- openSUSE Security Announce

[security-announce] openSUSE-SU-2012:0087-1: important: acroread
by opensuse-security＠opensuse.org 17 Jan '12

17 Jan '12

openSUSE Security Update: acroread ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0087-1 Rating: important References: #735275 Cross-References: CVE-2011-2462 CVE-2011-4369 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. It includes one version update. Description: Acrobat Reader was updated to version 9.4.7 to fix security issues (CVE-2011-2462, CVE-2011-4369) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch acroread-5650 - openSUSE 11.3: zypper in -t patch acroread-5650 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586) [New Version: 9.4.7]: acroread-9.4.7-0.3.1 - openSUSE 11.3 (i586) [New Version: 9.4.7]: acroread-9.4.7-0.3.1 References: http://support.novell.com/security/cve/CVE-2011-2462.html http://support.novell.com/security/cve/CVE-2011-4369.html https://bugzilla.novell.com/735275 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:0086-1: important: Security update for Acrobat Reader
by opensuse-security＠opensuse.org 17 Jan '12

17 Jan '12

SUSE Security Update: Security update for Acrobat Reader ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0086-1 Rating: important References: #735275 Cross-References: CVE-2011-2462 CVE-2011-4369 Affected Products: SUSE Linux Enterprise Desktop 11 SP1 SUSE Linux Enterprise Desktop 10 SP4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. It includes two new package versions. Description: Acrobat Reader was updated to version 9.4.7 to fix two security issues (CVE-2011-2462, CVE-2011-4369) Security Issue references: * CVE-2011-4369 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4369 > * CVE-2011-2462 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2462 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Desktop 11 SP1: zypper in -t patch sledsp1-acroread-5649 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Desktop 11 SP1 (noarch) [New Version: 9.4.6]: acroread-cmaps-9.4.6-0.4.2.2 acroread-fonts-ja-9.4.6-0.4.2.2 acroread-fonts-ko-9.4.6-0.4.2.2 acroread-fonts-zh_CN-9.4.6-0.4.2.2 acroread-fonts-zh_TW-9.4.6-0.4.2.2 - SUSE Linux Enterprise Desktop 11 SP1 (i586) [New Version: 9.4.7]: acroread-9.4.7-0.2.2.1 - SUSE Linux Enterprise Desktop 10 SP4 (noarch) [New Version: 9.4.6]: acroread-cmaps-9.4.6-0.5.9 acroread-fonts-ja-9.4.6-0.5.9 acroread-fonts-ko-9.4.6-0.5.9 acroread-fonts-zh_CN-9.4.6-0.5.9 acroread-fonts-zh_TW-9.4.6-0.5.9 - SUSE Linux Enterprise Desktop 10 SP4 (i586) [New Version: 9.4.7]: acroread-9.4.7-0.5.1 References: http://support.novell.com/security/cve/CVE-2011-2462.html http://support.novell.com/security/cve/CVE-2011-4369.html https://bugzilla.novell.com/735275 http://download.novell.com/patch/finder/?keywords=b7032f742fda7a15dea6b1561… http://download.novell.com/patch/finder/?keywords=c4cebcc03c1219adc40eac640… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:0084-1: important: Security update for OpenSSL
by opensuse-security＠opensuse.org 16 Jan '12

