- openSUSE Security Announce

[security-announce] openSUSE-SU-2012:0315-1: important: csound: fixed two stack based buffer overflows
by opensuse-security＠opensuse.org 28 Feb '12

28 Feb '12

openSUSE Security Update: csound: fixed two stack based buffer overflows ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0315-1 Rating: important References: #749073 Cross-References: CVE-2012-0270 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update of csound fixes two stack-based buffer overflows that could be exploited via malformed hetro and pvoc files (CVE-2012-0270). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch csound-5889 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): csound-5.06.0-139.140.1 References: http://support.novell.com/security/cve/CVE-2012-0270.html https://bugzilla.novell.com/749073 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2012:0314-1: important: apache2: fixed various security bugs
by opensuse-security＠opensuse.org 28 Feb '12

28 Feb '12

openSUSE Security Update: apache2: fixed various security bugs ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0314-1 Rating: important References: #728876 #738855 #741243 #743743 Cross-References: CVE-2007-6750 CVE-2012-0031 CVE-2012-0053 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: This update of apache2 fixes regressions and several security problems: bnc#728876, fix graceful reload bnc#741243, CVE-2012-0031: Fixed a scoreboard corruption (shared mem segment) by child causes crash of privileged parent (invalid free()) during shutdown. bnc#743743, CVE-2012-0053: Fixed an issue in error responses that could expose "httpOnly" cookies when no custom ErrorDocument is specified for status code 400". bnc#738855, CVE-2007-6750: The "mod_reqtimeout" module was backported from Apache 2.2.21 to help mitigate the "Slowloris" Denial of Service attack. You need to enable the "mod_reqtimeout" module in your existing apache configuration to make it effective, e.g. in the APACHE_MODULES line in /etc/sysconfig/apache2. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch apache2-201202-5821 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): apache2-2.2.17-4.13.1 apache2-devel-2.2.17-4.13.1 apache2-example-certificates-2.2.17-4.13.1 apache2-example-pages-2.2.17-4.13.1 apache2-itk-2.2.17-4.13.1 apache2-prefork-2.2.17-4.13.1 apache2-utils-2.2.17-4.13.1 apache2-worker-2.2.17-4.13.1 - openSUSE 11.4 (noarch): apache2-doc-2.2.17-4.13.1 References: http://support.novell.com/security/cve/CVE-2007-6750.html http://support.novell.com/security/cve/CVE-2012-0031.html http://support.novell.com/security/cve/CVE-2012-0053.html https://bugzilla.novell.com/728876 https://bugzilla.novell.com/738855 https://bugzilla.novell.com/741243 https://bugzilla.novell.com/743743 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2012:0309-1: important: java-1_6_0-openjdk: Update to iced tea 1.11.1 b24 security release
by opensuse-security＠opensuse.org 27 Feb '12

