June 2013 - openSUSE Security Announce

[security-announce] openSUSE-SU-2013:0954-1: important: flash-player to 11.2.202.285
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Security Update: flash-player to 11.2.202.285 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0954-1 Rating: important References: #819916 Cross-References: CVE-2013-2728 CVE-2013-3324 CVE-2013-3325 CVE-2013-3326 CVE-2013-3327 CVE-2013-3328 CVE-2013-3329 CVE-2013-3330 CVE-2013-3331 CVE-2013-3332 CVE-2013-3333 CVE-2013-3334 CVE-2013-3335 Affected Products: openSUSE 12.3:NonFree openSUSE 12.2:NonFree ______________________________________________________________________________ An update that fixes 13 vulnerabilities is now available. Description: flash-player was updated to security update to 11.2.202.285 * APSB13-14, CVE-2013-2728, CVE-2013-3324, CVE-2013-3325, CVE-2013-3326, CVE-2013-3327, CVE-2013-3328, CVE-2013-3329, CVE-2013-3330, CVE-2013-3331, CVE-2013-3332, CVE-2013-3333, CVE-2013-3334, CVE-2013-3335 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3:NonFree: zypper in -t patch openSUSE-2013-425 - openSUSE 12.2:NonFree: zypper in -t patch openSUSE-2013-425 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3:NonFree (i586 x86_64): flash-player-11.2.202.285-2.24.1 flash-player-gnome-11.2.202.285-2.24.1 flash-player-kde4-11.2.202.285-2.24.1 - openSUSE 12.2:NonFree (i586 x86_64): flash-player-11.2.202.285-1.46.1 flash-player-gnome-11.2.202.285-1.46.1 flash-player-kde4-11.2.202.285-1.46.1 References: http://support.novell.com/security/cve/CVE-2013-2728.html http://support.novell.com/security/cve/CVE-2013-3324.html http://support.novell.com/security/cve/CVE-2013-3325.html http://support.novell.com/security/cve/CVE-2013-3326.html http://support.novell.com/security/cve/CVE-2013-3327.html http://support.novell.com/security/cve/CVE-2013-3328.html http://support.novell.com/security/cve/CVE-2013-3329.html http://support.novell.com/security/cve/CVE-2013-3330.html http://support.novell.com/security/cve/CVE-2013-3331.html http://support.novell.com/security/cve/CVE-2013-3332.html http://support.novell.com/security/cve/CVE-2013-3333.html http://support.novell.com/security/cve/CVE-2013-3334.html http://support.novell.com/security/cve/CVE-2013-3335.html https://bugzilla.novell.com/819916 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2013:0951-1: critical: kernel: security and bugfix update
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Security Update: kernel: security and bugfix update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0951-1 Rating: critical References: #803931 #813889 #815745 #818327 #818497 #819519 #819789 #820048 Cross-References: CVE-2013-0290 CVE-2013-2094 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that solves two vulnerabilities and has 6 fixes is now available. Description: The openSUSE 12.3 kernel was updated to fix a critical security issue, other security issues and several bugs. Security issues fixed: CVE-2013-2094: The perf_swevent_init function in kernel/events/core.c in the Linux kernel used an incorrect integer data type, which allowed local users to gain privileges via a crafted perf_event_open system call. CVE-2013-0290: The __skb_recv_datagram function in net/core/datagram.c in the Linux kernel did not properly handle the MSG_PEEK flag with zero-length data, which allowed local users to cause a denial of service (infinite loop and system hang) via a crafted application. Bugs fixed: - qlge: fix dma map leak when the last chunk is not allocated (bnc#819519). - ACPI / thermal: do not always return THERMAL_TREND_RAISING for active trip points (bnc#820048). - perf: Treat attr.config as u64 in perf_swevent_init() (bnc#819789, CVE-2013-2094). - cxgb4: fix error recovery when t4_fw_hello returns a positive value (bnc#818497). - kabi/severities: Ignore drivers/mfd/ucb1400_core It provides internal exports to UCB1400 drivers, that we have just disabled. - Fix -devel package for armv7hl armv7hl kernel flavors in the non-multiplatform configuration (which is the default for our openSUSE 12.3 release), needs more header files from the machine specific directories to be included in kernel-devel. - Update config files: disable UCB1400 on all but ARM Currently UCB1400 is only used on ARM OMAP systems, and part of the code is dead code that can't even be modularized. - CONFIG_UCB1400_CORE=n - CONFIG_TOUCHSCREEN_UCB1400=n - CONFIG_GPIO_UCB1400=n - rpm/config.sh: Drop the ARM repository, the KOTD will build against the "ports" repository of openSUSE:12.3 - mm/mmap: check for RLIMIT_AS before unmapping (bnc#818327). - rpm/kernel-spec-macros: Properly handle KOTD release numbers with .g<commit> suffix - rpm/kernel-spec-macros: Drop the %release_num macro We no longer put the -rcX tag into the release string. - xen-pciback: notify hypervisor about devices intended to be assigned to guests. - unix/stream: fix peeking with an offset larger than data in queue (bnc#803931 CVE-2013-0290). - unix/dgram: fix peeking with an offset larger than data in queue (bnc#803931 CVE-2013-0290). - unix/dgram: peek beyond 0-sized skbs (bnc#803931 CVE-2013-0290). - net: fix infinite loop in __skb_recv_datagram() (bnc#803931 CVE-2013-0290). - TTY: fix atime/mtime regression (bnc#815745). - md/raid1,raid10: fix deadlock with freeze_array() (813889). - md: raid1,10: Handle REQ_WRITE_SAME flag in write bios (bnc#813889). - KMS: fix EDID detailed timing vsync parsing. - KMS: fix EDID detailed timing frame rate. - Add Netfilter/ebtables support Those modues are needed for proper OpenStack support on ARM, and are also enabled on x86(_64) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-452 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): kernel-default-3.7.10-1.11.1 kernel-default-base-3.7.10-1.11.1 kernel-default-devel-3.7.10-1.11.1 kernel-syms-3.7.10-1.11.1 - openSUSE 12.3 (i686 x86_64): kernel-debug-3.7.10-1.11.1 kernel-debug-base-3.7.10-1.11.1 kernel-debug-devel-3.7.10-1.11.1 kernel-desktop-3.7.10-1.11.1 kernel-desktop-base-3.7.10-1.11.1 kernel-desktop-devel-3.7.10-1.11.1 kernel-ec2-3.7.10-1.11.1 kernel-ec2-base-3.7.10-1.11.1 