March 2013 - openSUSE Security Announce

[security-announce] SUSE-SU-2013:0440-3: important: Security update for Java
by opensuse-security＠opensuse.org 14 Mar '13

14 Mar '13

SUSE Security Update: Security update for Java ______________________________________________________________________________ Announcement ID: SUSE-SU-2013:0440-3 Rating: important References: #798535 Affected Products: SUSE Linux Enterprise Server 11 SP1 for VMware LTSS SUSE Linux Enterprise Server 11 SP1 LTSS SUSE Linux Enterprise Server 10 SP3 LTSS ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: IBM Java 1.4.2 has been updated to SR13-FP15 which fixes various critical security issues and bugs. Please see the IBM JDK Alert page for more information: http://www.ibm.com/developerworks/java/jdk/alerts/ <http://www.ibm.com/developerworks/java/jdk/alerts/> Security issues fixed: CVE-2013-1478, CVE-2013-1480, CVE-2013-1476, CVE-2013-0442, CVE-2013-0425, CVE-2013-0426, CVE-2013-0428, CVE-2013-1481, CVE-2013-0432, CVE-2013-0434, CVE-2013-0424, CVE-2013-0440, CVE-2013-0443. Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 11 SP1 for VMware LTSS: zypper in -t patch slessp1-java-1_4_2-ibm-7479 - SUSE Linux Enterprise Server 11 SP1 LTSS: zypper in -t patch slessp1-java-1_4_2-ibm-7479 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Server 11 SP1 for VMware LTSS (i586 x86_64): java-1_4_2-ibm-1.4.2_sr13.15-0.3.1 - SUSE Linux Enterprise Server 11 SP1 for VMware LTSS (i586): java-1_4_2-ibm-jdbc-1.4.2_sr13.15-0.3.1 java-1_4_2-ibm-plugin-1.4.2_sr13.15-0.3.1 - SUSE Linux Enterprise Server 11 SP1 LTSS (i586 s390x x86_64): java-1_4_2-ibm-1.4.2_sr13.15-0.3.1 - SUSE Linux Enterprise Server 11 SP1 LTSS (i586): java-1_4_2-ibm-jdbc-1.4.2_sr13.15-0.3.1 java-1_4_2-ibm-plugin-1.4.2_sr13.15-0.3.1 - SUSE Linux Enterprise Server 10 SP3 LTSS (i586 s390x x86_64): java-1_4_2-ibm-1.4.2_sr13.15-0.6.1 java-1_4_2-ibm-devel-1.4.2_sr13.15-0.6.1 - SUSE Linux Enterprise Server 10 SP3 LTSS (i586): java-1_4_2-ibm-jdbc-1.4.2_sr13.15-0.6.1 java-1_4_2-ibm-plugin-1.4.2_sr13.15-0.6.1 References: https://bugzilla.novell.com/798535 http://download.novell.com/patch/finder/?keywords=7014ea77ffe5c5f4f2e593888… http://download.novell.com/patch/finder/?keywords=fc8b17df6be0cc8370eff53d8… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2013:0464-1: critical: flash-player: update to version 11.2.202.275
by opensuse-security＠opensuse.org 14 Mar '13

14 Mar '13

openSUSE Security Update: flash-player: update to version 11.2.202.275 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0464-1 Rating: critical References: #808973 Cross-References: CVE-2013-0646 CVE-2013-0650 CVE-2013-1371 CVE-2013-1375 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: Adobe Flash Player was updated to 11.2.202.275: (bnc#808973) * APSB13-09, CVE-2013-0646, CVE-2013-0650, CVE-2013-1371, CVE-2013-1375 More information can be found on: http://www.adobe.com/support/security/bulletins/apsb13-09.ht ml Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-41 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): flash-player-11.2.202.275-55.1 flash-player-gnome-11.2.202.275-55.1 flash-player-kde4-11.2.202.275-55.1 References: http://support.novell.com/security/cve/CVE-2013-0646.html http://support.novell.com/security/cve/CVE-2013-0650.html http://support.novell.com/security/cve/CVE-2013-1371.html http://support.novell.com/security/cve/CVE-2013-1375.html https://bugzilla.novell.com/808973 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2013:0456-2: important: Security update for Java
by opensuse-security＠opensuse.org 14 Mar '13

