October 2015 - openSUSE Security Announce

[security-announce] SUSE-SU-2015:1853-1: important: Security update for xen
by opensuse-security＠opensuse.org 30 Oct '15

30 Oct '15

SUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:1853-1 Rating: important References: #877642 #907514 #910258 #918984 #923967 #932267 #941074 #944463 #944697 #947165 #950367 #950703 #950705 #950706 Cross-References: CVE-2014-0222 CVE-2015-4037 CVE-2015-5239 CVE-2015-6815 CVE-2015-7311 CVE-2015-7835 CVE-2015-7969 CVE-2015-7971 Affected Products: SUSE Linux Enterprise Software Development Kit 11-SP3 SUSE Linux Enterprise Server 11-SP3 SUSE Linux Enterprise Desktop 11-SP3 SUSE Linux Enterprise Debuginfo 11-SP3 ______________________________________________________________________________ An update that solves 8 vulnerabilities and has 6 fixes is now available. Description: xen was updated to fix nine security issues. These security issues were fixed: - CVE-2015-4037: The slirp_smb function in net/slirp.c created temporary files with predictable names, which allowed local users to cause a denial of service (instantiation failure) by creating /tmp/qemu-smb.*-* files before the program (bsc#932267). - CVE-2014-0222: Integer overflow in the qcow_open function allowed remote attackers to cause a denial of service (crash) via a large L2 table in a QCOW version 1 image (bsc#877642). - CVE-2015-7835: Uncontrolled creation of large page mappings by PV guests (bsc#950367). - CVE-2015-7311: libxl in Xen did not properly handle the readonly flag on disks when using the qemu-xen device model, which allowed local guest users to write to a read-only disk image (bsc#947165). - CVE-2015-5239: Integer overflow in vnc_client_read() and protocol_client_msg() (bsc#944463). - CVE-2015-6815: With e1000 NIC emulation support it was possible to enter an infinite loop (bsc#944697). - CVE-2015-7969: Leak of main per-domain vcpu pointer array leading to denial of service (bsc#950703). - CVE-2015-7969: Leak of per-domain profiling- related vcpu pointer array leading to denial of service (bsc#950705). - CVE-2015-7971: Some pmu and profiling hypercalls log without rate limiting (bsc#950706). These non-security issues were fixed: - bsc#907514: Bus fatal error: SLES 12 sudden reboot has been observed - bsc#910258: SLES12 Xen host crashes with FATAL NMI after shutdown of guest with VT-d NIC - bsc#918984: Bus fatal error: SLES11-SP4 sudden reboot has been observed - bsc#923967: Partner-L3: Bus fatal error: SLES11-SP3 sudden reboot has been observed - bsc#941074: Device 51728 could not be connected. Hotplug scripts not working Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11-SP3: zypper in -t patch sdksp3-xen-12174=1 - SUSE Linux Enterprise Server 11-SP3: zypper in -t patch slessp3-xen-12174=1 - SUSE Linux Enterprise Desktop 11-SP3: zypper in -t patch sledsp3-xen-12174=1 - SUSE Linux Enterprise Debuginfo 11-SP3: zypper in -t patch dbgsp3-xen-12174=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11-SP3 (i586 x86_64): xen-devel-4.2.5_14-18.2 - SUSE Linux Enterprise Server 11-SP3 (i586 x86_64): xen-kmp-default-4.2.5_14_3.0.101_0.47.67-18.2 xen-libs-4.2.5_14-18.2 xen-tools-domU-4.2.5_14-18.2 - SUSE Linux Enterprise Server 11-SP3 (x86_64): xen-4.2.5_14-18.2 xen-doc-html-4.2.5_14-18.2 xen-doc-pdf-4.2.5_14-18.2 xen-libs-32bit-4.2.5_14-18.2 xen-tools-4.2.5_14-18.2 - SUSE Linux Enterprise Server 11-SP3 (i586): xen-kmp-pae-4.2.5_14_3.0.101_0.47.67-18.2 - SUSE Linux Enterprise Desktop 11-SP3 (i586 x86_64): xen-kmp-default-4.2.5_14_3.0.101_0.47.67-18.2 xen-libs-4.2.5_14-18.2 xen-tools-domU-4.2.5_14-18.2 - SUSE Linux Enterprise Desktop 11-SP3 (x86_64): xen-4.2.5_14-18.2 xen-doc-html-4.2.5_14-18.2 xen-doc-pdf-4.2.5_14-18.2 xen-libs-32bit-4.2.5_14-18.2 xen-tools-4.2.5_14-18.2 - SUSE Linux Enterprise Desktop 11-SP3 (i586): xen-kmp-pae-4.2.5_14_3.0.101_0.47.67-18.2 - SUSE Linux Enterprise Debuginfo 11-SP3 (i586 x86_64): xen-debuginfo-4.2.5_14-18.2 xen-debugsource-4.2.5_14-18.2 References: https://www.suse.com/security/cve/CVE-2014-0222.html https://www.suse.com/security/cve/CVE-2015-4037.html https://www.suse.com/security/cve/CVE-2015-5239.html https://www.suse.com/security/cve/CVE-2015-6815.html https://www.suse.com/security/cve/CVE-2015-7311.html https://www.suse.com/security/cve/CVE-2015-7835.html https://www.suse.com/security/cve/CVE-2015-7969.html https://www.suse.com/security/cve/CVE-2015-7971.html https://bugzilla.suse.com/877642 https://bugzilla.suse.com/907514 https://bugzilla.suse.com/910258 https://bugzilla.suse.com/918984 https://bugzilla.suse.com/923967 https://bugzilla.suse.com/932267 https://bugzilla.suse.com/941074 https://bugzilla.suse.com/944463 https://bugzilla.suse.com/944697 https://bugzilla.suse.com/947165 https://bugzilla.suse.com/950367 https://bugzilla.suse.com/950703 https://bugzilla.suse.com/950705 https://bugzilla.suse.com/950706 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:1846-1: important: Security update for openstack-swift
by opensuse-security＠opensuse.org 30 Oct '15

30 Oct '15

SUSE Security Update: Security update for openstack-swift ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:1846-1 Rating: important References: #900253 #927793 #942641 Cross-References: CVE-2014-7960 CVE-2015-1856 CVE-2015-5223 Affected Products: SUSE OpenStack Cloud 5 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: openstack-swift was updated to fix three security issues. These security issues were fixed: - CVE-2015-1856: OpenStack Object Storage (Swift), when allow_version is configured, allowed remote authenticated users to delete the latest version of an object by leveraging listing access to the x-versions-location container (bsc#927793). - CVE-2014-7960: OpenStack Object Storage (Swift) allowed remote authenticated users to bypass the max_meta_count and other metadata constraints via multiple crafted requests which exceed the limit when combined (bsc#900253). - CVE-2015-5223: Information leak via Swift tempurls (bsc#942641). Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud 5: zypper in -t patch sleclo50sp3-openstack-swift-12171=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE OpenStack Cloud 5 (x86_64): openstack-swift-2.1.0-11.1 openstack-swift-account-2.1.0-11.1 openstack-swift-container-2.1.0-11.1 openstack-swift-object-2.1.0-11.1 openstack-swift-proxy-2.1.0-11.1 python-swift-2.1.0-11.1 - SUSE OpenStack Cloud 5 (noarch): openstack-swift-doc-2.1.0-11.1 References: https://www.suse.com/security/cve/CVE-2014-7960.html https://www.suse.com/security/cve/CVE-2015-1856.html https://www.suse.com/security/cve/CVE-2015-5223.html https://bugzilla.suse.com/900253 https://bugzilla.suse.com/927793 https://bugzilla.suse.com/942641 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2015:1842-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 29 Oct '15