27 Feb '12

openSUSE Security Update: java-1_6_0-openjdk: Update to iced tea 1.11.1 b24 security release ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0309-1 Rating: important References: #747208 Cross-References: CVE-2011-3563 CVE-2011-3571 CVE-2011-5035 CVE-2012-0497 CVE-2012-0501 CVE-2012-0502 CVE-2012-0503 CVE-2012-0505 CVE-2012-0506 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: java-1_6_0-openjdk was updated to the b24 release, fixing multiple security issues: * Security fixes - S7082299, CVE-2011-3571: Fix inAtomicReferenceArray - S7088367, CVE-2011-3563: Fix issues in java sound - S7110683, CVE-2012-0502: Issues with some KeyboardFocusManager method - S7110687, CVE-2012-0503: Issues with TimeZone class - S7110700, CVE-2012-0505: Enhance exception throwing mechanism in ObjectStreamClass - S7110704, CVE-2012-0506: Issues with some method in corba - S7112642, CVE-2012-0497: Incorrect checking for graphics rendering object - S7118283, CVE-2012-0501: Better input parameter checking in zip file processing - S7126960, CVE-2011-5035: (httpserver) Add property to limit number of request headers to the HTTP Server Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch java-1_6_0-openjdk-5856 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): java-1_6_0-openjdk-1.6.0.0_b24.1.11.1-0.3.2 java-1_6_0-openjdk-devel-1.6.0.0_b24.1.11.1-0.3.2 - openSUSE 11.4 (i586): java-1_6_0-openjdk-demo-1.6.0.0_b24.1.11.1-0.3.2 java-1_6_0-openjdk-javadoc-1.6.0.0_b24.1.11.1-0.3.2 java-1_6_0-openjdk-src-1.6.0.0_b24.1.11.1-0.3.2 References: http://support.novell.com/security/cve/CVE-2011-3563.html http://support.novell.com/security/cve/CVE-2011-3571.html http://support.novell.com/security/cve/CVE-2011-5035.html http://support.novell.com/security/cve/CVE-2012-0497.html http://support.novell.com/security/cve/CVE-2012-0501.html http://support.novell.com/security/cve/CVE-2012-0502.html http://support.novell.com/security/cve/CVE-2012-0503.html http://support.novell.com/security/cve/CVE-2012-0505.html http://support.novell.com/security/cve/CVE-2012-0506.html https://bugzilla.novell.com/747208 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:0308-1: important: Security update for Java 1.6.0
by opensuse-security＠opensuse.org 27 Feb '12

27 Feb '12

SUSE Security Update: Security update for Java 1.6.0 ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0308-1 Rating: important References: #747208 Cross-References: CVE-2011-3563 CVE-2011-3571 CVE-2011-5035 CVE-2012-0497 CVE-2012-0501 CVE-2012-0502 CVE-2012-0503 CVE-2012-0505 CVE-2012-0506 Affected Products: SUSE Linux Enterprise Desktop 11 SP1 FOR SP2 SUSE Linux Enterprise Desktop 11 SP1 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: java-1_6_0-openjdk was updated to the IcedTea 1.11.1 b24 release, fixing multiple security issues: * S7082299, CVE-2011-3571: Fix inAtomicReferenceArray * S7088367, CVE-2011-3563: Fix issues in java sound * S7110683, CVE-2012-0502: Issues with some KeyboardFocusManager method * S7110687, CVE-2012-0503: Issues with TimeZone class * S7110700, CVE-2012-0505: Enhance exception throwing mechanism in ObjectStreamClass * S7110704, CVE-2012-0506: Issues with some method in corba * S7112642, CVE-2012-0497: Incorrect checking for graphics rendering object * S7118283, CVE-2012-0501: Better input parameter checking in zip file processing * S7126960, CVE-2011-5035: (httpserver) Add property to limit number of request headers to the HTTP Server Security Issue references: * CVE-2011-3571 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3571 > * CVE-2011-3563 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3563 > * CVE-2012-0502 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0502 > * CVE-2012-0503 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0503 > * CVE-2012-0505 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0505 > * CVE-2012-0506 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0506 > * CVE-2012-0497 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0497 > * CVE-2012-0501 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0501 > * CVE-2011-5035 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-5035 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Desktop 11 SP1 FOR SP2: zypper in -t patch sledsp1fsp2-java-1_6_0-openjdk-5845 - SUSE Linux Enterprise Desktop 11 SP1: zypper in -t patch sledsp1-java-1_6_0-openjdk-5845 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Desktop 11 SP1 FOR SP2 (i586 x86_64): java-1_6_0-openjdk-1.6.0.0_b24.1.11.1-0.3.1 java-1_6_0-openjdk-demo-1.6.0.0_b24.1.11.1-0.3.1 java-1_6_0-openjdk-devel-1.6.0.0_b24.1.11.1-0.3.1 - SUSE Linux Enterprise Desktop 11 SP1 (i586 x86_64): java-1_6_0-openjdk-1.6.0.0_b24.1.11.1-0.3.1 java-1_6_0-openjdk-demo-1.6.0.0_b24.1.11.1-0.3.1 java-1_6_0-openjdk-devel-1.6.0.0_b24.1.11.1-0.3.1 References: http://support.novell.com/security/cve/CVE-2011-3563.html http://support.novell.com/security/cve/CVE-2011-3571.html http://support.novell.com/security/cve/CVE-2011-5035.html http://support.novell.com/security/cve/CVE-2012-0497.html http://support.novell.com/security/cve/CVE-2012-0501.html http://support.novell.com/security/cve/CVE-2012-0502.html http://support.novell.com/security/cve/CVE-2012-0503.html http://support.novell.com/security/cve/CVE-2012-0505.html http://support.novell.com/security/cve/CVE-2012-0506.html https://bugzilla.novell.com/747208 http://download.novell.com/patch/finder/?keywords=99d51f474667bf40a87309fbd… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:0303-1: important: Security update for Mozilla Firefox
by opensuse-security＠opensuse.org 27 Feb '12

