- openSUSE Security Announce

[security-announce] Advance SUSE support discontinuation notice for openSUSE 11.4 - Evergreen goes on!
by Marcus Meissner 16 Oct '12

16 Oct '12

Dear opensuse-security-announce subscribers and openSUSE users, SUSE Security and the openSUSE Maintenance Team announce that the SUSE sponsored security and maintenance teams will stop releasing updates for openSUSE 11.4 soon. Having provided both security and bug fixes for the last two releases and two months, we will stop releasing updates after November 5th 2012. However, the community Evergreen team plans to provide ongoing maintenance for openSUSE 11.4. More details on this will be published when they are known. As a consequence, the openSUSE 11.4 distribution directory on our server download.opensuse.org will be removed from /distribution/11.4/ to free space on our mirror sites. The 11.4 directory in the update tree /update/11.4 will follow, as soon as all updates have been published. Also the openSUSE buildservice repositories containing openSUSE 11.4 will be moved to DISCONTINUED:openSUSE:11.4 and building against openSUSE 11.4 will be disabled and removed in all buildservice projects. The discontinuation of openSUSE 11.4 enables SUSE to focus on the openSUSE distributions of a newer release dates to ensure that our users can continuously take advantage of the quality that they are used to with openSUSE products. This announcement holds true for openSUSE 11.4 only. As usual, the openSUSE project will continue to provide update packages for the following products: openSUSE 12.1 (supported until 2 months after openSUSE "Next" release, around May 2013) openSUSE 12.2 (supported until 2 months after openSUSE "Next+2" release) openSUSE Next (naming is discussed currently) (currently in development, to be released early 2013) for the next two openSUSE releases plus a two months overlap period. (As the schedule is under discussion these dates cannot be predicted exactly at this time. It will be 2 releases + 2 months usually.) Please note that the maintenance cycles of SUSE Linux Enterprise products and products based on the SUSE Linux Enterprise Server operating system are not affected by this announcement and have longer life cycles. Our openSUSE lifetimes are tracked on http://en.opensuse.org/Lifetime . To learn more about SUSE Linux Enterprise products, please visit http://www.novell.com/linux/suse/ . For a detailed list of the life cycles of our Enterprise Products please visit http://support.novell.com/lifecycle/ and http://support.novell.com/lifecycle/lcSearchResults.jsp?sl=suse If you have any questions regarding this announcement, please do not hesitate to contact SUSE Security at <security(a)suse.de> or openSUSE Maintenance at <maintenance(a)opensuse.org>. -- Open Linux Security Engineer Position at SUSE: http://bit.ly/Li4RbS

1 0

[security-announce] openSUSE-SU-2012:1345-1: important: MozillaFirefox: update to Firefox 16.0.1
by opensuse-security＠opensuse.org 15 Oct '12