29 Oct '15

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1842-1 Rating: important References: #919154 #926238 #937969 #938645 #939834 #940338 #941104 #941305 #941867 #942178 #944296 #947155 #951195 #951440 Cross-References: CVE-2015-0272 CVE-2015-1333 CVE-2015-2925 CVE-2015-3290 CVE-2015-5283 CVE-2015-5707 CVE-2015-7872 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that solves 7 vulnerabilities and has 7 fixes is now available. Description: The openSUSE 13.2 kernel was updated to receive various security and bugfixes. Following security bugs were fixed: * CVE-2015-3290: arch/x86/entry/entry_64.S in the Linux kernel on the x86_64 platform improperly relied on espfix64 during nested NMI processing, which allowed local users to gain privileges by triggering an NMI within a certain instruction window (bnc#937969) * CVE-2015-0272: It was reported that it's possible to craft a Router Advertisement message which will bring the receiver in a state where new IPv6 connections will not be accepted until correct Router Advertisement message received. (bsc#944296). * CVE-2015-5283: The sctp_init function in net/sctp/protocol.c in the Linux kernel had an incorrect sequence of protocol-initialization steps, which allowed local users to cause a denial of service (panic or memory corruption) by creating SCTP sockets before all of the steps have finished (bnc#947155). * CVE-2015-1333: Memory leak in the __key_link_end function in security/keys/keyring.c in the Linux kernel allowed local users to cause a denial of service (memory consumption) via many add_key system calls that refer to existing keys. (bsc#938645) * CVE-2015-5707: Integer overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel allowed local users to cause a denial of service or possibly have unspecified other impact via a large iov_count value in a write request. (bsc#940338) * CVE-2015-2925: An attacker could potentially break out of a namespace or container, depending on if he had specific rights in these containers. (bsc#926238). * CVE-2015-7872: A vulnerability in keyrings garbage collector allowed a local user to trigger an oops was found, caused by using request_key() or keyctl request2. (bsc#951440) The following non-security bugs were fixed: - input: evdev - do not report errors form flush() (bsc#939834). - NFSv4: Recovery of recalled read delegations is broken (bsc#942178). - apparmor: temporary work around for bug while unloading policy (boo#941867). - config/x86_64/ec2: Align CONFIG_STRICT_DEVMEM CONFIG_STRICT_DEVMEM is enabled in every other kernel flavor, so enable it for x86_64/ec2 as well. - kernel-obs-build: add btrfs to initrd This is needed for kiwi builds. - mmc: card: Do not access RPMB partitions for normal read/write (bnc#941104). - netback: coalesce (guest) RX SKBs as needed (bsc#919154). - rpm/kernel-obs-build.spec.in: Add virtio_rng to the initrd. This allows to feed some randomness to the OBS workers. - xfs: Fix file type directory corruption for btree directories (bsc#941305). - xfs: ensure buffer types are set correctly (bsc#941305). - xfs: inode unlink does not set AGI buffer type (bsc#941305). - xfs: set buf types when converting extent formats (bsc#941305). - xfs: set superblock buffer type correctly (bsc#941305). - xhci: Add spurious wakeup quirk for LynxPoint-LP controllers (bnc#951195). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-686=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): bbswitch-0.8-3.13.2 bbswitch-debugsource-0.8-3.13.2 bbswitch-kmp-default-0.8_k3.16.7_29-3.13.2 bbswitch-kmp-default-debuginfo-0.8_k3.16.7_29-3.13.2 bbswitch-kmp-desktop-0.8_k3.16.7_29-3.13.2 bbswitch-kmp-desktop-debuginfo-0.8_k3.16.7_29-3.13.2 bbswitch-kmp-xen-0.8_k3.16.7_29-3.13.2 bbswitch-kmp-xen-debuginfo-0.8_k3.16.7_29-3.13.2 cloop-2.639-14.13.2 cloop-debuginfo-2.639-14.13.2 cloop-debugsource-2.639-14.13.2 cloop-kmp-default-2.639_k3.16.7_29-14.13.2 cloop-kmp-default-debuginfo-2.639_k3.16.7_29-14.13.2 cloop-kmp-desktop-2.639_k3.16.7_29-14.13.2 cloop-kmp-desktop-debuginfo-2.639_k3.16.7_29-14.13.2 cloop-kmp-xen-2.639_k3.16.7_29-14.13.2 cloop-kmp-xen-debuginfo-2.639_k3.16.7_29-14.13.2 crash-7.0.8-13.2 crash-debuginfo-7.0.8-13.2 crash-debugsource-7.0.8-13.2 crash-devel-7.0.8-13.2 crash-doc-7.0.8-13.2 crash-eppic-7.0.8-13.2 crash-eppic-debuginfo-7.0.8-13.2 crash-gcore-7.0.8-13.2 crash-gcore-debuginfo-7.0.8-13.2 crash-kmp-default-7.0.8_k3.16.7_29-13.2 crash-kmp-default-debuginfo-7.0.8_k3.16.7_29-13.2 crash-kmp-desktop-7.0.8_k3.16.7_29-13.2 crash-kmp-desktop-debuginfo-7.0.8_k3.16.7_29-13.2 crash-kmp-xen-7.0.8_k3.16.7_29-13.2 crash-kmp-xen-debuginfo-7.0.8_k3.16.7_29-13.2 hdjmod-debugsource-1.28-18.14.2 hdjmod-kmp-default-1.28_k3.16.7_29-18.14.2 hdjmod-kmp-default-debuginfo-1.28_k3.16.7_29-18.14.2 hdjmod-kmp-desktop-1.28_k3.16.7_29-18.14.2 hdjmod-kmp-desktop-debuginfo-1.28_k3.16.7_29-18.14.2 hdjmod-kmp-xen-1.28_k3.16.7_29-18.14.2 hdjmod-kmp-xen-debuginfo-1.28_k3.16.7_29-18.14.2 ipset-6.23-13.2 ipset-debuginfo-6.23-13.2 ipset-debugsource-6.23-13.2 ipset-devel-6.23-13.2 ipset-kmp-default-6.23_k3.16.7_29-13.2 ipset-kmp-default-debuginfo-6.23_k3.16.7_29-13.2 ipset-kmp-desktop-6.23_k3.16.7_29-13.2 