October 2012 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2012:1380-1: xorg-x11-server: make DACDelay an empty macro for non-VGA platforms
by maintenance＠opensuse.org 22 Oct '12

22 Oct '12

openSUSE Recommended Update: xorg-x11-server: make DACDelay an empty macro for non-VGA platforms ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1380-1 Rating: low References: #784981 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for xorg-x11-server: - bnc#784981: make DACDelay an empty macro for non-VGA platforms Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-723 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): xorg-x11-Xvnc-7.6_1.12.3-1.13.1 xorg-x11-Xvnc-debuginfo-7.6_1.12.3-1.13.1 xorg-x11-server-7.6_1.12.3-1.13.1 xorg-x11-server-debuginfo-7.6_1.12.3-1.13.1 xorg-x11-server-debugsource-7.6_1.12.3-1.13.1 xorg-x11-server-extra-7.6_1.12.3-1.13.1 xorg-x11-server-extra-debuginfo-7.6_1.12.3-1.13.1 xorg-x11-server-sdk-7.6_1.12.3-1.13.1 References: https://bugzilla.novell.com/784981

1 0

openSUSE-RU-2012:1379-1: yast2: Fixed detection whether firewall is running
by maintenance＠opensuse.org 22 Oct '12

22 Oct '12

openSUSE Recommended Update: yast2: Fixed detection whether firewall is running ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1379-1 Rating: low References: #779455 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for yast2: - bnc#779455: Fixed detection whether firewall is running and unified with starting and stopping the service via Service API. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-724 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): yast2-2.23.4-1.7.1 yast2-devel-doc-2.23.4-1.7.1 References: https://bugzilla.novell.com/779455

1 0

openSUSE-RU-2012:1378-1: moderate: libvirt: Update to 0.9.11.6
by maintenance＠opensuse.org 22 Oct '12

22 Oct '12

openSUSE Recommended Update: libvirt: Update to 0.9.11.6 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1378-1 Rating: moderate References: #780432 #780956 #780966 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This udpate fixes the following issues for libvirt: 0.9.11.6: - remove dnsmasq command line parameter "--filterwin2k" - dnsmasq: avoid forwarding queries without a domain - security: Fix libvirtd crash possibility - Remove the following patches now upstream in 0.9.11.6 stable 4036aa91-systemd.patch 57349ffc-lxc-ctrl.patch, 6039a2cb-CVE-2012-3445.patch 79ca7e4e-libvirt-guests-service.patch b7ff9e69-CVE-2012-4423.patch revert-d8978c90.patch - Fixes bnc#780956 by including cherry picked master commit f3868259 - bnc#780966: Add upstream fixes to libvirt-guests service and init files 79ca7e4e-libvirt-guests-service.patch c18dc28b-libvirt-guests.patch - security: Fix libvirtd crash possibility CVE-2012-4423 b7ff9e69-CVE-2012-4423.patch bnc#780432 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-725 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): libvirt-0.9.11.6-1.5.1 libvirt-client-0.9.11.6-1.5.1 libvirt-client-debuginfo-0.9.11.6-1.5.1 libvirt-debuginfo-0.9.11.6-1.5.1 libvirt-debugsource-0.9.11.6-1.5.1 libvirt-devel-0.9.11.6-1.5.1 libvirt-doc-0.9.11.6-1.5.1 libvirt-lock-sanlock-0.9.11.6-1.5.1 libvirt-lock-sanlock-debuginfo-0.9.11.6-1.5.1 libvirt-python-0.9.11.6-1.5.1 libvirt-python-debuginfo-0.9.11.6-1.5.1 - openSUSE 12.2 (x86_64): libvirt-client-32bit-0.9.11.6-1.5.1 libvirt-client-debuginfo-32bit-0.9.11.6-1.5.1 libvirt-devel-32bit-0.9.11.6-1.5.1 References: http://support.novell.com/security/cve/cve-2012-3445.html http://support.novell.com/security/cve/cve-2012-4423.html https://bugzilla.novell.com/780432 https://bugzilla.novell.com/780956 https://bugzilla.novell.com/780966

1 0

openSUSE-RU-2012:1377-1: xfce4-mixer: update to 4.10.0
by maintenance＠opensuse.org 22 Oct '12