14 Mar '13

SUSE Security Update: Security update for Java ______________________________________________________________________________ Announcement ID: SUSE-SU-2013:0456-2 Rating: important References: #798535 #808625 Affected Products: SUSE Linux Enterprise Server 10 SP3 LTSS ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: IBM Java 6 has been updated to SR13 which fixes various critical security issues and bugs. Please see the IBM JDK Alert page for more information: http://www.ibm.com/developerworks/java/jdk/alerts/ <http://www.ibm.com/developerworks/java/jdk/alerts/> Security issues fixed: CVE-2013-1487, CVE-2013-1486, CVE-2013-1478, CVE-2013-0445, CVE-2013-1480, CVE-2013-0441, CVE-2013-1476, CVE-2012-1541, CVE-2013-0446, CVE-2012-3342, CVE-2013-0442, CVE-2013-0450, CVE-2013-0425, CVE-2013-0426, CVE-2013-0428, CVE-2012-3213, CVE-2013-1481, CVE-2013-0419, CVE-2013-0423, CVE-2013-0351, CVE-2013-0432, CVE-2013-1473, CVE-2013-0435, CVE-2013-0434, CVE-2013-0409, CVE-2013-0427, CVE-2013-0433, CVE-2013-0424, CVE-2013-0440, CVE-2013-0438, CVE-2013-0443. Package List: - SUSE Linux Enterprise Server 10 SP3 LTSS (i586 s390x x86_64): java-1_6_0-ibm-1.6.0_sr13.0-0.7.7.1 java-1_6_0-ibm-devel-1.6.0_sr13.0-0.7.7.1 java-1_6_0-ibm-fonts-1.6.0_sr13.0-0.7.7.1 java-1_6_0-ibm-jdbc-1.6.0_sr13.0-0.7.7.1 - SUSE Linux Enterprise Server 10 SP3 LTSS (s390x x86_64): java-1_6_0-ibm-32bit-1.6.0_sr13.0-0.7.7.1 java-1_6_0-ibm-devel-32bit-1.6.0_sr13.0-0.7.7.1 - SUSE Linux Enterprise Server 10 SP3 LTSS (i586 x86_64): java-1_6_0-ibm-plugin-1.6.0_sr13.0-0.7.7.1 - SUSE Linux Enterprise Server 10 SP3 LTSS (x86_64): java-1_6_0-ibm-alsa-32bit-1.6.0_sr13.0-0.7.7.1 java-1_6_0-ibm-plugin-32bit-1.6.0_sr13.0-0.7.7.1 - SUSE Linux Enterprise Server 10 SP3 LTSS (i586): java-1_6_0-ibm-alsa-1.6.0_sr13.0-0.7.7.1 References: https://bugzilla.novell.com/798535 https://bugzilla.novell.com/808625 http://download.novell.com/patch/finder/?keywords=219c5ead437be21a7209a3563… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2013:0459-1: critical: flash-player: update to version 11.2.202.275
by opensuse-security＠opensuse.org 14 Mar '13