ipset-kmp-desktop-debuginfo-6.23_k3.16.7_29-13.2 ipset-kmp-xen-6.23_k3.16.7_29-13.2 ipset-kmp-xen-debuginfo-6.23_k3.16.7_29-13.2 kernel-default-3.16.7-29.1 kernel-default-base-3.16.7-29.1 kernel-default-base-debuginfo-3.16.7-29.1 kernel-default-debuginfo-3.16.7-29.1 kernel-default-debugsource-3.16.7-29.1 kernel-default-devel-3.16.7-29.1 kernel-ec2-3.16.7-29.1 kernel-ec2-base-3.16.7-29.1 kernel-ec2-devel-3.16.7-29.1 kernel-obs-build-3.16.7-29.2 kernel-obs-build-debugsource-3.16.7-29.2 kernel-obs-qa-3.16.7-29.1 kernel-obs-qa-xen-3.16.7-29.1 kernel-syms-3.16.7-29.1 libipset3-6.23-13.2 libipset3-debuginfo-6.23-13.2 pcfclock-0.44-260.13.2 pcfclock-debuginfo-0.44-260.13.2 pcfclock-debugsource-0.44-260.13.2 pcfclock-kmp-default-0.44_k3.16.7_29-260.13.2 pcfclock-kmp-default-debuginfo-0.44_k3.16.7_29-260.13.2 pcfclock-kmp-desktop-0.44_k3.16.7_29-260.13.2 pcfclock-kmp-desktop-debuginfo-0.44_k3.16.7_29-260.13.2 vhba-kmp-debugsource-20140629-2.13.2 vhba-kmp-default-20140629_k3.16.7_29-2.13.2 vhba-kmp-default-debuginfo-20140629_k3.16.7_29-2.13.2 vhba-kmp-desktop-20140629_k3.16.7_29-2.13.2 vhba-kmp-desktop-debuginfo-20140629_k3.16.7_29-2.13.2 vhba-kmp-xen-20140629_k3.16.7_29-2.13.2 vhba-kmp-xen-debuginfo-20140629_k3.16.7_29-2.13.2 xen-debugsource-4.4.2_06-27.2 xen-devel-4.4.2_06-27.2 xen-libs-4.4.2_06-27.2 xen-libs-debuginfo-4.4.2_06-27.2 xen-tools-domU-4.4.2_06-27.2 xen-tools-domU-debuginfo-4.4.2_06-27.2 xtables-addons-2.6-13.2 xtables-addons-debuginfo-2.6-13.2 xtables-addons-debugsource-2.6-13.2 xtables-addons-kmp-default-2.6_k3.16.7_29-13.2 xtables-addons-kmp-default-debuginfo-2.6_k3.16.7_29-13.2 xtables-addons-kmp-desktop-2.6_k3.16.7_29-13.2 xtables-addons-kmp-desktop-debuginfo-2.6_k3.16.7_29-13.2 xtables-addons-kmp-xen-2.6_k3.16.7_29-13.2 xtables-addons-kmp-xen-debuginfo-2.6_k3.16.7_29-13.2 - openSUSE 13.2 (i686 x86_64): kernel-debug-3.16.7-29.1 kernel-debug-base-3.16.7-29.1 kernel-debug-base-debuginfo-3.16.7-29.1 kernel-debug-debuginfo-3.16.7-29.1 kernel-debug-debugsource-3.16.7-29.1 kernel-debug-devel-3.16.7-29.1 kernel-debug-devel-debuginfo-3.16.7-29.1 kernel-desktop-3.16.7-29.1 kernel-desktop-base-3.16.7-29.1 kernel-desktop-base-debuginfo-3.16.7-29.1 kernel-desktop-debuginfo-3.16.7-29.1 kernel-desktop-debugsource-3.16.7-29.1 kernel-desktop-devel-3.16.7-29.1 kernel-ec2-base-debuginfo-3.16.7-29.1 kernel-ec2-debuginfo-3.16.7-29.1 kernel-ec2-debugsource-3.16.7-29.1 kernel-vanilla-3.16.7-29.1 kernel-vanilla-debuginfo-3.16.7-29.1 kernel-vanilla-debugsource-3.16.7-29.1 kernel-vanilla-devel-3.16.7-29.1 kernel-xen-3.16.7-29.1 kernel-xen-base-3.16.7-29.1 kernel-xen-base-debuginfo-3.16.7-29.1 kernel-xen-debuginfo-3.16.7-29.1 kernel-xen-debugsource-3.16.7-29.1 kernel-xen-devel-3.16.7-29.1 - openSUSE 13.2 (x86_64): xen-4.4.2_06-27.2 xen-doc-html-4.4.2_06-27.2 xen-kmp-default-4.4.2_06_k3.16.7_29-27.2 xen-kmp-default-debuginfo-4.4.2_06_k3.16.7_29-27.2 xen-kmp-desktop-4.4.2_06_k3.16.7_29-27.2 xen-kmp-desktop-debuginfo-4.4.2_06_k3.16.7_29-27.2 xen-libs-32bit-4.4.2_06-27.2 xen-libs-debuginfo-32bit-4.4.2_06-27.2 xen-tools-4.4.2_06-27.2 xen-tools-debuginfo-4.4.2_06-27.2 - openSUSE 13.2 (noarch): kernel-devel-3.16.7-29.1 kernel-docs-3.16.7-29.3 kernel-macros-3.16.7-29.1 kernel-source-3.16.7-29.1 kernel-source-vanilla-3.16.7-29.1 - openSUSE 13.2 (i686): kernel-pae-3.16.7-29.1 kernel-pae-base-3.16.7-29.1 kernel-pae-base-debuginfo-3.16.7-29.1 kernel-pae-debuginfo-3.16.7-29.1 kernel-pae-debugsource-3.16.7-29.1 kernel-pae-devel-3.16.7-29.1 - openSUSE 13.2 (i586): bbswitch-kmp-pae-0.8_k3.16.7_29-3.13.2 bbswitch-kmp-pae-debuginfo-0.8_k3.16.7_29-3.13.2 cloop-kmp-pae-2.639_k3.16.7_29-14.13.2 cloop-kmp-pae-debuginfo-2.639_k3.16.7_29-14.13.2 crash-kmp-pae-7.0.8_k3.16.7_29-13.2 crash-kmp-pae-debuginfo-7.0.8_k3.16.7_29-13.2 hdjmod-kmp-pae-1.28_k3.16.7_29-18.14.2 hdjmod-kmp-pae-debuginfo-1.28_k3.16.7_29-18.14.2 ipset-kmp-pae-6.23_k3.16.7_29-13.2 ipset-kmp-pae-debuginfo-6.23_k3.16.7_29-13.2 pcfclock-kmp-pae-0.44_k3.16.7_29-260.13.2 pcfclock-kmp-pae-debuginfo-0.44_k3.16.7_29-260.13.2 vhba-kmp-pae-20140629_k3.16.7_29-2.13.2 vhba-kmp-pae-debuginfo-20140629_k3.16.7_29-2.13.2 xtables-addons-kmp-pae-2.6_k3.16.7_29-13.2 xtables-addons-kmp-pae-debuginfo-2.6_k3.16.7_29-13.2 References: https://www.suse.com/security/cve/CVE-2015-0272.html https://www.suse.com/security/cve/CVE-2015-1333.html https://www.suse.com/security/cve/CVE-2015-2925.html https://www.suse.com/security/cve/CVE-2015-3290.html https://www.suse.com/security/cve/CVE-2015-5283.html https://www.suse.com/security/cve/CVE-2015-5707.html https://www.suse.com/security/cve/CVE-2015-7872.html https://bugzilla.suse.com/919154 https://bugzilla.suse.com/926238 https://bugzilla.suse.com/937969 https://bugzilla.suse.com/938645 https://bugzilla.suse.com/939834 https://bugzilla.suse.com/940338 https://bugzilla.suse.com/941104 https://bugzilla.suse.com/941305 https://bugzilla.suse.com/941867 https://bugzilla.suse.com/942178 https://bugzilla.suse.com/944296 https://bugzilla.suse.com/947155 https://bugzilla.suse.com/951195 https://bugzilla.suse.com/951440 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2015:1831-1: important: Security update for haproxy
by opensuse-security＠opensuse.org 27 Oct '15