15 Oct '12

openSUSE Security Update: MozillaFirefox: update to Firefox 16.0.1 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1345-1 Rating: important References: #783533 Cross-References: CVE-2012-3982 CVE-2012-3983 CVE-2012-3984 CVE-2012-3985 CVE-2012-3986 CVE-2012-3988 CVE-2012-3989 CVE-2012-3990 CVE-2012-3991 CVE-2012-3992 CVE-2012-3993 CVE-2012-3994 CVE-2012-3995 CVE-2012-4179 CVE-2012-4180 CVE-2012-4182 CVE-2012-4183 CVE-2012-4184 CVE-2012-4185 CVE-2012-4186 CVE-2012-4187 CVE-2012-4188 CVE-2012-4191 CVE-2012-4192 CVE-2012-4193 Affected Products: openSUSE 12.2 openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes 25 vulnerabilities is now available. Description: The Mozilla suite received following security updates (bnc#783533): Mozilla Firefox was updated to 16.0.1. Mozilla Seamonkey was updated to 2.13.1. Mozilla Thunderbird was updated to 16.0.1. Mozilla XULRunner was updated to 16.0.1. * MFSA 2012-88/CVE-2012-4191 (bmo#798045) Miscellaneous memory safety hazards * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619) defaultValue security checks not applied * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983 Miscellaneous memory safety hazards * MFSA 2012-75/CVE-2012-3984 (bmo#575294) select element persistance allows for attacks * MFSA 2012-76/CVE-2012-3985 (bmo#655649) Continued access to initial origin after setting document.domain * MFSA 2012-77/CVE-2012-3986 (bmo#775868) Some DOMWindowUtils methods bypass security checks * MFSA 2012-79/CVE-2012-3988 (bmo#725770) DOS and crash with full screen and history navigation * MFSA 2012-80/CVE-2012-3989 (bmo#783867) Crash with invalid cast when using instanceof operator * MFSA 2012-81/CVE-2012-3991 (bmo#783260) GetProperty function can bypass security checks * MFSA 2012-82/CVE-2012-3994 (bmo#765527) top object and location property accessible by plugins * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370) Chrome Object Wrapper (COW) does not disallow acces to privileged functions or properties * MFSA 2012-84/CVE-2012-3992 (bmo#775009) Spoofing and script injection through location.hash * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/ CVE-2012-4181/CVE-2012-4182/CVE-2012-4183 Use-after-free, buffer overflow, and out of bounds read issues found using Address Sanitizer * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/ CVE-2012-4188 Heap memory corruption issues found using Address Sanitizer * MFSA 2012-87/CVE-2012-3990 (bmo#787704) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-709 - openSUSE 12.1: zypper in -t patch openSUSE-2012-709 - openSUSE 11.4: zypper in -t patch openSUSE-2012-709 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): MozillaFirefox-16.0.1-2.17.1 MozillaFirefox-branding-upstream-16.0.1-2.17.1 MozillaFirefox-buildsymbols-16.0.1-2.17.1 MozillaFirefox-debuginfo-16.0.1-2.17.1 MozillaFirefox-debugsource-16.0.1-2.17.1 MozillaFirefox-devel-16.0.1-2.17.1 MozillaFirefox-translations-common-16.0.1-2.17.1 MozillaFirefox-translations-other-16.0.1-2.17.1 MozillaThunderbird-16.0.1-49.15.1 MozillaThunderbird-buildsymbols-16.0.1-49.15.1 MozillaThunderbird-debuginfo-16.0.1-49.15.1 MozillaThunderbird-debugsource-16.0.1-49.15.1 MozillaThunderbird-devel-16.0.1-49.15.1 MozillaThunderbird-devel-debuginfo-16.0.1-49.15.1 MozillaThunderbird-translations-common-16.0.1-49.15.1 MozillaThunderbird-translations-other-16.0.1-49.15.1 enigmail-1.4.5.+16.0.1-49.15.1 enigmail-debuginfo-1.4.5.+16.0.1-49.15.1 mozilla-js-16.0.1-2.14.1 mozilla-js-debuginfo-16.0.1-2.14.1 mozilla-kde4-integration-0.6.4-10.4.1 mozilla-kde4-integration-debuginfo-0.6.4-10.4.1 mozilla-kde4-integration-debugsource-0.6.4-10.4.1 seamonkey-2.13.1-2.18.1 seamonkey-debuginfo-2.13.1-2.18.1 seamonkey-debugsource-2.13.1-2.18.1 seamonkey-dom-inspector-2.13.1-2.18.1 seamonkey-irc-2.13.1-2.18.1 seamonkey-translations-common-2.13.1-2.18.1 seamonkey-translations-other-2.13.1-2.18.1 seamonkey-venkman-2.13.1-2.18.1 xulrunner-16.0.1-2.14.1 xulrunner-buildsymbols-16.0.1-2.14.1 xulrunner-debuginfo-16.0.1-2.14.1 xulrunner-debugsource-16.0.1-2.14.1 xulrunner-devel-16.0.1-2.14.1 xulrunner-devel-debuginfo-16.0.1-2.14.1 - openSUSE 12.2 (x86_64): mozilla-js-32bit-16.0.1-2.14.1 mozilla-js-debuginfo-32bit-16.0.1-2.14.1 xulrunner-32bit-16.0.1-2.14.1 xulrunner-debuginfo-32bit-16.0.1-2.14.1 - openSUSE 12.1 (i586 x86_64): MozillaFirefox-16.0.1-2.46.1 MozillaFirefox-branding-upstream-16.0.1-2.46.1 MozillaFirefox-buildsymbols-16.0.1-2.46.1 MozillaFirefox-debuginfo-16.0.1-2.46.1 MozillaFirefox-debugsource-16.0.1-2.46.1 MozillaFirefox-devel-16.0.1-2.46.1 MozillaFirefox-translations-common-16.0.1-2.46.1 MozillaFirefox-translations-other-16.0.1-2.46.1 MozillaThunderbird-16.0.1-33.35.1 MozillaThunderbird-buildsymbols-16.0.1-33.35.1 MozillaThunderbird-debuginfo-16.0.1-33.35.1 MozillaThunderbird-debugsource-16.0.1-33.35.1 MozillaThunderbird-devel-16.0.1-33.35.1 MozillaThunderbird-devel-debuginfo-16.0.1-33.35.1 MozillaThunderbird-translations-common-16.0.1-33.35.1 MozillaThunderbird-translations-other-16.0.1-33.35.1 enigmail-1.4.5.