.60_0.97.32-0.7.2 xen-kmp-kdump-3.2.3_17040_40_2.6.16.60_0.97.32-0.7.2 xen-kmp-smp-3.2.3_17040_40_2.6.16.60_0.97.32-0.7.2 xen-libs-3.2.3_17040_40-0.7.2 xen-tools-3.2.3_17040_40-0.7.2 xen-tools-domU-3.2.3_17040_40-0.7.2 xen-tools-ioemu-3.2.3_17040_40-0.7.2 - SUSE Linux Enterprise Server 10 SP4 (x86_64): xen-libs-32bit-3.2.3_17040_40-0.7.2 - SUSE Linux Enterprise Server 10 SP4 (i586): xen-kmp-bigsmp-3.2.3_17040_40_2.6.16.60_0.97.32-0.7.2 xen-kmp-kdumppae-3.2.3_17040_40_2.6.16.60_0.97.32-0.7.2 xen-kmp-vmi-3.2.3_17040_40_2.6.16.60_0.97.32-0.7.2 xen-kmp-vmipae-3.2.3_17040_40_2.6.16.60_0.97.32-0.7.2 - SUSE Linux Enterprise Desktop 10 SP4 (i586 x86_64): xen-3.2.3_17040_40-0.7.2 xen-devel-3.2.3_17040_40-0.7.2 xen-doc-html-3.2.3_17040_40-0.7.2 xen-doc-pdf-3.2.3_17040_40-0.7.2 xen-doc-ps-3.2.3_17040_40-0.7.2 xen-kmp-default-3.2.3_17040_40_2.6.16.60_0.97.32-0.7.2 xen-kmp-smp-3.2.3_17040_40_2.6.16.60_0.97.32-0.7.2 xen-libs-3.2.3_17040_40-0.7.2 xen-tools-3.2.3_17040_40-0.7.2 xen-tools-domU-3.2.3_17040_40-0.7.2 xen-tools-ioemu-3.2.3_17040_40-0.7.2 - SUSE Linux Enterprise Desktop 10 SP4 (x86_64): xen-libs-32bit-3.2.3_17040_40-0.7.2 - SUSE Linux Enterprise Desktop 10 SP4 (i586): xen-kmp-bigsmp-3.2.3_17040_40_2.6.16.60_0.97.32-0.7.2 - SLE SDK 10 SP4 (i586 x86_64): xen-3.2.3_17040_40-0.7.2 xen-devel-3.2.3_17040_40-0.7.2 xen-kmp-debug-3.2.3_17040_40_2.6.16.60_0.97.32-0.7.2 xen-kmp-kdump-3.2.3_17040_40_2.6.16.60_0.97.32-0.7.2 xen-libs-3.2.3_17040_40-0.7.2 xen-tools-3.2.3_17040_40-0.7.2 xen-tools-ioemu-3.2.3_17040_40-0.7.2 - SLE SDK 10 SP4 (x86_64): xen-libs-32bit-3.2.3_17040_40-0.7.2 References: http://support.novell.com/security/cve/CVE-2012-2625.html http://support.novell.com/security/cve/CVE-2012-3494.html http://support.novell.com/security/cve/CVE-2012-3515.html https://bugzilla.novell.com/762484 https://bugzilla.novell.com/777084 https://bugzilla.novell.com/777090 http://download.novell.com/patch/finder/?keywords=7abce5ad0bd27a8e2084fe946… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:1133-1: important: Security update for Xen
by opensuse-security＠opensuse.org 07 Sep '12

07 Sep '12

SUSE Security Update: Security update for Xen ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:1133-1 Rating: important References: #777084 #777090 Cross-References: CVE-2012-3494 CVE-2012-3495 CVE-2012-3496 CVE-2012-3498 CVE-2012-3515 CVE-2012-3516 Affected Products: SUSE Linux Enterprise Server 10 SP2 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: XEN was updated to fix multiple bugs and security issues. The following security issues have been fixed: * CVE-2012-3494: xen: hypercall set_debugreg vulnerability (XSA-12) * CVE-2012-3515: xen: Qemu VT100 emulation vulnerability (XSA-17) Security Issue references: * CVE-2012-3496 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3496 > * CVE-2012-3494 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3494 > * CVE-2012-3495 