27 Oct '15

openSUSE Security Update: Security update for haproxy ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1831-1 Rating: important References: #937042 #937202 Cross-References: CVE-2015-3281 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: haproxy was updated to fix two security issues. These security issues were fixed: - CVE-2015-3281: The buffer_slow_realign function in HAProxy did not properly realign a buffer that is used for pending outgoing data, which allowed remote attackers to obtain sensitive information (uninitialized memory contents of previous requests) via a crafted request (bsc#937042). - Changed DH parameters to prevent Logjam attack. These non-security issues were fixed: - BUG/MAJOR: buffers: make the buffer_slow_realign() function respect output data - BUG/MINOR: ssl: fix smp_fetch_ssl_fc_session_id - MEDIUM: ssl: replace standards DH groups with custom ones - BUG/MEDIUM: ssl: fix tune.ssl.default-dh-param value being overwritten - MINOR: ssl: add a destructor to free allocated SSL ressources - BUG/MINOR: ssl: Display correct filename in error message - MINOR: ssl: load certificates in alphabetical order - BUG/MEDIUM: checks: fix conflicts between agent checks and ssl healthchecks - BUG/MEDIUM: ssl: force a full GC in case of memory shortage - BUG/MEDIUM: ssl: fix bad ssl context init can cause segfault in case of OOM. - BUG/MINOR: ssl: correctly initialize ssl ctx for invalid certificates - MINOR: ssl: add statement to force some ssl options in global. - MINOR: ssl: add fetchs 'ssl_c_der' and 'ssl_f_der' to return DER formatted certs Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-682=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): haproxy-1.5.5-3.1 haproxy-debuginfo-1.5.5-3.1 haproxy-debugsource-1.5.5-3.1 References: https://www.suse.com/security/cve/CVE-2015-3281.html https://bugzilla.suse.com/937042 https://bugzilla.suse.com/937202 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:1818-1: important: Security update for php53
by opensuse-security＠opensuse.org 26 Oct '15