+16.0.1-33.35.1 enigmail-debuginfo-1.4.5.+16.0.1-33.35.1 mozilla-js-16.0.1-2.41.1 mozilla-js-debuginfo-16.0.1-2.41.1 mozilla-kde4-integration-0.6.4-6.4.1 mozilla-kde4-integration-debuginfo-0.6.4-6.4.1 mozilla-kde4-integration-debugsource-0.6.4-6.4.1 seamonkey-2.13.1-2.37.1 seamonkey-debuginfo-2.13.1-2.37.1 seamonkey-debugsource-2.13.1-2.37.1 seamonkey-dom-inspector-2.13.1-2.37.1 seamonkey-irc-2.13.1-2.37.1 seamonkey-translations-common-2.13.1-2.37.1 seamonkey-translations-other-2.13.1-2.37.1 seamonkey-venkman-2.13.1-2.37.1 xulrunner-16.0.1-2.41.1 xulrunner-buildsymbols-16.0.1-2.41.1 xulrunner-debuginfo-16.0.1-2.41.1 xulrunner-debugsource-16.0.1-2.41.1 xulrunner-devel-16.0.1-2.41.1 xulrunner-devel-debuginfo-16.0.1-2.41.1 - openSUSE 12.1 (x86_64): mozilla-js-32bit-16.0.1-2.41.1 mozilla-js-debuginfo-32bit-16.0.1-2.41.1 xulrunner-32bit-16.0.1-2.41.1 xulrunner-debuginfo-32bit-16.0.1-2.41.1 - openSUSE 12.1 (ia64): mozilla-js-debuginfo-x86-16.0.1-2.41.1 mozilla-js-x86-16.0.1-2.41.1 xulrunner-debuginfo-x86-16.0.1-2.41.1 xulrunner-x86-16.0.1-2.41.1 - openSUSE 11.4 (i586 x86_64): MozillaFirefox-16.0.1-41.1 MozillaFirefox-branding-upstream-16.0.1-41.1 MozillaFirefox-buildsymbols-16.0.1-41.1 MozillaFirefox-debuginfo-16.0.1-41.1 MozillaFirefox-debugsource-16.0.1-41.1 MozillaFirefox-devel-16.0.1-41.1 MozillaFirefox-translations-common-16.0.1-41.1 MozillaFirefox-translations-other-16.0.1-41.1 MozillaThunderbird-16.0.1-33.1 MozillaThunderbird-buildsymbols-16.0.1-33.1 MozillaThunderbird-debuginfo-16.0.1-33.1 MozillaThunderbird-debugsource-16.0.1-33.1 MozillaThunderbird-devel-16.0.1-33.1 MozillaThunderbird-devel-debuginfo-16.0.1-33.1 MozillaThunderbird-translations-common-16.0.1-33.1 MozillaThunderbird-translations-other-16.0.1-33.1 enigmail-1.4.5.+16.0.1-33.1 enigmail-debuginfo-1.4.5.+16.0.1-33.1 mozilla-kde4-integration-0.6.4-6.1 mozilla-kde4-integration-debuginfo-0.6.4-6.1 mozilla-kde4-integration-debugsource-0.6.4-6.1 seamonkey-2.13.1-37.1 seamonkey-debuginfo-2.13.1-37.1 seamonkey-debugsource-2.13.1-37.1 seamonkey-dom-inspector-2.13.1-37.1 seamonkey-irc-2.13.1-37.1 seamonkey-translations-common-2.13.1-37.1 seamonkey-translations-other-2.13.1-37.1 seamonkey-venkman-2.13.1-37.1 References: http://support.novell.com/security/cve/CVE-2012-3982.html http://support.novell.com/security/cve/CVE-2012-3983.html http://support.novell.com/security/cve/CVE-2012-3984.html http://support.novell.com/security/cve/CVE-2012-3985.html http://support.novell.com/security/cve/CVE-2012-3986.html http://support.novell.com/security/cve/CVE-2012-3988.html http://support.novell.com/security/cve/CVE-2012-3989.html http://support.novell.com/security/cve/CVE-2012-3990.html http://support.novell.com/security/cve/CVE-2012-3991.html http://support.novell.com/security/cve/CVE-2012-3992.html http://support.novell.com/security/cve/CVE-2012-3993.html http://support.novell.com/security/cve/CVE-2012-3994.html http://support.novell.com/security/cve/CVE-2012-3995.html http://support.novell.com/security/cve/CVE-2012-4179.html http://support.novell.com/security/cve/CVE-2012-4180.html http://support.novell.com/security/cve/CVE-2012-4182.html http://support.novell.com/security/cve/CVE-2012-4183.html http://support.novell.com/security/cve/CVE-2012-4184.html http://support.novell.com/security/cve/CVE-2012-4185.html http://support.novell.com/security/cve/CVE-2012-4186.html http://support.novell.com/security/cve/CVE-2012-4187.html http://support.novell.com/security/cve/CVE-2012-4188.html http://support.novell.com/security/cve/CVE-2012-4191.html http://support.novell.com/security/cve/CVE-2012-4192.html http://support.novell.com/security/cve/CVE-2012-4193.html https://bugzilla.novell.com/783533 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:1333-1: critical: Security update for bind
by opensuse-security＠opensuse.org 13 Oct '12