kernel-ec2-base-debuginfo-3.7.10-1.11.1 kernel-ec2-debuginfo-3.7.10-1.11.1 kernel-ec2-debugsource-3.7.10-1.11.1 kernel-ec2-devel-3.7.10-1.11.1 kernel-ec2-devel-debuginfo-3.7.10-1.11.1 kernel-trace-3.7.10-1.11.1 kernel-trace-base-3.7.10-1.11.1 kernel-trace-devel-3.7.10-1.11.1 kernel-vanilla-3.7.10-1.11.1 kernel-vanilla-devel-3.7.10-1.11.1 kernel-xen-3.7.10-1.11.1 kernel-xen-base-3.7.10-1.11.1 kernel-xen-devel-3.7.10-1.11.1 - openSUSE 12.3 (noarch): kernel-devel-3.7.10-1.11.1 kernel-docs-3.7.10-1.11.1 kernel-source-3.7.10-1.11.1 kernel-source-vanilla-3.7.10-1.11.1 - openSUSE 12.3 (i686): kernel-debug-base-debuginfo-3.7.10-1.11.1 kernel-debug-debuginfo-3.7.10-1.11.1 kernel-debug-debugsource-3.7.10-1.11.1 kernel-debug-devel-debuginfo-3.7.10-1.11.1 kernel-desktop-base-debuginfo-3.7.10-1.11.1 kernel-desktop-debuginfo-3.7.10-1.11.1 kernel-desktop-debugsource-3.7.10-1.11.1 kernel-desktop-devel-debuginfo-3.7.10-1.11.1 kernel-pae-3.7.10-1.11.1 kernel-pae-base-3.7.10-1.11.1 kernel-pae-base-debuginfo-3.7.10-1.11.1 kernel-pae-debuginfo-3.7.10-1.11.1 kernel-pae-debugsource-3.7.10-1.11.1 kernel-pae-devel-3.7.10-1.11.1 kernel-pae-devel-debuginfo-3.7.10-1.11.1 kernel-trace-base-debuginfo-3.7.10-1.11.1 kernel-trace-debuginfo-3.7.10-1.11.1 kernel-trace-debugsource-3.7.10-1.11.1 kernel-trace-devel-debuginfo-3.7.10-1.11.1 kernel-vanilla-debuginfo-3.7.10-1.11.1 kernel-vanilla-debugsource-3.7.10-1.11.1 kernel-vanilla-devel-debuginfo-3.7.10-1.11.1 kernel-xen-base-debuginfo-3.7.10-1.11.1 kernel-xen-debuginfo-3.7.10-1.11.1 kernel-xen-debugsource-3.7.10-1.11.1 kernel-xen-devel-debuginfo-3.7.10-1.11.1 - openSUSE 12.3 (i586): kernel-default-base-debuginfo-3.7.10-1.11.1 kernel-default-debuginfo-3.7.10-1.11.1 kernel-default-debugsource-3.7.10-1.11.1 kernel-default-devel-debuginfo-3.7.10-1.11.1 References: http://support.novell.com/security/cve/CVE-2013-0290.html http://support.novell.com/security/cve/CVE-2013-2094.html https://bugzilla.novell.com/803931 https://bugzilla.novell.com/813889 https://bugzilla.novell.com/815745 https://bugzilla.novell.com/818327 https://bugzilla.novell.com/818497 https://bugzilla.novell.com/819519 https://bugzilla.novell.com/819789 https://bugzilla.novell.com/820048 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2013:0946-1: important: MozillaFirefox: update to version 21.0
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Security Update: MozillaFirefox: update to version 21.0 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0946-1 Rating: important References: #801121 #814101 #819204 Cross-References: CVE-2013-0801 CVE-2013-1669 CVE-2013-1670 CVE-2013-1671 CVE-2013-1674 CVE-2013-1675 CVE-2013-1676 CVE-2013-1677 CVE-2013-1678 CVE-2013-1679 CVE-2013-1680 CVE-2013-1681 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that fixes 12 vulnerabilities is now available. Description: MozillaFirefox was updated to Firefox 21.0 (bnc#819204) * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669 Miscellaneous memory safety hazards * MFSA 2013-42/CVE-2013-1670 (bmo#853709) Privileged access for content level constructor * MFSA 2013-43/CVE-2013-1671 (bmo#842255) File input control has access to full path * MFSA 2013-46/CVE-2013-1674 (bmo#860971) Use-after-free with video and onresize event * MFSA 2013-47/CVE-2013-1675 (bmo#866825) Uninitialized functions in DOMSVGZoomEvent * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/ CVE-2013-1679/CVE-2013-1680/CVE-2013-1681 Memory corruption found using Address Sanitizer Changes in MozillaFirefox-branding-openSUSE: - modified file locations for Firefox 21 and above - added DuckDuckGo as search option (bnc#801121) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-438 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): MozillaFirefox-21.0-1.18.1 MozillaFirefox-branding-openSUSE-21-2.5.1 MozillaFirefox-branding-upstream-21.0-1.18.1 MozillaFirefox-buildsymbols-21.0-1.18.1 MozillaFirefox-debuginfo-21.0-1.18.1 MozillaFirefox-debugsource-21.0-1.18.1 MozillaFirefox-devel-21.0-1.18.1 MozillaFirefox-translations-common-21.0-1.18.1 MozillaFirefox-translations-other-21.0-1.18.1 mozilla-nspr-4.9.6-1.7.1 mozilla-nspr-debuginfo-4.9.6-1.7.1 mozilla-nspr-debugsource-4.9.6-1.7.1 mozilla-nspr-devel-4.9.6-1.7.1 - openSUSE 12.3 (x86_64): mozilla-nspr-32bit-4.9.6-1.7.1 mozilla-nspr-debuginfo-32bit-4.9.6-1.7.1 References: http://support.novell.com/security/cve/CVE-2013-0801.html http://support.novell.com/security/cve/CVE-2013-1669.html http://support.novell.com/security/cve/CVE-2013-1670.html http://support.novell.com/security/cve/CVE-2013-1671.html http://support.novell.com/security/cve/CVE-2013-1674.html http://support.novell.com/security/cve/CVE-2013-1675.html http://support.novell.com/security/cve/CVE-2013-1676.html http://support.novell.com/security/cve/CVE-2013-1677.html http://support.novell.com/security/cve/CVE-2013-1678.html http://support.novell.com/security/cve/CVE-2013-1679.html http://support.novell.com/security/cve/CVE-2013-1680.html http://support.novell.com/security/cve/CVE-2013-1681.html https://bugzilla.novell.com/801121 https://bugzilla.novell.com/814101 https://bugzilla.novell.com/819204 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2013:0934-1: important: Security update for Java 1.4.2
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