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3495 > * CVE-2012-3498 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3498 > * CVE-2012-3516 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3516 > * CVE-2012-3515 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3515 > Indications: Everyone using XEN should update. Package List: - SUSE Linux Enterprise Server 10 SP2 (i586 x86_64): xen-3.2.0_16718_26-0.10.1 xen-devel-3.2.0_16718_26-0.10.1 xen-doc-html-3.2.0_16718_26-0.10.1 xen-doc-pdf-3.2.0_16718_26-0.10.1 xen-doc-ps-3.2.0_16718_26-0.10.1 xen-kmp-debug-3.2.0_16718_26_2.6.16.60_0.42.54.11-0.10.1 xen-kmp-default-3.2.0_16718_26_2.6.16.60_0.42.54.11-0.10.1 xen-kmp-kdump-3.2.0_16718_26_2.6.16.60_0.42.54.11-0.10.1 xen-kmp-smp-3.2.0_16718_26_2.6.16.60_0.42.54.11-0.10.1 xen-libs-3.2.0_16718_26-0.10.1 xen-tools-3.2.0_16718_26-0.10.1 xen-tools-domU-3.2.0_16718_26-0.10.1 xen-tools-ioemu-3.2.0_16718_26-0.10.1 - SUSE Linux Enterprise Server 10 SP2 (x86_64): xen-libs-32bit-3.2.0_16718_26-0.10.1 - SUSE Linux Enterprise Server 10 SP2 (i586): xen-kmp-bigsmp-3.2.0_16718_26_2.6.16.60_0.42.54.11-0.10.1 References: http://support.novell.com/security/cve/CVE-2012-3494.html http://support.novell.com/security/cve/CVE-2012-3495.html http://support.novell.com/security/cve/CVE-2012-3496.html http://support.novell.com/security/cve/CVE-2012-3498.html http://support.novell.com/security/cve/CVE-2012-3515.html http://support.novell.com/security/cve/CVE-2012-3516.html https://bugzilla.novell.com/777084 https://bugzilla.novell.com/777090 http://download.novell.com/patch/finder/?keywords=6779ef884a44335e87986cb46… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:1132-1: important: Security update for Xen
by opensuse-security＠opensuse.org 07 Sep '12

07 Sep '12

SUSE Security Update: Security update for Xen ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:1132-1 Rating: important References: #776300 #776995 #777084 #777086 #777088 #777090 #777091 Cross-References: CVE-2012-3494 CVE-2012-3495 CVE-2012-3496 CVE-2012-3498 CVE-2012-3515 Affected Products: SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Server 11 SP2 for VMware SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Desktop 11 SP2 ______________________________________________________________________________ An update that solves 5 vulnerabilities and has two fixes is now available. It includes one version update. Description: XEN was updated 4.1.3 to fix multiple bugs and security issues. The following security issues have been fixed: * CVE-2012-3494: xen: hypercall set_debugreg vulnerability (XSA-12) * CVE-2012-3495: xen: hypercall physdev_get_free_pirq vulnerability (XSA-13) * CVE-2012-3496: xen: XENMEM_populate_physmap DoS vulnerability (XSA-14) * CVE-2012-3498: xen: PHYSDEVOP_map_pirq index vulnerability (XSA-16) * CVE-2012-3515: xen: Qemu VT100 emulation vulnerability (XSA-17) Also the following bugs