13 Oct '12

SUSE Security Update: Security update for bind ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:1333-1 Rating: critical References: #780157 Cross-References: CVE-2012-4244 Affected Products: SUSE Linux Enterprise Server 10 SP3 LTSS ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update fixes a bug where specially-crafted RRs could have caused a Denial of Service (Application crash) in named. CVE-2012-4244 was assigned to this issue. Security Issue reference: * CVE-2012-4244 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4244 > Package List: - SUSE Linux Enterprise Server 10 SP3 LTSS (i586 s390x x86_64): bind-9.3.4-1.40.1 bind-chrootenv-9.3.4-1.40.1 bind-devel-9.3.4-1.40.1 bind-doc-9.3.4-1.40.1 bind-libs-9.3.4-1.40.1 bind-utils-9.3.4-1.40.1 - SUSE Linux Enterprise Server 10 SP3 LTSS (s390x x86_64): bind-libs-32bit-9.3.4-1.40.1 References: http://support.novell.com/security/cve/CVE-2012-4244.html https://bugzilla.novell.com/780157 http://download.novell.com/patch/finder/?keywords=5798d03a4e2045a2e1ed416f1… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:1326-2: critical: Security update for flash-player
by opensuse-security＠opensuse.org 13 Oct '12

13 Oct '12

SUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:1326-2 Rating: critical References: #784168 Cross-References: CVE-2012-5248 CVE-2012-5249 CVE-2012-5250 CVE-2012-5251 CVE-2012-5252 CVE-2012-5253 CVE-2012-5254 CVE-2012-5255 CVE-2012-5256 CVE-2012-5257 CVE-2012-5258 CVE-2012-5259 CVE-2012-5260 CVE-2012-5261 CVE-2012-5262 CVE-2012-5263 CVE-2012-5264 CVE-2012-5265 CVE-2012-5266 CVE-2012-5267 CVE-2012-5268 CVE-2012-5269 CVE-2012-5270 CVE-2012-5271 CVE-2012-5272 Affected Products: SUSE Linux Enterprise Desktop 11 SP2 ______________________________________________________________________________ An update that fixes 25 vulnerabilities is now available. It includes one version update. Description: flash player was updated to version 11.2.202.243, fixing a lot of security issues: CVE-2012-5248, CVE-2012-5249, CVE-2012-5250, CVE-2012-5251, CVE-2012-5252, CVE-2012-5253, CVE-2012-5254, CVE-2012-5255, CVE-2012-5256, CVE-2012-5257, CVE-2012-5258, CVE-2012-5259, CVE-2012-5260, CVE-2012-5261, CVE-2012-5262, CVE-2012-5263, CVE-2012-5264, CVE-2012-5265, CVE-2012-5266, CVE-2012-5267, CVE-2012-5268, CVE-2012-5269, CVE-2012-5270, CVE-2012-5271, CVE-2012-5272 Please visit http://www.adobe.com/support/security/bulletins/apsb12-22.ht ml <http://www.adobe.com/support/security/bulletins/apsb12-22.h tml> for details. Security Issue references: * CVE-2012-5248 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5248 > * CVE-2012-5249 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5249 > * CVE-2012-5250 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5250 > * CVE-2012-5251 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5251 > * CVE-2012-5253 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5253 > * CVE-2012-5254 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5254 > * CVE-2012-5255 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5255 > * CVE-2012-5257 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5257 > * CVE-2012-5259 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5259 > * CVE-2012-5260 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5260 > * CVE-2012-5262 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5262 > * CVE-2012-5264 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5264 > * CVE-2012-5265 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5265 > * CVE-2012-5266 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5266 > * CVE-2012-5252 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5252 > * CVE-2012-5256 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5256 > * CVE-2012-5258 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5258 > * CVE-2012-5261 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5261 > * CVE-2012-5263 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5263 > * CVE-2012-5267 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5267 > * CVE-2012-5268 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5268 > * CVE-2012-5269 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5269 > * CVE-2012-5270 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5270 > * CVE-2012-5271 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5271 > * CVE-2012-5272 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5272 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Desktop 11 SP2: zypper in -t patch sledsp2-flash-player-6937 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Desktop 11 SP2 (i586 x86_64) [New Version: 11.2.202.243]: flash-player-11.2.202.243-0.3.1 References: http://support.novell.com/security/cve/CVE-2012-5248.html http://support.novell.com/security/cve/CVE-2012-5249.html http://support.novell.com/security/cve/CVE-2012-5250.html http://support.novell.com/security/cve/CVE-2012-5251.html http://support.novell.com/security/cve/CVE-2012-5252.html http://support.novell.com/security/cve/CVE-2012-5253.html http://support.novell.com/security/cve/CVE-2012-5254.html http://support.novell.com/security/cve/CVE-2012-5255.html http://support.novell.com/security/cve/CVE-2012-5256.html http://support.novell.com/security/cve/CVE-2012-5257.html http://support.novell.com/security/cve/CVE-2012-5258.html http://support.novell.com/security/cve/CVE-2012-5259.html http://support.novell.com/security/cve/CVE-2012-5260.html http://support.novell.com/security/cve/CVE-2012-5261.html http://support.novell.com/security/cve/CVE-2012-5262.html http://support.novell.com/security/cve/CVE-2012-5263.html http://support.novell.com/security/cve/CVE-2012-5264.html http://support.novell.com/security/cve/CVE-2012-5265.html http://support.novell.com/security/cve/CVE-2012-5266.html http://support.novell.com/security/cve/CVE-2012-5267.html http://support.novell.com/security/cve/CVE-2012-5268.html http://support.novell.com/security/cve/CVE-2012-5269.html http://support.novell.com/security/cve/CVE-2012-5270.html http://support.novell.com/security/cve/CVE-2012-5271.html http://support.novell.com/security/cve/CVE-2012-5272.html https://bugzilla.novell.com/784168 http://download.novell.com/patch/finder/?keywords=713cd3d91b738edf8089a1736… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2012:1330-1: important: kernel: security and bugfix update
by opensuse-security＠opensuse.org 12 Oct '12