26 Oct '15

SUSE Security Update: Security update for php53 ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:1818-1 Rating: important References: #935074 #942291 #942294 #942295 #942296 #945412 #945428 Cross-References: CVE-2015-6831 CVE-2015-6833 CVE-2015-6836 CVE-2015-6837 CVE-2015-6838 Affected Products: SUSE Linux Enterprise Software Development Kit 11-SP4 SUSE Linux Enterprise Software Development Kit 11-SP3 SUSE Linux Enterprise Server for VMWare 11-SP3 SUSE Linux Enterprise Server 11-SP4 SUSE Linux Enterprise Server 11-SP3 SUSE Linux Enterprise Debuginfo 11-SP4 SUSE Linux Enterprise Debuginfo 11-SP3 ______________________________________________________________________________ An update that solves 5 vulnerabilities and has two fixes is now available. Description: This update of PHP5 brings several security fixes. Security fixes: * CVE-2015-6831: A use after free vulnerability in unserialize() has been fixed which could be used to crash php or potentially execute code. [bnc#942291] [bnc#942294] [bnc#942295] * CVE-2015-6836: A SOAP serialize_function_call() type confusion leading to remote code execution problem was fixed. [bnc#945428] * CVE-2015-6837 CVE-2015-6838: Two NULL pointer dereferences in the XSLTProcessor class were fixed. [bnc#945412] It also includes a bugfix for the odbc module: * compare with SQL_NULL_DATA correctly [bnc#935074] Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11-SP4: zypper in -t patch sdksp4-php53-12163=1 - SUSE Linux Enterprise Software Development Kit 11-SP3: zypper in -t patch sdksp3-php53-12163=1 - SUSE Linux Enterprise Server for VMWare 11-SP3: zypper in -t patch slessp3-php53-12163=1 - SUSE Linux Enterprise Server 11-SP4: zypper in -t patch slessp4-php53-12163=1 - SUSE Linux Enterprise Server 11-SP3: zypper in -t patch slessp3-php53-12163=1 - SUSE Linux Enterprise Debuginfo 11-SP4: zypper in -t patch dbgsp4-php53-12163=1 - SUSE Linux Enterprise Debuginfo 11-SP3: zypper in -t patch dbgsp3-php53-12163=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11-SP4 (i586 ia64 ppc64 s390x x86_64): php53-devel-5.3.17-48.1 php53-imap-5.3.17-48.1 php53-posix-5.3.17-48.1 php53-readline-5.3.17-48.1 php53-sockets-5.3.17-48.1 php53-sqlite-5.3.17-48.1 php53-tidy-5.3.17-48.1 - SUSE Linux Enterprise Software Development Kit 11-SP3 (i586 ia64 ppc64 s390x x86_64): php53-devel-5.3.17-48.1 php53-imap-5.3.17-48.1 php53-posix-5.3.17-48.1 php53-readline-5.3.17-48.1 php53-sockets-5.3.17-48.1 php53-sqlite-5.3.17-48.1 php53-tidy-5.3.17-48.1 - SUSE Linux Enterprise Server for VMWare 11-SP3 (i586 x86_64): apache2-mod_php53-5.3.17-48.1 php53-5.3.17-48.1 php53-bcmath-5.3.17-48.1 php53-bz2-5.3.17-48.1 php53-calendar-5.3.17-48.1 php53-ctype-5.3.17-48.1 php53-curl-5.3.17-48.1 php53-dba-5.3.17-48.1 php53-dom-5.3.17-48.1 php53-exif-5.3.17-48.1 php53-fastcgi-5.3.17-48.1 php53-fileinfo-5.3.17-48.1 php53-ftp-5.3.17-48.1 php53-gd-5.3.17-48.1 php53-gettext-5.3.17-48.1 php53-gmp-5.3.17-48.1 php53-iconv-5.3.17-48.1 php53-intl-5.3.17-48.1 php53-json-5.3.17-48.1 php53-ldap-5.3.17-48.1 php53-mbstring-5.3.17-48.1 php53-mcrypt-5.3.17-48.1 php53-mysql-5.3.17-48.1 php53-odbc-5.3.17-48.1 php53-openssl-5.3.17-48.1 php53-pcntl-5.3.17-48.1 php53-pdo-5.3.17-48.1 php53-pear-5.3.17-48.1 php53-pgsql-5.3.17-48.1 php53-pspell-5.3.17-48.1 php53-shmop-5.3.17-48.1 php53-snmp-5.3.17-48.1 php53-soap-5.3.17-48.1 php53-suhosin-5.3.17-48.1 php53-sysvmsg-5.3.17-48.1 php53-sysvsem-5.3.17-48.1 php53-sysvshm-5.3.17-48.1 php53-tokenizer-5.3.17-48.1 php53-wddx-5.3.17-48.1 php53-xmlreader-5.3.17-48.1 php53-xmlrpc-5.3.17-48.1 php53-xmlwriter-5.3.17-48.1 php53-xsl-5.3.17-48.1 php53-zip-5.3.17-48.1 php53-zlib-5.3.17-48.1 - SUSE Linux Enterprise Server 11-SP4 (i586 ia64 ppc64 s390x x86_64): apache2-mod_php53-5.3.17-48.1 php53-5.3.17-48.1 php53-bcmath-5.3.17-48.1 php53-bz2-5.3.17-48.1 php53-calendar-5.3.17-48.1 php53-ctype-5.3.17-48.1 php53-curl-5.3.17-48.1 php53-dba-5.3.17-48.1 php53-dom-5.3.17-48.1 php53-exif-5.3.17-48.1 php53-fastcgi-5.3.17-48.1 php53-fileinfo-5.3.17-48.1 php53-ftp-5.3.17-48.1 php53-gd-5.3.17-48.1 php53-gettext-5.3.17-48.1 php53-gmp-5.3.17-48.1 php53-iconv-5.3.17-48.1 php53-intl-5.3.17-48.1 php53-json-5.3.17-48.1 php53-ldap-5.3.17-48.1 php53-mbstring-5.3.17-48.1 php53-mcrypt-5.3.17-48.1 php53-mysql-5.3.17-48.1 php53-odbc-5.3.17-48.1 php53-openssl-5.3.17-48.1 php53-pcntl-5.3.17-48.1 php53-pdo-5.3.17-48.1 php53-pear-5.3.17-48.1 php53-pgsql-5.3.17-48.1 php53-pspell-5.3.17-48.1 php53-shmop-5.3.17-48.1 php53-snmp-5.3.17-48.1 php53-soap-5.3.17-48.1 php53-suhosin-5.3.17-48.1 php53-sysvmsg-5.3.17-48.1 php53-sysvsem-5.3.17-48.1 php53-sysvshm-5.3.17-48.1 php53-tokenizer-5.3.17-48.1 php53-wddx-5.3.17-48.1 php53-xmlreader-5.3.17-48.1 php53-xmlrpc-5.3.17-48.1 php53-xmlwriter-5.3.17-48.1 php53-xsl-5.3.17-48.1 php53-zip-5.3.17-48.1 php53-zlib-5.3.17-48.1 - SUSE Linux Enterprise Server 11-SP3 (i586 ia64 ppc64 s390x x86_64): apache2-mod_php53-5.3.17-48.1 php53-5.3.17-48.1 php53-bcmath-5.3.17-48.1 php53-bz2-5.3.17-48.1 php53-calendar-5.3.17-48.1 php53-ctype-5.3.17-48.1 php53-curl-5.3.17-48.1 php53-dba-5.3.17-48.1 php53-dom-5.3.17-48.1 php53-exif-5.3.17-48.1 php53-fastcgi-5.3.17-48.1 php53-fileinfo-5.3.17-48.1 php53-ftp-5.3.17-48.1 php53-gd-5.3.17-48.1 php53-gettext-5.3.17-48.1 php53-gmp-5.3.17-48.1 php53-iconv-5.3.17-48.1 php53-intl-5.3.17-48.1 php53-json-5.3.17-48.1 php53-ldap-5.3.17-48.1 php53-mbstring-5.3.17-48.1 php53-mcrypt-5.3.17-48.1 php53-mysql-5.3.17-48.1 php53-odbc-5.3.17-48.1 php53-openssl-5.3.17-48.1 php53-pcntl-5.3.17-48.1 php53-pdo-5.3.17-48.1 php53-pear-5.3.17-48.1 php53-pgsql-5.3.17-48.1 php53-pspell-5.3.17-48.1 php53-shmop-5.3.17-48.1 php53-snmp-5.3.17-48.1 php53-soap-5.3.17-48.1 php53-suhosin-5.3.17-48.1 php53-sysvmsg-5.3.17-48.1 php53-sysvsem-5.3.17-48.1 php53-sysvshm-5.3.17-48.1 php53-tokenizer-5.3.17-48.1 php53-wddx-5.3.17-48.1 php53-xmlreader-5.3.17-48.1 php53-xmlrpc-5.3.17-48.1 php53-xmlwriter-5.3.17-48.1 php53-xsl-5.3.17-48.1 php53-zip-5.3.17-48.1 php53-zlib-5.3.17-48.1 - SUSE Linux Enterprise Debuginfo 11-SP4 (i586 ia64 ppc64 s390x x86_64): php53-debuginfo-5.3.17-48.1 php53-debugsource-5.3.17-48.1 - SUSE Linux Enterprise Debuginfo 11-SP3 (i586 ia64 ppc64 s390x x86_64): php53-debuginfo-5.3.17-48.1 php53-debugsource-5.3.17-48.1 References: https://www.suse.com/security/cve/CVE-2015-6831.html https://www.suse.com/security/cve/CVE-2015-6833.html https://www.suse.com/security/cve/CVE-2015-6836.html https://www.suse.com/security/cve/CVE-2015-6837.html https://www.suse.com/security/cve/CVE-2015-6838.html https://bugzilla.suse.com/935074 https://bugzilla.suse.com/942291 https://bugzilla.suse.com/942294 https://bugzilla.suse.com/942295 https://bugzilla.suse.com/942296 https://bugzilla.suse.com/945412 https://bugzilla.suse.com/945428 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2015:1817-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 24 Oct '15

