November 2013 - openSUSE Security Announce

[security-announce] openSUSE-SU-2013:1717-1: important: flash-player to 11.2.202.327
by opensuse-security＠opensuse.org 17 Nov '13

17 Nov '13

openSUSE Security Update: flash-player to 11.2.202.327 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:1717-1 Rating: important References: #850220 Cross-References: CVE-2013-5329 CVE-2013-5330 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: Adobe Flash Player was updated to 11.2.202.327: (bnc#850220) * APSB13-26, CVE-2013-5329, CVE-2013-5330 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-162 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): flash-player-11.2.202.327-79.1 flash-player-gnome-11.2.202.327-79.1 flash-player-kde4-11.2.202.327-79.1 References: http://support.novell.com/security/cve/CVE-2013-5329.html http://support.novell.com/security/cve/CVE-2013-5330.html https://bugzilla.novell.com/850220 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2013:1716-1: important: Security update for flash-player
by opensuse-security＠opensuse.org 15 Nov '13

15 Nov '13

SUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: SUSE-SU-2013:1716-1 Rating: important References: #850220 Cross-References: CVE-2013-5329 CVE-2013-5330 Affected Products: SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. It includes one version update. Description: Adobe has released Flash Player 11.2.202.327 for Linux to correct the following: * These updates resolve memory corruption vulnerabilities that could lead to code execution (CVE-2013-5329, CVE-2013-5330). More information can be found on: http://www.adobe.com/support/security/bulletins/apsb13-26.ht ml <http://www.adobe.com/support/security/bulletins/apsb13-26.h tml> Security Issue references: * CVE-2013-5329 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5329 > * CVE-2013-5330 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5330 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Desktop 11 SP3: zypper in -t patch sledsp3-flash-player-8555 - SUSE Linux Enterprise Desktop 11 SP2: zypper in -t patch sledsp2-flash-player-8554 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Desktop 11 SP3 (i586 x86_64) [New Version: 11.2.202.327]: flash-player-11.2.202.327-0.3.1 flash-player-gnome-11.2.202.327-0.3.1 flash-player-kde4-11.2.202.327-0.3.1 - SUSE Linux Enterprise Desktop 11 SP2 (i586 x86_64) [New Version: 11.2.202.327]: flash-player-11.2.202.327-0.3.1 flash-player-gnome-11.2.202.327-0.3.1 flash-player-kde4-11.2.202.327-0.3.1 References: http://support.novell.com/security/cve/CVE-2013-5329.html http://support.novell.com/security/cve/CVE-2013-5330.html https://bugzilla.novell.com/850220 http://download.novell.com/patch/finder/?keywords=1ea0282b5c54059aad35cd74e… http://download.novell.com/patch/finder/?keywords=cbac3c783a0512a1421f2f2cd… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2013:1678-1: important: Security update for Mozilla Firefox
by opensuse-security＠opensuse.org 15 Nov '13

