December 2015 - openSUSE Security Announce

[security-announce] openSUSE-SU-2015:2243-1: important: Security update to MySQL 5.6.27
by opensuse-security＠opensuse.org 10 Dec '15

10 Dec '15

openSUSE Security Update: Security update to MySQL 5.6.27 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2243-1 Rating: important References: #924663 #928962 #951391 Cross-References: CVE-2015-0286 CVE-2015-0288 CVE-2015-1789 CVE-2015-1793 CVE-2015-3152 CVE-2015-4730 CVE-2015-4766 CVE-2015-4792 CVE-2015-4800 CVE-2015-4802 CVE-2015-4815 CVE-2015-4816 CVE-2015-4819 CVE-2015-4826 CVE-2015-4830 CVE-2015-4833 CVE-2015-4836 CVE-2015-4858 CVE-2015-4861 CVE-2015-4862 CVE-2015-4864 CVE-2015-4866 CVE-2015-4870 CVE-2015-4879 CVE-2015-4890 CVE-2015-4895 CVE-2015-4904 CVE-2015-4905 CVE-2015-4910 CVE-2015-4913 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes 30 vulnerabilities is now available. Description: MySQL was updated to 5.6.27 to fix security issues and bugs. The following vulnerabilities were fixed as part of the upstream release [boo#951391]: CVE-2015-1793, CVE-2015-0286, CVE-2015-0288, CVE-2015-1789, CVE-2015-4730, CVE-2015-4766, CVE-2015-4792, CVE-2015-4800, CVE-2015-4802, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819, CVE-2015-4826, CVE-2015-4830, CVE-2015-4833, CVE-2015-4836, CVE-2015-4858, CVE-2015-4861, CVE-2015-4862, CVE-2015-4864, CVE-2015-4866, CVE-2015-4870, CVE-2015-4879, CVE-2015-4890, CVE-2015-4895, CVE-2015-4904, CVE-2015-4905, CVE-2015-4910, CVE-2015-4913 Details on these and other changes can be found at: http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-27.html The following security relevant changes are included additionally: * CVE-2015-3152: MySQL lacked SSL enforcement. Using --ssl-verify-server-cert and --ssl[-*] implies that the ssl connection is required. The mysql client will now print an error if ssl is required, but the server can not handle a ssl connection [boo#924663], [boo#928962] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-889=1 - openSUSE 13.2: zypper in -t patch openSUSE-2015-889=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-889=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libmysql56client18-5.6.27-8.1 libmysql56client18-debuginfo-5.6.27-8.1 libmysql56client_r18-5.6.27-8.1 mysql-community-server-5.6.27-8.1 mysql-community-server-bench-5.6.27-8.1 mysql-community-server-bench-debuginfo-5.6.27-8.1 mysql-community-server-client-5.6.27-8.1 mysql-community-server-client-debuginfo-5.6.27-8.1 mysql-community-server-debuginfo-5.6.27-8.1 mysql-community-server-debugsource-5.6.27-8.1 mysql-community-server-errormessages-5.6.27-8.1 mysql-community-server-test-5.6.27-8.1 mysql-community-server-test-debuginfo-5.6.27-8.1 mysql-community-server-tools-5.6.27-8.1 mysql-community-server-tools-debuginfo-5.6.27-8.1 - openSUSE Leap 42.1 (x86_64): libmysql56client18-32bit-5.6.27-8.1 libmysql56client18-debuginfo-32bit-5.6.27-8.1 libmysql56client_r18-32bit-5.6.27-8.1 - openSUSE 13.2 (i586 x86_64): libmysql56client18-5.6.27-2.12.1 libmysql56client18-debuginfo-5.6.27-2.12.1 libmysql56client_r18-5.6.27-2.12.1 mysql-community-server-5.6.27-2.12.1 mysql-community-server-bench-5.6.27-2.12.1 mysql-community-server-bench-debuginfo-5.6.27-2.12.1 mysql-community-server-client-5.6.27-2.12.1 mysql-community-server-client-debuginfo-5.6.27-2.12.1 mysql-community-server-debuginfo-5.6.27-2.12.1 mysql-community-server-debugsource-5.6.27-2.12.1 mysql-community-server-errormessages-5.6.27-2.12.1 mysql-community-server-test-5.6.27-2.12.1 mysql-community-server-test-debuginfo-5.6.27-2.12.1 mysql-community-server-tools-5.6.27-2.12.1 mysql-community-server-tools-debuginfo-5.6.27-2.12.1 - openSUSE 13.2 (x86_64): libmysql56client18-32bit-5.6.27-2.12.1 libmysql56client18-debuginfo-32bit-5.6.27-2.12.1 libmysql56client_r18-32bit-5.6.27-2.12.1 - openSUSE 13.1 (i586 x86_64): libmysql56client18-5.6.27-7.13.1 libmysql56client18-debuginfo-5.6.27-7.13.1 libmysql56client_r18-5.6.27-7.13.1 mysql-community-server-5.6.27-7.13.1 mysql-community-server-bench-5.6.27-7.13.1 mysql-community-server-bench-debuginfo-5.6.27-7.13.1 mysql-community-server-client-5.6.27-7.13.1 mysql-community-server-client-debuginfo-5.6.27-7.13.1 mysql-community-server-debuginfo-5.6.27-7.13.1 mysql-community-server-debugsource-5.6.27-7.13.1 mysql-community-server-errormessages-5.6.27-7.13.1 mysql-community-server-test-5.6.27-7.13.1 mysql-community-server-test-debuginfo-5.6.27-7.13.1 mysql-community-server-tools-5.6.27-7.13.1 mysql-community-server-tools-debuginfo-5.6.27-7.13.1 - openSUSE 13.1 (x86_64): libmysql56client18-32bit-5.6.27-7.13.1 libmysql56client18-debuginfo-32bit-5.6.27-7.13.1 libmysql56client_r18-32bit-5.6.27-7.13.1 References: https://www.suse.com/security/cve/CVE-2015-0286.html https://www.suse.com/security/cve/CVE-2015-0288.html https://www.suse.com/security/cve/CVE-2015-1789.html https://www.suse.com/security/cve/CVE-2015-1793.html https://www.suse.com/security/cve/CVE-2015-3152.html https://www.suse.com/security/cve/CVE-2015-4730.html https://www.suse.com/security/cve/CVE-2015-4766.html https://www.suse.com/security/cve/CVE-2015-4792.html https://www.suse.com/security/cve/CVE-2015-4800.html https://www.suse.com/security/cve/CVE-2015-4802.html https://www.suse.com/security/cve/CVE-2015-4815.html https://www.suse.com/security/cve/CVE-2015-4816.html https://www.suse.com/security/cve/CVE-2015-4819.html https://www.suse.com/security/cve/CVE-2015-4826.html https://www.suse.com/security/cve/CVE-2015-4830.html https://www.suse.com/security/cve/CVE-2015-4833.html https://www.suse.com/security/cve/CVE-2015-4836.html https://www.suse.com/security/cve/CVE-2015-4858.html https://www.suse.com/security/cve/CVE-2015-4861.html https://www.suse.com/security/cve/CVE-2015-4862.html https://www.suse.com/security/cve/CVE-2015-4864.html https://www.suse.com/security/cve/CVE-2015-4866.html https://www.suse.com/security/cve/CVE-2015-4870.html https://www.suse.com/security/cve/CVE-2015-4879.html https://www.suse.com/security/cve/CVE-2015-4890.html https://www.suse.com/security/cve/CVE-2015-4895.html https://www.suse.com/security/cve/CVE-2015-4904.html https://www.suse.com/security/cve/CVE-2015-4905.html https://www.suse.com/security/cve/CVE-2015-4910.html https://www.suse.com/security/cve/CVE-2015-4913.html https://bugzilla.suse.com/924663 https://bugzilla.suse.com/928962 https://bugzilla.suse.com/951391 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2015:2239-1: important: Security update for flash-player
by opensuse-security＠opensuse.org 10 Dec '15