14 Mar '13

openSUSE Security Update: flash-player: update to version 11.2.202.275 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0459-1 Rating: critical References: #808973 Cross-References: CVE-2013-0646 CVE-2013-0650 CVE-2013-1371 CVE-2013-1375 Affected Products: openSUSE 12.3:NonFree openSUSE 12.2:NonFree openSUSE 12.1 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: Adobe Flash Player was updated to 11.2.202.275: (bnc#808973) * APSB13-09, CVE-2013-0646, CVE-2013-0650, CVE-2013-1371, CVE-2013-1375 More information can be found on: http://www.adobe.com/support/security/bulletins/apsb13-09.ht ml Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3:NonFree: zypper in -t patch openSUSE-2013-205 - openSUSE 12.2:NonFree: zypper in -t patch openSUSE-2013-205 - openSUSE 12.1: zypper in -t patch openSUSE-2013-205 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3:NonFree (i586 x86_64): flash-player-11.2.202.275-2.12.1 flash-player-gnome-11.2.202.275-2.12.1 flash-player-kde4-11.2.202.275-2.12.1 - openSUSE 12.2:NonFree (i586 x86_64): flash-player-11.2.202.275-1.34.1 flash-player-gnome-11.2.202.275-1.34.1 flash-player-kde4-11.2.202.275-1.34.1 - openSUSE 12.1 (i586 x86_64): flash-player-11.2.202.275-58.1 flash-player-gnome-11.2.202.275-58.1 flash-player-kde4-11.2.202.275-58.1 References: http://support.novell.com/security/cve/CVE-2013-0646.html http://support.novell.com/security/cve/CVE-2013-0650.html http://support.novell.com/security/cve/CVE-2013-1371.html http://support.novell.com/security/cve/CVE-2013-1375.html https://bugzilla.novell.com/808973 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2013:0458-1: critical: Security update for flash-player
by opensuse-security＠opensuse.org 14 Mar '13

14 Mar '13

SUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: SUSE-SU-2013:0458-1 Rating: critical References: #808973 Cross-References: CVE-2013-0646 CVE-2013-0650 CVE-2013-1371 CVE-2013-1375 Affected Products: SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 10 SP4 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. It includes one version update. Description: Adobe Flash Player has been updated to security release 11.2.202.275 (APSB13-09), fixing severe security issues. (CVE-2013-0646, CVE-2013-0650, CVE-2013-1371, CVE-2013-1375) More information can be found on: http://www.adobe.com/support/security/bulletins/apsb13-09.ht ml <http://www.adobe.com/support/security/bulletins/apsb13-09.h tml> Security Issue references: * CVE-2013-0646 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0646 > * CVE-2013-0650 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0650 > * CVE-2013-1371 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1371 > * CVE-2013-1375 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1375 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Desktop 11 SP2: zypper in -t patch sledsp2-flash-player-7491 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Desktop 11 SP2 (i586 x86_64) [New Version: 11.2.202.275]: flash-player-11.2.202.275-0.3.1 flash-player-gnome-11.2.202.275-0.3.1 flash-player-kde4-11.2.202.275-0.3.1 - SUSE Linux Enterprise Desktop 10 SP4 (i586) [New Version: 11.2.202.275]: flash-player-11.2.202.275-0.5.1 References: http://support.novell.com/security/cve/CVE-2013-0646.html http://support.novell.com/security/cve/CVE-2013-0650.html http://support.novell.com/security/cve/CVE-2013-1371.html http://support.novell.com/security/cve/CVE-2013-1375.html https://bugzilla.novell.com/808973 http://download.novell.com/patch/finder/?keywords=a590b251093353c9a532d47fa… http://download.novell.com/patch/finder/?keywords=ced16d4be49bc3ca3c262247f… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2013:0456-1: important: Security update for Java
by opensuse-security＠opensuse.org 14 Mar '13