15 Nov '13

SUSE Security Update: Security update for Mozilla Firefox ______________________________________________________________________________ Announcement ID: SUSE-SU-2013:1678-1 Rating: important References: #847708 Cross-References: CVE-2013-1739 Affected Products: SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Server 11 SP3 for VMware SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP2 for VMware SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP1 LTSS SUSE Linux Enterprise Server 10 SP4 LTSS SUSE Linux Enterprise Server 10 SP3 LTSS SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. It includes four new package versions. Description: Mozilla Firefox has been updated to the 17.0.10ESR release, which fixes various bugs and security issues: * MFSA 2013-93: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code. Jesse Ruderman and Christoph Diehl reported memory safety problems and crashes that affect Firefox ESR 17, Firefox ESR 24, and Firefox 24. (CVE-2013-5590) Carsten Book reported a crash fixed in the NSS library used by Mozilla-based products fixed in Firefox 25, Firefox ESR 24.1, and Firefox ESR 17.0.10.(CVE-2013-1739) * MFSA 2013-95 / CVE-2013-5604: Security researcher Abhishek Arya (Inferno) of the Google Chrome Security Team used the Address Sanitizer tool to discover an access violation due to uninitialized data during Extensible Stylesheet Language Transformation (XSLT) processing. This leads to a potentially exploitable crash. * MFSA 2013-96 / CVE-2013-5595: Compiler Engineer Dan Gohman of Google discovered a flaw in the JavaScript engine where memory was being incorrectly allocated for some functions and the calls for allocations were not always properly checked for overflow, leading to potential buffer overflows. When combined with other vulnerabilities, these flaws could be potentially exploitable. * MFSA 2013-98 / CVE-2013-5597: Security researcher Byoungyoung Lee of Georgia Tech Information Security Center (GTISC) used the Address Sanitizer tool to discover a use-after-free during state change events while updating the offline cache. This leads to a potentially exploitable crash. * MFSA 2013-100: Security researcher Nils used the Address Sanitizer tool while fuzzing to discover missing strong references in browsing engine leading to use-after-frees. This can lead to a potentially exploitable crash. o ASAN heap-use-after-free in nsIPresShell::GetPresContext() with canvas, onresize and mozTextStyle (CVE-2013-5599) o ASAN use-after-free in nsIOService::NewChannelFromURIWithProxyFlags with Blob URL (CVE-2013-5600) o ASAN use-after free in GC allocation in nsEventListenerManager::SetEventHandler (CVE-2013-5601) * MFSA 2013-101 / CVE-2013-5602: Security researcher Nils used the Address Sanitizer tool while fuzzing to discover a memory corruption issue with the JavaScript engine when using workers with direct proxies. This results in a potentially exploitable crash. Security Issue reference: * CVE-2013-1739 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1739 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11 SP3: zypper in -t patch sdksp3-firefox-201310-8491 sdksp3-mozilla-nss-201310-8485 - SUSE Linux Enterprise Software Development Kit 11 SP2: zypper in -t patch sdksp2-mozilla-nss-201310-8484 - SUSE Linux Enterprise Server 11 SP3 for VMware: zypper in -t patch slessp3-firefox-201310-8491 slessp3-mozilla-nss-201310-8485 - SUSE Linux Enterprise Server 11 SP3: zypper in -t patch slessp3-firefox-201310-8491 slessp3-mozilla-nss-201310-8485 - SUSE Linux Enterprise Server 11 SP2 for VMware: zypper in -t patch slessp2-firefox-201310-8545 slessp2-mozilla-nss-201310-8484 - SUSE Linux Enterprise Server 11 SP2: zypper in -t patch slessp2-firefox-201310-8545 slessp2-mozilla-nss-201310-8484 - SUSE Linux Enterprise Server 11 SP1 LTSS: zypper in -t patch slessp1-firefox-201310-8492 slessp1-mozilla-nss-201310-8486 - SUSE Linux Enterprise Desktop 11 SP3: zypper in -t patch sledsp3-firefox-201310-8491 sledsp3-mozilla-nss-201310-8485 - SUSE Linux Enterprise Desktop 11 SP2: zypper in -t patch sledsp2-firefox-201310-8545 sledsp2-mozilla-nss-201310-8484 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11 SP3 (i586 ia64 ppc64 s390x x86_64) [New Version: 3.15.2 and 4.10.1]: MozillaFirefox-devel-17.0.10esr-0.7.4 mozilla-nspr-devel-4.10.1-0.3.1 mozilla-nss-devel-3.15.2-0.8.1 - SUSE Linux Enterprise Software Development Kit 11 SP2 (i586 ia64 ppc64 s390x x86_64) [New Version: 3.15.2 and 4.10.1]: mozilla-nspr-devel-4.10.1-0.3.1 mozilla-nss-devel-3.15.2-0.3.1 - SUSE Linux Enterprise Server 11 SP3 for VMware (i586 x86_64) [New Version: 17.0.10esr,3.15.2 and 4.10.1]: MozillaFirefox-17.0.10esr-0.7.4 MozillaFirefox-translations-17.0.10esr-0.7.4 libfreebl3-3.15.2-0.8.1 libsoftokn3-3.15.2-0.8.1 mozilla-nspr-4.10.1-0.3.1 mozilla-nss-3.15.2-0.8.1 mozilla-nss-tools-3.15.2-0.8.1 - SUSE Linux Enterprise Server 11 SP3 for VMware (x86_64) [New Version: 3.15.2 and 4.10.1]: libfreebl3-32bit-3.15.2-0.8.1 libsoftokn3-32bit-3.15.2-0.8.1 mozilla-nspr-32bit-4.10.1-0.3.1 mozilla-nss-32bit-3.15.2-0.8.1 - SUSE Linux Enterprise Server 11 SP3 (i586 ia64 ppc64 s390x x86_64) [New Version: 17.0.10esr,3.15.2 and 4.10.1]: MozillaFirefox-17.0.10esr-0.7.4 MozillaFirefox-branding-SLED-7-0.12.41 MozillaFirefox-translations-17.0.10esr-0.7.4 libfreebl3-3.15.2-0.8.1 libsoftokn3-3.15.2-0.8.1 mozilla-nspr-4.10.1-0.3.1 mozilla-nss-3.15.2-0.8.1 mozilla-nss-tools-3.15.2-0.8.1 - SUSE Linux Enterprise Server 11 SP3 (ppc64 s390x x86_64) [New Version: 3.15.2 and 4.10.1]: libfreebl3-32bit-3.15.2-0.8.1 libsoftokn3-32bit-3.15.2-0.8.1 mozilla-nspr-32bit-4.10.1-0.3.1 mozilla-nss-32bit-3.15.2-0.8.1 - SUSE Linux Enterprise Server 11 SP3 (ia64) [New Version: 3.15.2 and 4.10.1]: libfreebl3-x86-3.15.2-0.8.1 libsoftokn3-x86-3.15.2-0.8.1 mozilla-nspr-x86-4.10.1-0.3.1 mozilla-nss-x86-3.15.2-0.8.1 - SUSE Linux Enterprise Server 11 SP2 for VMware (i586 x86_64) [New Version: 17.0.10esr,3.15.2 and 4.10.1]: MozillaFirefox-17.0.10esr-0.4.2.4 MozillaFirefox-translations-17.0.10esr-0.4.2.4 libfreebl3-3.15.2-0.3.1 mozilla-nspr-4.10.1-0.3.1 mozilla-nss-3.15.2-0.3.1 mozilla-nss-tools-3.15.2-0.3.1 - SUSE Linux Enterprise Server 11 SP2 for VMware (x86_64) [New Version: 3.15.2 and 4.10.1]: libfreebl3-32bit-3.15.2-0.3.1 mozilla-nspr-32bit-4.10.1-0.3.1 mozilla-nss-32bit-3.15.2-0.3.1 - SUSE Linux Enterprise Server 11 SP2 (i586 ia64 ppc64 s390x x86_64) [New Version: 17.0.10esr,3.15.2 and 4.10.1]: MozillaFirefox-17.0.10esr-0.4.2.4 MozillaFirefox-branding-SLED-7-0.6.9.62 MozillaFirefox-translations-17.0.10esr-0.4.2.4 libfreebl3-3.15.2-0.3.1 mozilla-nspr-4.10.1-0.3.1 mozilla-nss-3.15.2-0.3.1 mozilla-nss-tools-3.15.2-0.3.1 - SUSE Linux Enterprise Server 11 SP2 (ppc64 s390x x86_64) [New Version: 3.15.2 and 4.10.1]: libfreebl3-32bit-3.15.2-0.3.1 mozilla-nspr-32bit-4.10.1-0.3.1 