12 Oct '12

openSUSE Security Update: kernel: security and bugfix update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1330-1 Rating: important References: #762693 #765230 #771392 #772566 #772831 #772923 #773406 #774523 #774859 #776925 #778630 #779432 #780624 #781134 Cross-References: CVE-2012-3412 CVE-2012-3520 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that solves two vulnerabilities and has 12 fixes is now available. Description: This kernel update to 3.4.11 fixes various bugs and security issues. The changes up to 3.4.11 contain both security and bugfixes and are not explicitly listed here. Following security issues were fixed: CVE-2012-3520: Force passing credentials, otherwise local services could be fooled to assume requests coming from root. CVE-2012-3412: Do not allow extreme TSO parameters in the sfc driver and tcp stack. Following non-security bugs were fixed: - nbd: clear waiting_queue on shutdown (bnc#778630). - NFS: avoid warning from nfs_drop_nlink (bnc#780624). - net: do not disable sg for packets requiring no checksum (bnc#774859). - sfc: Fix maximum number of TSO segments and minimum TX queue size (bnc#774523 CVE-2012-3412). - net: Allow driver to limit number of GSO segments per skb (bnc#774523 CVE-2012-3412). - drm/nouveau: fix booting with plymouth + dumb support (bnc#771392). - memcg: warn on deeper hierarchies with use_hierarchy==0 (bnc#781134). - Linux 3.4.11. - Update config files. - Refresh patches.suse/scsi-error-test-unit-ready-timeout. - Btrfs: fix tree log remove space corner case (bnc#779432) - irq_remap: disable IRQ remapping if any IOAPIC lacks an IOMMU. - Linux 3.4.10. - Linux 3.4.9. - kABI: protect struct irq_desc. - Linux 3.4.8. - kABI: sdhci, remove inclusion. - reiserfs: fix deadlock with nfs racing on create/lookup (bnc#762693). - Properly update Xen patches to 3.4.7. - Refresh other Xen patches (bnc#772831). - config: enable various ARM errata workarounds to improve stability - Import kabi files for 12.2 - rpm/config.sh: Build the KOTD against 12.2 - ASoC: omap: Add missing modules aliases to get sound working on omap devices. - Update config files to fix build - rt2800: add chipset revision RT5390R support (bnc#772566). - reiserfs: fix deadlocks with quotas - ACPI, APEI: Fixup common access width firmware bug (bnc#765230). - i2c/busses: Fix build error if CONFIG_I2C_DESIGNWARE_PLATFORM=y and CONFIG_I2C_DESIGN. - Update ARM configs to match kernel 3.4.7 - Update ARM omap2plus config to match kernel 3.4.7 and add Smartreflex support (auto voltage) - ALSA: hda - Fix mute-LED GPIO initialization for IDT codecs (bnc#772923). - ALSA: hda - Fix polarity of mute LED on HP Mini 210 (bnc#772923). - Linux 3.4.7. - Refresh patches.suse/dm-raid45-26-Nov-2009.patch. - Enable RTL8150 for omap2plus Generic USB Network device that also works fine on ARM, so enable it - update RNDIS_OID_GEN_RNDIS_CONFIG_PARAMETER patch name - Drivers: hv: Cleanup the guest ID computation. - hyperv: Add a check for ring_size value. - hyperv: Add error handling to rndis_filter_device_add(). - Drivers: hv: Change the hex constant to a decimal constant. - hyperv: Add support for setting MAC from within guests. - net/hyperv: Use wait_event on outstanding sends during device removal. - hv: add RNDIS_OID_GEN_RNDIS_CONFIG_PARAMETER. - Refresh patches.suse/SUSE-bootsplash. Fix wrong vfree() (bnc#773406) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-700 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): kernel-default-3.4.11-2.16.1 kernel-default-base-3.4.11-2.16.1 kernel-default-base-debuginfo-3.4.11-2.16.1 kernel-default-debuginfo-3.4.11-2.16.1 kernel-default-debugsource-3.4.11-2.16.1 kernel-default-devel-3.4.11-2.16.1 kernel-default-devel-debuginfo-3.4.11-2.16.1 kernel-syms-3.4.11-2.16.1 - openSUSE 12.2 (i686 x86_64): kernel-debug-3.4.11-2.16.1 kernel-debug-base-3.4.11-2.16.1 kernel-debug-base-debuginfo-3.4.11-2.16.1 kernel-debug-debuginfo-3.4.11-2.16.1 kernel-debug-debugsource-3.4.11-2.16.1 kernel-debug-devel-3.4.11-2.16.1 kernel-debug-devel-debuginfo-3.4.11-2.16.1 kernel-desktop-3.4.11-2.16.1 kernel-desktop-base-3.4.11-2.16.1 kernel-desktop-base-debuginfo-3.4.11-2.16.1 kernel-desktop-debuginfo-3.4.11-2.16.1 kernel-desktop-debugsource-3.4.11-2.16.1 kernel-desktop-devel-3.4.11-2.16.1 kernel-desktop-devel-debuginfo-3.4.11-2.16.1 kernel-ec2-3.4.11-2.16.1 kernel-ec2-base-3.4.11-2.16.1 kernel-ec2-base-debuginfo-3.4.11-2.16.1 kernel-ec2-debuginfo-3.4.11-2.16.1 kernel-ec2-debugsource-3.4.11-2.16.1 kernel-ec2-devel-3.4.11-2.16.1 kernel-ec2-devel-debuginfo-3.4.11-2.16.1 kernel-ec2-extra-3.4.11-2.16.1 kernel-ec2-extra-debuginfo-3.4.11-2.16.1 kernel-trace-3.4.11-2.16.1 kernel-trace-base-3.4.11-2.16.1 kernel-trace-base-debuginfo-3.4.11-2.16.1 kernel-trace-debuginfo-3.4.11-2.16.1 kernel-trace-debugsource-3.4.11-2.16.1 kernel-trace-devel-3.4.11-2.16.1 kernel-trace-devel-debuginfo-3.4.11-2.16.1 kernel-vanilla-3.4.11-2.16.1 kernel-vanilla-debuginfo-3.4.11-2.16.1 kernel-vanilla-debugsource-3.4.11-2.16.1 kernel-vanilla-devel-3.4.11-2.16.1 kernel-vanilla-devel-debuginfo-3.4.11-2.16.1 kernel-xen-3.4.11-2.16.1 kernel-xen-base-3.4.11-2.16.1 kernel-xen-base-debuginfo-3.4.11-2.16.1 kernel-xen-debuginfo-3.4.11-2.16.1 kernel-xen-debugsource-3.4.11-2.16.1 kernel-xen-devel-3.4.11-2.16.1 kernel-xen-devel-debuginfo-3.4.11-2.16.1 - openSUSE 12.2 (noarch): kernel-devel-3.4.11-2.16.1 kernel-docs-3.4.11-2.16.2 kernel-source-3.4.11-2.16.1 kernel-source-vanilla-3.4.11-2.16.1 - openSUSE 12.2 (i686): kernel-pae-3.4.11-2.16.1 kernel-pae-base-3.4.11-2.16.1 kernel-pae-base-debuginfo-3.4.11-2.16.1 kernel-pae-debuginfo-3.4.11-2.16.1 kernel-pae-debugsource-3.4.11-2.16.1 kernel-pae-devel-3.4.11-2.16.1 kernel-pae-devel-debuginfo-3.4.11-2.16.1 References: http://support.novell.com/security/cve/CVE-2012-3412.html http://support.novell.com/security/cve/CVE-2012-3520.html https://bugzilla.novell.com/762693 https://bugzilla.novell.com/765230 https://bugzilla.novell.com/771392 https://bugzilla.novell.com/772566 https://bugzilla.novell.com/772831 https://bugzilla.novell.com/772923 https://bugzilla.novell.com/773406 https://bugzilla.novell.com/774523 https://bugzilla.novell.com/774859 https://bugzilla.novell.com/776925 https://bugzilla.novell.com/778630 https://bugzilla.novell.com/779432 https://bugzilla.novell.com/780624 https://bugzilla.novell.com/781134 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:1326-1: critical: Security update for flash-player
by opensuse-security＠opensuse.org 10 Oct '12