10 Dec '15

openSUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2239-1 Rating: important References: #958324 Cross-References: CVE-2015-8045 CVE-2015-8047 CVE-2015-8048 CVE-2015-8049 CVE-2015-8050 CVE-2015-8055 CVE-2015-8056 CVE-2015-8057 CVE-2015-8058 CVE-2015-8059 CVE-2015-8060 CVE-2015-8061 CVE-2015-8062 CVE-2015-8063 CVE-2015-8064 CVE-2015-8065 CVE-2015-8066 CVE-2015-8067 CVE-2015-8068 CVE-2015-8069 CVE-2015-8070 CVE-2015-8071 CVE-2015-8401 CVE-2015-8402 CVE-2015-8403 CVE-2015-8404 CVE-2015-8405 CVE-2015-8406 CVE-2015-8407 CVE-2015-8408 CVE-2015-8409 CVE-2015-8410 CVE-2015-8411 CVE-2015-8412 CVE-2015-8413 CVE-2015-8414 CVE-2015-8415 CVE-2015-8416 CVE-2015-8417 CVE-2015-8418 CVE-2015-8419 CVE-2015-8420 CVE-2015-8421 CVE-2015-8422 CVE-2015-8423 CVE-2015-8424 CVE-2015-8425 CVE-2015-8426 CVE-2015-8427 CVE-2015-8428 CVE-2015-8429 CVE-2015-8430 CVE-2015-8431 CVE-2015-8432 CVE-2015-8433 CVE-2015-8434 CVE-2015-8435 CVE-2015-8436 CVE-2015-8437 CVE-2015-8438 CVE-2015-8439 CVE-2015-8440 CVE-2015-8441 CVE-2015-8442 CVE-2015-8443 CVE-2015-8444 CVE-2015-8445 CVE-2015-8446 CVE-2015-8447 CVE-2015-8448 CVE-2015-8449 CVE-2015-8450 CVE-2015-8451 CVE-2015-8452 CVE-2015-8453 CVE-2015-8454 CVE-2015-8455 Affected Products: openSUSE 13.2 NonFree openSUSE 13.1 NonFree ______________________________________________________________________________ An update that fixes 77 vulnerabilities is now available. Description: This update for flash-player to version 11.2.202.554 fixes the following security issues in Adobe security advisory APSB15-32. * These updates resolve heap buffer overflow vulnerabilities that could lead to code execution (CVE-2015-8438, CVE-2015-8446). * These updates resolve memory corruption vulnerabilities that could lead to code execution (CVE-2015-8444, CVE-2015-8443, CVE-2015-8417, CVE-2015-8416, CVE-2015-8451, CVE-2015-8047, CVE-2015-8455, CVE-2015-8045, CVE-2015-8418, CVE-2015-8060, CVE-2015-8419, CVE-2015-8408). * These updates resolve security bypass vulnerabilities (CVE-2015-8453, CVE-2015-8440, CVE-2015-8409). * These updates resolve a stack overflow vulnerability that could lead to code execution (CVE-2015-8407). * These updates resolve a type confusion vulnerability that could lead to code execution (CVE-2015-8439). * These updates resolve an integer overflow vulnerability that could lead to code execution (CVE-2015-8445). * These updates resolve a buffer overflow vulnerability that could lead to code execution (CVE-2015-8415) * These updates resolve use-after-free vulnerabilities that could lead to code execution (CVE-2015-8050, CVE-2015-8049, CVE-2015-8437, CVE-2015-8450, CVE-2015-8449, CVE-2015-8448, CVE-2015-8436, CVE-2015-8452, CVE-2015-8048, CVE-2015-8413, CVE-2015-8412, CVE-2015-8410, CVE-2015-8411, CVE-2015-8424, CVE-2015-8422, CVE-2015-8420, CVE-2015-8421, CVE-2015-8423, CVE-2015-8425, CVE-2015-8433, CVE-2015-8432, CVE-2015-8431, CVE-2015-8426, CVE-2015-8430, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8434, CVE-2015-8435, CVE-2015-8414, CVE-2015-8454, CVE-2015-8059, CVE-2015-8058, CVE-2015-8055, CVE-2015-8057, CVE-2015-8056, CVE-2015-8061, CVE-2015-8067, CVE-2015-8066, CVE-2015-8062, CVE-2015-8068, CVE-2015-8064, CVE-2015-8065, CVE-2015-8063, CVE-2015-8405, CVE-2015-8404, CVE-2015-8402, CVE-2015-8403, CVE-2015-8071, CVE-2015-8401, CVE-2015-8406, CVE-2015-8069, CVE-2015-8070, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447). Please also see https://helpx.adobe.com/security/products/flash-player/apsb15-32.html Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2 NonFree: zypper in -t patch openSUSE-2015-882=1 - openSUSE 13.1 NonFree: zypper in -t patch openSUSE-2015-882=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 NonFree (i586 x86_64): flash-player-11.2.202.554-2.82.1 flash-player-gnome-11.2.202.554-2.82.1 flash-player-kde4-11.2.202.554-2.82.1 - openSUSE 13.1 NonFree (i586 x86_64): flash-player-11.2.202.554-147.1 flash-player-gnome-11.2.202.554-147.1 flash-player-kde4-11.2.202.554-147.1 References: https://www.suse.com/security/cve/CVE-2015-8045.html https://www.suse.com/security/cve/CVE-2015-8047.html https://www.suse.com/security/cve/CVE-2015-8048.html https://www.suse.com/security/cve/CVE-2015-8049.html https://www.suse.com/security/cve/CVE-2015-8050.html https://www.suse.com/security/cve/CVE-2015-8055.html https://www.suse.com/security/cve/CVE-2015-8056.html https://www.suse.com/security/cve/CVE-2015-8057.html https://www.suse.com/security/cve/CVE-2015-8058.html https://www.suse.com/security/cve/CVE-2015-8059.html https://www.suse.com/security/cve/CVE-2015-8060.html https://www.suse.com/security/cve/CVE-2015-8061.html https://www.suse.com/security/cve/CVE-2015-8062.html https://www.suse.com/security/cve/CVE-2015-8063.html https://www.suse.com/security/cve/CVE-2015-8064.html https://www.suse.com/security/cve/CVE-2015-8065.html https://www.suse.com/security/cve/CVE-2015-8066.html https://www.suse.com/security/cve/CVE-2015-8067.html https://www.suse.com/security/cve/CVE-2015-8068.html https://www.suse.com/security/cve/CVE-2015-8069.html https://www.suse.com/security/cve/CVE-2015-8070.html https://www.suse.com/security/cve/CVE-2015-8071.html https://www.suse.com/security/cve/CVE-2015-8401.html https://www.suse.com/security/cve/CVE-2015-8402.html https://www.suse.com/security/cve/CVE-2015-8403.html https://www.suse.com/security/cve/CVE-2015-8404.html https://www.suse.com/security/cve/CVE-2015-8405.html https://www.suse.com/security/cve/CVE-2015-8406.html https://www.suse.com/security/cve/CVE-2015-8407.html https://www.suse.com/security/cve/CVE-2015-8408.html https://www.suse.com/security/cve/CVE-2015-8409.html https://www.suse.com/security/cve/CVE-2015-8410.html https://www.suse.com/security/cve/CVE-2015-8411.html https://www.suse.com/security/cve/CVE-2015-8412.html https://www.suse.com/security/cve/CVE-2015-8413.html https://www.suse.com/security/cve/CVE-2015-8414.html https://www.suse.com/security/cve/CVE-2015-8415.html https://www.suse.com/security/cve/CVE-2015-8416.html https://www.suse.com/security/cve/CVE-2015-8417.html https://www.suse.com/security/cve/CVE-2015-8418.html https://www.suse.com/security/cve/CVE-2015-8419.html https://www.suse.com/security/cve/CVE-2015-8420.html https://www.suse.com/security/cve/CVE-2015-8421.html https://www.suse.com/security/cve/CVE-2015-8422.html https://www.suse.com/security/cve/CVE-2015-8423.html https://www.suse.com/security/cve/CVE-2015-8424.html https://www.suse.com/security/cve/CVE-2015-8425.html https://www.suse.com/security/cve/CVE-2015-8426.html https://www.suse.com/security/cve/CVE-2015-8427.html https://www.suse.com/security/cve/CVE-2015-8428.html https://www.suse.com/security/cve/CVE-2015-8429.html https://www.suse.com/security/cve/CVE-2015-8430.html https://www.suse.com/security/cve/CVE-2015-8431.html https://www.suse.com/security/cve/CVE-2015-8432.html https://www.suse.com/security/cve/CVE-2015-8433.html https://www.suse.com/security/cve/CVE-2015-8434.html https://www.suse.com/security/cve/CVE-2015-8435.html https://www.suse.com/security/cve/CVE-2015-8436.html https://www.suse.com/security/cve/CVE-2015-8437.html https://www.suse.com/security/cve/CVE-2015-8438.html https://www.suse.com/security/cve/CVE-2015-8439.html https://www.suse.com/security/cve/CVE-2015-8440.html https://www.suse.com/security/cve/CVE-2015-8441.html https://www.suse.com/security/cve/CVE-2015-8442.html https://www.suse.com/security/cve/CVE-2015-8443.html https://www.suse.com/security/cve/CVE-2015-8444.html https://www.suse.com/security/cve/CVE-2015-8445.html https://www.suse.com/security/cve/CVE-2015-8446.html https://www.suse.com/security/cve/CVE-2015-8447.html https://www.suse.com/security/cve/CVE-2015-8448.html https://www.suse.com/security/cve/CVE-2015-8449.html https://www.suse.com/security/cve/CVE-2015-8450.html https://www.suse.com/security/cve/CVE-2015-8451.html https://www.suse.com/security/cve/CVE-2015-8452.html https://www.suse.com/security/cve/CVE-2015-8453.html https://www.suse.com/security/cve/CVE-2015-8454.html https://www.suse.com/security/cve/CVE-2015-8455.html https://bugzilla.suse.com/958324 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:2236-1: important: Security update for flash-player
by opensuse-security＠opensuse.org 09 Dec '15