14 Mar '13

SUSE Security Update: Security update for Java ______________________________________________________________________________ Announcement ID: SUSE-SU-2013:0456-1 Rating: important References: #798535 #808625 Affected Products: SUSE Linux Enterprise Server 10 SP4 SUSE Linux Enterprise Java 10 SP4 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: IBM Java 6 has been updated to SR13 which fixes various critical security issues and bugs. Please see the IBM JDK Alert page for more information: http://www.ibm.com/developerworks/java/jdk/alerts/ <http://www.ibm.com/developerworks/java/jdk/alerts/> Security issues fixed: CVE-2013-1487, CVE-2013-1486, CVE-2013-1478, CVE-2013-0445, CVE-2013-1480, CVE-2013-0441, CVE-2013-1476, CVE-2012-1541, CVE-2013-0446, CVE-2012-3342, CVE-2013-0442, CVE-2013-0450, CVE-2013-0425, CVE-2013-0426, CVE-2013-0428, CVE-2012-3213, CVE-2013-1481, CVE-2013-0419, CVE-2013-0423, CVE-2013-0351, CVE-2013-0432, CVE-2013-1473, CVE-2013-0435, CVE-2013-0434, CVE-2013-0409, CVE-2013-0427, CVE-2013-0433, CVE-2013-0424, CVE-2013-0440, CVE-2013-0438, CVE-2013-0443. Package List: - SUSE Linux Enterprise Server 10 SP4 (i586 ppc s390x x86_64): java-1_6_0-ibm-1.6.0_sr13.0-0.13.3 java-1_6_0-ibm-devel-1.6.0_sr13.0-0.13.3 java-1_6_0-ibm-fonts-1.6.0_sr13.0-0.13.3 java-1_6_0-ibm-jdbc-1.6.0_sr13.0-0.13.3 - SUSE Linux Enterprise Server 10 SP4 (i586 ppc x86_64): java-1_6_0-ibm-plugin-1.6.0_sr13.0-0.13.3 - SUSE Linux Enterprise Server 10 SP4 (s390x x86_64): java-1_6_0-ibm-32bit-1.6.0_sr13.0-0.13.3 java-1_6_0-ibm-devel-32bit-1.6.0_sr13.0-0.13.3 - SUSE Linux Enterprise Server 10 SP4 (x86_64): java-1_6_0-ibm-alsa-32bit-1.6.0_sr13.0-0.13.3 java-1_6_0-ibm-plugin-32bit-1.6.0_sr13.0-0.13.3 - SUSE Linux Enterprise Server 10 SP4 (i586): java-1_6_0-ibm-alsa-1.6.0_sr13.0-0.13.3 - SUSE Linux Enterprise Server 10 SP4 (ppc): java-1_6_0-ibm-64bit-1.6.0_sr13.0-0.13.3 - SUSE Linux Enterprise Java 10 SP4 (x86_64): java-1_6_0-ibm-1.6.0_sr13.0-0.13.3 java-1_6_0-ibm-devel-1.6.0_sr13.0-0.13.3 java-1_6_0-ibm-fonts-1.6.0_sr13.0-0.13.3 java-1_6_0-ibm-jdbc-1.6.0_sr13.0-0.13.3 java-1_6_0-ibm-plugin-1.6.0_sr13.0-0.13.3 References: https://bugzilla.novell.com/798535 https://bugzilla.novell.com/808625 http://download.novell.com/patch/finder/?keywords=78075f3faaadfb1d4a70cc040… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2013:0440-2: important: Security update for Java
by opensuse-security＠opensuse.org 13 Mar '13