mozilla-nss-32bit-3.15.2-0.3.1 - SUSE Linux Enterprise Server 11 SP2 (ia64) [New Version: 3.15.2 and 4.10.1]: libfreebl3-x86-3.15.2-0.3.1 mozilla-nspr-x86-4.10.1-0.3.1 mozilla-nss-x86-3.15.2-0.3.1 - SUSE Linux Enterprise Server 11 SP1 LTSS (i586 s390x x86_64) [New Version: 17.0.10esr,3.15.2,4.10.1 and 7]: MozillaFirefox-17.0.10esr-0.4.2.1 MozillaFirefox-branding-SLED-7-0.6.9.60 MozillaFirefox-translations-17.0.10esr-0.4.2.1 libfreebl3-3.15.2-0.3.1 mozilla-nspr-4.10.1-0.3.1 mozilla-nss-3.15.2-0.3.1 mozilla-nss-tools-3.15.2-0.3.1 - SUSE Linux Enterprise Server 11 SP1 LTSS (s390x x86_64) [New Version: 3.15.2 and 4.10.1]: libfreebl3-32bit-3.15.2-0.3.1 mozilla-nspr-32bit-4.10.1-0.3.1 mozilla-nss-32bit-3.15.2-0.3.1 - SUSE Linux Enterprise Server 10 SP4 LTSS (i586 s390x x86_64) [New Version: 3.15.2 and 4.10.1]: mozilla-nspr-4.10.1-0.5.1 mozilla-nspr-devel-4.10.1-0.5.1 mozilla-nss-3.15.2-0.5.1 mozilla-nss-devel-3.15.2-0.5.1 mozilla-nss-tools-3.15.2-0.5.1 - SUSE Linux Enterprise Server 10 SP4 LTSS (s390x x86_64) [New Version: 3.15.2 and 4.10.1]: mozilla-nspr-32bit-4.10.1-0.5.1 mozilla-nss-32bit-3.15.2-0.5.1 - SUSE Linux Enterprise Server 10 SP3 LTSS (i586 s390x x86_64) [New Version: 3.15.2 and 4.10.1]: mozilla-nspr-4.10.1-0.5.1 mozilla-nspr-devel-4.10.1-0.5.1 mozilla-nss-3.15.2-0.5.1 mozilla-nss-devel-3.15.2-0.5.1 mozilla-nss-tools-3.15.2-0.5.1 - SUSE Linux Enterprise Server 10 SP3 LTSS (s390x x86_64) [New Version: 3.15.2 and 4.10.1]: mozilla-nspr-32bit-4.10.1-0.5.1 mozilla-nss-32bit-3.15.2-0.5.1 - SUSE Linux Enterprise Desktop 11 SP3 (i586 x86_64) [New Version: 17.0.10esr,3.15.2 and 4.10.1]: MozillaFirefox-17.0.10esr-0.7.4 MozillaFirefox-branding-SLED-7-0.12.41 MozillaFirefox-translations-17.0.10esr-0.7.4 libfreebl3-3.15.2-0.8.1 libsoftokn3-3.15.2-0.8.1 mozilla-nspr-4.10.1-0.3.1 mozilla-nss-3.15.2-0.8.1 mozilla-nss-tools-3.15.2-0.8.1 - SUSE Linux Enterprise Desktop 11 SP3 (x86_64) [New Version: 3.15.2 and 4.10.1]: libfreebl3-32bit-3.15.2-0.8.1 libsoftokn3-32bit-3.15.2-0.8.1 mozilla-nspr-32bit-4.10.1-0.3.1 mozilla-nss-32bit-3.15.2-0.8.1 - SUSE Linux Enterprise Desktop 11 SP2 (i586 x86_64) [New Version: 17.0.10esr,3.15.2 and 4.10.1]: MozillaFirefox-17.0.10esr-0.4.2.4 MozillaFirefox-branding-SLED-7-0.6.9.62 MozillaFirefox-translations-17.0.10esr-0.4.2.4 libfreebl3-3.15.2-0.3.1 mozilla-nspr-4.10.1-0.3.1 mozilla-nss-3.15.2-0.3.1 mozilla-nss-tools-3.15.2-0.3.1 - SUSE Linux Enterprise Desktop 11 SP2 (x86_64) [New Version: 3.15.2 and 4.10.1]: libfreebl3-32bit-3.15.2-0.3.1 mozilla-nspr-32bit-4.10.1-0.3.1 mozilla-nss-32bit-3.15.2-0.3.1 References: http://support.novell.com/security/cve/CVE-2013-1739.html https://bugzilla.novell.com/847708 http://download.novell.com/patch/finder/?keywords=07c7008fa5d3132fbafd48744… http://download.novell.com/patch/finder/?keywords=1edf663f8550de4b96445d1cb… http://download.novell.com/patch/finder/?keywords=30958073bccf2d3c9d1690043… http://download.novell.com/patch/finder/?keywords=574e354cc19e6404e0964c3b1… http://download.novell.com/patch/finder/?keywords=92ad00fe40f67f855b720f6d4… http://download.novell.com/patch/finder/?keywords=96c6d994dc18c3fd7399e875d… http://download.novell.com/patch/finder/?keywords=d36d3817c15a3112e57723f3b… http://download.novell.com/patch/finder/?keywords=f4dc527883357fa1c73dfcbfa… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2013:1677-1: important: Security update for IBM Java 5
by opensuse-security＠opensuse.org 14 Nov '13