09 Dec '15

SUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:2236-1 Rating: important References: #958324 Cross-References: CVE-2015-8045 CVE-2015-8047 CVE-2015-8048 CVE-2015-8049 CVE-2015-8050 CVE-2015-8055 CVE-2015-8056 CVE-2015-8057 CVE-2015-8058 CVE-2015-8059 CVE-2015-8060 CVE-2015-8061 CVE-2015-8062 CVE-2015-8063 CVE-2015-8064 CVE-2015-8065 CVE-2015-8066 CVE-2015-8067 CVE-2015-8068 CVE-2015-8069 CVE-2015-8070 CVE-2015-8071 CVE-2015-8401 CVE-2015-8402 CVE-2015-8403 CVE-2015-8404 CVE-2015-8405 CVE-2015-8406 CVE-2015-8407 CVE-2015-8408 CVE-2015-8409 CVE-2015-8410 CVE-2015-8411 CVE-2015-8412 CVE-2015-8413 CVE-2015-8414 CVE-2015-8415 CVE-2015-8416 CVE-2015-8417 CVE-2015-8418 CVE-2015-8419 CVE-2015-8420 CVE-2015-8421 CVE-2015-8422 CVE-2015-8423 CVE-2015-8424 CVE-2015-8425 CVE-2015-8426 CVE-2015-8427 CVE-2015-8428 CVE-2015-8429 CVE-2015-8430 CVE-2015-8431 CVE-2015-8432 CVE-2015-8433 CVE-2015-8434 CVE-2015-8435 CVE-2015-8436 CVE-2015-8437 CVE-2015-8438 CVE-2015-8439 CVE-2015-8440 CVE-2015-8441 CVE-2015-8442 CVE-2015-8443 CVE-2015-8444 CVE-2015-8445 CVE-2015-8446 CVE-2015-8447 CVE-2015-8448 CVE-2015-8449 CVE-2015-8450 CVE-2015-8451 CVE-2015-8452 CVE-2015-8453 CVE-2015-8454 CVE-2015-8455 Affected Products: SUSE Linux Enterprise Desktop 11-SP4 SUSE Linux Enterprise Desktop 11-SP3 ______________________________________________________________________________ An update that fixes 77 vulnerabilities is now available. Description: This update for flash-player to version 11.2.202.554 fixes the following security issues in Adobe security advisory APSB15-32. * These updates resolve heap buffer overflow vulnerabilities that could lead to code execution (CVE-2015-8438, CVE-2015-8446). * These updates resolve memory corruption vulnerabilities that could lead to code execution (CVE-2015-8444, CVE-2015-8443, CVE-2015-8417, CVE-2015-8416, CVE-2015-8451, CVE-2015-8047, CVE-2015-8455, CVE-2015-8045, CVE-2015-8418, CVE-2015-8060, CVE-2015-8419, CVE-2015-8408). * These updates resolve security bypass vulnerabilities (CVE-2015-8453, CVE-2015-8440, CVE-2015-8409). * These updates resolve a stack overflow vulnerability that could lead to code execution (CVE-2015-8407). * These updates resolve a type confusion vulnerability that could lead to code execution (CVE-2015-8439). * These updates resolve an integer overflow vulnerability that could lead to code execution (CVE-2015-8445). * These updates resolve a buffer overflow vulnerability that could lead to code execution (CVE-2015-8415) * These updates resolve use-after-free vulnerabilities that could lead to code execution (CVE-2015-8050, CVE-2015-8049, CVE-2015-8437, CVE-2015-8450, CVE-2015-8449, CVE-2015-8448, CVE-2015-8436, CVE-2015-8452, CVE-2015-8048, CVE-2015-8413, CVE-2015-8412, CVE-2015-8410, CVE-2015-8411, CVE-2015-8424, CVE-2015-8422, CVE-2015-8420, CVE-2015-8421, CVE-2015-8423, CVE-2015-8425, CVE-2015-8433, CVE-2015-8432, CVE-2015-8431, CVE-2015-8426, CVE-2015-8430, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8434, CVE-2015-8435, CVE-2015-8414, CVE-2015-8454, CVE-2015-8059, CVE-2015-8058, CVE-2015-8055, CVE-2015-8057, CVE-2015-8056, CVE-2015-8061, CVE-2015-8067, CVE-2015-8066, CVE-2015-8062, CVE-2015-8068, CVE-2015-8064, CVE-2015-8065, CVE-2015-8063, CVE-2015-8405, CVE-2015-8404, CVE-2015-8402, CVE-2015-8403, CVE-2015-8071, CVE-2015-8401, CVE-2015-8406, CVE-2015-8069, CVE-2015-8070, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447). Please also see https://helpx.adobe.com/security/products/flash-player/apsb15-32.html Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Desktop 11-SP4: zypper in -t patch sledsp4-flash-player-12254=1 - SUSE Linux Enterprise Desktop 11-SP3: zypper in -t patch sledsp3-flash-player-12254=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Desktop 11-SP4 (i586 x86_64): flash-player-11.2.202.554-0.29.1 flash-player-gnome-11.2.202.554-0.29.1 flash-player-kde4-11.2.202.554-0.29.1 - SUSE Linux Enterprise Desktop 11-SP3 (i586 x86_64): flash-player-11.2.202.554-0.29.1 flash-player-gnome-11.2.202.554-0.29.1 flash-player-kde4-11.2.202.554-0.29.1 References: https://www.suse.com/security/cve/CVE-2015-8045.html https://www.suse.com/security/cve/CVE-2015-8047.html https://www.suse.com/security/cve/CVE-2015-8048.html https://www.suse.com/security/cve/CVE-2015-8049.html https://www.suse.com/security/cve/CVE-2015-8050.html https://www.suse.com/security/cve/CVE-2015-8055.html https://www.suse.com/security/cve/CVE-2015-8056.html https://www.suse.com/security/cve/CVE-2015-8057.html https://www.suse.com/security/cve/CVE-2015-8058.html https://www.suse.com/security/cve/CVE-2015-8059.html https://www.suse.com/security/cve/CVE-2015-8060.html https://www.suse.com/security/cve/CVE-2015-8061.html https://www.suse.com/security/cve/CVE-2015-8062.html https://www.suse.com/security/cve/CVE-2015-8063.html https://www.suse.com/security/cve/CVE-2015-8064.html https://www.suse.com/security/cve/CVE-2015-8065.html https://www.suse.com/security/cve/CVE-2015-8066.html https://www.suse.com/security/cve/CVE-2015-8067.html https://www.suse.com/security/cve/CVE-2015-8068.html https://www.suse.com/security/cve/CVE-2015-8069.html https://www.suse.com/security/cve/CVE-2015-8070.html https://www.suse.com/security/cve/CVE-2015-8071.html https://www.suse.com/security/cve/CVE-2015-8401.html https://www.suse.com/security/cve/CVE-2015-8402.html https://www.suse.com/security/cve/CVE-2015-8403.html https://www.suse.com/security/cve/CVE-2015-8404.html https://www.suse.com/security/cve/CVE-2015-8405.html https://www.suse.com/security/cve/CVE-2015-8406.html https://www.suse.com/security/cve/CVE-2015-8407.html https://www.suse.com/security/cve/CVE-2015-8408.html https://www.suse.com/security/cve/CVE-2015-8409.html https://www.suse.com/security/cve/CVE-2015-8410.html https://www.suse.com/security/cve/CVE-2015-8411.html https://www.suse.com/security/cve/CVE-2015-8412.html https://www.suse.com/security/cve/CVE-2015-8413.html https://www.suse.com/security/cve/CVE-2015-8414.html https://www.suse.com/security/cve/CVE-2015-8415.html https://www.suse.com/security/cve/CVE-2015-8416.html https://www.suse.com/security/cve/CVE-2015-8417.html https://www.suse.com/security/cve/CVE-2015-8418.html https://www.suse.com/security/cve/CVE-2015-8419.html https://www.suse.com/security/cve/CVE-2015-8420.html https://www.suse.com/security/cve/CVE-2015-8421.html https://www.suse.com/security/cve/CVE-2015-8422.html https://www.suse.com/security/cve/CVE-2015-8423.html https://www.suse.com/security/cve/CVE-2015-8424.html https://www.suse.com/security/cve/CVE-2015-8425.html https://www.suse.com/security/cve/CVE-2015-8426.html https://www.suse.com/security/cve/CVE-2015-8427.html https://www.suse.com/security/cve/CVE-2015-8428.html https://www.suse.com/security/cve/CVE-2015-8429.html https://www.suse.com/security/cve/CVE-2015-8430.html https://www.suse.com/security/cve/CVE-2015-8431.html https://www.suse.com/security/cve/CVE-2015-8432.html https://www.suse.com/security/cve/CVE-2015-8433.html https://www.suse.com/security/cve/CVE-2015-8434.html https://www.suse.com/security/cve/CVE-2015-8435.html https://www.suse.com/security/cve/CVE-2015-8436.html https://www.suse.com/security/cve/CVE-2015-8437.html https://www.suse.com/security/cve/CVE-2015-8438.html https://www.suse.com/security/cve/CVE-2015-8439.html https://www.suse.com/security/cve/CVE-2015-8440.html https://www.suse.com/security/cve/CVE-2015-8441.html https://www.suse.com/security/cve/CVE-2015-8442.html https://www.suse.com/security/cve/CVE-2015-8443.html https://www.suse.com/security/cve/CVE-2015-8444.html https://www.suse.com/security/cve/CVE-2015-8445.html https://www.suse.com/security/cve/CVE-2015-8446.html https://www.suse.com/security/cve/CVE-2015-8447.html https://www.suse.com/security/cve/CVE-2015-8448.html https://www.suse.com/security/cve/CVE-2015-8449.html https://www.suse.com/security/cve/CVE-2015-8450.html https://www.suse.com/security/cve/CVE-2015-8451.html https://www.suse.com/security/cve/CVE-2015-8452.html https://www.suse.com/security/cve/CVE-2015-8453.html https://www.suse.com/security/cve/CVE-2015-8454.html https://www.suse.com/security/cve/CVE-2015-8455.html https://bugzilla.suse.com/958324 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:2216-1: important: Security update for java-1_7_0-ibm
by opensuse-security＠opensuse.org 07 Dec '15