have been fixed: * pvscsi support of attaching Luns - bnc#776995 The following related bugs in vm-install 0.5.12 have been fixed: * bnc#776300 - vm-install does not pass --extra-args in --upgrade * Add for support Open Enterprise Server 11 * Add support for Windows 8 and Windows Server 2012 * Add support for Ubuntu 12 (Precise Pangolin) Security Issue references: * CVE-2012-3496 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3496 > * CVE-2012-3494 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3494 > * CVE-2012-3495 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3495 > * CVE-2012-3498 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3498 > * CVE-2012-3515 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3515 > Indications: Everyone using XEN should update. Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11 SP2: zypper in -t patch sdksp2-xen-201209-6748 - SUSE Linux Enterprise Server 11 SP2 for VMware: zypper in -t patch slessp2-xen-201209-6748 - SUSE Linux Enterprise Server 11 SP2: zypper in -t patch slessp2-xen-201209-6748 - SUSE Linux Enterprise Desktop 11 SP2: zypper in -t patch sledsp2-xen-201209-6748 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11 SP2 (i586 x86_64): xen-devel-4.1.3_02-0.5.1 - SUSE Linux Enterprise Server 11 SP2 for VMware (i586 x86_64): xen-kmp-trace-4.1.3_02_3.0.38_0.5-0.5.1 - SUSE Linux Enterprise Server 11 SP2 (i586 x86_64): xen-kmp-default-4.1.3_02_3.0.38_0.5-0.5.1 xen-kmp-trace-4.1.3_02_3.0.38_0.5-0.5.1 xen-libs-4.1.3_02-0.5.1 xen-tools-domU-4.1.3_02-0.5.1 - SUSE Linux Enterprise Server 11 SP2 (x86_64) [New Version: 0.5.12]: vm-install-0.5.12-0.5.1 xen-4.1.3_02-0.5.1 xen-doc-html-4.1.3_02-0.5.1 xen-doc-pdf-4.1.3_02-0.5.1 xen-libs-32bit-4.1.3_02-0.5.1 xen-tools-4.1.3_02-0.5.1 - SUSE Linux Enterprise Server 11 SP2 (i586) [New Version: 0.5.12]: vm-install-0.5.12-0.5.3 - SUSE Linux Enterprise Desktop 11 SP2 (i586 x86_64): xen-kmp-default-4.1.3_02_3.0.38_0.5-0.5.1 xen-kmp-trace-4.1.3_02_3.0.38_0.5-0.5.1 xen-libs-4.1.3_02-0.5.1 xen-tools-domU-4.1.3_02-0.5.1 - SUSE Linux Enterprise Desktop 11 SP2 (x86_64) [New Version: 0.5.12]: vm-install-0.5.12-0.5.1 xen-4.1.3_02-0.5.1 xen-doc-html-4.1.3_02-0.5.1 xen-doc-pdf-4.1.3_02-0.5.1 xen-libs-32bit-4.1.3_02-0.5.1 xen-tools-4.1.3_02-0.5.1 - SUSE Linux Enterprise Desktop 11 SP2 (i586) [New Version: 0.5.12]: vm-install-0.5.12-0.5.3 References: http://support.novell.com/security/cve/CVE-2012-3494.html http://support.novell.com/security/cve/CVE-2012-3495.html http://support.novell.com/security/cve/CVE-2012-3496.html http://support.novell.com/security/cve/CVE-2012-3498.html http://support.novell.com/security/cve/CVE-2012-3515.html https://bugzilla.novell.com/776300 https://bugzilla.novell.com/776995 https://bugzilla.novell.com/777084 https://bugzilla.novell.com/777086 https://bugzilla.novell.com/777088 https://bugzilla.novell.com/777090 https://bugzilla.novell.com/777091 http://download.novell.com/patch/finder/?keywords=2940fd614757e4aece023d8a6… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:1130-1: important: Security update for PHP5