SUSE Security Update: Security update for Java 1.4.2 ______________________________________________________________________________ Announcement ID: SUSE-SU-2013:0934-1 Rating: important References: #494536 #592934 #819288 Cross-References: CVE-2013-1491 CVE-2013-1537 CVE-2013-1557 CVE-2013-1569 CVE-2013-2383 CVE-2013-2384 CVE-2013-2394 CVE-2013-2417 CVE-2013-2419 CVE-2013-2420 CVE-2013-2429 CVE-2013-2430 CVE-2013-2432 Affected Products: SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Server 11 SP2 for VMware SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 10 SP4 SUSE Linux Enterprise Java 11 SP2 SUSE Linux Enterprise Java 10 SP4 ______________________________________________________________________________ An update that fixes 13 vulnerabilities is now available. Description: IBM Java 1.4.2 has been updated to SR13-FP17 fixing bugs and security issues. http://www.ibm.com/developerworks/java/jdk/alerts/ <http://www.ibm.com/developerworks/java/jdk/alerts/> Security Issue references: * CVE-2013-1491 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1491 > * CVE-2013-2420 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2420 > * CVE-2013-2432 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2432 > * CVE-2013-1569 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1569 > * CVE-2013-2384 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2384 > * CVE-2013-2383 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2383 > * CVE-2013-1557 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1557 > * CVE-2013-1537 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1537 > * CVE-2013-2429 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2429 > * CVE-2013-2430 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2430 > * CVE-2013-2394 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2394 > * CVE-2013-2419 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2419 > * CVE-2013-2417 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2417 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11 SP2: zypper in -t patch sdksp2-java-1_4_2-ibm-7793 - SUSE Linux Enterprise Server 11 SP2 for VMware: zypper in -t patch slessp2-java-1_4_2-ibm-7793 - SUSE Linux Enterprise Server 11 SP2: zypper in -t patch slessp2-java-1_4_2-ibm-7793 - SUSE Linux Enterprise Java 11 SP2: zypper in -t patch slejsp2-java-1_4_2-ibm-7793 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11 SP2 (i586 ia64 ppc64 s390x x86_64): java-1_4_2-ibm-devel-1.4.2_sr13.17-0.2.1 - SUSE Linux Enterprise Software Development Kit 11 SP2 (i586 x86_64): java-1_4_2-ibm-1.4.2_sr13.17-0.2.1 - SUSE Linux Enterprise Server 11 SP2 for VMware (i586 x86_64): java-1_4_2-ibm-1.4.2_sr13.17-0.2.1 - SUSE Linux Enterprise Server 11 SP2 for VMware (i586): java-1_4_2-ibm-jdbc-1.4.2_sr13.17-0.2.1 java-1_4_2-ibm-plugin-1.4.2_sr13.17-0.2.1 - SUSE Linux Enterprise Server 11 SP2 (i586 ia64 ppc64 s390x x86_64): java-1_4_2-ibm-1.4.2_sr13.17-0.2.1 - SUSE Linux Enterprise Server 11 SP2 (i586): java-1_4_2-ibm-jdbc-1.4.2_sr13.17-0.2.1 java-1_4_2-ibm-plugin-1.4.2_sr13.17-0.2.1 - SUSE Linux Enterprise Server 10 SP4 (i586 ia64 ppc s390x x86_64): java-1_4_2-ibm-1.4.2_sr13.17-0.5.1 java-1_4_2-ibm-devel-1.4.2_sr13.17-0.5.1 - SUSE Linux Enterprise Server 10 SP4 (i586 ppc): java-1_4_2-ibm-jdbc-1.4.2_sr13.17-0.5.1 - SUSE Linux Enterprise Server 10 SP4 (i586): java-1_4_2-ibm-plugin-1.4.2_sr13.17-0.5.1 - SUSE Linux Enterprise Java 11 SP2 (i586 ppc64 s390x x86_64): java-1_4_2-ibm-1.4.2_sr13.17-0.2.1 - SUSE Linux Enterprise Java 11 SP2 (i586): java-1_4_2-ibm-jdbc-1.4.2_sr13.17-0.2.1 java-1_4_2-ibm-plugin-1.4.2_sr13.17-0.2.1 - SUSE Linux Enterprise Java 10 SP4 (i586 ia64 ppc s390x x86_64): java-1_4_2-ibm-1.4.2_sr13.17-0.5.1 java-1_4_2-ibm-devel-1.4.2_sr13.17-0.5.1 - SUSE Linux Enterprise Java 10 SP4 (i586 ppc): java-1_4_2-ibm-jdbc-1.4.2_sr13.17-0.5.1 - SUSE Linux Enterprise Java 10 SP4 (i586): java-1_4_2-ibm-plugin-1.4.2_sr13.17-0.5.1 References: http://support.novell.com/security/cve/CVE-2013-1491.html http://support.novell.com/security/cve/CVE-2013-1537.html http://support.novell.com/security/cve/CVE-2013-1557.html http://support.novell.com/security/cve/CVE-2013-1569.html http://support.novell.com/security/cve/CVE-2013-2383.html http://support.novell.com/security/cve/CVE-2013-2384.html http://support.novell.com/security/cve/CVE-2013-2394.html http://support.novell.com/security/cve/CVE-2013-2417.html http://support.novell.com/security/cve/CVE-2013-2419.html http://support.novell.com/security/cve/CVE-2013-2420.html http://support.novell.com/security/cve/CVE-2013-2429.html http://support.novell.com/security/cve/CVE-2013-2430.html http://support.novell.com/security/cve/CVE-2013-2432.html https://bugzilla.novell.com/494536 https://bugzilla.novell.com/592934 https://bugzilla.novell.com/819288 http://download.novell.com/patch/finder/?keywords=8498417876678ff676fabbcad… http://download.novell.com/patch/finder/?keywords=f3aefaa5ff17f24bea6179229… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2013:0929-1: important: xulrunner to 17.0.6esr
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Security Update: xulrunner to 17.0.6esr ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0929-1 Rating: important References: #819204 Cross-References: CVE-2013-0801 CVE-2013-1669 CVE-2013-1670 CVE-2013-1674 CVE-2013-1675 CVE-2013-1676 CVE-2013-1677 CVE-2013-1678 CVE-2013-1679 CVE-2013-1680 CVE-2013-1681 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that fixes 11 vulnerabilities is now available. Description: Mozilla xulrunner was updated to 17.0.6esr (bnc#819204) * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669 Miscellaneous memory safety hazards * MFSA 2013-42/CVE-2013-1670 (bmo#853709) Privileged access for content level constructor * MFSA 2013-46/CVE-2013-1674 (bmo#860971) Use-after-free with video and onresize event * MFSA 2013-47/CVE-2013-1675 (bmo#866825) Uninitialized functions in DOMSVGZoomEvent * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/ CVE-2013-1679/CVE-2013-1680/CVE-2013-1681 Memory corruption found using Address Sanitizer Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-448 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): mozilla-js-17.0.6-1.12.1 mozilla-js-debuginfo-17.0.6-1.12.1 xulrunner-17.0.6-1.12.1 xulrunner-buildsymbols-17.0.6-1.12.1 xulrunner-debuginfo-17.0.6-1.12.1 xulrunner-debugsource-17.0.6-1.12.1 xulrunner-devel-17.0.6-1.12.1 xulrunner-devel-debuginfo-17.0.6-1.12.1 - openSUSE 12.3 (x86_64): mozilla-js-32bit-17.0.6-1.12.1 mozilla-js-debuginfo-32bit-17.0.6-1.12.1 xulrunner-32bit-17.0.6-1.12.1 xulrunner-debuginfo-32bit-17.0.6-1.12.1 References: http://support.novell.com/security/cve/CVE-2013-0801.html http://support.novell.com/security/cve/CVE-2013-1669.html http://support.novell.com/security/cve/CVE-2013-1670.html http://support.novell.com/security/cve/CVE-2013-1674.html http://support.novell.com/security/cve/CVE-2013-1675.html http://support.novell.com/security/cve/CVE-2013-1676.html http://support.novell.com/security/cve/CVE-2013-1677.html http://support.novell.com/security/cve/CVE-2013-1678.html http://support.novell.com/security/cve/CVE-2013-1679.html http://support.novell.com/security/cve/CVE-2013-1680.html http://support.novell.com/security/cve/CVE-2013-1681.html https://bugzilla.novell.com/819204 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2013:0925-1: important: kernel: security and bugfix update