13 Mar '13

SUSE Security Update: Security update for Java ______________________________________________________________________________ Announcement ID: SUSE-SU-2013:0440-2 Rating: important References: #798535 Affected Products: SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Server 11 SP2 for VMware SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 10 SP4 SUSE Linux Enterprise Java 11 SP2 SUSE Linux Enterprise Java 10 SP4 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: IBM Java 1.4.2 has been updated to SR13-FP15 which fixes various critical security issues and bugs. Please see the IBM JDK Alert page for more information: http://www.ibm.com/developerworks/java/jdk/alerts/ <http://www.ibm.com/developerworks/java/jdk/alerts/> Security issues fixed: CVE-2013-1478, CVE-2013-1480, CVE-2013-1476, CVE-2013-0442, CVE-2013-0425, CVE-2013-0426, CVE-2013-0428, CVE-2013-1481, CVE-2013-0432, CVE-2013-0434, CVE-2013-0424, CVE-2013-0440, CVE-2013-0443. Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11 SP2: zypper in -t patch sdksp2-java-1_4_2-ibm-7450 - SUSE Linux Enterprise Server 11 SP2 for VMware: zypper in -t patch slessp2-java-1_4_2-ibm-7450 - SUSE Linux Enterprise Server 11 SP2: zypper in -t patch slessp2-java-1_4_2-ibm-7450 - SUSE Linux Enterprise Java 11 SP2: zypper in -t patch slejsp2-java-1_4_2-ibm-7450 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11 SP2 (i586 ia64 ppc64 s390x x86_64): java-1_4_2-ibm-devel-1.4.2_sr13.15-0.3.1 - SUSE Linux Enterprise Software Development Kit 11 SP2 (i586 x86_64): java-1_4_2-ibm-1.4.2_sr13.15-0.3.1 - SUSE Linux Enterprise Server 11 SP2 for VMware (i586 x86_64): java-1_4_2-ibm-1.4.2_sr13.15-0.3.1 - SUSE Linux Enterprise Server 11 SP2 for VMware (i586): java-1_4_2-ibm-jdbc-1.4.2_sr13.15-0.3.1 java-1_4_2-ibm-plugin-1.4.2_sr13.15-0.3.1 - SUSE Linux Enterprise Server 11 SP2 (i586 ia64 ppc64 s390x x86_64): java-1_4_2-ibm-1.4.2_sr13.15-0.3.1 - SUSE Linux Enterprise Server 11 SP2 (i586): java-1_4_2-ibm-jdbc-1.4.2_sr13.15-0.3.1 java-1_4_2-ibm-plugin-1.4.2_sr13.15-0.3.1 - SUSE Linux Enterprise Server 10 SP4 (i586 ia64 ppc s390x x86_64): java-1_4_2-ibm-1.4.2_sr13.15-0.6.1 java-1_4_2-ibm-devel-1.4.2_sr13.15-0.6.1 - SUSE Linux Enterprise Server 10 SP4 (i586 ppc): java-1_4_2-ibm-jdbc-1.4.2_sr13.15-0.6.1 - SUSE Linux Enterprise Server 10 SP4 (i586): java-1_4_2-ibm-plugin-1.4.2_sr13.15-0.6.1 - SUSE Linux Enterprise Java 11 SP2 (i586 ppc64 s390x x86_64): java-1_4_2-ibm-1.4.2_sr13.15-0.3.1 - SUSE Linux Enterprise Java 11 SP2 (i586): java-1_4_2-ibm-jdbc-1.4.2_sr13.15-0.3.1 java-1_4_2-ibm-plugin-1.4.2_sr13.15-0.3.1 - SUSE Linux Enterprise Java 10 SP4 (i586 ia64 ppc s390x x86_64): java-1_4_2-ibm-1.4.2_sr13.15-0.6.1 java-1_4_2-ibm-devel-1.4.2_sr13.15-0.6.1 - SUSE Linux Enterprise Java 10 SP4 (i586 ppc): java-1_4_2-ibm-jdbc-1.4.2_sr13.15-0.6.1 - SUSE Linux Enterprise Java 10 SP4 (i586): java-1_4_2-ibm-plugin-1.4.2_sr13.15-0.6.1 References: https://bugzilla.novell.com/798535 http://download.novell.com/patch/finder/?keywords=93cb6121fadaf694135bd63c1… http://download.novell.com/patch/finder/?keywords=ec9d22c393a1ca0adfb36328a… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2013:0442-1: important: Security update for Perl
by opensuse-security＠opensuse.org 12 Mar '13