by opensuse-security＠opensuse.org 06 Sep '12

06 Sep '12

SUSE Security Update: Security update for PHP5 ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:1130-1 Rating: important References: #775852 Affected Products: SUSE Linux Enterprise Server 10 SP4 SLE SDK 10 SP4 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update changes the default configuration to use FilesMatch with 'SetHandler' rather than 'AddHandler' to protect weakly written web applications from content confusion. Since this is a hardening measure, no CVE was assigned. Package List: - SUSE Linux Enterprise Server 10 SP4 (i586 ia64 ppc s390x x86_64): apache2-mod_php5-5.2.14-0.38.1 php5-5.2.14-0.38.1 php5-bcmath-5.2.14-0.38.1 php5-bz2-5.2.14-0.38.1 php5-calendar-5.2.14-0.38.1 php5-ctype-5.2.14-0.38.1 php5-curl-5.2.14-0.38.1 php5-dba-5.2.14-0.38.1 php5-dbase-5.2.14-0.38.1 php5-devel-5.2.14-0.38.1 php5-dom-5.2.14-0.38.1 php5-exif-5.2.14-0.38.1 php5-fastcgi-5.2.14-0.38.1 php5-ftp-5.2.14-0.38.1 php5-gd-5.2.14-0.38.1 php5-gettext-5.2.14-0.38.1 php5-gmp-5.2.14-0.38.1 php5-hash-5.2.14-0.38.1 php5-iconv-5.2.14-0.38.1 php5-imap-5.2.14-0.38.1 php5-json-5.2.14-0.38.1 php5-ldap-5.2.14-0.38.1 php5-mbstring-5.2.14-0.38.1 php5-mcrypt-5.2.14-0.38.1 php5-mhash-5.2.14-0.38.1 php5-mysql-5.2.14-0.38.1 php5-ncurses-5.2.14-0.38.1 php5-odbc-5.2.14-0.38.1 php5-openssl-5.2.14-0.38.1 php5-pcntl-5.2.14-0.38.1 php5-pdo-5.2.14-0.38.1 php5-pear-5.2.14-0.38.1 php5-pgsql-5.2.14-0.38.1 php5-posix-5.2.14-0.38.1 php5-pspell-5.2.14-0.38.1 php5-shmop-5.2.14-0.38.1 php5-snmp-5.2.14-0.38.1 php5-soap-5.2.14-0.38.1 php5-sockets-5.2.14-0.38.1 php5-sqlite-5.2.14-0.38.1 php5-suhosin-5.2.14-0.38.1 php5-sysvmsg-5.2.14-0.38.1 php5-sysvsem-5.2.14-0.38.1 php5-sysvshm-5.2.14-0.38.1 php5-tokenizer-5.2.14-0.38.1 php5-wddx-5.2.14-0.38.1 php5-xmlreader-5.2.14-0.38.1 php5-xmlrpc-5.2.14-0.38.1 php5-xsl-5.2.14-0.38.1 php5-zlib-5.2.14-0.38.1 - SLE SDK 10 SP4 (i586 ia64 ppc s390x x86_64): apache2-mod_php5-5.2.14-0.38.1 php5-5.2.14-0.38.1 php5-bcmath-5.2.14-0.38.1 php5-bz2-5.2.14-0.38.1 php5-calendar-5.2.14-0.38.1 php5-ctype-5.2.14-0.38.1 php5-curl-5.2.14-0.38.1 php5-dba-5.2.14-0.38.1 php5-dbase-5.2.14-0.38.1 php5-devel-5.2.14-0.38.1 php5-dom-5.2.14-0.38.1 php5-exif-5.2.14-0.38.1 php5-fastcgi-5.2.14-0.38.1 php5-ftp-5.2.14-0.38.1 php5-gd-5.2.14-0.38.1 php5-gettext-5.2.14-0.38.1 php5-gmp-5.2.14-0.38.1 php5-hash-5.2.14-0.38.1 php5-iconv-5.2.14-0.38.1 php5-imap-5.2.14-0.38.1 php5-ldap-5.2.14-0.38.1 php5-mbstring-5.2.14-0.38.1 php5-mcrypt-5.2.14-0.38.1 php5-mhash-5.2.14-0.38.1 php5-mysql-5.2.14-0.38.1 php5-ncurses-5.2.14-0.38.1 php5-odbc-5.2.14-0.38.1 php5-openssl-5.2.14-0.38.1 php5-pcntl-5.2.14-0.38.1 php5-pdo-5.2.14-0.38.1 php5-pear-5.2.14-0.38.1 php5-pgsql-5.2.14-0.38.1 