24 Oct '15

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1817-1 Rating: important References: #949983 #950686 Cross-References: CVE-2015-7184 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: MozillaFirefox was updated to version 41.0.2 to fix one security issue. This security issue was fixed: - CVE-2015-7184: Cross-origin restriction bypass using Fetch (bsc#950686). These non-security issues were fixed: * Fix a startup crash related to Yandex toolbar and Adblock Plus (bmo#1209124) * Fix potential hangs with Flash plugins (bmo#1185639) * Fix a regression in the bookmark creation (bmo#1206376) * Fix a startup crash with some Intel Media Accelerator 3150 graphic cards (bmo#1207665) * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-678=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-678=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (ppc64 ppc64le): MozillaFirefox-41.0.2-47.1 MozillaFirefox-branding-upstream-41.0.2-47.1 MozillaFirefox-debuginfo-41.0.2-47.1 MozillaFirefox-debugsource-41.0.2-47.1 MozillaFirefox-devel-41.0.2-47.1 MozillaFirefox-translations-common-41.0.2-47.1 MozillaFirefox-translations-other-41.0.2-47.1 - openSUSE 13.1 (ppc64): MozillaFirefox-41.0.2-91.1 MozillaFirefox-branding-upstream-41.0.2-91.1 MozillaFirefox-debuginfo-41.0.2-91.1 MozillaFirefox-debugsource-41.0.2-91.1 MozillaFirefox-devel-41.0.2-91.1 MozillaFirefox-translations-common-41.0.2-91.1 MozillaFirefox-translations-other-41.0.2-91.1 References: https://www.suse.com/security/cve/CVE-2015-7184.html https://bugzilla.suse.com/949983 https://bugzilla.suse.com/950686 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:1785-1: important: Security update for librsvg
by opensuse-security＠opensuse.org 20 Oct '15

20 Oct '15

SUSE Security Update: Security update for librsvg ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:1785-1 Rating: important References: #840753 Cross-References: CVE-2013-1881 Affected Products: SUSE Linux Enterprise Software Development Kit 11-SP4 SUSE Linux Enterprise Software Development Kit 11-SP3 SUSE Linux Enterprise Server for VMWare 11-SP3 SUSE Linux Enterprise Server 11-SP4 SUSE Linux Enterprise Server 11-SP3 SUSE Linux Enterprise Desktop 11-SP4 SUSE Linux Enterprise Desktop 11-SP3 SUSE Linux Enterprise Debuginfo 11-SP4 SUSE Linux Enterprise Debuginfo 11-SP3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: librsvg was updated to fix one security issue. This security issue was fixed: - CVE-2013-1881: GNOME libsvg allowed remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue (bsc#840753). Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11-SP4: zypper in -t patch sdksp4-librsvg-12145=1 - SUSE Linux Enterprise Software Development Kit 11-SP3: zypper in -t patch sdksp3-librsvg-12145=1 - SUSE Linux Enterprise Server for VMWare 11-SP3: zypper in -t patch slessp3-librsvg-12145=1 - SUSE Linux Enterprise Server 11-SP4: zypper in -t patch slessp4-librsvg-12145=1 - SUSE Linux Enterprise Server 11-SP3: zypper in -t patch slessp3-librsvg-12145=1 - SUSE Linux Enterprise Desktop 11-SP4: zypper in -t patch sledsp4-librsvg-12145=1 - SUSE Linux Enterprise Desktop 11-SP3: zypper in -t patch sledsp3-librsvg-12145=1 - SUSE Linux Enterprise Debuginfo 11-SP4: zypper in -t patch dbgsp4-librsvg-12145=1 - SUSE Linux Enterprise Debuginfo 11-SP3: zypper in -t patch dbgsp3-librsvg-12145=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11-SP4 (i586 ia64 ppc64 s390x x86_64): librsvg-devel-2.26.0-2.5.1 - SUSE Linux Enterprise Software Development Kit 11-SP3 (i586 ia64 ppc64 s390x x86_64): librsvg-devel-2.26.0-2.5.1 - SUSE Linux Enterprise Server for VMWare 11-SP3 (i586 x86_64): librsvg-2.26.0-2.5.1 rsvg-view-2.26.0-2.5.1 - SUSE Linux Enterprise Server for VMWare 11-SP3 (x86_64): librsvg-32bit-2.26.0-2.5.1 - SUSE Linux Enterprise Server 11-SP4 (i586 ia64 ppc64 s390x x86_64): librsvg-2.26.0-2.5.1 rsvg-view-2.26.0-2.5.1 - SUSE Linux Enterprise Server 11-SP4 (ppc64 s390x x86_64): librsvg-32bit-2.26.0-2.5.1 - SUSE Linux Enterprise Server 11-SP4 (ia64): librsvg-x86-2.26.0-2.5.1 - SUSE Linux Enterprise Server 11-SP3 (i586 ia64 ppc64 s390x x86_64): librsvg-2.26.0-2.5.1 rsvg-view-2.26.0-2.5.1 - SUSE Linux Enterprise Server 11-SP3 (ppc64 s390x x86_64): librsvg-32bit-2.26.0-2.5.1 - SUSE Linux Enterprise Server 11-SP3 (ia64): librsvg-x86-2.26.0-2.5.1 - SUSE Linux Enterprise Desktop 11-SP4 (i586 x86_64): librsvg-2.26.0-2.5.1 rsvg-view-2.26.0-2.5.1 - SUSE Linux Enterprise Desktop 11-SP4 (x86_64): librsvg-32bit-2.26.0-2.5.1 - SUSE Linux Enterprise Desktop 11-SP3 (i586 x86_64): librsvg-2.26.0-2.5.1 rsvg-view-2.26.0-2.5.1 - SUSE Linux Enterprise Desktop 11-SP3 (x86_64): librsvg-32bit-2.26.0-2.5.1 - SUSE Linux Enterprise Debuginfo 11-SP4 (i586 ia64 ppc64 s390x x86_64): librsvg-debuginfo-2.26.0-2.5.1 librsvg-debugsource-2.26.0-2.5.1 - SUSE Linux Enterprise Debuginfo 11-SP4 (ppc64 s390x x86_64): librsvg-debuginfo-32bit-2.26.0-2.5.1 - SUSE Linux Enterprise Debuginfo 11-SP4 (ia64): librsvg-debuginfo-x86-2.26.0-2.5.1 - SUSE Linux Enterprise Debuginfo 11-SP3 (i586 ia64 ppc64 s390x x86_64): librsvg-debuginfo-2.26.0-2.5.1 librsvg-debugsource-2.26.0-2.5.1 - SUSE Linux Enterprise Debuginfo 11-SP3 (ppc64 s390x x86_64): librsvg-debuginfo-32bit-2.26.0-2.5.1 - SUSE Linux Enterprise Debuginfo 11-SP3 (ia64): librsvg-debuginfo-x86-2.26.0-2.5.1 References: https://www.suse.com/security/cve/CVE-2013-1881.html https://bugzilla.suse.com/840753 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:1782-1: important: Security update for qemu
by opensuse-security＠opensuse.org 20 Oct '15