14 Nov '13

SUSE Security Update: Security update for IBM Java 5 ______________________________________________________________________________ Announcement ID: SUSE-SU-2013:1677-1 Rating: important References: #849212 Cross-References: CVE-2013-3829 CVE-2013-4041 CVE-2013-5372 CVE-2013-5375 CVE-2013-5456 CVE-2013-5457 CVE-2013-5458 CVE-2013-5772 CVE-2013-5774 CVE-2013-5776 CVE-2013-5778 CVE-2013-5780 CVE-2013-5782 CVE-2013-5783 CVE-2013-5784 CVE-2013-5787 CVE-2013-5788 CVE-2013-5789 CVE-2013-5790 CVE-2013-5797 CVE-2013-5800 CVE-2013-5801 CVE-2013-5802 CVE-2013-5803 CVE-2013-5804 CVE-2013-5809 CVE-2013-5812 CVE-2013-5814 CVE-2013-5817 CVE-2013-5818 CVE-2013-5819 CVE-2013-5820 CVE-2013-5823 CVE-2013-5824 CVE-2013-5825 CVE-2013-5829 CVE-2013-5830 CVE-2013-5831 CVE-2013-5832 CVE-2013-5838 CVE-2013-5840 CVE-2013-5842 CVE-2013-5843 CVE-2013-5848 CVE-2013-5849 CVE-2013-5850 CVE-2013-5851 Affected Products: SUSE CORE 9 ______________________________________________________________________________ An update that fixes 47 vulnerabilities is now available. Description: IBM Java 5 SR16-FP4 has been released which fixes lots of bugs and security issues. More information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/ <http://www.ibm.com/developerworks/java/jdk/alerts/> Security Issue references: * CVE-2013-5458 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5458 > * CVE-2013-5456 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5456 > * CVE-2013-5457 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5457 > * CVE-2013-4041 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4041 > * CVE-2013-5375 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5375 > * CVE-2013-5372 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5372 > * CVE-2013-5843 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5843 > * CVE-2013-5789 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5789 > * CVE-2013-5830 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830 > * CVE-2013-5829 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829 > * CVE-2013-5787 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5787 > * CVE-2013-5788 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5788 > * CVE-2013-5824 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5824 > * CVE-2013-5842 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842 > * CVE-2013-5782 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782 > * CVE-2013-5817 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817 > * CVE-2013-5809 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809 > * CVE-2013-5814 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814 > * CVE-2013-5832 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5832 > * CVE-2013-5850 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850 > * CVE-2013-5838 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838 > * CVE-2013-5802 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802 > * CVE-2013-5812 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5812 > * CVE-2013-5804 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804 > * CVE-2013-5783 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783 > * CVE-2013-3829 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829 > * CVE-2013-5823 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823 > * CVE-2013-5831 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5831 > * CVE-2013-5820 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820 > * CVE-2013-5819 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5819 > * CVE-2013-5818 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5818 > * CVE-2013-5848 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5848 > * CVE-2013-5776 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5776 > * CVE-2013-5774 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774 > * CVE-2013-5825 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825 > * CVE-2013-5840 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840 > * CVE-2013-5801 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5801 > * CVE-2013-5778 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778 > * CVE-2013-5851 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851 > * CVE-2013-5800 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800 > * CVE-2013-5784 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784 > * CVE-2013-5849 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849 > * CVE-2013-5790 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5790 > * CVE-2013-5780 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5780 > * CVE-2013-5797 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5797 > * CVE-2013-5803 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5803 > * CVE-2013-5772 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5772 > Package List: - SUSE CORE 9 (i586 s390 s390x x86_64): IBMJava5-JRE-1.5.0_sr16.4-0.4 IBMJava5-SDK-1.5.0_sr16.4-0.4 References: http://support.novell.com/security/cve/CVE-2013-3829.html http://support.novell.com/security/cve/CVE-2013-4041.html http://support.novell.com/security/cve/CVE-2013-5372.html http://support.novell.com/security/cve/CVE-2013-5375.html http://support.novell.com/security/cve/CVE-2013-5456.html http://support.novell.com/security/cve/CVE-2013-5457.html http://support.novell.com/security/cve/CVE-2013-5458.html http://support.novell.com/security/cve/CVE-2013-5772.html http://support.novell.com/security/cve/CVE-2013-5774.html http://support.novell.com/security/cve/CVE-2013-5776.html http://support.novell.com/security/cve/CVE-2013-5778.html http://support.novell.com/security/cve/CVE-2013-5780.html http://support.novell.com/security/cve/CVE-2013-5782.html http://support.novell.com/security/cve/CVE-2013-5783.html http://support.novell.com/security/cve/CVE-2013-5784.html http://support.novell.com/security/cve/CVE-2013-5787.html http://support.novell.com/security/cve/CVE-2013-5788.html http://support.novell.com/security/cve/CVE-2013-5789.html http://support.novell.com/security/cve/CVE-2013-5790.html http://support.novell.com/security/cve/CVE-2013-5797.html http://support.novell.com/security/cve/CVE-2013-5800.html http://support.novell.com/security/cve/CVE-2013-5801.html http://support.novell.com/security/cve/CVE-2013-5802.html http://support.novell.com/security/cve/CVE-2013-5803.html http://support.novell.com/security/cve/CVE-2013-5804.html http://support.novell.com/security/cve/CVE-2013-5809.html http://support.novell.com/security/cve/CVE-2013-5812.html http://support.novell.com/security/cve/CVE-2013-5814.html http://support.novell.com/security/cve/CVE-2013-5817.html http://support.novell.com/security/cve/CVE-2013-5818.html http://support.novell.com/security/cve/CVE-2013-5819.html http://support.novell.com/security/cve/CVE-2013-5820.html http://support.novell.com/security/cve/CVE-2013-5823.html http://support.novell.com/security/cve/CVE-2013-5824.html http://support.novell.com/security/cve/CVE-2013-5825.html http://support.novell.com/security/cve/CVE-2013-5829.html http://support.novell.com/security/cve/CVE-2013-5830.html http://support.novell.com/security/cve/CVE-2013-5831.html http://support.novell.com/security/cve/CVE-2013-5832.html http://support.novell.com/security/cve/CVE-2013-5838.html http://support.novell.com/security/cve/CVE-2013-5840.html http://support.novell.com/security/cve/CVE-2013-5842.html http://support.novell.com/security/cve/CVE-2013-5843.html http://support.novell.com/security/cve/CVE-2013-5848.html http://support.novell.com/security/cve/CVE-2013-5849.html http://support.novell.com/security/cve/CVE-2013-5850.html http://support.novell.com/security/cve/CVE-2013-5851.html https://bugzilla.novell.com/849212 http://download.novell.com/patch/finder/?keywords=ee3af08cb4368a9b3504c613b… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2013:1669-1: important: Security update for IBM Java 5
by opensuse-security＠opensuse.org 14 Nov '13