10 Oct '12

SUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:1326-1 Rating: critical References: #784168 Cross-References: CVE-2012-5248 CVE-2012-5249 CVE-2012-5250 CVE-2012-5251 CVE-2012-5252 CVE-2012-5253 CVE-2012-5254 CVE-2012-5255 CVE-2012-5256 CVE-2012-5257 CVE-2012-5258 CVE-2012-5259 CVE-2012-5260 CVE-2012-5261 CVE-2012-5262 CVE-2012-5263 CVE-2012-5264 CVE-2012-5265 CVE-2012-5266 CVE-2012-5267 CVE-2012-5268 CVE-2012-5269 CVE-2012-5270 CVE-2012-5271 CVE-2012-5272 Affected Products: SUSE Linux Enterprise Desktop 10 SP4 ______________________________________________________________________________ An update that fixes 25 vulnerabilities is now available. It includes one version update. Description: flash player was updated to version 11.2.202.243 fixing a lot of security issues: CVE-2012-5248, CVE-2012-5249, CVE-2012-5250, CVE-2012-5251, CVE-2012-5252, CVE-2012-5253, CVE-2012-5254, CVE-2012-5255, CVE-2012-5256, CVE-2012-5257, CVE-2012-5258, CVE-2012-5259, CVE-2012-5260, CVE-2012-5261, CVE-2012-5262, CVE-2012-5263, CVE-2012-5264, CVE-2012-5265, CVE-2012-5266, CVE-2012-5267, CVE-2012-5268, CVE-2012-5269, CVE-2012-5270, CVE-2012-5271, CVE-2012-5272 Please visit http://www.adobe.com/support/security/bulletins/apsb12-22.ht ml <http://www.adobe.com/support/security/bulletins/apsb12-22.h tml> for details. Security Issue references: * CVE-2012-5248 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5248 > * CVE-2012-5249 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5249 > * CVE-2012-5250 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5250 > * CVE-2012-5251 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5251 > * CVE-2012-5253 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5253 > * CVE-2012-5254 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5254 > * CVE-2012-5255 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5255 > * CVE-2012-5257 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5257 > * CVE-2012-5259 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5259 > * CVE-2012-5260 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5260 > * CVE-2012-5262 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5262 > * CVE-2012-5264 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5264 > * CVE-2012-5265 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5265 > * CVE-2012-5266 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5266 > * CVE-2012-5252 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5252 > * CVE-2012-5256 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5256 > * CVE-2012-5258 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5258 > * CVE-2012-5261 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5261 > * CVE-2012-5263 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5263 > * CVE-2012-5267 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5267 > * CVE-2012-5268 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5268 > * CVE-2012-5269 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5269 > * CVE-2012-5270 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5270 > * CVE-2012-5271 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5271 > * CVE-2012-5272 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5272 > Package List: - SUSE Linux Enterprise Desktop 10 SP4 (i586) [New Version: 11.2.202.243]: flash-player-11.2.202.243-0.5.1 References: http://support.novell.com/security/cve/CVE-2012-5248.html http://support.novell.com/security/cve/CVE-2012-5249.html http://support.novell.com/security/cve/CVE-2012-5250.html http://support.novell.com/security/cve/CVE-2012-5251.html http://support.novell.com/security/cve/CVE-2012-5252.html http://support.novell.com/security/cve/CVE-2012-5253.html http://support.novell.com/security/cve/CVE-2012-5254.html http://support.novell.com/security/cve/CVE-2012-5255.html http://support.novell.com/security/cve/CVE-2012-5256.html http://support.novell.com/security/cve/CVE-2012-5257.html http://support.novell.com/security/cve/CVE-2012-5258.html http://support.novell.com/security/cve/CVE-2012-5259.html http://support.novell.com/security/cve/CVE-2012-5260.html http://support.novell.com/security/cve/CVE-2012-5261.html http://support.novell.com/security/cve/CVE-2012-5262.html http://support.novell.com/security/cve/CVE-2012-5263.html http://support.novell.com/security/cve/CVE-2012-5264.html http://support.novell.com/security/cve/CVE-2012-5265.html http://support.novell.com/security/cve/CVE-2012-5266.html http://support.novell.com/security/cve/CVE-2012-5267.html http://support.novell.com/security/cve/CVE-2012-5268.html http://support.novell.com/security/cve/CVE-2012-5269.html http://support.novell.com/security/cve/CVE-2012-5270.html http://support.novell.com/security/cve/CVE-2012-5271.html http://support.novell.com/security/cve/CVE-2012-5272.html https://bugzilla.novell.com/784168 http://download.novell.com/patch/finder/?keywords=9861c635f16f057af9420d20f… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2012:1324-1: critical: flash-player: Update to 11.2.202.243
by opensuse-security＠opensuse.org 10 Oct '12