20 Oct '15

SUSE Security Update: Security update for qemu ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:1782-1 Rating: important References: #902737 #928308 #934506 #934517 #936537 #937125 #937572 #938344 #939216 #943446 #944017 #945404 #945778 #945987 #945989 Cross-References: CVE-2014-7815 CVE-2015-5154 CVE-2015-5278 CVE-2015-5279 CVE-2015-6855 Affected Products: SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Desktop 12 ______________________________________________________________________________ An update that solves 5 vulnerabilities and has 10 fixes is now available. Description: qemu was updated to fix several security issues and bugs. The following vulnerabilities were fixed: - CVE-2015-5154: Heap-based buffer overflow in the IDE subsystem in QEMU, when the container has a CDROM drive enabled, allows local guest users to execute arbitrary code on the host via unspecified ATAPI commands. (bsc#938344). - CVE-2015-5278: QEMU was vulnerable to an infinite loop issue that could occur when receiving packets over the network. (bsc#945989) - CVE-2015-5279: QEMU was vulnerable to a heap buffer overflow issue that could occur when receiving packets over the network. (bsc#945987) - CVE-2015-6855: QEMU was vulnerable to a divide by zero issue that could occur while executing an IDE command WIN_READ_NATIVE_MAX to determine the maximum size of a drive. (bsc#945404) - CVE-2014-7815: The set_pixel_format function in ui/vnc.c in QEMU allowed remote attackers to cause a denial of service (crash) via a small bytes_per_pixel value. (bsc#902737): Also these non-security issues were fixed: - bsc#937572: Fixed dictzip on big endian systems - bsc#934517: Fix 'info tlb' causes guest to freeze - bsc#934506: Fix vte monitor consol looks empy - bsc#937125: Fix parsing of scsi-disk wwn uint64 property - bsc#945778: Drop .probe hooks for DictZip and tar block drivers - bsc#937572: Fold common-obj-y -> block-obj-y change into original patches - bsc#928308,bsc#944017: Fix virtio-ccw index errors when initrd gets too large - bsc#936537: Fix possible qemu-img error when converting to compressed qcow2 image - bsc#939216: Fix reboot fail after install using uefi - bsc#943446: qemu-img convert doesn't create MB aligned VHDs anymore Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 12: zypper in -t patch SUSE-SLE-SERVER-12-2015-715=1 - SUSE Linux Enterprise Desktop 12: zypper in -t patch SUSE-SLE-DESKTOP-12-2015-715=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Server 12 (ppc64le s390x x86_64): qemu-2.0.2-48.9.1 qemu-block-curl-2.0.2-48.9.1 qemu-block-curl-debuginfo-2.0.2-48.9.1 qemu-debugsource-2.0.2-48.9.1 qemu-guest-agent-2.0.2-48.9.1 qemu-guest-agent-debuginfo-2.0.2-48.9.1 qemu-lang-2.0.2-48.9.1 qemu-tools-2.0.2-48.9.1 qemu-tools-debuginfo-2.0.2-48.9.1 - SUSE Linux Enterprise Server 12 (s390x x86_64): qemu-kvm-2.0.2-48.9.1 - SUSE Linux Enterprise Server 12 (ppc64le): qemu-ppc-2.0.2-48.9.1 qemu-ppc-debuginfo-2.0.2-48.9.1 - SUSE Linux Enterprise Server 12 (noarch): qemu-ipxe-1.0.0-48.9.1 qemu-seabios-1.7.4-48.9.1 qemu-sgabios-8-48.9.1 qemu-vgabios-1.7.4-48.9.1 - SUSE Linux Enterprise Server 12 (x86_64): qemu-block-rbd-2.0.2-48.9.1 qemu-block-rbd-debuginfo-2.0.2-48.9.1 qemu-x86-2.0.2-48.9.1 qemu-x86-debuginfo-2.0.2-48.9.1 - SUSE Linux Enterprise Server 12 (s390x): qemu-s390-2.0.2-48.9.1 qemu-s390-debuginfo-2.0.2-48.9.1 - SUSE Linux Enterprise Desktop 12 (x86_64): qemu-2.0.2-48.9.1 qemu-block-curl-2.0.2-48.9.1 qemu-block-curl-debuginfo-2.0.2-48.9.1 qemu-debugsource-2.0.2-48.9.1 qemu-kvm-2.0.2-48.9.1 qemu-tools-2.0.2-48.9.1 qemu-tools-debuginfo-2.0.2-48.9.1 qemu-x86-2.0.2-48.9.1 qemu-x86-debuginfo-2.0.2-48.9.1 - SUSE Linux Enterprise Desktop 12 (noarch): qemu-ipxe-1.0.0-48.9.1 qemu-seabios-1.7.4-48.9.1 qemu-sgabios-8-48.9.1 qemu-vgabios-1.7.4-48.9.1 References: https://www.suse.com/security/cve/CVE-2014-7815.html https://www.suse.com/security/cve/CVE-2015-5154.html https://www.suse.com/security/cve/CVE-2015-5278.html https://www.suse.com/security/cve/CVE-2015-5279.html https://www.suse.com/security/cve/CVE-2015-6855.html https://bugzilla.suse.com/902737 https://bugzilla.suse.com/928308 https://bugzilla.suse.com/934506 https://bugzilla.suse.com/934517 https://bugzilla.suse.com/936537 https://bugzilla.suse.com/937125 https://bugzilla.suse.com/937572 https://bugzilla.suse.com/938344 https://bugzilla.suse.com/939216 https://bugzilla.suse.com/943446 https://bugzilla.suse.com/944017 https://bugzilla.suse.com/945404 https://bugzilla.suse.com/945778 https://bugzilla.suse.com/945987 https://bugzilla.suse.com/945989 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2015:1781-1: critical: Security update for flash-player
by opensuse-security＠opensuse.org 19 Oct '15