07 Dec '15

SUSE Security Update: Security update for java-1_7_0-ibm ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:2216-1 Rating: important References: #941939 #955131 Cross-References: CVE-2015-0204 CVE-2015-0458 CVE-2015-0459 CVE-2015-0469 CVE-2015-0477 CVE-2015-0478 CVE-2015-0480 CVE-2015-0488 CVE-2015-0491 CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-2015-4871 CVE-2015-4872 CVE-2015-4882 CVE-2015-4883 CVE-2015-4893 CVE-2015-4902 CVE-2015-4903 CVE-2015-4911 CVE-2015-5006 Affected Products: SUSE Linux Enterprise Software Development Kit 11-SP3 SUSE Linux Enterprise Server for VMWare 11-SP3 SUSE Linux Enterprise Server 11-SP3 SUSE Linux Enterprise Server 11-SP2-LTSS ______________________________________________________________________________ An update that fixes 29 vulnerabilities is now available. Description: The java-1_7_0-ibm package was updated to version 7.0-9.20 to fix several security and non security issues: - bnc#955131: Version update to 7.0-9.20: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-2015-4871 CVE-2015-4872 CVE-2015-4882 CVE-2015-4883 CVE-2015-4893 CVE-2015-4902 CVE-2015-4903 CVE-2015-4911 CVE-2015-5006 - Add backcompat symlinks for sdkdir - bnc#941939: Fix to provide %{name} instead of %{sdklnk} only in _jvmprivdir Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11-SP3: zypper in -t patch sdksp3-java-1_7_0-ibm-12251=1 - SUSE Linux Enterprise Server for VMWare 11-SP3: zypper in -t patch slessp3-java-1_7_0-ibm-12251=1 - SUSE Linux Enterprise Server 11-SP3: zypper in -t patch slessp3-java-1_7_0-ibm-12251=1 - SUSE Linux Enterprise Server 11-SP2-LTSS: zypper in -t patch slessp2-java-1_7_0-ibm-12251=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11-SP3 (i586 ppc64 s390x x86_64): java-1_7_0-ibm-devel-1.7.0_sr9.20-42.1 - SUSE Linux Enterprise Server for VMWare 11-SP3 (i586 x86_64): java-1_7_0-ibm-1.7.0_sr9.20-42.1 java-1_7_0-ibm-alsa-1.7.0_sr9.20-42.1 java-1_7_0-ibm-jdbc-1.7.0_sr9.20-42.1 java-1_7_0-ibm-plugin-1.7.0_sr9.20-42.1 - SUSE Linux Enterprise Server 11-SP3 (i586 ppc64 s390x x86_64): java-1_7_0-ibm-1.7.0_sr9.20-42.1 java-1_7_0-ibm-jdbc-1.7.0_sr9.20-42.1 - SUSE Linux Enterprise Server 11-SP3 (i586 x86_64): java-1_7_0-ibm-alsa-1.7.0_sr9.20-42.1 java-1_7_0-ibm-plugin-1.7.0_sr9.20-42.1 - SUSE Linux Enterprise Server 11-SP2-LTSS (i586 s390x x86_64): java-1_7_0-ibm-1.7.0_sr9.20-42.1 java-1_7_0-ibm-devel-1.7.0_sr9.20-42.1 java-1_7_0-ibm-jdbc-1.7.0_sr9.20-42.1 - SUSE Linux Enterprise Server 11-SP2-LTSS (i586 x86_64): java-1_7_0-ibm-alsa-1.7.0_sr9.20-42.1 java-1_7_0-ibm-plugin-1.7.0_sr9.20-42.1 References: https://www.suse.com/security/cve/CVE-2015-0204.html https://www.suse.com/security/cve/CVE-2015-0458.html https://www.suse.com/security/cve/CVE-2015-0459.html https://www.suse.com/security/cve/CVE-2015-0469.html https://www.suse.com/security/cve/CVE-2015-0477.html https://www.suse.com/security/cve/CVE-2015-0478.html https://www.suse.com/security/cve/CVE-2015-0480.html https://www.suse.com/security/cve/CVE-2015-0488.html https://www.suse.com/security/cve/CVE-2015-0491.html https://www.suse.com/security/cve/CVE-2015-4734.html https://www.suse.com/security/cve/CVE-2015-4803.html https://www.suse.com/security/cve/CVE-2015-4805.html https://www.suse.com/security/cve/CVE-2015-4806.html https://www.suse.com/security/cve/CVE-2015-4810.html https://www.suse.com/security/cve/CVE-2015-4835.html https://www.suse.com/security/cve/CVE-2015-4840.html https://www.suse.com/security/cve/CVE-2015-4842.html https://www.suse.com/security/cve/CVE-2015-4843.html https://www.suse.com/security/cve/CVE-2015-4844.html https://www.suse.com/security/cve/CVE-2015-4860.html https://www.suse.com/security/cve/CVE-2015-4871.html https://www.suse.com/security/cve/CVE-2015-4872.html https://www.suse.com/security/cve/CVE-2015-4882.html https://www.suse.com/security/cve/CVE-2015-4883.html https://www.suse.com/security/cve/CVE-2015-4893.html https://www.suse.com/security/cve/CVE-2015-4902.html https://www.suse.com/security/cve/CVE-2015-4903.html https://www.suse.com/security/cve/CVE-2015-4911.html https://www.suse.com/security/cve/CVE-2015-5006.html https://bugzilla.suse.com/941939 https://bugzilla.suse.com/955131 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:2194-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 04 Dec '15