10 Oct '12

openSUSE Security Update: flash-player: Update to 11.2.202.243 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1324-1 Rating: critical References: #784168 Cross-References: CVE-2012-5252 CVE-2012-5256 CVE-2012-5260 CVE-2012-5264 CVE-2012-5268 CVE-2012-5272 CVE-2012-5248 CVE-2012-5249 CVE-2012-5250 CVE-2012-5251 CVE-2012-5253 CVE-2012-5254 CVE-2012-5255 CVE-2012-5257 CVE-2012-5258 CVE-2012-5259 CVE-2012-5261 CVE-2012-5262 CVE-2012-5263 CVE-2012-5265 CVE-2012-5266 CVE-2012-5267 CVE-2012-5269 CVE-2012-5270 CVE-2012-5271 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes 25 vulnerabilities is now available. Description: Flash Player was updated to 11.2.202.243 * CVE-2012-5248, CVE-2012-5249, CVE-2012-5250, CVE-2012-5251, CVE-2012-5252, CVE-2012-5253, CVE-2012-5254, CVE-2012-5255, CVE-2012-5256, CVE-2012-5257, CVE-2012-5258, CVE-2012-5259, CVE-2012-5260, CVE-2012-5261, CVE-2012-5262, CVE-2012-5263, CVE-2012-5264, CVE-2012-5265, CVE-2012-5266, CVE-2012-5267, CVE-2012-5268, CVE-2012-5269, CVE-2012-5270, CVE-2012-5271, CVE-2012-5272 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-697 - openSUSE 11.4: zypper in -t patch openSUSE-2012-697 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): flash-player-11.2.202.243-30.1 flash-player-gnome-11.2.202.243-30.1 flash-player-kde4-11.2.202.243-30.1 - openSUSE 11.4 (i586 x86_64): flash-player-11.2.202.243-23.1 flash-player-gnome-11.2.202.243-23.1 flash-player-kde4-11.2.202.243-23.1 References: http://support.novell.com/security/cve/ CVE-2012-5252.html http://support.novell.com/security/cve/ CVE-2012-5256.html http://support.novell.com/security/cve/ CVE-2012-5260.html http://support.novell.com/security/cve/ CVE-2012-5264.html http://support.novell.com/security/cve/ CVE-2012-5268.html http://support.novell.com/security/cve/ CVE-2012-5272.html http://support.novell.com/security/cve/CVE-2012-5248.html http://support.novell.com/security/cve/CVE-2012-5249.html http://support.novell.com/security/cve/CVE-2012-5250.html http://support.novell.com/security/cve/CVE-2012-5251.html http://support.novell.com/security/cve/CVE-2012-5253.html http://support.novell.com/security/cve/CVE-2012-5254.html http://support.novell.com/security/cve/CVE-2012-5255.html http://support.novell.com/security/cve/CVE-2012-5257.html http://support.novell.com/security/cve/CVE-2012-5258.html http://support.novell.com/security/cve/CVE-2012-5259.html http://support.novell.com/security/cve/CVE-2012-5261.html http://support.novell.com/security/cve/CVE-2012-5262.html http://support.novell.com/security/cve/CVE-2012-5263.html http://support.novell.com/security/cve/CVE-2012-5265.html http://support.novell.com/security/cve/CVE-2012-5266.html http://support.novell.com/security/cve/CVE-2012-5267.html http://support.novell.com/security/cve/CVE-2012-5269.html http://support.novell.com/security/cve/CVE-2012-5270.html http://support.novell.com/security/cve/CVE-2012-5271.html https://bugzilla.novell.com/784168 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:1320-1: important: Security update for qemu
by opensuse-security＠opensuse.org 09 Oct '12