27 Feb '12

SUSE Security Update: Security update for Mozilla Firefox ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0303-1 Rating: important References: #747320 #747328 Cross-References: CVE-2011-3026 Affected Products: SUSE Linux Enterprise Server 11 SP1 for VMware SUSE Linux Enterprise Server 11 SP1 FOR SP2 SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Desktop 11 SP1 FOR SP2 SUSE Linux Enterprise Desktop 11 SP1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. It includes one version update. Description: Mozilla Firefox was updated to 10.0.2 to fix a security issue with the embedded libpng, where a integer overflow could allow remote attackers to crash the browser or potentially execute code (CVE-2011-3026), Security Issue reference: * CVE-2011-3026 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3026 > Special Instructions and Notes: This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 11 SP1 for VMware: zypper in -t patch slessp1-MozillaFirefox-5838 - SUSE Linux Enterprise Server 11 SP1 FOR SP2: zypper in -t patch slessp1fsp2-MozillaFirefox-5838 - SUSE Linux Enterprise Server 11 SP1: zypper in -t patch slessp1-MozillaFirefox-5838 - SUSE Linux Enterprise Desktop 11 SP1 FOR SP2: zypper in -t patch sledsp1fsp2-MozillaFirefox-5838 - SUSE Linux Enterprise Desktop 11 SP1: zypper in -t patch sledsp1-MozillaFirefox-5838 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Server 11 SP1 for VMware (i586 x86_64) [New Version: 10.0.2]: MozillaFirefox-10.0.2-0.4.1 MozillaFirefox-translations-10.0.2-0.4.1 - SUSE Linux Enterprise Server 11 SP1 FOR SP2 (i586 ia64 ppc64 s390x x86_64) [New Version: 10.0.2]: MozillaFirefox-10.0.2-0.4.1 MozillaFirefox-translations-10.0.2-0.4.1 - SUSE Linux Enterprise Server 11 SP1 (i586 ia64 ppc64 s390x x86_64) [New Version: 10.0.2]: MozillaFirefox-10.0.2-0.4.1 MozillaFirefox-translations-10.0.2-0.4.1 - SUSE Linux Enterprise Desktop 11 SP1 FOR SP2 (i586 x86_64) [New Version: 10.0.2]: MozillaFirefox-10.0.2-0.4.1 MozillaFirefox-translations-10.0.2-0.4.1 - SUSE Linux Enterprise Desktop 11 SP1 (i586 x86_64) [New Version: 10.0.2]: MozillaFirefox-10.0.2-0.4.1 MozillaFirefox-translations-10.0.2-0.4.1 References: http://support.novell.com/security/cve/CVE-2011-3026.html https://bugzilla.novell.com/747320 https://bugzilla.novell.com/747328 http://download.novell.com/patch/finder/?keywords=0b3170cde26e23e656224d9bf… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:0299-1: critical: Security update for flash-player
by opensuse-security＠opensuse.org 27 Feb '12