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Security Update: kernel: security and bugfix update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0925-1 Rating: important References: #578046 #651219 #714604 #722398 #730117 #736149 #738210 #744692 #754583 #754898 #758243 #761849 #762424 #763494 #767612 #768052 #773577 #776787 #777616 #777746 #779577 #780977 #786150 #786814 #786900 #787821 #788826 #789235 #789311 #789359 #790867 #792674 #792793 #793139 #793671 #794513 #794529 #794805 #795269 #795928 #795957 #795961 #796412 #796418 #796823 #797042 #797175 #798921 #799197 #799209 #799270 #799275 #799578 #799926 #800280 #800701 #801038 #801178 #801713 #801717 #801720 #801782 #802153 #802353 #802445 #802712 #803056 #803067 #803394 #803674 #803712 #804154 #804220 #804609 #805823 #806138 #806395 #806404 #806431 #806466 #806469 #806492 #806631 #806825 #806847 #806908 #806976 #806980 #807431 #807517 #807560 #807853 #808166 #808307 #808829 #808966 #808991 #809155 #809166 #809375 #809493 #809748 #812281 #812315 #813963 #816443 #819789 #89359 Cross-References: CVE-2010-3873 CVE-2011-4131 CVE-2011-4604 CVE-2011-4622 CVE-2012-1601 CVE-2012-2119 CVE-2012-2137 CVE-2012-4461 CVE-2012-5517 CVE-2013-0160 CVE-2013-0216 CVE-2013-0231 CVE-2013-0871 CVE-2013-0913 CVE-2013-1767 CVE-2013-1774 CVE-2013-1796 CVE-2013-1797 CVE-2013-1798 CVE-2013-1848 CVE-2013-2094 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that solves 21 vulnerabilities and has 87 fixes is now available. Description: The Linux kernel was updated to 3.0.74 to fix various bugs and security issues. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-90 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): iscsitarget-1.4.19-18.2 iscsitarget-debuginfo-1.4.19-18.2 iscsitarget-debugsource-1.4.19-18.2 iscsitarget-kmp-default-1.4.19_3.0.74_34-18.2 iscsitarget-kmp-default-debuginfo-1.4.19_3.0.74_34-18.2 iscsitarget-kmp-desktop-1.4.19_3.0.74_34-18.2 iscsitarget-kmp-desktop-debuginfo-1.4.19_3.0.74_34-18.2 iscsitarget-kmp-xen-1.4.19_3.0.74_34-18.2 iscsitarget-kmp-xen-debuginfo-1.4.19_3.0.74_34-18.2 kernel-debug-3.0.74-34.1 kernel-debug-base-3.0.74-34.1 kernel-debug-base-debuginfo-3.0.74-34.1 kernel-debug-debuginfo-3.0.74-34.1 kernel-debug-debugsource-3.0.74-34.1 kernel-debug-devel-3.0.74-34.1 kernel-debug-devel-debuginfo-3.0.74-34.1 kernel-debug-hmac-3.0.74-34.1 kernel-default-3.0.74-34.1 kernel-default-base-3.0.74-34.1 kernel-default-base-debuginfo-3.0.74-34.1 kernel-default-debuginfo-3.0.74-34.1 kernel-default-debugsource-3.0.74-34.1 kernel-default-devel-3.0.74-34.1 kernel-default-devel-debuginfo-3.0.74-34.1 kernel-default-hmac-3.0.74-34.1 kernel-desktop-3.0.74-34.1 kernel-desktop-base-3.0.74-34.1 kernel-desktop-base-debuginfo-3.0.74-34.1 kernel-desktop-debuginfo-3.0.74-34.1 kernel-desktop-debugsource-3.0.74-34.1 kernel-desktop-devel-3.0.74-34.1 kernel-desktop-devel-debuginfo-3.0.74-34.1 kernel-desktop-hmac-3.0.74-34.1 kernel-ec2-3.0.74-34.1 kernel-ec2-base-3.0.74-34.1 kernel-ec2-base-debuginfo-3.0.74-34.1 kernel-ec2-debuginfo-3.0.74-34.1 kernel-ec2-debugsource-3.0.74-34.1 kernel-ec2-devel-3.0.74-34.1 kernel-ec2-devel-debuginfo-3.0.74-34.1 kernel-ec2-extra-3.0.74-34.1 kernel-ec2-extra-debuginfo-3.0.74-34.1 kernel-ec2-hmac-3.0.74-34.1 kernel-source-3.0.74-34.1 kernel-source-vanilla-3.0.74-34.1 kernel-syms-3.0.74-34.1 kernel-trace-3.0.74-34.1 kernel-trace-base-3.0.74-34.1 kernel-trace-base-debuginfo-3.0.74-34.1 kernel-trace-debuginfo-3.0.74-34.1 kernel-trace-debugsource-3.0.74-34.1 kernel-trace-devel-3.0.74-34.1 kernel-trace-devel-debuginfo-3.0.74-34.1 kernel-trace-hmac-3.0.74-34.1 kernel-vanilla-3.0.74-34.1 kernel-vanilla-base-3.0.74-34.1 kernel-vanilla-base-debuginfo-3.0.74-34.1 kernel-vanilla-debuginfo-3.0.74-34.1 kernel-vanilla-debugsource-3.0.74-34.1 kernel-vanilla-devel-3.0.74-34.1 kernel-vanilla-devel-debuginfo-3.0.74-34.1 kernel-vanilla-hmac-3.0.74-34.1 kernel-xen-3.0.74-34.1 kernel-xen-base-3.0.74-34.1 kernel-xen-base-debuginfo-3.0.74-34.1 kernel-xen-debuginfo-3.0.74-34.1 kernel-xen-debugsource-3.0.74-34.1 kernel-xen-devel-3.0.74-34.1 kernel-xen-devel-debuginfo-3.0.74-34.1 kernel-xen-hmac-3.0.74-34.1 libvmtools-devel-2012.8.8.1-41.1 libvmtools0-2012.8.8.1-41.1 libvmtools0-debuginfo-2012.8.8.1-41.1 ndiswrapper-1.57rc1-20.1 ndiswrapper-debuginfo-1.57rc1-20.1 ndiswrapper-debugsource-1.57rc1-20.1 ndiswrapper-kmp-default-1.57rc1_3.0.74_34-20.1 ndiswrapper-kmp-default-debuginfo-1.57rc1_3.0.74_34-20.1 ndiswrapper-kmp-desktop-1.57rc1_3.0.74_34-20.1 ndiswrapper-kmp-desktop-debuginfo-1.57rc1_3.0.74_34-20.1 omnibook-debugsource-20100406-13.1 omnibook-kmp-default-20100406_3.0.74_34-13.1 omnibook-kmp-default-debuginfo-20100406_3.0.74_34-13.1 omnibook-kmp-desktop-20100406_3.0.74_34-13.1 omnibook-kmp-desktop-debuginfo-20100406_3.0.74_34-13.1 omnibook-kmp-xen-20100406_3.0.74_34-13.1 omnibook-kmp-xen-debuginfo-20100406_3.0.74_34-13.1 open-vm-tools-2012.8.8.1-41.1 open-vm-tools-debuginfo-2012.8.8.1-41.1 open-vm-tools-debugsource-2012.8.8.1-41.1 open-vm-tools-gui-2012.8.8.1-41.1 open-vm-tools-gui-debuginfo-2012.8.8.1-41.1 pcfclock-0.44-250.1 pcfclock-debuginfo-0.44-250.1 pcfclock-debugsource-0.44-250.1 pcfclock-kmp-default-0.44_3.0.74_34-250.1 pcfclock-kmp-default-debuginfo-0.44_3.0.74_34-250.1 pcfclock-kmp-desktop-0.44_3.0.74_34-250.1 pcfclock-kmp-desktop-debuginfo-0.44_3.0.74_34-250.1 preload-1.2-6.29.1 preload-debuginfo-1.2-6.29.1 preload-debugsource-1.2-6.29.1 preload-kmp-default-1.2_3.0.74_34-6.29.1 preload-kmp-default-debuginfo-1.2_3.0.74_34-6.29.1 preload-kmp-desktop-1.2_3.0.74_34-6.29.1 preload-kmp-desktop-debuginfo-1.2_3.0.74_34-6.29.1 python-virtualbox-4.0.12-0.58.1 python-virtualbox-debuginfo-4.0.12-0.58.1 systemtap-1.4-1.11.1 systemtap-client-1.4-1.11.1 systemtap-client-debuginfo-1.4-1.11.1 