04 Dec '15

SUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:2194-1 Rating: important References: #814440 #867595 #904348 #921949 #924493 #930145 #933514 #935961 #936076 #936773 #939826 #939926 #940853 #941202 #941867 #942938 #944749 #945626 #946078 #947241 #947321 #947478 #948521 #948685 #948831 #949100 #949463 #949504 #949706 #949744 #950013 #950750 #950862 #950998 #951110 #951165 #951199 #951440 #951546 #952666 #952758 #953796 #953980 #954635 #955148 #955224 #955422 #955533 #955644 #956047 #956053 #956703 #956711 Cross-References: CVE-2015-0272 CVE-2015-2925 CVE-2015-5283 CVE-2015-5307 CVE-2015-7799 CVE-2015-7872 CVE-2015-7990 CVE-2015-8104 Affected Products: SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Live Patching 12 SUSE Linux Enterprise Desktop 12 ______________________________________________________________________________ An update that solves 8 vulnerabilities and has 45 fixes is now available. Description: The SUSE Linux Enterprise 12 kernel was updated to 3.12.51 to receive various security and bugfixes. Following security bugs were fixed: - CVE-2015-7799: The slhc_init function in drivers/net/slip/slhc.c in the Linux kernel did not ensure that certain slot numbers were valid, which allowed local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted PPPIOCSMAXCID ioctl call (bnc#949936). - CVE-2015-5283: The sctp_init function in net/sctp/protocol.c in the Linux kernel had an incorrect sequence of protocol-initialization steps, which allowed local users to cause a denial of service (panic or memory corruption) by creating SCTP sockets before all of the steps have finished (bnc#947155). - CVE-2015-2925: The prepend_path function in fs/dcache.c in the Linux kernel did not properly handle rename actions inside a bind mount, which allowed local users to bypass an intended container protection mechanism by renaming a directory, related to a "double-chroot attack (bnc#926238). - CVE-2015-8104: The KVM subsystem in the Linux kernel allowed guest OS users to cause a denial of service (host OS panic or hang) by triggering many #DB (aka Debug) exceptions, related to svm.c (bnc#954404). - CVE-2015-5307: The KVM subsystem in the Linux kernel allowed guest OS users to cause a denial of service (host OS panic or hang) by triggering many #AC (aka Alignment Check) exceptions, related to svm.c and vmx.c (bnc#953527). - CVE-2015-7990: RDS: There was no verification that an underlying transport exists when creating a connection, causing usage of a NULL pointer (bsc#952384). - CVE-2015-7872: The key_gc_unused_keys function in security/keys/gc.c in the Linux kernel allowed local users to cause a denial of service (OOPS) via crafted keyctl commands (bnc#951440). - CVE-2015-0272: Missing checks allowed remote attackers to cause a denial of service (IPv6 traffic disruption) via a crafted MTU value in an IPv6 Router Advertisement (RA) message, a different vulnerability than CVE-2015-8215 (bnc#944296). The following non-security bugs were fixed: - ALSA: hda - Disable 64bit address for Creative HDA controllers (bnc#814440). - Add PCI IDs of Intel Sunrise Point-H SATA Controller S232/236 (bsc#953796). - Btrfs: fix file corruption and data loss after cloning inline extents (bnc#956053). - Btrfs: fix truncation of compressed and inlined extents (bnc#956053). - Disable some ppc64le netfilter modules to restore the kabi (bsc#951546) - Fix regression in NFSRDMA server (bsc#951110). - KEYS: Fix race between key destruction and finding a keyring by name (bsc#951440). - KVM: x86: call irq notifiers with directed EOI (bsc#950862). - NVMe: Add shutdown timeout as module parameter (bnc#936076). - NVMe: Mismatched host/device page size support (bsc#935961). - PCI: Drop "setting latency timer" messages (bsc#956047). - SCSI: Fix hard lockup in scsi_remove_target() (bsc#944749). - SCSI: hosts: update to use ida_simple for host_no (bsc#939926) - SUNRPC: Fix oops when trace sunrpc_task events in nfs client (bnc#956703). - Sync ppc64le netfilter config options with other archs (bnc#951546) - Update kabi files with sbc_parse_cdb symbol change (bsc#954635). - apparmor: allow SYS_CAP_RESOURCE to be sufficient to prlimit another task (bsc#921949). - apparmor: temporary work around for bug while unloading policy (boo#941867). - audit: correctly record file names with different path name types (bsc#950013). - audit: create private file name copies when auditing inodes (bsc#950013). - cpu: Defer smpboot kthread unparking until CPU known to scheduler (bsc#936773). - dlm: make posix locks interruptible, (bsc#947241). - dm sysfs: introduce ability to add writable attributes (bsc#904348). - dm-snap: avoid deadock on s->lock when a read is split (bsc#939826). - dm: do not start current request if it would've merged with the previous (bsc#904348). - dm: impose configurable deadline for dm_request_fn's merge heuristic (bsc#904348). - dmapi: Fix xfs dmapi to not unlock and lock XFS_ILOCK_EXCL (bsc#949744). - drm/i915: Avoid race of intel_crt_detect_hotplug() with HPD interrupt, v2 (bsc#942938). - drm/i915: add hotplug activation period to hotplug update mask (bsc#953980). - fanotify: fix notification of groups with inode and mount marks (bsc#955533). - genirq: Make sure irq descriptors really exist when __irq_alloc_descs returns (bsc#945626). - hv: vss: run only on supported host versions (bnc#949504). - ipv4: Do not increase PMTU with Datagram Too Big message (bsc#955224). - ipv6: Check RTF_LOCAL on rt->rt6i_flags instead of rt->dst.flags (bsc#947321). - ipv6: Consider RTF_CACHE when searching the fib6 tree (bsc#947321). - ipv6: Extend the route lookups to low priority metrics (bsc#947321). - ipv6: Stop /128 route from disappearing after pmtu update (bsc#947321). - ipv6: Stop rt6_info from using inet_peer's metrics (bsc#947321). - ipv6: distinguish frag queues by device for multicast and link-local packets (bsc#955422). - ipvs: drop first packet to dead server (bsc#946078). - kABI: protect struct ahci_host_priv. - kABI: protect struct rt6_info changes from bsc#947321 changes (bsc#947321). - kabi: Hide rt6_* types from genksyms on ppc64le (bsc#951546). - kabi: Restore kabi in struct iscsi_tpg_attrib (bsc#954635). - kabi: Restore kabi in struct se_cmd (bsc#954635). - kabi: Restore kabi in struct se_subsystem_api (bsc#954635). - kabi: protect skb_copy_and_csum_datagram_iovec() signature (bsc#951199). - kgr: fix migration of kthreads to the new universe. - kgr: wake up kthreads periodically. - ktime: add ktime_after and ktime_before helper (bsc#904348). - macvlan: Support bonding events (bsc#948521). - net: add length argument to skb_copy_and_csum_datagram_iovec (bsc#951199). - net: handle null iovec pointer in skb_copy_and_csum_datagram_iovec() (bsc#951199). - pci: Update VPD size with correct length (bsc#924493). - rcu: Eliminate deadlock between CPU hotplug and expedited grace periods (bsc#949706). - ring-buffer: Always run per-cpu ring buffer resize with schedule_work_on() (bnc#956711). - route: Use ipv4_mtu instead of raw rt_pmtu (bsc#955224). - rtc: cmos: Cancel alarm timer if alarm time is equal to now+1 seconds (bsc#930145). - rtc: cmos: Revert "rtc-cmos: Add an alarm disable quirk" (bsc#930145). - sched/core: Fix task and run queue sched_info::run_delay inconsistencies (bnc#949100). - sunrpc/cache: make cache flushing more reliable (bsc#947478). - supported.conf: Add missing dependencies of supported modules hwmon_vid needed by nct6775 hwmon_vid needed by w83627ehf reed_solomon needed by ramoops - supported.conf: Fix dependencies on ppc64le of_mdio needed by mdio-gpio - target/pr: fix core_scsi3_pr_seq_non_holder() caller (bnc#952666). - target/rbd: fix COMPARE AND WRITE page vector leak (bnc#948831). - target/rbd: fix PR info memory leaks (bnc#948831). - target: Send UA upon LUN RESET tmr completion (bsc#933514). - target: use "^A" when allocating UAs (bsc#933514). - usbvision fix overflow of interfaces array (bnc#950998). - vmxnet3: Fix ethtool -S to return correct rx queue stats (bsc#950750). - vmxnet3: adjust ring sizes when interface is down (bsc#950750). - x86/efi: Fix boot crash by mapping EFI memmap entries bottom-up at runtime, instead of top-down (bsc#940853). - x86/evtchn: make use of PHYSDEVOP_map_pirq. - x86/mm/hotplug: Modify PGD entry when removing memory (VM Functionality, bnc#955148). - x86/mm/hotplug: Pass sync_global_pgds() a correct argument in remove_pagetable() (VM Functionality, bnc#955148). - xfs: DIO needs an ioend for writes (bsc#949744). - xfs: DIO write completion size updates race (bsc#949744). - xfs: DIO writes within EOF do not need an ioend (bsc#949744). - xfs: always drain dio before extending aio write submission (bsc#949744). - xfs: direct IO EOF zeroing needs to drain AIO (bsc#949744). - xfs: do not allocate an ioend for direct I/O completions (bsc#949744). - xfs: factor DIO write mapping from get_blocks (bsc#949744). - xfs: handle DIO overwrite EOF update completion correctly (bsc#949744). - xfs: move DIO mapping size calculation (bsc#949744). - xfs: using generic_file_direct_write() is unnecessary (bsc#949744). - xhci: Add spurious wakeup quirk for LynxPoint-LP controllers (bnc#951165). - xhci: change xhci 1.0 only restrictions to support xhci 1.1 (bnc#949463). Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Workstation Extension 12: zypper in -t patch SUSE-SLE-WE-12-2015-945=1 - SUSE Linux Enterprise Software Development Kit 12: zypper in -t patch SUSE-SLE-SDK-12-2015-945=1 - SUSE Linux Enterprise Server 12: zypper in -t patch SUSE-SLE-SERVER-12-2015-945=1 - SUSE Linux Enterprise Module for Public Cloud 12: zypper in -t patch SUSE-SLE-Module-Public-Cloud-12-2015-945=1 - SUSE Linux Enterprise Live Patching 12: zypper in -t patch SUSE-SLE-Live-Patching-12-2015-945=1 - SUSE Linux Enterprise Desktop 12: zypper in -t patch SUSE-SLE-DESKTOP-12-2015-945=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Workstation Extension 12 (x86_64): kernel-default-debuginfo-3.12.51-52.31.1 kernel-default-debugsource-3.12.51-52.31.1 kernel-default-extra-3.12.51-52.31.1 kernel-default-extra-debuginfo-3.12.51-52.31.1 - SUSE Linux Enterprise Software Development Kit 12 (ppc64le s390x x86_64): kernel-obs-build-3.12.51-52.31.1 kernel-obs-build-debugsource-3.12.51-52.31.1 - SUSE Linux Enterprise Software Development Kit 12 (noarch): kernel-docs-3.12.51-52.31.5 - SUSE Linux Enterprise Server 12 (ppc64le s390x x86_64): kernel-default-3.12.51-52.31.1 kernel-default-base-3.12.51-52.31.1 kernel-default-base-debuginfo-3.12.51-52.31.1 kernel-default-debuginfo-3.12.51-52.31.1 kernel-default-debugsource-3.12.51-52.31.1 kernel-default-devel-3.12.51-52.31.1 kernel-syms-3.12.51-52.31.1 - SUSE Linux Enterprise Server 12 (x86_64): kernel-xen-3.12.51-52.31.1 kernel-xen-base-3.12.51-52.31.1 kernel-xen-base-debuginfo-3.12.51-52.31.1 kernel-xen-debuginfo-3.12.51-52.31.1 kernel-xen-debugsource-3.12.51-52.31.1 kernel-xen-devel-3.12.51-52.31.1 - SUSE Linux Enterprise Server 12 (noarch): kernel-devel-3.12.51-52.31.1 kernel-macros-3.12.51-52.31.1 kernel-source-3.12.51-52.31.1 - SUSE Linux Enterprise Server 12 (s390x): kernel-default-man-3.12.51-52.31.1 - SUSE Linux Enterprise Module for Public Cloud 12 (x86_64): kernel-ec2-3.12.51-52.31.1 kernel-ec2-debuginfo-3.12.51-52.31.1 kernel-ec2-debugsource-3.12.51-52.31.1 kernel-ec2-devel-3.12.51-52.31.1 kernel-ec2-extra-3.12.51-52.31.1 kernel-ec2-extra-debuginfo-3.12.51-52.31.1 - SUSE Linux Enterprise Live Patching 12 (x86_64): kgraft-patch-3_12_51-52_31-default-1-2.2 kgraft-patch-3_12_51-52_31-xen-1-2.2 - SUSE Linux Enterprise Desktop 12 (x86_64): kernel-default-3.12.51-52.31.1 kernel-default-debuginfo-3.12.51-52.31.1 kernel-default-debugsource-3.12.51-52.31.1 kernel-default-devel-3.12.51-52.31.1 kernel-default-extra-3.12.51-52.31.1 kernel-default-extra-debuginfo-3.12.51-52.31.1 kernel-syms-3.12.51-52.31.1 kernel-xen-3.12.51-52.31.1 kernel-xen-debuginfo-3.12.51-52.31.1 kernel-xen-debugsource-3.12.51-52.31.1 kernel-xen-devel-3.12.51-52.31.1 - SUSE Linux Enterprise Desktop 12 (noarch): kernel-devel-3.12.51-52.31.1 kernel-macros-3.12.51-52.31.1 kernel-source-3.12.51-52.31.1 References: https://www.suse.com/security/cve/CVE-2015-0272.html https://www.suse.com/security/cve/CVE-2015-2925.html https://www.suse.com/security/cve/CVE-2015-5283.html https://www.suse.com/security/cve/CVE-2015-5307.html https://www.suse.com/security/cve/CVE-2015-7799.html https://www.suse.com/security/cve/CVE-2015-7872.html https://www.suse.com/security/cve/CVE-2015-7990.html https://www.suse.com/security/cve/CVE-2015-8104.html https://bugzilla.suse.com/814440 https://bugzilla.suse.com/867595 https://bugzilla.suse.com/904348 https://bugzilla.suse.com/921949 https://bugzilla.suse.com/924493 https://bugzilla.suse.com/930145 https://bugzilla.suse.com/933514 https://bugzilla.suse.com/935961 https://bugzilla.suse.com/936076 https://bugzilla.suse.com/936773 https://bugzilla.suse.com/939826 https://bugzilla.suse.com/939926 https://bugzilla.suse.com/940853 https://bugzilla.suse.com/941202 https://bugzilla.suse.com/941867 https://bugzilla.suse.com/942938 https://bugzilla.suse.com/944749 https://bugzilla.suse.com/945626 https://bugzilla.suse.com/946078 https://bugzilla.suse.com/947241 https://bugzilla.suse.com/947321 https://bugzilla.suse.com/947478 https://bugzilla.suse.com/948521 https://bugzilla.suse.com/948685 https://bugzilla.suse.com/948831 https://bugzilla.suse.com/949100 https://bugzilla.suse.com/949463 https://bugzilla.suse.com/949504 https://bugzilla.suse.com/949706 https://bugzilla.suse.com/949744 https://bugzilla.suse.com/950013 https://bugzilla.suse.com/950750 https://bugzilla.suse.com/950862 https://bugzilla.suse.com/950998 https://bugzilla.suse.com/951110 https://bugzilla.suse.com/951165 https://bugzilla.suse.com/951199 https://bugzilla.suse.com/951440 https://bugzilla.suse.com/951546 https://bugzilla.suse.com/952666 https://bugzilla.suse.com/952758 https://bugzilla.suse.com/953796 https://bugzilla.suse.com/953980 https://bugzilla.suse.com/954635 https://bugzilla.suse.com/955148 https://bugzilla.suse.com/955224 https://bugzilla.suse.com/955422 https://bugzilla.suse.com/955533 https://bugzilla.suse.com/955644 https://bugzilla.suse.com/956047 https://bugzilla.suse.com/956053 https://bugzilla.suse.com/956703 https://bugzilla.suse.com/956711 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:2192-1: important: Security update for java-1_6_0-ibm
by opensuse-security＠opensuse.org 03 Dec '15