14 Nov '13

SUSE Security Update: Security update for IBM Java 5 ______________________________________________________________________________ Announcement ID: SUSE-SU-2013:1669-1 Rating: important References: #849212 Affected Products: SUSE Linux Enterprise Server 10 SP4 LTSS SUSE Linux Enterprise Server 10 SP3 LTSS ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: IBM Java 5 SR16-FP4 has been released which fixes lots of bugs and security issues. More information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/ <http://www.ibm.com/developerworks/java/jdk/alerts/> The following CVEs are fixed: CVE-2013-4041,CVE-2013-5375,CVE-2013-5372,CVE-2013-5843,CVE- 2013-5830,CVE-2013-5829,CVE-2013-5842,CVE-2013-5782,CVE-2013 -5817,CVE-2013-5809,CVE-2013-5814,CVE-2013-5802,CVE-2013-580 4,CVE-2013-5783,CVE-2013-3829,CVE-2013-4002,CVE-2013-5774,CV E-2013-5825,CVE-2013-5840,CVE-2013-5801,CVE-2013-5778,CVE-20 13-5849,CVE-2013-5790,CVE-2013-5780,CVE-2013-5797,CVE-2013-5 803 Package List: - SUSE Linux Enterprise Server 10 SP4 LTSS (i586 s390x x86_64): java-1_5_0-ibm-1.5.0_sr16.4-0.5.1 java-1_5_0-ibm-devel-1.5.0_sr16.4-0.5.1 java-1_5_0-ibm-fonts-1.5.0_sr16.4-0.5.1 - SUSE Linux Enterprise Server 10 SP4 LTSS (s390x x86_64): java-1_5_0-ibm-32bit-1.5.0_sr16.4-0.5.1 java-1_5_0-ibm-devel-32bit-1.5.0_sr16.4-0.5.1 - SUSE Linux Enterprise Server 10 SP4 LTSS (x86_64): java-1_5_0-ibm-alsa-32bit-1.5.0_sr16.4-0.5.1 - SUSE Linux Enterprise Server 10 SP4 LTSS (i586): java-1_5_0-ibm-alsa-1.5.0_sr16.4-0.5.1 java-1_5_0-ibm-jdbc-1.5.0_sr16.4-0.5.1 java-1_5_0-ibm-plugin-1.5.0_sr16.4-0.5.1 - SUSE Linux Enterprise Server 10 SP3 LTSS (i586 s390x x86_64): java-1_5_0-ibm-1.5.0_sr16.4-0.5.1 java-1_5_0-ibm-devel-1.5.0_sr16.4-0.5.1 java-1_5_0-ibm-fonts-1.5.0_sr16.4-0.5.1 - SUSE Linux Enterprise Server 10 SP3 LTSS (s390x x86_64): java-1_5_0-ibm-32bit-1.5.0_sr16.4-0.5.1 java-1_5_0-ibm-devel-32bit-1.5.0_sr16.4-0.5.1 - SUSE Linux Enterprise Server 10 SP3 LTSS (x86_64): java-1_5_0-ibm-alsa-32bit-1.5.0_sr16.4-0.5.1 - SUSE Linux Enterprise Server 10 SP3 LTSS (i586): java-1_5_0-ibm-alsa-1.5.0_sr16.4-0.5.1 java-1_5_0-ibm-jdbc-1.5.0_sr16.4-0.5.1 java-1_5_0-ibm-plugin-1.5.0_sr16.4-0.5.1 References: https://bugzilla.novell.com/849212 http://download.novell.com/patch/finder/?keywords=5081cdae28bd8b3832e528c33… http://download.novell.com/patch/finder/?keywords=72ed1fe5b55bbe85bd66cb799… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2013:1667-1: important: Security update for apache2-mod_fcgid
by opensuse-security＠opensuse.org 13 Nov '13

13 Nov '13

SUSE Security Update: Security update for apache2-mod_fcgid ______________________________________________________________________________ Announcement ID: SUSE-SU-2013:1667-1 Rating: important References: #844935 Cross-References: CVE-2013-4365 Affected Products: SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Cloud 2.0 SUSE Cloud 1.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: A heap overflow in the apache2-mod_fcgid module has been fixed that could have been used by remote attackers to crash the server instance. (CVE-2013-4365) Security Issue reference: * CVE-2013-4365 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4365 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11 SP3: zypper in -t patch sdksp3-apache2-mod_fcgid-8507 - SUSE Linux Enterprise Software Development Kit 11 SP2: zypper in -t patch sdksp2-apache2-mod_fcgid-8513 - SUSE Cloud 2.0: zypper in -t patch sleclo20sp3-apache2-mod_fcgid-8507 - SUSE Cloud 1.0: zypper in -t patch sleclo10sp2-apache2-mod_fcgid-8513 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11 SP3 (i586 ia64 ppc64 s390x x86_64): apache2-mod_fcgid-2.2-31.27.1 - SUSE Linux Enterprise Software Development Kit 11 SP2 (i586 ia64 ppc64 s390x x86_64): apache2-mod_fcgid-2.2-31.27.1 - SUSE Cloud 2.0 (x86_64): apache2-mod_fcgid-2.2-31.27.1 - SUSE Cloud 1.0 (x86_64): apache2-mod_fcgid-2.2-31.27.1 References: http://support.novell.com/security/cve/CVE-2013-4365.html https://bugzilla.novell.com/844935 http://download.novell.com/patch/finder/?keywords=2ea6e5e979750c5c03ff3b89d… http://download.novell.com/patch/finder/?keywords=87bbba52e23e65f50c0e0337f… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2013:1666-1: important: Security update for OpenJDK 7
by opensuse-security＠opensuse.org 13 Nov '13