16 Jan '12

SUSE Security Update: Security update for OpenSSL ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0084-1 Rating: important References: #739719 Cross-References: CVE-2011-4108 CVE-2011-4109 CVE-2011-4576 CVE-2011-4577 CVE-2011-4619 Affected Products: SUSE Linux Enterprise Software Development Kit 11 SP1 SUSE Linux Enterprise Server 11 SP1 for VMware SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server 10 SP4 SUSE Linux Enterprise Desktop 11 SP1 SUSE Linux Enterprise Desktop 10 SP4 SLE SDK 10 SP4 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. It includes one version update. Description: Various security vulnerabilities have been fixed in OpenSSL: * DTLS plaintext recovery attack (CVE-2011-4108) * double-free in Policy Checks (CVE-2011-4109) * uninitialized SSL 3.0 padding (CVE-2011-4576) * malformed RFC 3779 data can cause assertion failures (CVE-2011-4577) * SGC restart DoS attack (CVE-2011-4619) Security Issue references: * CVE-2011-4108 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4108 > * CVE-2011-4109 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4109 > * CVE-2011-4576 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4576 > * CVE-2011-4577 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4577 > * CVE-2011-4619 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4619 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11 SP1: zypper in -t patch sdksp1-libopenssl-devel-5635 - SUSE Linux Enterprise Server 11 SP1 for VMware: zypper in -t patch slessp1-libopenssl-devel-5635 - SUSE Linux Enterprise Server 11 SP1: zypper in -t patch slessp1-libopenssl-devel-5635 - SUSE Linux Enterprise Desktop 11 SP1: zypper in -t patch sledsp1-libopenssl-devel-5635 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11 SP1 (i586 ia64 ppc64 s390x x86_64) [New Version: 0.9.8j]: libopenssl-devel-0.9.8j-0.26.1 - SUSE Linux Enterprise Server 11 SP1 for VMware (i586 x86_64) [New Version: 0.9.8j]: libopenssl0_9_8-0.9.8j-0.26.1 openssl-0.9.8j-0.26.1 openssl-doc-0.9.8j-0.26.1 - SUSE Linux Enterprise Server 11 SP1 for VMware (x86_64) [New Version: 0.9.8j]: libopenssl0_9_8-32bit-0.9.8j-0.26.1 - SUSE Linux Enterprise Server 11 SP1 (i586 ia64 ppc64 s390x x86_64) [New Version: 0.9.8j]: libopenssl0_9_8-0.9.8j-0.26.1 openssl-0.9.8j-0.26.1 openssl-doc-0.9.8j-0.26.1 - SUSE Linux Enterprise Server 11 SP1 (ppc64 s390x x86_64) [New Version: 0.9.8j]: libopenssl0_9_8-32bit-0.9.8j-0.26.1 - SUSE Linux Enterprise Server 11 SP1 (ia64) [New Version: 0.9.8j]: libopenssl0_9_8-x86-0.9.8j-0.26.1 - SUSE Linux Enterprise Server 10 SP4 (i586 ia64 ppc s390x x86_64): openssl-0.9.8a-18.56.3 openssl-devel-0.9.8a-18.56.3 openssl-doc-0.9.8a-18.56.3 - SUSE Linux Enterprise Server 10 SP4 (s390x x86_64): openssl-32bit-0.9.8a-18.56.3 openssl-devel-32bit-0.9.8a-18.56.3 - SUSE Linux Enterprise Server 10 SP4 (ia64): openssl-x86-0.9.8a-18.56.3 - SUSE Linux Enterprise Server 10 SP4 (ppc): openssl-64bit-0.9.8a-18.56.3 openssl-devel-64bit-0.9.8a-18.56.3 - SUSE Linux Enterprise Desktop 11 SP1 (i586 x86_64) [New Version: 0.9.8j]: libopenssl0_9_8-0.9.8j-0.26.1 openssl-0.9.8j-0.26.1 - SUSE Linux Enterprise Desktop 11 SP1 (x86_64) [New Version: 0.9.8j]: libopenssl0_9_8-32bit-0.9.8j-0.26.1 - SUSE Linux Enterprise Desktop 10 SP4 (i586 x86_64): openssl-0.9.8a-18.56.3 openssl-devel-0.9.8a-18.56.3 - SUSE Linux Enterprise Desktop 10 SP4 (x86_64): openssl-32bit-0.9.8a-18.56.3 openssl-devel-32bit-0.9.8a-18.56.3 - SLE SDK 10 SP4 (i586 ia64 ppc s390x x86_64): openssl-doc-0.9.8a-18.56.3 References: http://support.novell.com/security/cve/CVE-2011-4108.html http://support.novell.com/security/cve/CVE-2011-4109.html http://support.novell.com/security/cve/CVE-2011-4576.html http://support.novell.com/security/cve/CVE-2011-4577.html http://support.novell.com/security/cve/CVE-2011-4619.html https://bugzilla.novell.com/739719 http://download.novell.com/patch/finder/?keywords=00effca53ebc7841a642ba4e7… http://download.novell.com/patch/finder/?keywords=16f27ddd5506ebb38dc001550… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2012:0083-1: important: openssl: fixing various security issues
by opensuse-security＠opensuse.org 16 Jan '12