27 Feb '12

SUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0299-1 Rating: critical References: #747297 Cross-References: CVE-2012-0752 CVE-2012-0753 CVE-2012-0754 CVE-2012-0755 CVE-2012-0756 CVE-2012-0767 Affected Products: SUSE Linux Enterprise Desktop 10 SP4 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. It includes one version update. Description: This version upgrade of flash-player fixes multiple security issues that could potentially be exploited to cause a crash or even execute arbitrary code. The following CVE were assigned: CVE-2012-0752 CVE-2012-0753 CVE-2012-0754 CVE-2012-0755 CVE-2012-0756 CVE-2012-0767 Security Issue references: * CVE-2012-0752 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0752 > * CVE-2012-0753 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0753 > * CVE-2012-0754 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0754 > * CVE-2012-0755 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0755 > * CVE-2012-0756 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0756 > * CVE-2012-0767 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0767 > Package List: - SUSE Linux Enterprise Desktop 10 SP4 (i586) [New Version: 10.3.183.15]: flash-player-10.3.183.15-0.6.1 References: http://support.novell.com/security/cve/CVE-2012-0752.html http://support.novell.com/security/cve/CVE-2012-0753.html http://support.novell.com/security/cve/CVE-2012-0754.html http://support.novell.com/security/cve/CVE-2012-0755.html http://support.novell.com/security/cve/CVE-2012-0756.html http://support.novell.com/security/cve/CVE-2012-0767.html https://bugzilla.novell.com/747297 http://download.novell.com/patch/finder/?keywords=c3d08777a2397ababaa7778f2… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:0298-1: important: Security update for Mozilla XULrunner
by opensuse-security＠opensuse.org 27 Feb '12