systemtap-debuginfo-1.4-1.11.1 systemtap-debugsource-1.4-1.11.1 systemtap-runtime-1.4-1.11.1 systemtap-runtime-debuginfo-1.4-1.11.1 systemtap-sdt-devel-1.4-1.11.1 systemtap-server-1.4-1.11.1 systemtap-server-debuginfo-1.4-1.11.1 virtualbox-4.0.12-0.58.1 virtualbox-debuginfo-4.0.12-0.58.1 virtualbox-debugsource-4.0.12-0.58.1 virtualbox-devel-4.0.12-0.58.1 virtualbox-guest-kmp-default-4.0.12_3.0.74_34-0.58.1 virtualbox-guest-kmp-default-debuginfo-4.0.12_3.0.74_34-0.58.1 virtualbox-guest-kmp-desktop-4.0.12_3.0.74_34-0.58.1 virtualbox-guest-kmp-desktop-debuginfo-4.0.12_3.0.74_34-0.58.1 virtualbox-guest-tools-4.0.12-0.58.1 virtualbox-guest-tools-debuginfo-4.0.12-0.58.1 virtualbox-guest-x11-4.0.12-0.58.1 virtualbox-guest-x11-debuginfo-4.0.12-0.58.1 virtualbox-host-kmp-default-4.0.12_3.0.74_34-0.58.1 virtualbox-host-kmp-default-debuginfo-4.0.12_3.0.74_34-0.58.1 virtualbox-host-kmp-desktop-4.0.12_3.0.74_34-0.58.1 virtualbox-host-kmp-desktop-debuginfo-4.0.12_3.0.74_34-0.58.1 virtualbox-qt-4.0.12-0.58.1 virtualbox-qt-debuginfo-4.0.12-0.58.1 vmware-guest-kmp-default-2012.8.8.1_3.0.74_34-41.1 vmware-guest-kmp-default-debuginfo-2012.8.8.1_3.0.74_34-41.1 vmware-guest-kmp-desktop-2012.8.8.1_3.0.74_34-41.1 vmware-guest-kmp-desktop-debuginfo-2012.8.8.1_3.0.74_34-41.1 xen-4.0.3_05-57.1 xen-debugsource-4.0.3_05-57.1 xen-devel-4.0.3_05-57.1 xen-doc-html-4.0.3_05-57.1 xen-doc-pdf-4.0.3_05-57.1 xen-kmp-default-4.0.3_05_3.0.74_34-57.1 xen-kmp-default-debuginfo-4.0.3_05_3.0.74_34-57.1 xen-kmp-desktop-4.0.3_05_3.0.74_34-57.1 xen-kmp-desktop-debuginfo-4.0.3_05_3.0.74_34-57.1 xen-libs-4.0.3_05-57.1 xen-libs-debuginfo-4.0.3_05-57.1 xen-tools-4.0.3_05-57.1 xen-tools-debuginfo-4.0.3_05-57.1 xen-tools-domU-4.0.3_05-57.1 xen-tools-domU-debuginfo-4.0.3_05-57.1 xtables-addons-1.37-0.22.1 xtables-addons-debuginfo-1.37-0.22.1 xtables-addons-debugsource-1.37-0.22.1 xtables-addons-kmp-default-1.37_3.0.74_34-0.22.1 xtables-addons-kmp-default-debuginfo-1.37_3.0.74_34-0.22.1 xtables-addons-kmp-desktop-1.37_3.0.74_34-0.22.1 xtables-addons-kmp-desktop-debuginfo-1.37_3.0.74_34-0.22.1 xtables-addons-kmp-xen-1.37_3.0.74_34-0.22.1 xtables-addons-kmp-xen-debuginfo-1.37_3.0.74_34-0.22.1 - openSUSE 11.4 (noarch): kernel-docs-3.0.74-34.2 - openSUSE 11.4 (i586): iscsitarget-kmp-pae-1.4.19_3.0.74_34-18.2 iscsitarget-kmp-pae-debuginfo-1.4.19_3.0.74_34-18.2 kernel-pae-3.0.74-34.1 kernel-pae-base-3.0.74-34.1 kernel-pae-base-debuginfo-3.0.74-34.1 kernel-pae-debuginfo-3.0.74-34.1 kernel-pae-debugsource-3.0.74-34.1 kernel-pae-devel-3.0.74-34.1 kernel-pae-devel-debuginfo-3.0.74-34.1 kernel-pae-hmac-3.0.74-34.1 kernel-vmi-3.0.74-34.1 kernel-vmi-base-3.0.74-34.1 kernel-vmi-base-debuginfo-3.0.74-34.1 kernel-vmi-debuginfo-3.0.74-34.1 kernel-vmi-debugsource-3.0.74-34.1 kernel-vmi-devel-3.0.74-34.1 kernel-vmi-devel-debuginfo-3.0.74-34.1 kernel-vmi-hmac-3.0.74-34.1 ndiswrapper-kmp-pae-1.57rc1_3.0.74_34-20.1 ndiswrapper-kmp-pae-debuginfo-1.57rc1_3.0.74_34-20.1 omnibook-kmp-pae-20100406_3.0.74_34-13.1 omnibook-kmp-pae-debuginfo-20100406_3.0.74_34-13.1 pcfclock-kmp-pae-0.44_3.0.74_34-250.1 pcfclock-kmp-pae-debuginfo-0.44_3.0.74_34-250.1 virtualbox-guest-kmp-pae-4.0.12_3.0.74_34-0.58.1 virtualbox-guest-kmp-pae-debuginfo-4.0.12_3.0.74_34-0.58.1 virtualbox-host-kmp-pae-4.0.12_3.0.74_34-0.58.1 virtualbox-host-kmp-pae-debuginfo-4.0.12_3.0.74_34-0.58.1 vmware-guest-kmp-pae-2012.8.8.1_3.0.74_34-41.1 vmware-guest-kmp-pae-debuginfo-2012.8.8.1_3.0.74_34-41.1 xen-kmp-pae-4.0.3_05_3.0.74_34-57.1 xen-kmp-pae-debuginfo-4.0.3_05_3.0.74_34-57.1 xtables-addons-kmp-pae-1.37_3.0.74_34-0.22.1 xtables-addons-kmp-pae-debuginfo-1.37_3.0.74_34-0.22.1 References: http://support.novell.com/security/cve/CVE-2010-3873.html http://support.novell.com/security/cve/CVE-2011-4131.html http://support.novell.com/security/cve/CVE-2011-4604.html http://support.novell.com/security/cve/CVE-2011-4622.html http://support.novell.com/security/cve/CVE-2012-1601.html http://support.novell.com/security/cve/CVE-2012-2119.html http://support.novell.com/security/cve/CVE-2012-2137.html http://support.novell.com/security/cve/CVE-2012-4461.html http://support.novell.com/security/cve/CVE-2012-5517.html http://support.novell.com/security/cve/CVE-2013-0160.html http://support.novell.com/security/cve/CVE-2013-0216.html http://support.novell.com/security/cve/CVE-2013-0231.html http://support.novell.com/security/cve/CVE-2013-0871.html http://support.novell.com/security/cve/CVE-2013-0913.html http://support.novell.com/security/cve/CVE-2013-1767.html http://support.novell.com/security/cve/CVE-2013-1774.html http://support.novell.com/security/cve/CVE-2013-1796.html http://support.novell.com/security/cve/CVE-2013-1797.html http://support.novell.com/security/cve/CVE-2013-1798.html http://support.novell.com/security/cve/CVE-2013-1848.html http://support.novell.com/security/cve/CVE-2013-2094.html https://bugzilla.novell.com/578046 https://bugzilla.novell.com/651219 https://bugzilla.novell.com/714604 https://bugzilla.novell.com/722398 https://bugzilla.novell.com/730117 https://bugzilla.novell.com/736149 https://bugzilla.novell.com/738210 https://bugzilla.novell.com/744692 https://bugzilla.novell.com/754583 https://bugzilla.novell.com/754898 https://bugzilla.novell.com/758243 https://bugzilla.novell.com/761849 https://bugzilla.novell.com/762424 https://bugzilla.novell.com/763494 https://bugzilla.novell.com/767612 https://bugzilla.novell.com/768052 https://bugzilla.novell.com/773577 https://bugzilla.novell.com/776787 https://bugzilla.novell.com/777616 https://bugzilla.novell.com/777746 https://bugzilla.novell.com/779577 https://bugzilla.novell.com/780977 https://bugzilla.novell.com/786150 https://bugzilla.novell.com/786814 https://bugzilla.novell.com/786900 https://bugzilla.novell.com/787821 https://bugzilla.novell.com/788826 https://bugzilla.novell.com/789235 https://bugzilla.novell.com/789311 https://bugzilla.novell.com/789359 https://bugzilla.novell.com/790867 https://bugzilla.novell.com/792674 https://bugzilla.novell.com/792793 https://bugzilla.novell.com/793139 https://bugzilla.novell.com/793671 https://bugzilla.novell.com/794513 https://bugzilla.novell.com/794529 https://bugzilla.novell.com/794805 