16 Jan '12

openSUSE Security Update: openssl: fixing various security issues ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0083-1 Rating: important References: #739719 Cross-References: CVE-2011-4108 CVE-2011-4576 CVE-2011-4577 CVE-2011-4619 CVE-2012-0027 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: Various security vulnerabilities have been fixed in openssl: - DTLS plaintext recovery attack (CVE-2011-4108) - uninitialized SSL 3.0 padding (CVE-2011-4576) - malformed RFC 3779 data can cause assertion failures (CVE-2011-4577) - SGC restart DoS attack (CVE-2011-4619) - invalid GOST parameters DoS attack (CVE-2012-0027) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libopenssl-devel-5634 - openSUSE 11.3: zypper in -t patch libopenssl-devel-5634 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libopenssl-devel-1.0.0c-18.23.1 libopenssl1_0_0-1.0.0c-18.23.1 openssl-1.0.0c-18.23.1 - openSUSE 11.4 (x86_64): libopenssl1_0_0-32bit-1.0.0c-18.23.1 - openSUSE 11.4 (noarch): openssl-doc-1.0.0c-18.23.1 - openSUSE 11.3 (i586 x86_64): libopenssl-devel-1.0.0-6.13.1 libopenssl1_0_0-1.0.0-6.13.1 openssl-1.0.0-6.13.1 - openSUSE 11.3 (x86_64): libopenssl1_0_0-32bit-1.0.0-6.13.1 - openSUSE 11.3 (noarch): openssl-doc-1.0.0-6.13.1 References: http://support.novell.com/security/cve/CVE-2011-4108.html http://support.novell.com/security/cve/CVE-2011-4576.html http://support.novell.com/security/cve/CVE-2011-4577.html http://support.novell.com/security/cve/CVE-2011-4619.html http://support.novell.com/security/cve/CVE-2012-0027.html https://bugzilla.novell.com/739719 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2012:0064-1: important: glibc
by opensuse-security＠opensuse.org 05 Jan '12

05 Jan '12

openSUSE Security Update: glibc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0064-1 Rating: important References: #735850 Cross-References: CVE-2009-5029 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Specially crafted time zone files could cause a heap overflow in glibc (CVE-2009-5029). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch glibc-5554 - openSUSE 11.3: zypper in -t patch glibc-5554 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 i686 x86_64): glibc-2.11.3-12.21.1 glibc-devel-2.11.3-12.21.1 - openSUSE 11.4 (i586 x86_64): glibc-html-2.11.3-12.21.1 glibc-i18ndata-2.11.3-12.21.1 glibc-info-2.11.3-12.21.1 glibc-locale-2.11.3-12.21.1 glibc-obsolete-2.11.3-12.21.1 glibc-profile-2.11.3-12.21.1 nscd-2.11.3-12.21.1 - openSUSE 11.4 (x86_64): glibc-32bit-2.11.3-12.21.1 glibc-devel-32bit-2.11.3-12.21.1 glibc-locale-32bit-2.11.3-12.21.1 glibc-profile-32bit-2.11.3-12.21.1 - openSUSE 11.3 (i586 i686 x86_64): glibc-2.11.2-3.7.1 glibc-devel-2.11.2-3.7.1 - openSUSE 11.3 (i586 x86_64): glibc-html-2.11.2-3.7.1 glibc-i18ndata-2.11.2-3.7.1 glibc-info-2.11.2-3.7.1 glibc-locale-2.11.2-3.7.1 glibc-obsolete-2.11.2-3.7.1 glibc-profile-2.11.2-3.7.1 nscd-2.11.2-3.7.1 - openSUSE 11.3 (x86_64): glibc-32bit-2.11.2-3.7.1 glibc-devel-32bit-2.11.2-3.7.1 glibc-locale-32bit-2.11.2-3.7.1 glibc-profile-32bit-2.11.2-3.7.1 References: http://support.novell.com/security/cve/CVE-2009-5029.html https://bugzilla.novell.com/735850 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:0056-1: important: Security update for heimdal
by opensuse-security＠opensuse.org 05 Jan '12