12 Mar '13

SUSE Security Update: Security update for Perl ______________________________________________________________________________ Announcement ID: SUSE-SU-2013:0442-1 Rating: important References: #788388 #789994 #796014 #797060 #804415 Cross-References: CVE-2013-1667 Affected Products: SUSE Linux Enterprise Server 10 SP4 SUSE Linux Enterprise Desktop 10 SP4 ______________________________________________________________________________ An update that solves one vulnerability and has four fixes is now available. Description: This update of Perl 5 fixes the following security issues: * fix rehash DoS [bnc#804415] [CVE-2013-1667] * improve CGI crlf escaping [bnc#789994] [CVE-2012-5526] * fix glob denial of service [bnc#796014] [CVE-2011-2728] * sanitize input in Maketext.pm [bnc#797060] [CVE-2012-6329] * make getgrent work with long group entries [bnc#788388] Security Issue reference: * CVE-2013-1667 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1667 > Package List: - SUSE Linux Enterprise Server 10 SP4 (i586 ia64 ppc s390x x86_64): perl-5.8.8-14.21.3 - SUSE Linux Enterprise Server 10 SP4 (s390x x86_64): perl-32bit-5.8.8-14.21.3 - SUSE Linux Enterprise Server 10 SP4 (ia64): perl-x86-5.8.8-14.21.3 - SUSE Linux Enterprise Server 10 SP4 (ppc): perl-64bit-5.8.8-14.21.3 - SUSE Linux Enterprise Desktop 10 SP4 (i586 x86_64): perl-5.8.8-14.21.3 - SUSE Linux Enterprise Desktop 10 SP4 (x86_64): perl-32bit-5.8.8-14.21.3 References: http://support.novell.com/security/cve/CVE-2013-1667.html https://bugzilla.novell.com/788388 https://bugzilla.novell.com/789994 https://bugzilla.novell.com/796014 https://bugzilla.novell.com/797060 https://bugzilla.novell.com/804415 http://download.novell.com/patch/finder/?keywords=ed1929d51b82752f08399dada… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2013:0441-1: important: Security update for Perl
by opensuse-security＠opensuse.org 12 Mar '13

12 Mar '13

SUSE Security Update: Security update for Perl ______________________________________________________________________________ Announcement ID: SUSE-SU-2013:0441-1 Rating: important References: #789994 #796014 #797060 #804415 Cross-References: CVE-2013-1667 Affected Products: SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Server 11 SP2 for VMware SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Desktop 11 SP2 ______________________________________________________________________________ An update that solves one vulnerability and has three fixes is now available. Description: This update of Perl 5 fixes the following security issues: * fix rehash DoS [bnc#804415] [CVE-2013-1667] * improve CGI crlf escaping [bnc#789994] [CVE-2012-5526] * fix glob denial of service [bnc#796014] [CVE-2011-2728] * sanitize input in Maketext.pm [bnc#797060] [CVE-2012-6329] Security Issue references: * CVE-2013-1667 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1667 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11 SP2: zypper in -t patch sdksp2-perl-7439 - SUSE Linux Enterprise Server 11 SP2 for VMware: zypper in -t patch slessp2-perl-7439 - SUSE Linux Enterprise Server 11 SP2: zypper in -t patch slessp2-perl-7439 - SUSE Linux Enterprise Desktop 11 SP2: zypper in -t patch sledsp2-perl-7439 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11 SP2 (ppc64 s390x x86_64): perl-base-32bit-5.10.0-64.61.61.1 - SUSE Linux Enterprise Software Development Kit 11 SP2 (ia64): perl-base-x86-5.10.0-64.61.61.1 - SUSE Linux Enterprise Server 11 SP2 for VMware (i586 x86_64): perl-5.10.0-64.61.61.1 perl-base-5.10.0-64.61.61.1 perl-doc-5.10.0-64.61.61.1 - SUSE Linux Enterprise Server 11 SP2 for VMware (x86_64): perl-32bit-5.10.0-64.61.61.1 - SUSE Linux Enterprise Server 11 SP2 (i586 ia64 ppc64 s390x x86_64): perl-5.10.0-64.61.61.1 perl-base-5.10.0-64.61.61.1 perl-doc-5.10.0-64.61.61.1 - SUSE Linux Enterprise Server 11 SP2 (ppc64 s390x x86_64): perl-32bit-5.10.0-64.61.61.1 - SUSE Linux Enterprise Server 11 SP2 (ia64): perl-x86-5.10.0-64.61.61.1 - SUSE Linux Enterprise Desktop 11 SP2 (i586 x86_64): perl-5.10.0-64.61.61.1 perl-base-5.10.0-64.61.61.1 perl-doc-5.10.0-64.61.61.1 - SUSE Linux Enterprise Desktop 11 SP2 (x86_64): perl-32bit-5.10.0-64.61.61.1 References: http://support.novell.com/security/cve/CVE-2013-1667.html https://bugzilla.novell.com/789994 https://bugzilla.novell.com/796014 https://bugzilla.novell.com/797060 https://bugzilla.novell.com/804415 http://download.novell.com/patch/finder/?keywords=3663b3a5fb6a8f33323d36be1… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2013:0440-1: important: Security update for Java
by opensuse-security＠opensuse.org 12 Mar '13