https://bugzilla.novell.com/795269 https://bugzilla.novell.com/795928 https://bugzilla.novell.com/795957 https://bugzilla.novell.com/795961 https://bugzilla.novell.com/796412 https://bugzilla.novell.com/796418 https://bugzilla.novell.com/796823 https://bugzilla.novell.com/797042 https://bugzilla.novell.com/797175 https://bugzilla.novell.com/798921 https://bugzilla.novell.com/799197 https://bugzilla.novell.com/799209 https://bugzilla.novell.com/799270 https://bugzilla.novell.com/799275 https://bugzilla.novell.com/799578 https://bugzilla.novell.com/799926 https://bugzilla.novell.com/800280 https://bugzilla.novell.com/800701 https://bugzilla.novell.com/801038 https://bugzilla.novell.com/801178 https://bugzilla.novell.com/801713 https://bugzilla.novell.com/801717 https://bugzilla.novell.com/801720 https://bugzilla.novell.com/801782 https://bugzilla.novell.com/802153 https://bugzilla.novell.com/802353 https://bugzilla.novell.com/802445 https://bugzilla.novell.com/802712 https://bugzilla.novell.com/803056 https://bugzilla.novell.com/803067 https://bugzilla.novell.com/803394 https://bugzilla.novell.com/803674 https://bugzilla.novell.com/803712 https://bugzilla.novell.com/804154 https://bugzilla.novell.com/804220 https://bugzilla.novell.com/804609 https://bugzilla.novell.com/805823 https://bugzilla.novell.com/806138 https://bugzilla.novell.com/806395 https://bugzilla.novell.com/806404 https://bugzilla.novell.com/806431 https://bugzilla.novell.com/806466 https://bugzilla.novell.com/806469 https://bugzilla.novell.com/806492 https://bugzilla.novell.com/806631 https://bugzilla.novell.com/806825 https://bugzilla.novell.com/806847 https://bugzilla.novell.com/806908 https://bugzilla.novell.com/806976 https://bugzilla.novell.com/806980 https://bugzilla.novell.com/807431 https://bugzilla.novell.com/807517 https://bugzilla.novell.com/807560 https://bugzilla.novell.com/807853 https://bugzilla.novell.com/808166 https://bugzilla.novell.com/808307 https://bugzilla.novell.com/808829 https://bugzilla.novell.com/808966 https://bugzilla.novell.com/808991 https://bugzilla.novell.com/809155 https://bugzilla.novell.com/809166 https://bugzilla.novell.com/809375 https://bugzilla.novell.com/809493 https://bugzilla.novell.com/809748 https://bugzilla.novell.com/812281 https://bugzilla.novell.com/812315 https://bugzilla.novell.com/813963 https://bugzilla.novell.com/816443 https://bugzilla.novell.com/819789 https://bugzilla.novell.com/89359 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2013:0894-1: important: MozillaThunderbird: update to 17.0.6
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Security Update: MozillaThunderbird: update to 17.0.6 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0894-1 Rating: important References: #819204 Cross-References: CVE-2013-0801 CVE-2013-1669 CVE-2013-1670 CVE-2013-1674 CVE-2013-1675 CVE-2013-1676 CVE-2013-1677 CVE-2013-1678 CVE-2013-1679 CVE-2013-1680 CVE-2013-1681 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that fixes 11 vulnerabilities is now available. Description: MozillaThunderbird was updated to security update Thunderbird 17.0.6 (bnc#819204): * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669 Miscellaneous memory safety hazards * MFSA 2013-42/CVE-2013-1670 (bmo#853709) Privileged access for content level constructor * MFSA 2013-46/CVE-2013-1674 (bmo#860971) Use-after-free with video and onresize event * MFSA 2013-47/CVE-2013-1675 (bmo#866825) Uninitialized functions in DOMSVGZoomEvent * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/ CVE-2013-1679/CVE-2013-1680/CVE-2013-1681 Memory corruption found using Address Sanitizer Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2013-447 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (i586 x86_64): MozillaThunderbird-17.0.6-61.13.1 MozillaThunderbird-buildsymbols-17.0.6-61.13.1 MozillaThunderbird-debuginfo-17.0.6-61.13.1 MozillaThunderbird-debugsource-17.0.6-61.13.1 MozillaThunderbird-devel-17.0.6-61.13.1 MozillaThunderbird-devel-debuginfo-17.0.6-61.13.1 MozillaThunderbird-translations-common-17.0.6-61.13.1 MozillaThunderbird-translations-other-17.0.6-61.13.1 enigmail-1.5.1+17.0.6-61.13.1 enigmail-debuginfo-1.5.1+17.0.6-61.13.1 References: http://support.novell.com/security/cve/CVE-2013-0801.html http://support.novell.com/security/cve/CVE-2013-1669.html http://support.novell.com/security/cve/CVE-2013-1670.html http://support.novell.com/security/cve/CVE-2013-1674.html http://support.novell.com/security/cve/CVE-2013-1675.html http://support.novell.com/security/cve/CVE-2013-1676.html http://support.novell.com/security/cve/CVE-2013-1677.html http://support.novell.com/security/cve/CVE-2013-1678.html http://support.novell.com/security/cve/CVE-2013-1679.html http://support.novell.com/security/cve/CVE-2013-1680.html http://support.novell.com/security/cve/CVE-2013-1681.html https://bugzilla.novell.com/819204 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2013:0892-1: important: flash-player to 11.2.202.285
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

openSUSE Security Update: flash-player to 11.2.202.285 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0892-1 Rating: important References: #819916 Cross-References: CVE-2013-2728 CVE-2013-3324 CVE-2013-3325 CVE-2013-3326 CVE-2013-3327 CVE-2013-3328 CVE-2013-3329 CVE-2013-3330 CVE-2013-3331 CVE-2013-3332 CVE-2013-3333 CVE-2013-3334 CVE-2013-3335 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes 13 vulnerabilities is now available. Description: flash-player was updated to security update to 11.2.202.285: * APSB13-14, CVE-2013-2728, CVE-2013-3324, CVE-2013-3325, CVE-2013-3326, CVE-2013-3327, CVE-2013-3328, CVE-2013-3329, CVE-2013-3330, CVE-2013-3331, CVE-2013-3332, CVE-2013-3333, CVE-2013-3334, CVE-2013-3335 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2013-80 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): flash-player-11.2.202.285-63.1 flash-player-gnome-11.2.202.285-63.1 flash-player-kde4-11.2.202.285-63.1 References: http://support.novell.com/security/cve/CVE-2013-2728.html http://support.novell.com/security/cve/CVE-2013-3324.html http://support.novell.com/security/cve/CVE-2013-3325.html http://support.novell.com/security/cve/CVE-2013-3326.html http://support.novell.com/security/cve/CVE-2013-3327.html http://support.novell.com/security/cve/CVE-2013-3328.html http://support.novell.com/security/cve/CVE-2013-3329.html http://support.novell.com/security/cve/CVE-2013-3330.html http://support.novell.com/security/cve/CVE-2013-3331.html http://support.novell.com/security/cve/CVE-2013-3332.html http://support.novell.com/security/cve/CVE-2013-3333.html http://support.novell.com/security/cve/CVE-2013-3334.html http://support.novell.com/security/cve/CVE-2013-3335.html https://bugzilla.novell.com/819916 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2013:0835-2: important: Security update for Java 1.5.0