03 Dec '15

SUSE Security Update: Security update for java-1_6_0-ibm ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:2192-1 Rating: important References: #941939 #955131 Cross-References: CVE-2015-0204 CVE-2015-0458 CVE-2015-0459 CVE-2015-0469 CVE-2015-0477 CVE-2015-0478 CVE-2015-0480 CVE-2015-0488 CVE-2015-0491 CVE-2015-2625 CVE-2015-2808 CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-2015-4871 CVE-2015-4872 CVE-2015-4882 CVE-2015-4883 CVE-2015-4893 CVE-2015-4902 CVE-2015-4903 CVE-2015-4911 CVE-2015-5006 Affected Products: SUSE Linux Enterprise Module for Legacy Software 12 ______________________________________________________________________________ An update that fixes 31 vulnerabilities is now available. Description: This update for java-1_6_0-ibm fixes the following issues: - Version update to 6.0-16.15 bsc#955131: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-2015-4871 CVE-2015-4872 CVE-2015-4882 CVE-2015-4883 CVE-2015-4893 CVE-2015-4902 CVE-2015-4903 CVE-2015-4911 CVE-2015-5006 CVE-2015-2808 CVE-2015-2625 CVE-2015-0491 CVE-2015-0459 CVE-2015-0469 CVE-2015-0458 CVE-2015-0480 CVE-2015-0488 CVE-2015-0478 CVE-2015-0477 CVE-2015-0204 - Add backcompat symlinks for sdkdir - Fix baselibs.conf policy symlinking - Fix bsc#941939 to provide %{name} instead of %{sdklnk} only in _jvmprivdir Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Module for Legacy Software 12: zypper in -t patch SUSE-SLE-Module-Legacy-12-2015-943=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Module for Legacy Software 12 (s390x x86_64): java-1_6_0-ibm-1.6.0_sr16.15-27.1 java-1_6_0-ibm-fonts-1.6.0_sr16.15-27.1 java-1_6_0-ibm-jdbc-1.6.0_sr16.15-27.1 - SUSE Linux Enterprise Module for Legacy Software 12 (x86_64): java-1_6_0-ibm-plugin-1.6.0_sr16.15-27.1 References: https://www.suse.com/security/cve/CVE-2015-0204.html https://www.suse.com/security/cve/CVE-2015-0458.html https://www.suse.com/security/cve/CVE-2015-0459.html https://www.suse.com/security/cve/CVE-2015-0469.html https://www.suse.com/security/cve/CVE-2015-0477.html https://www.suse.com/security/cve/CVE-2015-0478.html https://www.suse.com/security/cve/CVE-2015-0480.html https://www.suse.com/security/cve/CVE-2015-0488.html https://www.suse.com/security/cve/CVE-2015-0491.html https://www.suse.com/security/cve/CVE-2015-2625.html https://www.suse.com/security/cve/CVE-2015-2808.html https://www.suse.com/security/cve/CVE-2015-4734.html https://www.suse.com/security/cve/CVE-2015-4803.html https://www.suse.com/security/cve/CVE-2015-4805.html https://www.suse.com/security/cve/CVE-2015-4806.html https://www.suse.com/security/cve/CVE-2015-4810.html https://www.suse.com/security/cve/CVE-2015-4835.html https://www.suse.com/security/cve/CVE-2015-4840.html https://www.suse.com/security/cve/CVE-2015-4842.html https://www.suse.com/security/cve/CVE-2015-4843.html https://www.suse.com/security/cve/CVE-2015-4844.html https://www.suse.com/security/cve/CVE-2015-4860.html https://www.suse.com/security/cve/CVE-2015-4871.html https://www.suse.com/security/cve/CVE-2015-4872.html https://www.suse.com/security/cve/CVE-2015-4882.html https://www.suse.com/security/cve/CVE-2015-4883.html https://www.suse.com/security/cve/CVE-2015-4893.html https://www.suse.com/security/cve/CVE-2015-4902.html https://www.suse.com/security/cve/CVE-2015-4903.html https://www.suse.com/security/cve/CVE-2015-4911.html https://www.suse.com/security/cve/CVE-2015-5006.html https://bugzilla.suse.com/941939 https://bugzilla.suse.com/955131 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:2182-1: important: Security update for java-1_7_1-ibm
by opensuse-security＠opensuse.org 03 Dec '15