27 Feb '12

SUSE Security Update: Security update for Mozilla XULrunner ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0298-1 Rating: important References: #747328 Cross-References: CVE-2011-3026 Affected Products: SUSE Linux Enterprise Software Development Kit 11 SP1 FOR SP2 SUSE Linux Enterprise Software Development Kit 11 SP1 SUSE Linux Enterprise Server 11 SP1 for VMware SUSE Linux Enterprise Server 11 SP1 FOR SP2 SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server 10 SP4 SUSE Linux Enterprise Desktop 11 SP1 FOR SP2 SUSE Linux Enterprise Desktop 11 SP1 SUSE Linux Enterprise Desktop 10 SP4 SLE SDK 10 SP4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. It includes two new package versions. Description: Mozilla XULRunner was updated to 1.9.2.27 to fix a security issue with the embedded libpng, where a integer overflow could allow remote attackers to crash the browser or potentially execute code (CVE-2011-3026), Security Issue reference: * CVE-2011-3026 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3026 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11 SP1 FOR SP2: zypper in -t patch sdksp1fsp2-mozilla-xulrunner192-5840 - SUSE Linux Enterprise Software Development Kit 11 SP1: zypper in -t patch sdksp1-mozilla-xulrunner192-5840 - SUSE Linux Enterprise Server 11 SP1 for VMware: zypper in -t patch slessp1-mozilla-xulrunner192-5840 - SUSE Linux Enterprise Server 11 SP1 FOR SP2: zypper in -t patch slessp1fsp2-mozilla-xulrunner192-5840 - SUSE Linux Enterprise Server 11 SP1: zypper in -t patch slessp1-mozilla-xulrunner192-5840 - SUSE Linux Enterprise Desktop 11 SP1 FOR SP2: zypper in -t patch sledsp1fsp2-mozilla-xulrunner192-5840 - SUSE Linux Enterprise Desktop 11 SP1: zypper in -t patch sledsp1-mozilla-xulrunner192-5840 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11 SP1 FOR SP2 (i586 ia64 ppc64 s390x x86_64) [New Version: 1.9.2.27]: mozilla-xulrunner192-devel-1.9.2.27-0.2.1 - SUSE Linux Enterprise Software Development Kit 11 SP1 FOR SP2 (ppc64 s390x x86_64) [New Version: 1.9.2.27]: mozilla-xulrunner192-gnome-32bit-1.9.2.27-0.2.1 mozilla-xulrunner192-translations-32bit-1.9.2.27-0.2.1 - SUSE Linux Enterprise Software Development Kit 11 SP1 FOR SP2 (ia64) [New Version: 1.9.2.27]: mozilla-xulrunner192-gnome-x86-1.9.2.27-0.2.1 mozilla-xulrunner192-translations-x86-1.9.2.27-0.2.1 - SUSE Linux Enterprise Software Development Kit 11 SP1 (i586 ia64 ppc64 s390x x86_64) [New Version: 1.9.2.27]: mozilla-xulrunner192-devel-1.9.2.27-0.2.1 - SUSE Linux Enterprise Software Development Kit 11 SP1 (ppc64 s390x x86_64) [New Version: 1.9.2.27]: mozilla-xulrunner192-gnome-32bit-1.9.2.27-0.2.1 mozilla-xulrunner192-translations-32bit-1.9.2.27-0.2.1 - SUSE Linux Enterprise Software Development Kit 11 SP1 (ia64) [New Version: 1.9.2.27]: mozilla-xulrunner192-gnome-x86-1.9.2.27-0.2.1 mozilla-xulrunner192-translations-x86-1.9.2.27-0.2.1 - SUSE Linux Enterprise Server 11 SP1 for VMware (i586 x86_64) [New Version: 1.9.2.27]: mozilla-xulrunner192-1.9.2.27-0.2.1 mozilla-xulrunner192-gnome-1.9.2.27-0.2.1 mozilla-xulrunner192-translations-1.9.2.27-0.2.1 - SUSE Linux Enterprise Server 11 SP1 for VMware (x86_64) [New Version: 1.9.2.27]: mozilla-xulrunner192-32bit-1.9.2.27-0.2.1 - SUSE Linux Enterprise Server 11 SP1 FOR SP2 (i586 ia64 ppc64 s390x x86_64) [New Version: 1.9.2.27]: mozilla-xulrunner192-1.9.2.27-0.2.1 mozilla-xulrunner192-gnome-1.9.2.27-0.2.1 mozilla-xulrunner192-translations-1.9.2.27-0.2.1 - SUSE Linux Enterprise Server 11 SP1 FOR SP2 (ppc64 s390x x86_64) [New Version: 1.9.2.27]: mozilla-xulrunner192-32bit-1.9.2.27-0.2.1 - SUSE Linux Enterprise Server 11 SP1 FOR SP2 (ia64) [New Version: 1.9.2.27]: mozilla-xulrunner192-x86-1.9.2.27-0.2.1 - SUSE Linux Enterprise Server 11 SP1 (i586 ia64 ppc64 s390x x86_64) [New Version: 1.9.2.27]: mozilla-xulrunner192-1.9.2.27-0.2.1 mozilla-xulrunner192-gnome-1.9.2.27-0.2.1 mozilla-xulrunner192-translations-1.9.2.27-0.2.1 - SUSE Linux Enterprise Server 11 SP1 (ppc64 s390x x86_64) [New Version: 1.9.2.27]: mozilla-xulrunner192-32bit-1.9.2.27-0.2.1 - SUSE Linux Enterprise Server 11 SP1 (ia64) [New Version: 1.9.2.27]: mozilla-xulrunner192-x86-1.9.2.27-0.2.1 - SUSE Linux Enterprise Server 10 SP4 (i586 ia64 ppc s390x x86_64) [New Version: 1.9.2.27]: mozilla-xulrunner192-1.9.2.27-0.5.6 mozilla-xulrunner192-gnome-1.9.2.27-0.5.6 mozilla-xulrunner192-translations-1.9.2.27-0.5.6 - SUSE Linux Enterprise Server 10 SP4 (i586 ia64 ppc s390x) [New Version: 3.6.27]: MozillaFirefox-3.6.27-0.5.4 MozillaFirefox-translations-3.6.27-0.5.4 - SUSE Linux Enterprise Server 10 SP4 (s390x x86_64) [New Version: 1.9.2.27]: mozilla-xulrunner192-32bit-1.9.2.27-0.5.6 mozilla-xulrunner192-gnome-32bit-1.9.2.27-0.5.6 mozilla-xulrunner192-translations-32bit-1.9.2.27-0.5.6 - SUSE Linux Enterprise Desktop 11 SP1 FOR SP2 (i586 x86_64) [New Version: 1.9.2.27]: mozilla-xulrunner192-1.9.2.27-0.2.1 mozilla-xulrunner192-gnome-1.9.2.27-0.2.1 mozilla-xulrunner192-translations-1.9.2.27-0.2.1 - SUSE Linux Enterprise Desktop 11 SP1 FOR SP2 (x86_64) [New Version: 1.9.2.27]: mozilla-xulrunner192-32bit-1.9.2.27-0.2.1 mozilla-xulrunner192-gnome-32bit-1.9.2.27-0.2.1 mozilla-xulrunner192-translations-32bit-1.9.2.27-0.2.1 - SUSE Linux Enterprise Desktop 11 SP1 (i586 x86_64) [New Version: 1.9.2.27]: mozilla-xulrunner192-1.9.2.27-0.2.1 mozilla-xulrunner192-gnome-1.9.2.27-0.2.1 mozilla-xulrunner192-translations-1.9.2.27-0.2.1 - SUSE Linux Enterprise Desktop 11 SP1 (x86_64) [New Version: 1.9.2.27]: mozilla-xulrunner192-32bit-1.9.2.27-0.2.1 mozilla-xulrunner192-gnome-32bit-1.9.2.27-0.2.1 mozilla-xulrunner192-translations-32bit-1.9.2.27-0.2.1 - SUSE Linux Enterprise Desktop 10 SP4 (i586 x86_64) [New Version: 1.9.2.27]: mozilla-xulrunner192-1.9.2.27-0.5.6 mozilla-xulrunner192-gnome-1.9.2.27-0.5.6 mozilla-xulrunner192-translations-1.9.2.27-0.5.6 - SUSE Linux Enterprise Desktop 10 SP4 (x86_64) [New Version: 1.9.2.27]: mozilla-xulrunner192-32bit-1.9.2.27-0.5.6 mozilla-xulrunner192-gnome-32bit-1.9.2.27-0.5.6 mozilla-xulrunner192-translations-32bit-1.9.2.27-0.5.6 - SUSE Linux Enterprise Desktop 10 SP4 (i586) [New Version: 3.6.27]: MozillaFirefox-3.6.27-0.5.4 MozillaFirefox-translations-3.6.27-0.5.4 - SLE SDK 10 SP4 (i586 ia64 ppc s390x): MozillaFirefox-branding-upstream-3.6.27-0.5.4 References: http://support.novell.com/security/cve/CVE-2011-3026.html https://bugzilla.novell.com/747328 http://download.novell.com/patch/finder/?keywords=2c23debb2e4e3a09d318252e0… http://download.novell.com/patch/finder/?keywords=4513d87a4d6a69221d7fe51d3… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2012:0297-1: important: mozilla-xulrunner192: 1.9.2.27
by opensuse-security＠opensuse.org 24 Feb '12