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

SUSE Security Update: Security update for Java 1.5.0 ______________________________________________________________________________ Announcement ID: SUSE-SU-2013:0835-2 Rating: important References: #592934 #819288 Cross-References: CVE-2013-0401 CVE-2013-1491 CVE-2013-1537 CVE-2013-1540 CVE-2013-1557 CVE-2013-1563 CVE-2013-1569 CVE-2013-2383 CVE-2013-2384 CVE-2013-2394 CVE-2013-2417 CVE-2013-2418 CVE-2013-2419 CVE-2013-2420 CVE-2013-2422 CVE-2013-2424 CVE-2013-2429 CVE-2013-2430 CVE-2013-2432 CVE-2013-2433 CVE-2013-2435 CVE-2013-2440 Affected Products: SUSE Linux Enterprise Server 10 SP4 SUSE Linux Enterprise Java 10 SP4 SUSE Linux Enterprise Desktop 10 SP4 ______________________________________________________________________________ An update that fixes 22 vulnerabilities is now available. Description: IBM Java 1.5.0 has been updated to SR13-FP2 which fixes several bugs and security issues. For more details see: http://www.ibm.com/developerworks/java/jdk/alerts/ <http://www.ibm.com/developerworks/java/jdk/alerts/> Security Issues: * CVE-2013-2422 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2422 > * CVE-2013-1491 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1491 > * CVE-2013-2435 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2435 > * CVE-2013-2420 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2420 > * CVE-2013-2432 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2432 > * CVE-2013-1569 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1569 > * CVE-2013-2384 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2384 > * CVE-2013-2383 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2383 > * CVE-2013-1557 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1557 > * CVE-2013-1537 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1537 > * CVE-2013-2440 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2440 > * CVE-2013-2429 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2429 > * CVE-2013-2430 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2430 > * CVE-2013-1563 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1563 > * CVE-2013-2394 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2394 > * CVE-2013-0401 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0401 > * CVE-2013-2424 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2424 > * CVE-2013-2419 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2419 > * CVE-2013-2417 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2417 > * CVE-2013-2418 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2418 > * CVE-2013-1540 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1540 > * CVE-2013-2433 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2433 > Package List: - SUSE Linux Enterprise Server 10 SP4 (i586 ppc s390x x86_64): java-1_5_0-ibm-1.5.0_sr16.2-0.5.1 java-1_5_0-ibm-devel-1.5.0_sr16.2-0.5.1 java-1_5_0-ibm-fonts-1.5.0_sr16.2-0.5.1 - SUSE Linux Enterprise Server 10 SP4 (s390x x86_64): java-1_5_0-ibm-32bit-1.5.0_sr16.2-0.5.1 java-1_5_0-ibm-devel-32bit-1.5.0_sr16.2-0.5.1 - SUSE Linux Enterprise Server 10 SP4 (i586 ppc): java-1_5_0-ibm-jdbc-1.5.0_sr16.2-0.5.1 java-1_5_0-ibm-plugin-1.5.0_sr16.2-0.5.1 - SUSE Linux Enterprise Server 10 SP4 (x86_64): java-1_5_0-ibm-alsa-32bit-1.5.0_sr16.2-0.5.1 - SUSE Linux Enterprise Server 10 SP4 (i586): java-1_5_0-ibm-alsa-1.5.0_sr16.2-0.5.1 - SUSE Linux Enterprise Server 10 SP4 (ppc): java-1_5_0-ibm-64bit-1.5.0_sr16.2-0.5.1 - SUSE Linux Enterprise Java 10 SP4 (i586 ppc s390x x86_64): java-1_5_0-ibm-1.5.0_sr16.2-0.5.1 java-1_5_0-ibm-devel-1.5.0_sr16.2-0.5.1 java-1_5_0-ibm-fonts-1.5.0_sr16.2-0.5.1 - SUSE Linux Enterprise Java 10 SP4 (ppc): java-1_5_0-ibm-jdbc-1.5.0_sr16.2-0.5.1 java-1_5_0-ibm-plugin-1.5.0_sr16.2-0.5.1 - SUSE Linux Enterprise Desktop 10 SP4 (i586 x86_64): java-1_5_0-ibm-1.5.0_sr16.2-0.5.1 java-1_5_0-ibm-demo-1.5.0_sr16.2-0.5.1 java-1_5_0-ibm-devel-1.5.0_sr16.2-0.5.1 java-1_5_0-ibm-fonts-1.5.0_sr16.2-0.5.1 java-1_5_0-ibm-src-1.5.0_sr16.2-0.5.1 - SUSE Linux Enterprise Desktop 10 SP4 (x86_64): java-1_5_0-ibm-32bit-1.5.0_sr16.2-0.5.1 java-1_5_0-ibm-alsa-32bit-1.5.0_sr16.2-0.5.1 java-1_5_0-ibm-devel-32bit-1.5.0_sr16.2-0.5.1 - SUSE Linux Enterprise Desktop 10 SP4 (i586): java-1_5_0-ibm-alsa-1.5.0_sr16.2-0.5.1 java-1_5_0-ibm-jdbc-1.5.0_sr16.2-0.5.1 java-1_5_0-ibm-plugin-1.5.0_sr16.2-0.5.1 References: http://support.novell.com/security/cve/CVE-2013-0401.html http://support.novell.com/security/cve/CVE-2013-1491.html http://support.novell.com/security/cve/CVE-2013-1537.html http://support.novell.com/security/cve/CVE-2013-1540.html http://support.novell.com/security/cve/CVE-2013-1557.html http://support.novell.com/security/cve/CVE-2013-1563.html http://support.novell.com/security/cve/CVE-2013-1569.html http://support.novell.com/security/cve/CVE-2013-2383.html http://support.novell.com/security/cve/CVE-2013-2384.html http://support.novell.com/security/cve/CVE-2013-2394.html http://support.novell.com/security/cve/CVE-2013-2417.html http://support.novell.com/security/cve/CVE-2013-2418.html http://support.novell.com/security/cve/CVE-2013-2419.html http://support.novell.com/security/cve/CVE-2013-2420.html http://support.novell.com/security/cve/CVE-2013-2422.html http://support.novell.com/security/cve/CVE-2013-2424.html http://support.novell.com/security/cve/CVE-2013-2429.html http://support.novell.com/security/cve/CVE-2013-2430.html http://support.novell.com/security/cve/CVE-2013-2432.html http://support.novell.com/security/cve/CVE-2013-2433.html http://support.novell.com/security/cve/CVE-2013-2435.html http://support.novell.com/security/cve/CVE-2013-2440.html https://bugzilla.novell.com/592934 https://bugzilla.novell.com/819288 http://download.novell.com/patch/finder/?keywords=a36ba08c692a30308a29e6242… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2013:0871-1: important: Security update for IBM Java 1.7.0