05 Jan '12

SUSE Security Update: Security update for heimdal ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0056-1 Rating: important References: #738632 Cross-References: CVE-2011-4862 Affected Products: SUSE CORE 9 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update of heimdal fixes one security issues: * CVE-2011-4862: A remote code execution in the kerberized telnet daemon was fixed. (This only affects the ktelnetd from the heimdal RPM, not the regular telnetd supplied by SUSE.) Security Issue reference: * CVE-2011-4862 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4862 > Indications: Please install this update. Package List: - SUSE CORE 9 (i586 s390 s390x x86_64): heimdal-0.6.1rc3-55.29 heimdal-devel-0.6.1rc3-55.29 heimdal-lib-0.6.1rc3-55.29 heimdal-tools-0.6.1rc3-55.29 - SUSE CORE 9 (x86_64): heimdal-devel-32bit-9-201112301024 heimdal-lib-32bit-9-201112301024 - SUSE CORE 9 (s390x): heimdal-devel-32bit-9-201112301034 heimdal-lib-32bit-9-201112301034 References: http://support.novell.com/security/cve/CVE-2011-4862.html https://bugzilla.novell.com/738632 http://download.novell.com/patch/finder/?keywords=826c068adcfd8a672a0756aae… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:0055-1: important: Security update for glibc
by opensuse-security＠opensuse.org 05 Jan '12

05 Jan '12

SUSE Security Update: Security update for glibc ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0055-1 Rating: important References: #661460 #735850 Cross-References: CVE-2009-5029 Affected Products: SUSE Linux Enterprise Server 10 SP4 SUSE Linux Enterprise Desktop 10 SP4 SLE SDK 10 SP4 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: The following bug has been fixed: * Specially crafted time zone files could cause a heap overflow in glibc. Security Issue reference: * CVE-2009-5029 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5029 > Package List: - SUSE Linux Enterprise Server 10 SP4 (i586 i686 ia64 ppc s390x x86_64): glibc-2.4-31.97.1 glibc-devel-2.4-31.97.1 - SUSE Linux Enterprise Server 10 SP4 (i586 ia64 ppc s390x x86_64): glibc-html-2.4-31.97.1 glibc-i18ndata-2.4-31.97.1 glibc-info-2.4-31.97.1 glibc-locale-2.4-31.97.1 glibc-profile-2.4-31.97.1 nscd-2.4-31.97.1 - SUSE Linux Enterprise Server 10 SP4 (s390x x86_64): glibc-32bit-2.4-31.97.1 glibc-devel-32bit-2.4-31.97.1 glibc-locale-32bit-2.4-31.97.1 glibc-profile-32bit-2.4-31.97.1 - SUSE Linux Enterprise Server 10 SP4 (ia64): glibc-locale-x86-2.4-31.97.1 glibc-profile-x86-2.4-31.97.1 glibc-x86-2.4-31.97.1 - SUSE Linux Enterprise Server 10 SP4 (ppc): glibc-64bit-2.4-31.97.1 glibc-devel-64bit-2.4-31.97.1 glibc-locale-64bit-2.4-31.97.1 glibc-profile-64bit-2.4-31.97.1 - SUSE Linux Enterprise Desktop 10 SP4 (i586 i686 x86_64): glibc-2.4-31.97.1 glibc-devel-2.4-31.97.1 - SUSE Linux Enterprise Desktop 10 SP4 (i586 x86_64): glibc-html-2.4-31.97.1 glibc-i18ndata-2.4-31.97.1 glibc-info-2.4-31.97.1 glibc-locale-2.4-31.97.1 nscd-2.4-31.97.1 - SUSE Linux Enterprise Desktop 10 SP4 (x86_64): glibc-32bit-2.4-31.97.1 glibc-devel-32bit-2.4-31.97.1 glibc-locale-32bit-2.4-31.97.1 - SLE SDK 10 SP4 (i586 ia64 ppc s390x x86_64): glibc-dceext-2.4-31.97.1 glibc-html-2.4-31.97.1 glibc-profile-2.4-31.97.1 - SLE SDK 10 SP4 (s390x x86_64): glibc-dceext-32bit-2.4-31.97.1 glibc-profile-32bit-2.4-31.97.1 - SLE SDK 10 SP4 (ia64): glibc-dceext-x86-2.4-31.97.1 glibc-profile-x86-2.4-31.97.1 - SLE SDK 10 SP4 (ppc): glibc-dceext-64bit-2.4-31.97.1 glibc-profile-64bit-2.4-31.97.1 References: http://support.novell.com/security/cve/CVE-2009-5029.html https://bugzilla.novell.com/661460 https://bugzilla.novell.com/735850 http://download.novell.com/patch/finder/?keywords=aba5a35b05cac6339a45d9264… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2012:0051-1: important: krb5-appl: Fixed remote buffer overflow in ktelnetd
by opensuse-security＠opensuse.org 05 Jan '12