19 Oct '15

openSUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1781-1 Rating: critical References: #941239 #946880 #950169 #950474 Cross-References: CVE-2015-3107 CVE-2015-5124 CVE-2015-5125 CVE-2015-5127 CVE-2015-5128 CVE-2015-5129 CVE-2015-5130 CVE-2015-5131 CVE-2015-5132 CVE-2015-5133 CVE-2015-5134 CVE-2015-5539 CVE-2015-5540 CVE-2015-5541 CVE-2015-5544 CVE-2015-5545 CVE-2015-5546 CVE-2015-5547 CVE-2015-5548 CVE-2015-5549 CVE-2015-5550 CVE-2015-5551 CVE-2015-5552 CVE-2015-5553 CVE-2015-5554 CVE-2015-5555 CVE-2015-5556 CVE-2015-5557 CVE-2015-5558 CVE-2015-5559 CVE-2015-5560 CVE-2015-5561 CVE-2015-5562 CVE-2015-5563 CVE-2015-5567 CVE-2015-5568 CVE-2015-5569 CVE-2015-5570 CVE-2015-5571 CVE-2015-5572 CVE-2015-5573 CVE-2015-5574 CVE-2015-5575 CVE-2015-5576 CVE-2015-5577 CVE-2015-5578 CVE-2015-5579 CVE-2015-5580 CVE-2015-5581 CVE-2015-5582 CVE-2015-5584 CVE-2015-5587 CVE-2015-5588 CVE-2015-6676 CVE-2015-6677 CVE-2015-6678 CVE-2015-6679 CVE-2015-6682 CVE-2015-7625 CVE-2015-7626 CVE-2015-7627 CVE-2015-7628 CVE-2015-7629 CVE-2015-7630 CVE-2015-7631 CVE-2015-7632 CVE-2015-7633 CVE-2015-7634 CVE-2015-7643 CVE-2015-7644 CVE-2015-7645 Affected Products: openSUSE Evergreen 11.4 ______________________________________________________________________________ An update that fixes 71 vulnerabilities is now available. Description: This security issue was fixed: - CVE-2015-7645: Critical vulnerability affecting 11.2.202.535 used in Pawn Storm (APSA15-05) (bsc#950474). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Evergreen 11.4: zypper in -t patch 2015-670=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Evergreen 11.4 (i586 x86_64): flash-player-11.2.202.540-176.1 flash-player-gnome-11.2.202.540-176.1 flash-player-kde4-11.2.202.540-176.1 References: https://www.suse.com/security/cve/CVE-2015-3107.html https://www.suse.com/security/cve/CVE-2015-5124.html https://www.suse.com/security/cve/CVE-2015-5125.html https://www.suse.com/security/cve/CVE-2015-5127.html https://www.suse.com/security/cve/CVE-2015-5128.html https://www.suse.com/security/cve/CVE-2015-5129.html https://www.suse.com/security/cve/CVE-2015-5130.html https://www.suse.com/security/cve/CVE-2015-5131.html https://www.suse.com/security/cve/CVE-2015-5132.html https://www.suse.com/security/cve/CVE-2015-5133.html https://www.suse.com/security/cve/CVE-2015-5134.html https://www.suse.com/security/cve/CVE-2015-5539.html https://www.suse.com/security/cve/CVE-2015-5540.html https://www.suse.com/security/cve/CVE-2015-5541.html https://www.suse.com/security/cve/CVE-2015-5544.html https://www.suse.com/security/cve/CVE-2015-5545.html https://www.suse.com/security/cve/CVE-2015-5546.html https://www.suse.com/security/cve/CVE-2015-5547.html https://www.suse.com/security/cve/CVE-2015-5548.html https://www.suse.com/security/cve/CVE-2015-5549.html https://www.suse.com/security/cve/CVE-2015-5550.html https://www.suse.com/security/cve/CVE-2015-5551.html https://www.suse.com/security/cve/CVE-2015-5552.html https://www.suse.com/security/cve/CVE-2015-5553.html https://www.suse.com/security/cve/CVE-2015-5554.html https://www.suse.com/security/cve/CVE-2015-5555.html https://www.suse.com/security/cve/CVE-2015-5556.html https://www.suse.com/security/cve/CVE-2015-5557.html https://www.suse.com/security/cve/CVE-2015-5558.html https://www.suse.com/security/cve/CVE-2015-5559.html https://www.suse.com/security/cve/CVE-2015-5560.html https://www.suse.com/security/cve/CVE-2015-5561.html https://www.suse.com/security/cve/CVE-2015-5562.html https://www.suse.com/security/cve/CVE-2015-5563.html https://www.suse.com/security/cve/CVE-2015-5567.html https://www.suse.com/security/cve/CVE-2015-5568.html https://www.suse.com/security/cve/CVE-2015-5569.html https://www.suse.com/security/cve/CVE-2015-5570.html https://www.suse.com/security/cve/CVE-2015-5571.html https://www.suse.com/security/cve/CVE-2015-5572.html https://www.suse.com/security/cve/CVE-2015-5573.html https://www.suse.com/security/cve/CVE-2015-5574.html https://www.suse.com/security/cve/CVE-2015-5575.html https://www.suse.com/security/cve/CVE-2015-5576.html https://www.suse.com/security/cve/CVE-2015-5577.html https://www.suse.com/security/cve/CVE-2015-5578.html https://www.suse.com/security/cve/CVE-2015-5579.html https://www.suse.com/security/cve/CVE-2015-5580.html https://www.suse.com/security/cve/CVE-2015-5581.html https://www.suse.com/security/cve/CVE-2015-5582.html https://www.suse.com/security/cve/CVE-2015-5584.html https://www.suse.com/security/cve/CVE-2015-5587.html https://www.suse.com/security/cve/CVE-2015-5588.html https://www.suse.com/security/cve/CVE-2015-6676.html https://www.suse.com/security/cve/CVE-2015-6677.html https://www.suse.com/security/cve/CVE-2015-6678.html https://www.suse.com/security/cve/CVE-2015-6679.html https://www.suse.com/security/cve/CVE-2015-6682.html https://www.suse.com/security/cve/CVE-2015-7625.html https://www.suse.com/security/cve/CVE-2015-7626.html https://www.suse.com/security/cve/CVE-2015-7627.html https://www.suse.com/security/cve/CVE-2015-7628.html https://www.suse.com/security/cve/CVE-2015-7629.html https://www.suse.com/security/cve/CVE-2015-7630.html https://www.suse.com/security/cve/CVE-2015-7631.html https://www.suse.com/security/cve/CVE-2015-7632.html https://www.suse.com/security/cve/CVE-2015-7633.html https://www.suse.com/security/cve/CVE-2015-7634.html https://www.suse.com/security/cve/CVE-2015-7643.html https://www.suse.com/security/cve/CVE-2015-7644.html https://www.suse.com/security/cve/CVE-2015-7645.html https://bugzilla.suse.com/941239 https://bugzilla.suse.com/946880 https://bugzilla.suse.com/950169 https://bugzilla.suse.com/950474 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:1771-1: critical: Security update for flash-player
by opensuse-security＠opensuse.org 16 Oct '15

16 Oct '15

SUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:1771-1 Rating: critical References: #950474 Cross-References: CVE-2015-7645 Affected Products: SUSE Linux Enterprise Desktop 11-SP4 SUSE Linux Enterprise Desktop 11-SP3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: flash-player was updated to fix one security issue. This security issue was fixed: - CVE-2015-7645: Critical vulnerability affecting 11.2.202.535 used in Pawn Storm (APSA15-05) (bsc#950474). Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Desktop 11-SP4: zypper in -t patch sledsp4-flash-player-12139=1 - SUSE Linux Enterprise Desktop 11-SP3: zypper in -t patch sledsp3-flash-player-12139=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Desktop 11-SP4 (i586 x86_64): flash-player-11.2.202.540-0.23.1 flash-player-gnome-11.2.202.540-0.23.1 flash-player-kde4-11.2.202.540-0.23.1 - SUSE Linux Enterprise Desktop 11-SP3 (i586 x86_64): flash-player-11.2.202.540-0.23.1 flash-player-gnome-11.2.202.540-0.23.1 flash-player-kde4-11.2.202.540-0.23.1 References: https://www.suse.com/security/cve/CVE-2015-7645.html https://bugzilla.suse.com/950474 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0