by opensuse-security＠opensuse.org 10 Jun '13

10 Jun '13

SUSE Security Update: Security update for IBM Java 1.7.0 ______________________________________________________________________________ Announcement ID: SUSE-SU-2013:0871-1 Rating: important References: #592934 #819285 #819288 Cross-References: CVE-2013-0401 CVE-2013-1491 CVE-2013-1537 CVE-2013-1540 CVE-2013-1557 CVE-2013-1563 CVE-2013-1569 CVE-2013-2383 CVE-2013-2384 CVE-2013-2394 CVE-2013-2417 CVE-2013-2418 CVE-2013-2419 CVE-2013-2420 CVE-2013-2422 CVE-2013-2424 CVE-2013-2429 CVE-2013-2430 CVE-2013-2432 CVE-2013-2433 CVE-2013-2435 CVE-2013-2440 Affected Products: SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Server 11 SP2 for VMware SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Java 11 SP2 ______________________________________________________________________________ An update that fixes 22 vulnerabilities is now available. Description: IBM Java 1.7.0 has been updated to SR4-FP2 which fixes several bugs and security issues. http://www.ibm.com/developerworks/java/jdk/alerts/ <http://www.ibm.com/developerworks/java/jdk/alerts/> Security Issue references: * CVE-2013-2422 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2422 > * CVE-2013-1491 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1491 > * CVE-2013-2435 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2435 > * CVE-2013-2420 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2420 > * CVE-2013-2432 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2432 > * CVE-2013-1569 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1569 > * CVE-2013-2384 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2384 > * CVE-2013-2383 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2383 > * CVE-2013-1557 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1557 > * CVE-2013-1537 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1537 > * CVE-2013-2440 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2440 > * CVE-2013-2429 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2429 > * CVE-2013-2430 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2430 > * CVE-2013-1563 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1563 > * CVE-2013-2394 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2394 > * CVE-2013-0401 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0401 > * CVE-2013-2424 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2424 > * CVE-2013-2419 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2419 > * CVE-2013-2417 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2417 > * CVE-2013-2418 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2418 > * CVE-2013-1540 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1540 > * CVE-2013-2433 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2433 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11 SP2: zypper in -t patch sdksp2-java-1_7_0-ibm-7794 - SUSE Linux Enterprise Server 11 SP2 for VMware: zypper in -t patch slessp2-java-1_7_0-ibm-7794 - SUSE Linux Enterprise Server 11 SP2: zypper in -t patch slessp2-java-1_7_0-ibm-7794 - SUSE Linux Enterprise Java 11 SP2: zypper in -t patch slejsp2-java-1_7_0-ibm-7794 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11 SP2 (i586 ppc64 s390x x86_64): java-1_7_0-ibm-devel-1.7.0_sr4.2-0.6.1 - SUSE Linux Enterprise Server 11 SP2 for VMware (i586 x86_64): java-1_7_0-ibm-1.7.0_sr4.2-0.6.1 java-1_7_0-ibm-alsa-1.7.0_sr4.2-0.6.1 java-1_7_0-ibm-jdbc-1.7.0_sr4.2-0.6.1 java-1_7_0-ibm-plugin-1.7.0_sr4.2-0.6.1 - SUSE Linux Enterprise Server 11 SP2 (i586 ppc64 s390x x86_64): java-1_7_0-ibm-1.7.0_sr4.2-0.6.1 java-1_7_0-ibm-jdbc-1.7.0_sr4.2-0.6.1 - SUSE Linux Enterprise Server 11 SP2 (i586 x86_64): java-1_7_0-ibm-alsa-1.7.0_sr4.2-0.6.1 java-1_7_0-ibm-plugin-1.7.0_sr4.2-0.6.1 - SUSE Linux Enterprise Java 11 SP2 (i586 ppc64 s390x x86_64): java-1_7_0-ibm-1.7.0_sr4.2-0.6.1 java-1_7_0-ibm-devel-1.7.0_sr4.2-0.6.1 java-1_7_0-ibm-jdbc-1.7.0_sr4.2-0.6.1 - SUSE Linux Enterprise Java 11 SP2 (i586 x86_64): java-1_7_0-ibm-alsa-1.7.0_sr4.2-0.6.1 java-1_7_0-ibm-plugin-1.7.0_sr4.2-0.6.1 References: http://support.novell.com/security/cve/CVE-2013-0401.html http://support.novell.com/security/cve/CVE-2013-1491.html http://support.novell.com/security/cve/CVE-2013-1537.html http://support.novell.com/security/cve/CVE-2013-1540.html http://support.novell.com/security/cve/CVE-2013-1557.html http://support.novell.com/security/cve/CVE-2013-1563.html http://support.novell.com/security/cve/CVE-2013-1569.html http://support.novell.com/security/cve/CVE-2013-2383.html http://support.novell.com/security/cve/CVE-2013-2384.html http://support.novell.com/security/cve/CVE-2013-2394.html http://support.novell.com/security/cve/CVE-2013-2417.html http://support.novell.com/security/cve/CVE-2013-2418.html http://support.novell.com/security/cve/CVE-2013-2419.html http://support.novell.com/security/cve/CVE-2013-2420.html http://support.novell.com/security/cve/CVE-2013-2422.html http://support.novell.com/security/cve/CVE-2013-2424.html http://support.novell.com/security/cve/CVE-2013-2429.html http://support.novell.com/security/cve/CVE-2013-2430.html http://support.novell.com/security/cve/CVE-2013-2432.html http://support.novell.com/security/cve/CVE-2013-2433.html http://support.novell.com/security/cve/CVE-2013-2435.html http://support.novell.com/security/cve/CVE-2013-2440.html https://bugzilla.novell.com/592934 https://bugzilla.novell.com/819285 https://bugzilla.novell.com/819288 http://download.novell.com/patch/finder/?keywords=d3017524ccf7b5f89497ba09c… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0