24 Feb '12

openSUSE Security Update: mozilla-xulrunner192: 1.9.2.27 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0297-1 Rating: important References: #747328 Cross-References: CVE-2011-3026 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. It includes 5 new package versions. Description: Mozilla XULRunner was updated to 1.9.2.27 to fix a security issue with the embedded libpng, where a integer overflow could allow remote attackers to crash the browser or potentially execute code (CVE-2011-3026), Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch MozillaFirefox-5825 MozillaThunderbird-5826 mozilla-js192-5832 seamonkey-5834 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 1.9.2.27,10.0.2,2.7.2 and 3.1.19]: MozillaFirefox-10.0.2-0.2.1 MozillaFirefox-branding-upstream-10.0.2-0.2.1 MozillaFirefox-buildsymbols-10.0.2-0.2.1 MozillaFirefox-devel-10.0.2-0.2.1 MozillaFirefox-translations-common-10.0.2-0.2.1 MozillaFirefox-translations-other-10.0.2-0.2.1 MozillaThunderbird-3.1.19-0.25.1 MozillaThunderbird-buildsymbols-3.1.19-0.25.1 MozillaThunderbird-devel-3.1.19-0.25.1 MozillaThunderbird-translations-common-3.1.19-0.25.1 MozillaThunderbird-translations-other-3.1.19-0.25.1 enigmail-1.1.2+3.1.19-0.25.1 mozilla-js192-1.9.2.27-0.2.1 mozilla-xulrunner192-1.9.2.27-0.2.1 mozilla-xulrunner192-buildsymbols-1.9.2.27-0.2.1 mozilla-xulrunner192-devel-1.9.2.27-0.2.1 mozilla-xulrunner192-gnome-1.9.2.27-0.2.1 mozilla-xulrunner192-translations-common-1.9.2.27-0.2.1 mozilla-xulrunner192-translations-other-1.9.2.27-0.2.1 seamonkey-2.7.2-0.2.1 seamonkey-dom-inspector-2.7.2-0.2.1 seamonkey-irc-2.7.2-0.2.1 seamonkey-translations-common-2.7.2-0.2.1 seamonkey-translations-other-2.7.2-0.2.1 seamonkey-venkman-2.7.2-0.2.1 - openSUSE 11.4 (x86_64) [New Version: 1.9.2.27]: mozilla-js192-32bit-1.9.2.27-0.2.1 mozilla-xulrunner192-32bit-1.9.2.27-0.2.1 mozilla-xulrunner192-gnome-32bit-1.9.2.27-0.2.1 mozilla-xulrunner192-translations-common-32bit-1.9.2.27-0.2.1 mozilla-xulrunner192-translations-other-32bit-1.9.2.27-0.2.1 References: http://support.novell.com/security/cve/CVE-2011-3026.html https://bugzilla.novell.com/747328 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:0122-2: important: Security update for IBM Java 1.4.2
by opensuse-security＠opensuse.org 23 Feb '12