php5-posix-5.2.14-0.38.1 php5-pspell-5.2.14-0.38.1 php5-shmop-5.2.14-0.38.1 php5-snmp-5.2.14-0.38.1 php5-soap-5.2.14-0.38.1 php5-sockets-5.2.14-0.38.1 php5-sqlite-5.2.14-0.38.1 php5-suhosin-5.2.14-0.38.1 php5-sysvmsg-5.2.14-0.38.1 php5-sysvsem-5.2.14-0.38.1 php5-sysvshm-5.2.14-0.38.1 php5-tidy-5.2.14-0.38.1 php5-tokenizer-5.2.14-0.38.1 php5-wddx-5.2.14-0.38.1 php5-xmlreader-5.2.14-0.38.1 php5-xmlrpc-5.2.14-0.38.1 php5-xsl-5.2.14-0.38.1 php5-zlib-5.2.14-0.38.1 References: https://bugzilla.novell.com/775852 http://download.novell.com/patch/finder/?keywords=6bcc0e41be00989b383aaa71e… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:1129-1: important: Security update for Xen
by opensuse-security＠opensuse.org 06 Sep '12

06 Sep '12

SUSE Security Update: Security update for Xen ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:1129-1 Rating: important References: #777084 #777090 Cross-References: CVE-2012-3494 CVE-2012-3515 Affected Products: SUSE Linux Enterprise Server 10 SP3 LTSS ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: XEN was updated to fix multiple bugs and security issues. The following security issues have been fixed: * CVE-2012-3494: xen: hypercall set_debugreg vulnerability (XSA-12) * CVE-2012-3515: xen: Qemu VT100 emulation vulnerability (XSA-17) Security Issue references: * CVE-2012-3494 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3494 > * CVE-2012-3515 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3515 > Indications: Everyone using XEN should update. Package List: - SUSE Linux Enterprise Server 10 SP3 LTSS (i586 x86_64): xen-3.2.3_17040_28-0.6.13.5 xen-devel-3.2.3_17040_28-0.6.13.5 xen-doc-html-3.2.3_17040_28-0.6.13.5 xen-doc-pdf-3.2.3_17040_28-0.6.13.5 xen-doc-ps-3.2.3_17040_28-0.6.13.5 xen-kmp-debug-3.2.3_17040_28_2.6.16.60_0.83.169-0.6.13.5 xen-kmp-default-3.2.3_17040_28_2.6.16.60_0.83.169-0.6.13.5 xen-kmp-kdump-3.2.3_17040_28_2.6.16.60_0.83.169-0.6.13.5 xen-kmp-smp-3.2.3_17040_28_2.6.16.60_0.83.169-0.6.13.5 xen-libs-3.2.3_17040_28-0.6.13.5 xen-tools-3.2.3_17040_28-0.6.13.5 xen-tools-domU-3.2.3_17040_28-0.6.13.5 xen-tools-ioemu-3.2.3_17040_28-0.6.13.5 - SUSE Linux Enterprise Server 10 SP3 LTSS (x86_64): xen-libs-32bit-3.2.3_17040_28-0.6.13.5 - SUSE Linux Enterprise Server 10 SP3 LTSS (i586): xen-kmp-bigsmp-3.2.3_17040_28_2.6.16.60_0.83.169-0.6.13.5 xen-kmp-kdumppae-3.2.3_17040_28_2.6.16.60_0.83.169-0.6.13.5 xen-kmp-vmi-3.2.3_17040_28_2.6.16.60_0.83.169-0.6.13.5 xen-kmp-vmipae-3.2.3_17040_28_2.6.16.60_0.83.169-0.6.13.5 References: http://support.novell.com/security/cve/CVE-2012-3494.html http://support.novell.com/security/cve/CVE-2012-3515.html https://bugzilla.novell.com/777084 https://bugzilla.novell.com/777090 http://download.novell.com/patch/finder/?keywords=b08cee9a947266299a47b5d55… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2012:1080-1: important: gimp to fix various issues
by opensuse-security＠opensuse.org 03 Sep '12