05 Jan '12

openSUSE Security Update: krb5-appl: Fixed remote buffer overflow in ktelnetd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0051-1 Rating: important References: #698471 #738632 Cross-References: CVE-2011-4862 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update of krb5 applications fixes two security issues. CVE-2011-4862: A remote code execution in the kerberized telnet daemon was fixed. (This only affects the ktelnetd from the krb5-appl RPM, not the regular telnetd supplied by SUSE.) CVE-2011-1526 / MITKRB5-SA-2011-005: Fixed krb5 ftpd unauthorized file access problems. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch krb5-appl-5593 - openSUSE 11.3: zypper in -t patch krb5-appl-5593 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): krb5-appl-clients-1.0-7.12.1 krb5-appl-servers-1.0-7.12.1 - openSUSE 11.3 (i586 x86_64): krb5-appl-clients-1.0-4.5.1 krb5-appl-servers-1.0-4.5.1 References: http://support.novell.com/security/cve/CVE-2011-4862.html https://bugzilla.novell.com/698471 https://bugzilla.novell.com/738632 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:0050-1: important: Security update for Kerberos 5
by opensuse-security＠opensuse.org 05 Jan '12

05 Jan '12

SUSE Security Update: Security update for Kerberos 5 ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0050-1 Rating: important References: #698471 #738632 Cross-References: CVE-2011-4862 Affected Products: SUSE Linux Enterprise Software Development Kit 11 SP1 SUSE Linux Enterprise Server 11 SP1 for VMware SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server 10 SP4 SUSE Linux Enterprise Server 10 SP3 LTSS SUSE Linux Enterprise Desktop 11 SP1 SUSE Linux Enterprise Desktop 10 SP4 SLE SDK 10 SP4 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update of krb5 fixes two security issues. * CVE-2011-4862: A remote code execution in the kerberized telnet daemon was fixed. (This only affects the ktelnetd from the krb5-appl RPM, not the regular telnetd supplied by SUSE.) * CVE-2011-1526 / MITKRB5-SA-2011-005: Fixed krb5 ftpd unauthorized file access problems. Security Issue reference: * CVE-2011-4862 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4862 > Indications: Please install this update. Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11 SP1: zypper in -t patch sdksp1-krb5-5594 - SUSE Linux Enterprise Server 11 SP1 for VMware: zypper in -t patch slessp1-krb5-5594 - SUSE Linux Enterprise Server 11 SP1: zypper in -t patch slessp1-krb5-5594 - SUSE Linux Enterprise Desktop 11 SP1: zypper in -t patch sledsp1-krb5-5594 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11 SP1 (i586 ia64 ppc64 s390x x86_64): krb5-devel-1.6.3-133.48.48.1 - SUSE Linux Enterprise Software Development Kit 11 SP1 (ppc64 s390x x86_64): krb5-devel-32bit-1.6.3-133.48.48.1 - SUSE Linux Enterprise Software Development Kit 11 SP1 (i586 x86_64): krb5-server-1.6.3-133.48.48.1 - SUSE Linux Enterprise Server 11 SP1 for VMware (i586 x86_64): krb5-1.6.3-133.48.48.1 krb5-apps-clients-1.6.3-133.48.48.1 krb5-apps-servers-1.6.3-133.48.48.1 krb5-client-1.6.3-133.48.48.1 krb5-server-1.6.3-133.48.48.1 - SUSE Linux Enterprise Server 11 SP1 for VMware (x86_64): krb5-32bit-1.6.3-133.48.48.1 - SUSE Linux Enterprise Server 11 SP1 (i586 ia64 ppc64 s390x x86_64): krb5-1.6.3-133.48.48.1 krb5-apps-clients-1.6.3-133.48.48.1 krb5-apps-servers-1.6.3-133.48.48.1 