23 Feb '12

SUSE Security Update: Security update for IBM Java 1.4.2 ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0122-2 Rating: important References: #739256 Cross-References: CVE-2011-3389 CVE-2011-3545 CVE-2011-3547 CVE-2011-3548 CVE-2011-3549 CVE-2011-3552 CVE-2011-3556 CVE-2011-3557 CVE-2011-3560 Affected Products: SUSE Linux Enterprise for SAP Applications 11 SP1 SUSE Linux Enterprise Software Development Kit 11 SP1 SUSE Linux Enterprise Server 11 SP1 for VMware SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Java 11 SP1 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: IBM Java 1.4.2 SR13 FP11 has been released and contains various security fixes. http://www.ibm.com/developerworks/java/jdk/alerts/ http://www.ibm.com/developerworks/java/jdk/alerts/ <http://www.ibm.com/developerworks/java/jdk/alerts/> (CVEs fixed: CVE-2011-3547 CVE-2011-3548 CVE-2011-3549 CVE-2011-3552 CVE-2011-3545 CVE-2011-3556 CVE-2011-3557 CVE-2011-3389 CVE-2011-3560 ) Security Issues: * CVE-2011-3389 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3389 > * CVE-2011-3545 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3545 > * CVE-2011-3547 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3547 > * CVE-2011-3548 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3548 > * CVE-2011-3549 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3549 > * CVE-2011-3552 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3552 > * CVE-2011-3556 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3556 > * CVE-2011-3557 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3557 > * CVE-2011-3560 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3560 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise for SAP Applications 11 SP1: zypper in -t patch slesapp1-java-1_4_2-ibm-sap-5734 - SUSE Linux Enterprise Software Development Kit 11 SP1: zypper in -t patch sdksp1-java-1_4_2-ibm-5609 - SUSE Linux Enterprise Server 11 SP1 for VMware: zypper in -t patch slessp1-java-1_4_2-ibm-5609 - SUSE Linux Enterprise Server 11 SP1: zypper in -t patch slessp1-java-1_4_2-ibm-5609 - SUSE Linux Enterprise Java 11 SP1: zypper in -t patch slejsp1-java-1_4_2-ibm-5609 slejsp1-java-1_4_2-ibm-sap-5734 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise for SAP Applications 11 SP1 (x86_64): java-1_4_2-ibm-sap-1.4.2_sr13.11-0.3.1 java-1_4_2-ibm-sap-devel-1.4.2_sr13.11-0.3.1 - SUSE Linux Enterprise Software Development Kit 11 SP1 (i586 ia64 ppc64 s390x x86_64): java-1_4_2-ibm-devel-1.4.2_sr13.11-0.5.1 - SUSE Linux Enterprise Software Development Kit 11 SP1 (i586 x86_64): java-1_4_2-ibm-1.4.2_sr13.11-0.5.1 - SUSE Linux Enterprise Server 11 SP1 for VMware (i586 x86_64): java-1_4_2-ibm-1.4.2_sr13.11-0.5.1 - SUSE Linux Enterprise Server 11 SP1 for VMware (i586): java-1_4_2-ibm-jdbc-1.4.2_sr13.11-0.5.1 java-1_4_2-ibm-plugin-1.4.2_sr13.11-0.5.1 - SUSE Linux Enterprise Server 11 SP1 (i586 ia64 ppc64 s390x x86_64): java-1_4_2-ibm-1.4.2_sr13.11-0.5.1 - SUSE Linux Enterprise Server 11 SP1 (i586): java-1_4_2-ibm-jdbc-1.4.2_sr13.11-0.5.1 java-1_4_2-ibm-plugin-1.4.2_sr13.11-0.5.1 - SUSE Linux Enterprise Java 11 SP1 (i586 ia64 ppc64 s390x x86_64): java-1_4_2-ibm-1.4.2_sr13.11-0.5.1 - SUSE Linux Enterprise Java 11 SP1 (x86_64): java-1_4_2-ibm-sap-1.4.2_sr13.11-0.3.1 java-1_4_2-ibm-sap-devel-1.4.2_sr13.11-0.3.1 - SUSE Linux Enterprise Java 11 SP1 (i586): java-1_4_2-ibm-jdbc-1.4.2_sr13.11-0.5.1 java-1_4_2-ibm-plugin-1.4.2_sr13.11-0.5.1 References: http://support.novell.com/security/cve/CVE-2011-3389.html http://support.novell.com/security/cve/CVE-2011-3545.html http://support.novell.com/security/cve/CVE-2011-3547.html http://support.novell.com/security/cve/CVE-2011-3548.html http://support.novell.com/security/cve/CVE-2011-3549.html http://support.novell.com/security/cve/CVE-2011-3552.html http://support.novell.com/security/cve/CVE-2011-3556.html http://support.novell.com/security/cve/CVE-2011-3557.html http://support.novell.com/security/cve/CVE-2011-3560.html https://bugzilla.novell.com/739256 http://download.novell.com/patch/finder/?keywords=77471aa6472b33cde43cae36b… http://download.novell.com/patch/finder/?keywords=c0c632466d75a1ac53d2ceaf2… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2012:0287-1: important: No summary available - BOX
by opensuse-security＠opensuse.org 20 Feb '12

20 Feb '12

openSUSE Security Update: No summary available - BOX ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0287-1 Rating: important References: #742804 Cross-References: CVE-2012-0791 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This version upgrade of horde3-dimp to 4.3.11 fixes several issues (including security related flaws, CVE-2012-0791) and adds new features. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch horde3-dimp-5829 horde3-imp-5830 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (noarch): horde3-dimp-1.1.8-0.3.1 horde3-imp-4.3.11-0.3.1 References: http://support.novell.com/security/cve/CVE-2012-0791.html https://bugzilla.novell.com/742804 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0