09 Oct '12

SUSE Security Update: Security update for qemu ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:1320-1 Rating: important References: #740165 #777084 Cross-References: CVE-2012-0029 CVE-2012-3515 Affected Products: SUSE Studio Onsite 1.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: The qemu vt100 emulation was affected by a problem where specific vt100 sequences could have been used by guest users to affect the host. (CVE-2012-3515 aka XSA-17). CVE-2012-0029: A buffer overflow in the e1000 device emulation was fixed Security Issue references: * CVE-2012-3515 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3515 > * CVE-2012-0029 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0029 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Studio Onsite 1.2: zypper in -t patch slestso12-qemu-6852 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Studio Onsite 1.2 (x86_64): qemu-0.10.1-0.5.7.1 References: http://support.novell.com/security/cve/CVE-2012-0029.html http://support.novell.com/security/cve/CVE-2012-3515.html https://bugzilla.novell.com/740165 https://bugzilla.novell.com/777084 http://download.novell.com/patch/finder/?keywords=86d45c23c62093dbb012d29f0… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2012:1289-1: important: ghostscript
by opensuse-security＠opensuse.org 04 Oct '12

04 Oct '12

openSUSE Security Update: ghostscript ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1289-1 Rating: important References: #779700 Cross-References: CVE-2012-4405 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The following security issue was fixed in ghostscript: Multiple integer underflows in the icmLut_allocate function in International Color Consortium (ICC) Format library (icclib), as used in Ghostscript 9.06 and Argyll Color Management System, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted (1) PostScript or (2) PDF file with embedded images, which triggers a heap-based buffer overflow. NOTE: this issue is also described as an array index error. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch openSUSE-2012-668 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): ghostscript-devel-9.00-4.48.1 ghostscript-ijs-devel-9.00-4.48.1 ghostscript-library-9.00-4.48.1 ghostscript-library-debuginfo-9.00-4.48.1 ghostscript-library-debugsource-9.00-4.48.1 ghostscript-x11-9.00-4.48.1 ghostscript-x11-debuginfo-9.00-4.48.1 libgimpprint-4.2.7-334.48.1 libgimpprint-debuginfo-4.2.7-334.48.1 libgimpprint-devel-4.2.7-334.48.1 - openSUSE 11.4 (noarch): ghostscript-fonts-other-9.00-4.48.1 ghostscript-fonts-rus-9.00-4.48.1 ghostscript-fonts-std-9.00-4.48.1 References: http://support.novell.com/security/cve/CVE-2012-4405.html https://bugzilla.novell.com/779700 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2012:1287-1: important: update for dbus-1, dbus-1-x11
by opensuse-security＠opensuse.org 04 Oct '12

04 Oct '12

openSUSE Security Update: update for dbus-1, dbus-1-x11 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1287-1 Rating: important References: #697105 Cross-References: CVE-2012-3524 Affected Products: openSUSE 12.2 openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update fixed CVE-2012-3524 (getenv() vulnerability), which can be used by local attackers to escalate privileges to root. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-670 - openSUSE 12.1: zypper in -t patch openSUSE-2012-670 - openSUSE 11.4: zypper in -t patch openSUSE-2012-670 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): dbus-1-1.5.12-4.6.1 dbus-1-debuginfo-1.5.12-4.6.1 dbus-1-debugsource-1.5.12-4.6.1 dbus-1-devel-1.5.12-4.6.1 dbus-1-x11-1.5.12-4.6.1 dbus-1-x11-debuginfo-1.5.12-4.6.1 dbus-1-x11-debugsource-1.5.12-4.6.1 libdbus-1-3-1.5.12-4.6.1 libdbus-1-3-debuginfo-1.5.12-4.6.1 - openSUSE 12.2 (x86_64): dbus-1-32bit-1.5.12-4.6.1 dbus-1-debuginfo-32bit-1.5.12-4.6.1 dbus-1-devel-32bit-1.5.12-4.6.1 libdbus-1-3-32bit-1.5.12-4.6.1 libdbus-1-3-debuginfo-32bit-1.5.12-4.6.1 - openSUSE 12.2 (noarch): dbus-1-devel-doc-1.5.12-4.6.1 - openSUSE 12.1 (i586 x86_64): dbus-1-1.5.8-2.6.1 dbus-1-debuginfo-1.5.8-2.6.1 dbus-1-debugsource-1.5.8-2.6.1 dbus-1-devel-1.5.8-2.6.1 dbus-1-x11-1.5.8-2.6.1 dbus-1-x11-debuginfo-1.5.8-2.6.1 dbus-1-x11-debugsource-1.5.8-2.6.1 - openSUSE 12.1 (x86_64): dbus-1-32bit-1.5.8-2.6.1 dbus-1-debuginfo-32bit-1.5.8-2.6.1 dbus-1-devel-32bit-1.5.8-2.6.1 - openSUSE 12.1 (noarch): dbus-1-devel-doc-1.5.8-2.6.1 - openSUSE 12.1 (ia64): dbus-1-debuginfo-x86-1.5.8-2.6.1 dbus-1-x86-1.5.8-2.6.1 - openSUSE 11.4 (i586 x86_64): dbus-1-1.4.1-7.27.1 dbus-1-debuginfo-1.4.1-7.27.1 dbus-1-debugsource-1.4.1-7.27.1 dbus-1-devel-1.4.1-7.27.1 - openSUSE 11.4 (x86_64): dbus-1-32bit-1.4.1-7.27.1 dbus-1-debuginfo-32bit-1.4.1-7.27.1 dbus-1-devel-32bit-1.4.1-7.27.1 - openSUSE 11.4 (noarch): dbus-1-devel-doc-1.4.1-7.27.1 - openSUSE 11.4 (ia64): dbus-1-debuginfo-x86-1.4.1-7.27.1 dbus-1-x86-1.4.1-7.27.1 References: http://support.novell.com/security/cve/CVE-2012-3524.html https://bugzilla.novell.com/697105 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0