krb5-client-1.6.3-133.48.48.1 krb5-server-1.6.3-133.48.48.1 - SUSE Linux Enterprise Server 11 SP1 (ppc64 s390x x86_64): krb5-32bit-1.6.3-133.48.48.1 - SUSE Linux Enterprise Server 11 SP1 (ia64): krb5-x86-1.6.3-133.48.48.1 - SUSE Linux Enterprise Server 10 SP4 (i586 ia64 ppc s390x x86_64): krb5-1.4.3-19.49.49.1 krb5-apps-clients-1.4.3-19.49.49.1 krb5-apps-servers-1.4.3-19.49.49.1 krb5-client-1.4.3-19.49.49.1 krb5-devel-1.4.3-19.49.49.1 krb5-server-1.4.3-19.49.49.1 - SUSE Linux Enterprise Server 10 SP4 (s390x x86_64): krb5-32bit-1.4.3-19.49.49.1 krb5-devel-32bit-1.4.3-19.49.49.1 - SUSE Linux Enterprise Server 10 SP4 (ia64): krb5-x86-1.4.3-19.49.49.1 - SUSE Linux Enterprise Server 10 SP4 (ppc): krb5-64bit-1.4.3-19.49.49.1 krb5-devel-64bit-1.4.3-19.49.49.1 - SUSE Linux Enterprise Server 10 SP3 LTSS (i586 s390x x86_64): krb5-1.4.3-19.49.49.1 krb5-apps-clients-1.4.3-19.49.49.1 krb5-apps-servers-1.4.3-19.49.49.1 krb5-client-1.4.3-19.49.49.1 krb5-devel-1.4.3-19.49.49.1 krb5-server-1.4.3-19.49.49.1 - SUSE Linux Enterprise Server 10 SP3 LTSS (s390x x86_64): krb5-32bit-1.4.3-19.49.49.1 krb5-devel-32bit-1.4.3-19.49.49.1 - SUSE Linux Enterprise Desktop 11 SP1 (i586 x86_64): krb5-1.6.3-133.48.48.1 krb5-client-1.6.3-133.48.48.1 - SUSE Linux Enterprise Desktop 11 SP1 (x86_64): krb5-32bit-1.6.3-133.48.48.1 - SUSE Linux Enterprise Desktop 10 SP4 (i586 x86_64): krb5-1.4.3-19.49.49.1 krb5-client-1.4.3-19.49.49.1 krb5-devel-1.4.3-19.49.49.1 - SUSE Linux Enterprise Desktop 10 SP4 (x86_64): krb5-32bit-1.4.3-19.49.49.1 krb5-devel-32bit-1.4.3-19.49.49.1 - SLE SDK 10 SP4 (i586 ia64 ppc s390x x86_64): krb5-apps-clients-1.4.3-19.49.49.1 krb5-apps-servers-1.4.3-19.49.49.1 krb5-server-1.4.3-19.49.49.1 References: http://support.novell.com/security/cve/CVE-2011-4862.html https://bugzilla.novell.com/698471 https://bugzilla.novell.com/738632 http://download.novell.com/patch/finder/?keywords=14b571ec5c63a7c3f2a6c6f9f… http://download.novell.com/patch/finder/?keywords=1827558e7c86f395bb141c509… http://download.novell.com/patch/finder/?keywords=af1f89f792c1b454611bd0a8d… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2012:0047-1: important: freetype2
by opensuse-security＠opensuse.org 05 Jan '12

05 Jan '12

openSUSE Security Update: freetype2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0047-1 Rating: important References: #730124 Cross-References: CVE-2011-3256 CVE-2011-3439 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update of freetype2 fixes multiple security flaws that could allow attackers to cause a denial of service or to execute arbitrary code via specially crafted fonts (CVE-2011-3256, CVE-2011-3439). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch freetype2-5548 - openSUSE 11.3: zypper in -t patch freetype2-5548 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): freetype2-devel-2.4.4-7.10.1 libfreetype6-2.4.4-7.10.1 - openSUSE 11.4 (x86_64): freetype2-devel-32bit-2.4.4-7.10.1 libfreetype6-32bit-2.4.4-7.10.1 - openSUSE 11.3 (i586 x86_64): freetype2-devel-2.3.12-7.8.1 libfreetype6-2.3.12-7.8.1 - openSUSE 11.3 (x86_64): freetype2-devel-32bit-2.3.12-7.8.1 libfreetype6-32bit-2.3.12-7.8.1 References: http://support.novell.com/security/cve/CVE-2011-3256.html http://support.novell.com/security/cve/CVE-2011-3439.html https://bugzilla.novell.com/730124 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0