13 Nov '13

SUSE Security Update: Security update for OpenJDK 7 ______________________________________________________________________________ Announcement ID: SUSE-SU-2013:1666-1 Rating: important References: #846999 Cross-References: CVE-2013-3829 CVE-2013-4002 CVE-2013-5772 CVE-2013-5774 CVE-2013-5778 CVE-2013-5780 CVE-2013-5782 CVE-2013-5783 CVE-2013-5784 CVE-2013-5790 CVE-2013-5797 CVE-2013-5800 CVE-2013-5802 CVE-2013-5803 CVE-2013-5804 CVE-2013-5805 CVE-2013-5806 CVE-2013-5809 CVE-2013-5814 CVE-2013-5817 CVE-2013-5820 CVE-2013-5823 CVE-2013-5825 CVE-2013-5829 CVE-2013-5830 CVE-2013-5840 CVE-2013-5842 CVE-2013-5849 CVE-2013-5850 CVE-2013-5851 Affected Products: SUSE Linux Enterprise Desktop 11 SP3 ______________________________________________________________________________ An update that fixes 30 vulnerabilities is now available. Description: This release updates our OpenJDK 7 support in the 2.4.x series with a number of security fixes and synchronises it with upstream development. The security issues fixed (a long list) can be found in the following link: http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-O ctober/025087.html <http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013- October/025087.html> Security Issue references: * CVE-2013-3829 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829 > * CVE-2013-5780 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5780 > * CVE-2013-5772 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5772 > * CVE-2013-5814 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814 > * CVE-2013-5790 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5790 > * CVE-2013-5849 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849 > * CVE-2013-5802 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802 > * CVE-2013-5851 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851 > * CVE-2013-5809 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809 > * CVE-2013-5817 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817 > * CVE-2013-5783 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783 > * CVE-2013-5782 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782 > * CVE-2013-5778 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778 > * CVE-2013-5803 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5803 > * CVE-2013-5840 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840 > * CVE-2013-5825 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825 > * CVE-2013-5842 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842 > * CVE-2013-5774 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774 > * CVE-2013-5804 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804 > * CVE-2013-5797 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5797 > * CVE-2013-5850 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850 > * CVE-2013-5829 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829 > * CVE-2013-5830 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830 > * CVE-2013-4002 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4002 > * CVE-2013-5784 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784 > * CVE-2013-5820 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820 > * CVE-2013-5805 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5805 > * CVE-2013-5806 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5806 > * CVE-2013-5823 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823 > * CVE-2013-5800 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Desktop 11 SP3: zypper in -t patch sledsp3-java-1_7_0-openjdk-8494 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Desktop 11 SP3 (i586 x86_64): java-1_7_0-openjdk-1.7.0.6-0.21.1 java-1_7_0-openjdk-demo-1.7.0.6-0.21.1 java-1_7_0-openjdk-devel-1.7.0.6-0.21.1 References: http://support.novell.com/security/cve/CVE-2013-3829.html http://support.novell.com/security/cve/CVE-2013-4002.html http://support.novell.com/security/cve/CVE-2013-5772.html http://support.novell.com/security/cve/CVE-2013-5774.html http://support.novell.com/security/cve/CVE-2013-5778.html http://support.novell.com/security/cve/CVE-2013-5780.html http://support.novell.com/security/cve/CVE-2013-5782.html http://support.novell.com/security/cve/CVE-2013-5783.html http://support.novell.com/security/cve/CVE-2013-5784.html http://support.novell.com/security/cve/CVE-2013-5790.html http://support.novell.com/security/cve/CVE-2013-5797.html http://support.novell.com/security/cve/CVE-2013-5800.html http://support.novell.com/security/cve/CVE-2013-5802.html http://support.novell.com/security/cve/CVE-2013-5803.html http://support.novell.com/security/cve/CVE-2013-5804.html http://support.novell.com/security/cve/CVE-2013-5805.html http://support.novell.com/security/cve/CVE-2013-5806.html http://support.novell.com/security/cve/CVE-2013-5809.html http://support.novell.com/security/cve/CVE-2013-5814.html http://support.novell.com/security/cve/CVE-2013-5817.html http://support.novell.com/security/cve/CVE-2013-5820.html http://support.novell.com/security/cve/CVE-2013-5823.html http://support.novell.com/security/cve/CVE-2013-5825.html http://support.novell.com/security/cve/CVE-2013-5829.html http://support.novell.com/security/cve/CVE-2013-5830.html http://support.novell.com/security/cve/CVE-2013-5840.html http://support.novell.com/security/cve/CVE-2013-5842.html http://support.novell.com/security/cve/CVE-2013-5849.html http://support.novell.com/security/cve/CVE-2013-5850.html http://support.novell.com/security/cve/CVE-2013-5851.html https://bugzilla.novell.com/846999 http://download.novell.com/patch/finder/?keywords=41b2667e06be42c5dcb1c0228… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2013:1661-1: critical: Security update for spacewalk-java
by opensuse-security＠opensuse.org 12 Nov '13

12 Nov '13

SUSE Security Update: Security update for spacewalk-java ______________________________________________________________________________ Announcement ID: SUSE-SU-2013:1661-1 Rating: critical References: #848639 Cross-References: CVE-2013-4480 Affected Products: SUSE Manager 1.7 for SLE 11 SP2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. It includes one version update. Description: This update fixes an admin user dialog problem in spacewalk. The "add new admin user" functionality didn't get disabled after it was used. So after install/adding the first admin user anyone could have added additional admin users. Security Issue reference: * CVE-2013-4480 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4480 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Manager 1.7 for SLE 11 SP2: zypper in -t patch sleman17sp2-spacewalk-java-8506 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Manager 1.7 for SLE 11 SP2 (noarch) [New Version: 1.7.54.28]: spacewalk-java-1.7.54.28-0.9.1 spacewalk-java-config-1.7.54.28-0.9.1 spacewalk-java-lib-1.7.54.28-0.9.1 spacewalk-java-oracle-1.7.54.28-0.9.1 spacewalk-java-postgresql-1.7.54.28-0.9.1 spacewalk-taskomatic-1.7.54.28-0.9.1 References: http://support.novell.com/security/cve/CVE-2013-4480.html https://bugzilla.novell.com/848639 http://download.novell.com/patch/finder/?keywords=aa559fbaae468d78dbd943db5… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2013:1660-1: important: Security update for jakarta-commons-fileupload
by opensuse-security＠opensuse.org 12 Nov '13