03 Sep '12

openSUSE Security Update: gimp to fix various issues ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1080-1 Rating: important References: #724628 #763595 #769565 #775433 Cross-References: CVE-2012-2763 CVE-2012-3236 CVE-2012-3403 CVE-2012-3481 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: Multiple integer overflows in various decoder plug-ins of GIMP have been fixed. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-543 - openSUSE 11.4: zypper in -t patch openSUSE-2012-543 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): gimp-2.6.11-28.26.1 gimp-debuginfo-2.6.11-28.26.1 gimp-debugsource-2.6.11-28.26.1 gimp-devel-2.6.11-28.26.1 gimp-devel-debuginfo-2.6.11-28.26.1 gimp-help-browser-2.6.11-28.26.1 gimp-help-browser-debuginfo-2.6.11-28.26.1 gimp-plugins-python-2.6.11-28.26.1 gimp-plugins-python-debuginfo-2.6.11-28.26.1 libgimp-2_0-0-2.6.11-28.26.1 libgimp-2_0-0-debuginfo-2.6.11-28.26.1 libgimpui-2_0-0-2.6.11-28.26.1 libgimpui-2_0-0-debuginfo-2.6.11-28.26.1 - openSUSE 12.1 (x86_64): libgimp-2_0-0-32bit-2.6.11-28.26.1 libgimp-2_0-0-debuginfo-32bit-2.6.11-28.26.1 libgimpui-2_0-0-32bit-2.6.11-28.26.1 libgimpui-2_0-0-debuginfo-32bit-2.6.11-28.26.1 - openSUSE 12.1 (noarch): gimp-branding-upstream-2.6.11-28.26.1 gimp-lang-2.6.11-28.26.1 - openSUSE 12.1 (ia64): libgimp-2_0-0-debuginfo-x86-2.6.11-28.26.1 libgimp-2_0-0-x86-2.6.11-28.26.1 libgimpui-2_0-0-debuginfo-x86-2.6.11-28.26.1 libgimpui-2_0-0-x86-2.6.11-28.26.1 - openSUSE 11.4 (i586 x86_64): gimp-2.6.11-13.58.1 gimp-branding-upstream-2.6.11-13.58.1 gimp-debuginfo-2.6.11-13.58.1 gimp-debugsource-2.6.11-13.58.1 gimp-devel-2.6.11-13.58.1 gimp-devel-debuginfo-2.6.11-13.58.1 gimp-help-browser-2.6.11-13.58.1 gimp-help-browser-debuginfo-2.6.11-13.58.1 gimp-module-hal-2.6.11-13.58.1 gimp-module-hal-debuginfo-2.6.11-13.58.1 gimp-plugins-python-2.6.11-13.58.1 gimp-plugins-python-debuginfo-2.6.11-13.58.1 libgimp-2_0-0-2.6.11-13.58.1 libgimp-2_0-0-debuginfo-2.6.11-13.58.1 libgimpui-2_0-0-2.6.11-13.58.1 libgimpui-2_0-0-debuginfo-2.6.11-13.58.1 - openSUSE 11.4 (x86_64): libgimp-2_0-0-32bit-2.6.11-13.58.1 libgimp-2_0-0-debuginfo-32bit-2.6.11-13.58.1 libgimpui-2_0-0-32bit-2.6.11-13.58.1 libgimpui-2_0-0-debuginfo-32bit-2.6.11-13.58.1 - openSUSE 11.4 (noarch): gimp-lang-2.6.11-13.58.1 - openSUSE 11.4 (ia64): libgimp-2_0-0-debuginfo-x86-2.6.11-13.58.1 libgimp-2_0-0-x86-2.6.11-13.58.1 libgimpui-2_0-0-debuginfo-x86-2.6.11-13.58.1 libgimpui-2_0-0-x86-2.6.11-13.58.1 References: http://support.novell.com/security/cve/CVE-2012-2763.html http://support.novell.com/security/cve/CVE-2012-3236.html http://support.novell.com/security/cve/CVE-2012-3403.html http://support.novell.com/security/cve/CVE-2012-3481.html https://bugzilla.novell.com/724628 https://bugzilla.novell.com/763595 https://bugzilla.novell.com/769565 https://bugzilla.novell.com/775433 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0