12 Mar '13

SUSE Security Update: Security update for Java ______________________________________________________________________________ Announcement ID: SUSE-SU-2013:0440-1 Rating: important References: #798535 Affected Products: SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Server 11 SP2 for VMware SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Java 11 SP2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: IBM Java 7 was updated to SR4, fixing various critical security issues and bugs. Please see the IBM JDK Alert page for more information: http://www.ibm.com/developerworks/java/jdk/alerts/ <http://www.ibm.com/developerworks/java/jdk/alerts/> Security issues fixed: CVE-2013-1487, CVE-2013-1486, CVE-2013-1478, CVE-2013-0445, CVE-2013-1480, CVE-2013-0441, CVE-2013-1476, CVE-2012-1541, CVE-2013-0446, CVE-2012-3342, CVE-2013-0442, CVE-2013-0450, CVE-2013-0425, CVE-2013-0426, CVE-2013-0428, CVE-2012-3213, CVE-2013-0419, CVE-2013-0423, CVE-2013-0351, CVE-2013-0432, CVE-2013-1473, CVE-2013-0435, CVE-2013-0434, CVE-2013-0409, CVE-2013-0427, CVE-2013-0433, CVE-2013-0424, CVE-2013-0440, CVE-2013-0438, CVE-2013-0443, CVE-2013-1484, CVE-2013-1485, CVE-2013-0437, CVE-2013-0444, CVE-2013-0449, CVE-2013-0431, CVE-2013-0422, CVE-2012-3174. Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11 SP2: zypper in -t patch sdksp2-java-1_7_0-ibm-7454 - SUSE Linux Enterprise Server 11 SP2 for VMware: zypper in -t patch slessp2-java-1_7_0-ibm-7454 - SUSE Linux Enterprise Server 11 SP2: zypper in -t patch slessp2-java-1_7_0-ibm-7454 - SUSE Linux Enterprise Java 11 SP2: zypper in -t patch slejsp2-java-1_7_0-ibm-7454 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11 SP2 (i586 ppc64 s390x x86_64): java-1_7_0-ibm-devel-1.7.0_sr4.0-0.6.1 - SUSE Linux Enterprise Server 11 SP2 for VMware (i586 x86_64): java-1_7_0-ibm-1.7.0_sr4.0-0.6.1 java-1_7_0-ibm-jdbc-1.7.0_sr4.0-0.6.1 java-1_7_0-ibm-plugin-1.7.0_sr4.0-0.6.1 - SUSE Linux Enterprise Server 11 SP2 for VMware (i586): java-1_7_0-ibm-alsa-1.7.0_sr4.0-0.6.1 - SUSE Linux Enterprise Server 11 SP2 (i586 ppc64 s390x x86_64): java-1_7_0-ibm-1.7.0_sr4.0-0.6.1 java-1_7_0-ibm-jdbc-1.7.0_sr4.0-0.6.1 - SUSE Linux Enterprise Server 11 SP2 (i586 x86_64): java-1_7_0-ibm-plugin-1.7.0_sr4.0-0.6.1 - SUSE Linux Enterprise Server 11 SP2 (i586): java-1_7_0-ibm-alsa-1.7.0_sr4.0-0.6.1 - SUSE Linux Enterprise Java 11 SP2 (i586 ppc64 s390x x86_64): java-1_7_0-ibm-1.7.0_sr4.0-0.6.1 java-1_7_0-ibm-devel-1.7.0_sr4.0-0.6.1 java-1_7_0-ibm-jdbc-1.7.0_sr4.0-0.6.1 - SUSE Linux Enterprise Java 11 SP2 (i586 x86_64): java-1_7_0-ibm-alsa-1.7.0_sr4.0-0.6.1 java-1_7_0-ibm-plugin-1.7.0_sr4.0-0.6.1 References: https://bugzilla.novell.com/798535 http://download.novell.com/patch/finder/?keywords=ec2cc97511073c725601f4d83… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0