12 Nov '13

SUSE Security Update: Security update for jakarta-commons-fileupload ______________________________________________________________________________ Announcement ID: SUSE-SU-2013:1660-1 Rating: important References: #846174 Cross-References: CVE-2013-2186 Affected Products: SUSE Linux Enterprise Server 11 SP3 for VMware SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP2 for VMware SUSE Linux Enterprise Server 11 SP2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: jakarta-commons-fileupload received a security fix: * A poison null byte flaw was found in the implementation of the DiskFileItem class. A remote attacker could able to supply a serialized instance of the DiskFileItem class, which would be deserialized on a server, could use this flaw to write arbitrary content to any location on the server that is permitted by the user running the application server process. (CVE-2013-2186) Security Issue reference: * CVE-2013-2186 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2186 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 11 SP3 for VMware: zypper in -t patch slessp3-jakarta-commons-fileupload-8446 - SUSE Linux Enterprise Server 11 SP3: zypper in -t patch slessp3-jakarta-commons-fileupload-8446 - SUSE Linux Enterprise Server 11 SP2 for VMware: zypper in -t patch slessp2-jakarta-commons-fileupload-8445 - SUSE Linux Enterprise Server 11 SP2: zypper in -t patch slessp2-jakarta-commons-fileupload-8445 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Server 11 SP3 for VMware (noarch): jakarta-commons-fileupload-1.1.1-1.35.1 jakarta-commons-fileupload-javadoc-1.1.1-1.35.1 - SUSE Linux Enterprise Server 11 SP3 (noarch): jakarta-commons-fileupload-1.1.1-1.35.1 jakarta-commons-fileupload-javadoc-1.1.1-1.35.1 - SUSE Linux Enterprise Server 11 SP2 for VMware (noarch): jakarta-commons-fileupload-1.1.1-1.35.1 jakarta-commons-fileupload-javadoc-1.1.1-1.35.1 - SUSE Linux Enterprise Server 11 SP2 (noarch): jakarta-commons-fileupload-1.1.1-1.35.1 jakarta-commons-fileupload-javadoc-1.1.1-1.35.1 References: http://support.novell.com/security/cve/CVE-2013-2186.html https://bugzilla.novell.com/846174 http://download.novell.com/patch/finder/?keywords=4e850046eae7d47e6c4921a62… http://download.novell.com/patch/finder/?keywords=56b6ca4a38407b07a824c188a… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE Linux Enterprise 10 End of General Support Announcement
by Marcus Meissner 08 Nov '13

08 Nov '13

Dear customers, SUSE released the final regular maintenance update for SUSE Linux Enterprise 10 Service Pack 4 August 2nd 2013, according to our SUSE Linux Enterprise Server product lifecycle and support policies. This release marks the end of the General Support and Maintenance phase of the SUSE Linux Enterprise 10 codestream. As an important benefit of our subscription model and product, active product subscriptions entitle you to access, deploy and operate the most recent available product version. Recommended successor version and details of SUSE Linux Enterprice lifecycle can be reviewed at http://support.suse.com/lifecycle/ . We encourage you and recommend to plan and to migrate to a more recent version of the products mentioned below, if not already done. Please note, we support product migration and update, for e.g. SLES 10 SP4 to SLES 11 SP3, to ease migration and upgrade. In case you like to continue to run * SUSE Linux Enterprise Server 10 SP3 or * SUSE Linux Enterprise Server 10 SP4, and continue to receive maintenance and support, we offer a Long Term Service Pack Support (LTSS) program. Long Term Service Pack Support (LTSS), available for x86, x86-64 and IBM System z architectures, enables you to extend the lifecycle of each major version of SUSE Linux Enterprise Server up to an additional 3 years, for a total of ten years. An active SUSE Linux Enterprise Server subscription is required and configuration limitations apply. Details of the LTSS program can be found at http://www.novell.com/linux/service-pack-support.ht Detailed information about released functional and security udpates can be retrieved at https://download.novell.com/patch/finder/ and https://www.suse.com/support/update/ . SUSE Linux Enterprise 10 End of General Support marks the end of the General Support and Maintenance phase of the SUSE Linux Enterprise 10 and all related service packs, dated 2013-08-01. Accordingly we will no longer provide updated packages and technical support for the following products: * SUSE Linux Enterprise Desktop 10 all service packs * SUSE Linux Enterprise SDK 10 all service packs * SUSE Linux Enterprise Realtime 10 all service packs * SUSE Subscription Management Tool (SMT) 10 all service packs If you have any question, please don't hesitate to contact us: https://www.suse.com/ContactsOffices/contacts_offices.jsp

1 0