03 Dec '15

SUSE Security Update: Security update for java-1_7_1-ibm ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:2182-1 Rating: important References: #941939 #955131 Cross-References: CVE-2015-0204 CVE-2015-0458 CVE-2015-0459 CVE-2015-0469 CVE-2015-0477 CVE-2015-0478 CVE-2015-0480 CVE-2015-0488 CVE-2015-0491 CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-2015-4871 CVE-2015-4872 CVE-2015-4882 CVE-2015-4883 CVE-2015-4893 CVE-2015-4902 CVE-2015-4903 CVE-2015-4911 CVE-2015-5006 Affected Products: SUSE Linux Enterprise Software Development Kit 11-SP4 SUSE Linux Enterprise Server 11-SP4 ______________________________________________________________________________ An update that fixes 29 vulnerabilities is now available. Description: The java-1_7_1-ibm package was updated to version 7.1-3.20 to fix several security and non security issues: - bnc#955131: Version update to 7.1-3.20: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-2015-4871 CVE-2015-4872 CVE-2015-4882 CVE-2015-4883 CVE-2015-4893 CVE-2015-4902 CVE-2015-4903 CVE-2015-4911 CVE-2015-5006 - Add backcompat symlinks for sdkdir - bnc#941939: Fix to provide %{name} instead of %{sdklnk} only in _jvmprivdir Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11-SP4: zypper in -t patch sdksp4-java-1_7_1-ibm-12245=1 - SUSE Linux Enterprise Server 11-SP4: zypper in -t patch slessp4-java-1_7_1-ibm-12245=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11-SP4 (i586 ppc64 s390x x86_64): java-1_7_1-ibm-devel-1.7.1_sr3.20-6.1 - SUSE Linux Enterprise Server 11-SP4 (i586 ppc64 s390x x86_64): java-1_7_1-ibm-1.7.1_sr3.20-6.1 java-1_7_1-ibm-jdbc-1.7.1_sr3.20-6.1 - SUSE Linux Enterprise Server 11-SP4 (i586 x86_64): java-1_7_1-ibm-alsa-1.7.1_sr3.20-6.1 java-1_7_1-ibm-plugin-1.7.1_sr3.20-6.1 References: https://www.suse.com/security/cve/CVE-2015-0204.html https://www.suse.com/security/cve/CVE-2015-0458.html https://www.suse.com/security/cve/CVE-2015-0459.html https://www.suse.com/security/cve/CVE-2015-0469.html https://www.suse.com/security/cve/CVE-2015-0477.html https://www.suse.com/security/cve/CVE-2015-0478.html https://www.suse.com/security/cve/CVE-2015-0480.html https://www.suse.com/security/cve/CVE-2015-0488.html https://www.suse.com/security/cve/CVE-2015-0491.html https://www.suse.com/security/cve/CVE-2015-4734.html https://www.suse.com/security/cve/CVE-2015-4803.html https://www.suse.com/security/cve/CVE-2015-4805.html https://www.suse.com/security/cve/CVE-2015-4806.html https://www.suse.com/security/cve/CVE-2015-4810.html https://www.suse.com/security/cve/CVE-2015-4835.html https://www.suse.com/security/cve/CVE-2015-4840.html https://www.suse.com/security/cve/CVE-2015-4842.html https://www.suse.com/security/cve/CVE-2015-4843.html https://www.suse.com/security/cve/CVE-2015-4844.html https://www.suse.com/security/cve/CVE-2015-4860.html https://www.suse.com/security/cve/CVE-2015-4871.html https://www.suse.com/security/cve/CVE-2015-4872.html https://www.suse.com/security/cve/CVE-2015-4882.html https://www.suse.com/security/cve/CVE-2015-4883.html https://www.suse.com/security/cve/CVE-2015-4893.html https://www.suse.com/security/cve/CVE-2015-4902.html https://www.suse.com/security/cve/CVE-2015-4903.html https://www.suse.com/security/cve/CVE-2015-4911.html https://www.suse.com/security/cve/CVE-2015-5006.html https://bugzilla.suse.com/941939 https://bugzilla.suse.com/955131 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:2174-1: important: Security update for dhcpcd
by opensuse-security＠opensuse.org 02 Dec '15

02 Dec '15

SUSE Security Update: Security update for dhcpcd ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:2174-1 Rating: important References: #955762 Affected Products: SUSE Linux Enterprise Server for VMWare 11-SP3 SUSE Linux Enterprise Server 11-SP4 SUSE Linux Enterprise Server 11-SP3 SUSE Linux Enterprise Server 11-SP2-LTSS SUSE Linux Enterprise Desktop 11-SP4 SUSE Linux Enterprise Desktop 11-SP3 SUSE Linux Enterprise Debuginfo 11-SP4 SUSE Linux Enterprise Debuginfo 11-SP3 SUSE Linux Enterprise Debuginfo 11-SP2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: dhcpcd was updated to fix one security issue. This security issue was fixed: - A missing length check in decode_search could have caused DOS (bsc#955762). Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server for VMWare 11-SP3: zypper in -t patch slessp3-dhcpcd-12241=1 - SUSE Linux Enterprise Server 11-SP4: zypper in -t patch slessp4-dhcpcd-12241=1 - SUSE Linux Enterprise Server 11-SP3: zypper in -t patch slessp3-dhcpcd-12241=1 - SUSE Linux Enterprise Server 11-SP2-LTSS: zypper in -t patch slessp2-dhcpcd-12241=1 - SUSE Linux Enterprise Desktop 11-SP4: zypper in -t patch sledsp4-dhcpcd-12241=1 - SUSE Linux Enterprise Desktop 11-SP3: zypper in -t patch sledsp3-dhcpcd-12241=1 - SUSE Linux Enterprise Debuginfo 11-SP4: zypper in -t patch dbgsp4-dhcpcd-12241=1 - SUSE Linux Enterprise Debuginfo 11-SP3: zypper in -t patch dbgsp3-dhcpcd-12241=1 - SUSE Linux Enterprise Debuginfo 11-SP2: zypper in -t patch dbgsp2-dhcpcd-12241=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Server for VMWare 11-SP3 (i586 x86_64): dhcpcd-3.2.3-44.32.2 - SUSE Linux Enterprise Server 11-SP4 (i586 ia64 ppc64 s390x x86_64): dhcpcd-3.2.3-44.32.2 - SUSE Linux Enterprise Server 11-SP3 (i586 ia64 ppc64 s390x x86_64): dhcpcd-3.2.3-44.32.2 - SUSE Linux Enterprise Server 11-SP2-LTSS (i586 s390x x86_64): dhcpcd-3.2.3-44.32.2 - SUSE Linux Enterprise Desktop 11-SP4 (i586 x86_64): dhcpcd-3.2.3-44.32.2 - SUSE Linux Enterprise Desktop 11-SP3 (i586 x86_64): dhcpcd-3.2.3-44.32.2 - SUSE Linux Enterprise Debuginfo 11-SP4 (i586 ia64 ppc64 s390x x86_64): dhcpcd-debuginfo-3.2.3-44.32.2 dhcpcd-debugsource-3.2.3-44.32.2 - SUSE Linux Enterprise Debuginfo 11-SP3 (i586 ia64 ppc64 s390x x86_64): dhcpcd-debuginfo-3.2.3-44.32.2 dhcpcd-debugsource-3.2.3-44.32.2 - SUSE Linux Enterprise Debuginfo 11-SP2 (i586 s390x x86_64): dhcpcd-debuginfo-3.2.3-44.32.2 dhcpcd-debugsource-3.2.3-44.32.2 References: https://bugzilla.suse.com/955762 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:2168-1: important: Security update for java-1_7_1-ibm
by opensuse-security＠opensuse.org 02 Dec '15

02 Dec '15

SUSE Security Update: Security update for java-1_7_1-ibm ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:2168-1 Rating: important References: #941939 #955131 Cross-References: CVE-2015-0204 CVE-2015-0458 CVE-2015-0459 CVE-2015-0469 CVE-2015-0477 CVE-2015-0478 CVE-2015-0480 CVE-2015-0488 CVE-2015-0491 CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-2015-4871 CVE-2015-4872 CVE-2015-4882 CVE-2015-4883 CVE-2015-4893 CVE-2015-4902 CVE-2015-4903 CVE-2015-4911 CVE-2015-5006 Affected Products: SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Server 12 ______________________________________________________________________________ An update that fixes 29 vulnerabilities is now available. Description: The java-1_7_1-ibm package was updated to versioin 7.1-3.20 to fix several security and non security issues: - bnc#955131: Version update to 7.1-3.20: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-2015-4871 CVE-2015-4872 CVE-2015-4882 CVE-2015-4883 CVE-2015-4893 CVE-2015-4902 CVE-2015-4903 CVE-2015-4911 CVE-2015-5006 - Add backcompat symlinks for sdkdir - bnc#941939: Fix to provide %{name} instead of %{sdklnk} only in _jvmprivdir Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 12: zypper in -t patch SUSE-SLE-SDK-12-2015-920=1 - SUSE Linux Enterprise Server 12: zypper in -t patch SUSE-SLE-SERVER-12-2015-920=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 12 (ppc64le s390x x86_64): java-1_7_1-ibm-devel-1.7.1_sr3.20-17.1 - SUSE Linux Enterprise Server 12 (ppc64le s390x x86_64): java-1_7_1-ibm-1.7.1_sr3.20-17.1 java-1_7_1-ibm-jdbc-1.7.1_sr3.20-17.1 - SUSE Linux Enterprise Server 12 (x86_64): java-1_7_1-ibm-alsa-1.7.1_sr3.20-17.1 java-1_7_1-ibm-plugin-1.7.1_sr3.20-17.1 References: https://www.suse.com/security/cve/CVE-2015-0204.html https://www.suse.com/security/cve/CVE-2015-0458.html https://www.suse.com/security/cve/CVE-2015-0459.html https://www.suse.com/security/cve/CVE-2015-0469.html https://www.suse.com/security/cve/CVE-2015-0477.html https://www.suse.com/security/cve/CVE-2015-0478.html https://www.suse.com/security/cve/CVE-2015-0480.html https://www.suse.com/security/cve/CVE-2015-0488.html https://www.suse.com/security/cve/CVE-2015-0491.html https://www.suse.com/security/cve/CVE-2015-4734.html https://www.suse.com/security/cve/CVE-2015-4803.html https://www.suse.com/security/cve/CVE-2015-4805.html https://www.suse.com/security/cve/CVE-2015-4806.html https://www.suse.com/security/cve/CVE-2015-4810.html https://www.suse.com/security/cve/CVE-2015-4835.html https://www.suse.com/security/cve/CVE-2015-4840.html https://www.suse.com/security/cve/CVE-2015-4842.html https://www.suse.com/security/cve/CVE-2015-4843.html https://www.suse.com/security/cve/CVE-2015-4844.html https://www.suse.com/security/cve/CVE-2015-4860.html https://www.suse.com/security/cve/CVE-2015-4871.html https://www.suse.com/security/cve/CVE-2015-4872.html https://www.suse.com/security/cve/CVE-2015-4882.html https://www.suse.com/security/cve/CVE-2015-4883.html https://www.suse.com/security/cve/CVE-2015-4893.html https://www.suse.com/security/cve/CVE-2015-4902.html https://www.suse.com/security/cve/CVE-2015-4903.html https://www.suse.com/security/cve/CVE-2015-4911.html https://www.suse.com/security/cve/CVE-2015-5006.html https://bugzilla.suse.com/941939 https://bugzilla.suse.com/955131 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:2166-1: important: Security update for java-1_6_0-ibm
by opensuse-security＠opensuse.org 02 Dec '15

02 Dec '15

SUSE Security Update: Security update for java-1_6_0-ibm ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:2166-1 Rating: important References: #955131 Cross-References: CVE-2015-0204 CVE-2015-0458 CVE-2015-0459 CVE-2015-0469 CVE-2015-0477 CVE-2015-0478 CVE-2015-0480 CVE-2015-0488 CVE-2015-0491 CVE-2015-2625 CVE-2015-2808 CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-2015-4871 CVE-2015-4872 CVE-2015-4882 CVE-2015-4883 CVE-2015-4893 CVE-2015-4902 CVE-2015-4903 CVE-2015-4911 CVE-2015-5006 Affected Products: SUSE Linux Enterprise Software Development Kit 11-SP3 SUSE Linux Enterprise Server for VMWare 11-SP3 SUSE Linux Enterprise Server 11-SP3 SUSE Linux Enterprise Server 11-SP2-LTSS ______________________________________________________________________________ An update that fixes 31 vulnerabilities is now available. Description: This update for java-1_6_0-ibm fixes the following issues: - Version update to 6.0-16.15 bsc#955131: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-2015-4871 CVE-2015-4872 CVE-2015-4882 CVE-2015-4883 CVE-2015-4893 CVE-2015-4902 CVE-2015-4903 CVE-2015-4911 CVE-2015-5006 CVE-2015-2808 CVE-2015-2625 CVE-2015-0491 CVE-2015-0459 CVE-2015-0469 CVE-2015-0458 CVE-2015-0480 CVE-2015-0488 CVE-2015-0478 CVE-2015-0477 CVE-2015-0204 Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11-SP3: zypper in -t patch sdksp3-java-1_6_0-ibm-1538=1 - SUSE Linux Enterprise Server for VMWare 11-SP3: zypper in -t patch slessp3-java-1_6_0-ibm-1538=1 - SUSE Linux Enterprise Server 11-SP3: zypper in -t patch slessp3-java-1_6_0-ibm-1538=1 - SUSE Linux Enterprise Server 11-SP2-LTSS: zypper in -t patch slessp2-java-1_6_0-ibm-1538=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11-SP3 (i586 ppc64 s390x x86_64): java-1_6_0-ibm-devel-1.6.0_sr16.15-46.1 - SUSE Linux Enterprise Software Development Kit 11-SP3 (i586 x86_64): java-1_6_0-ibm-1.6.0_sr16.15-46.1 java-1_6_0-ibm-fonts-1.6.0_sr16.15-46.1 - SUSE Linux Enterprise Server for VMWare 11-SP3 (i586 x86_64): java-1_6_0-ibm-1.6.0_sr16.15-46.1 java-1_6_0-ibm-fonts-1.6.0_sr16.15-46.1 java-1_6_0-ibm-jdbc-1.6.0_sr16.15-46.1 java-1_6_0-ibm-plugin-1.6.0_sr16.15-46.1 - SUSE Linux Enterprise Server for VMWare 11-SP3 (i586): java-1_6_0-ibm-alsa-1.6.0_sr16.15-46.1 - SUSE Linux Enterprise Server 11-SP3 (i586 ppc64 s390x x86_64): java-1_6_0-ibm-1.6.0_sr16.15-46.1 java-1_6_0-ibm-fonts-1.6.0_sr16.15-46.1 java-1_6_0-ibm-jdbc-1.6.0_sr16.15-46.1 - SUSE Linux Enterprise Server 11-SP3 (i586 x86_64): java-1_6_0-ibm-plugin-1.6.0_sr16.15-46.1 - SUSE Linux Enterprise Server 11-SP3 (i586): java-1_6_0-ibm-alsa-1.6.0_sr16.15-46.1 - SUSE Linux Enterprise Server 11-SP2-LTSS (i586 s390x x86_64): java-1_6_0-ibm-1.6.0_sr16.15-46.1 java-1_6_0-ibm-devel-1.6.0_sr16.15-46.1 java-1_6_0-ibm-fonts-1.6.0_sr16.15-46.1 java-1_6_0-ibm-jdbc-1.6.0_sr16.15-46.1 - SUSE Linux Enterprise Server 11-SP2-LTSS (i586 x86_64): java-1_6_0-ibm-plugin-1.6.0_sr16.15-46.1 - SUSE Linux Enterprise Server 11-SP2-LTSS (i586): java-1_6_0-ibm-alsa-1.6.0_sr16.15-46.1 References: https://www.suse.com/security/cve/CVE-2015-0204.html https://www.suse.com/security/cve/CVE-2015-0458.html https://www.suse.com/security/cve/CVE-2015-0459.html https://www.suse.com/security/cve/CVE-2015-0469.html https://www.suse.com/security/cve/CVE-2015-0477.html https://www.suse.com/security/cve/CVE-2015-0478.html https://www.suse.com/security/cve/CVE-2015-0480.html https://www.suse.com/security/cve/CVE-2015-0488.html https://www.suse.com/security/cve/CVE-2015-0491.html https://www.suse.com/security/cve/CVE-2015-2625.html https://www.suse.com/security/cve/CVE-2015-2808.html https://www.suse.com/security/cve/CVE-2015-4734.html https://www.suse.com/security/cve/CVE-2015-4803.html https://www.suse.com/security/cve/CVE-2015-4805.html https://www.suse.com/security/cve/CVE-2015-4806.html https://www.suse.com/security/cve/CVE-2015-4810.html https://www.suse.com/security/cve/CVE-2015-4835.html https://www.suse.com/security/cve/CVE-2015-4840.html https://www.suse.com/security/cve/CVE-2015-4842.html https://www.suse.com/security/cve/CVE-2015-4843.html https://www.suse.com/security/cve/CVE-2015-4844.html https://www.suse.com/security/cve/CVE-2015-4860.html https://www.suse.com/security/cve/CVE-2015-4871.html https://www.suse.com/security/cve/CVE-2015-4872.html https://www.suse.com/security/cve/CVE-2015-4882.html https://www.suse.com/security/cve/CVE-2015-4883.html https://www.suse.com/security/cve/CVE-2015-4893.html https://www.suse.com/security/cve/CVE-2015-4902.html https://www.suse.com/security/cve/CVE-2015-4903.html https://www.suse.com/security/cve/CVE-2015-4911.html https://www.suse.com/security/cve/CVE-2015-5006.html https://bugzilla.suse.com/955131 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0