22 Oct '12

openSUSE Recommended Update: xfce4-mixer: update to 4.10.0 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1377-1 Rating: low References: #784879 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues for xfce4-mixer: - bnc#784879: update to version 4.10.0 - use standard icons where possible - support xfce4-panel 4.10 with its deskbar mode - handle unconfigured state more gracefully - mute a track when the volume is set to 0% and unmute when set to a higher value - add global keyboard shortcuts for raising and lowering the volume as well as muting - store settings in xfconf and keep them in sync - populate the mixer with whitelisted controls in the absence of an existing configuration - add a popup with a scale for setting the volume to the panel plugin which is opened on left click, allow running the user-defined command previously bound to left click from the panel plugin context menu instead - make xfce4-mixer a singleton application - add runtime debugging mode to both the mixer and the panel plugin - add man page for xfce4-mixer - handle identically named tracks and tracks which are read-only or have no mute or record functionality - translation updates - added xfce4-mixer-fix-default-window-size.patch in order to initialize window width and height to default values - added compatibility symlink for the panel plugin to ease the migration Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-722 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): xfce4-mixer-4.10.0-12.4.1 xfce4-mixer-debuginfo-4.10.0-12.4.1 xfce4-mixer-debugsource-4.10.0-12.4.1 xfce4-panel-plugin-mixer-4.10.0-12.4.1 xfce4-panel-plugin-mixer-debuginfo-4.10.0-12.4.1 - openSUSE 12.2 (noarch): exo-branding-openSUSE-4.10.0-4.7.1 libgarcon-branding-openSUSE-4.10.0-4.7.1 libxfce4ui-branding-openSUSE-4.10.0-4.7.1 midori-branding-openSUSE-4.10.0-4.7.1 openSUSE-xfce-icon-theme-4.10.0-4.7.1 thunar-volman-branding-openSUSE-4.10.0-4.7.1 xfce4-mixer-lang-4.10.0-12.4.1 xfce4-notifyd-branding-openSUSE-4.10.0-4.7.1 xfce4-panel-branding-openSUSE-4.10.0-4.7.1 xfce4-session-branding-openSUSE-4.10.0-4.7.1 xfce4-settings-branding-openSUSE-4.10.0-4.7.1 xfdesktop-branding-openSUSE-4.10.0-4.7.1 xfwm4-branding-openSUSE-4.10.0-4.7.1 References: https://bugzilla.novell.com/784879

1 0

openSUSE-SU-2012:1376-1: important: update for chromium
by opensuse-security＠opensuse.org 22 Oct '12

22 Oct '12

openSUSE Security Update: update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1376-1 Rating: important References: #782257 Cross-References: CVE-2012-2874 CVE-2012-2876 CVE-2012-2877 CVE-2012-2878 CVE-2012-2879 CVE-2012-2880 CVE-2012-2881 CVE-2012-2882 CVE-2012-2883 CVE-2012-2884 CVE-2012-2885 CVE-2012-2886 CVE-2012-2887 CVE-2012-2888 CVE-2012-2889 CVE-2012-2891 CVE-2012-2892 CVE-2012-2893 CVE-2012-2894 CVE-2012-2896 Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that fixes 20 vulnerabilities is now available. Description: Chromium was upgraded to version 24.0.1290 which fixed multiple security flaws. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-721 - openSUSE 12.1: zypper in -t patch openSUSE-2012-721 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): chromedriver-24.0.1290.0-1.19.1 chromedriver-debuginfo-24.0.1290.0-1.19.1 chromium-24.0.1290.0-1.19.1 chromium-debuginfo-24.0.1290.0-1.19.1 chromium-debugsource-24.0.1290.0-1.19.1 chromium-desktop-gnome-24.0.1290.0-1.19.1 chromium-desktop-kde-24.0.1290.0-1.19.1 chromium-suid-helper-24.0.1290.0-1.19.1 chromium-suid-helper-debuginfo-24.0.1290.0-1.19.1 - openSUSE 12.1 (i586 x86_64): chromedriver-24.0.1290.0-1.39.1 chromedriver-debuginfo-24.0.1290.0-1.39.1 chromium-24.0.1290.0-1.39.1 chromium-debuginfo-24.0.1290.0-1.39.1 chromium-debugsource-24.0.1290.0-1.39.1 chromium-desktop-gnome-24.0.1290.0-1.39.1 chromium-desktop-kde-24.0.1290.0-1.39.1 chromium-suid-helper-24.0.1290.0-1.39.1 chromium-suid-helper-debuginfo-24.0.1290.0-1.39.1 References: http://support.novell.com/security/cve/CVE-2012-2874.html http://support.novell.com/security/cve/CVE-2012-2876.html http://support.novell.com/security/cve/CVE-2012-2877.html http://support.novell.com/security/cve/CVE-2012-2878.html http://support.novell.com/security/cve/CVE-2012-2879.html http://support.novell.com/security/cve/CVE-2012-2880.html http://support.novell.com/security/cve/CVE-2012-2881.html http://support.novell.com/security/cve/CVE-2012-2882.html http://support.novell.com/security/cve/CVE-2012-2883.html http://support.novell.com/security/cve/CVE-2012-2884.html http://support.novell.com/security/cve/CVE-2012-2885.html http://support.novell.com/security/cve/CVE-2012-2886.html http://support.novell.com/security/cve/CVE-2012-2887.html http://support.novell.com/security/cve/CVE-2012-2888.html http://support.novell.com/security/cve/CVE-2012-2889.html http://support.novell.com/security/cve/CVE-2012-2891.html http://support.novell.com/security/cve/CVE-2012-2892.html http://support.novell.com/security/cve/CVE-2012-2893.html http://support.novell.com/security/cve/CVE-2012-2894.html http://support.novell.com/security/cve/CVE-2012-2896.html https://bugzilla.novell.com/782257

1 0

openSUSE-SU-2012:1375-1: moderate: update for libproxy, libproxy-plugins
by opensuse-security＠opensuse.org 22 Oct '12

22 Oct '12

openSUSE Security Update: update for libproxy, libproxy-plugins ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1375-1 Rating: moderate References: #784523 Cross-References: CVE-2012-4504 CVE-2012-4505 Affected Products: openSUSE 12.2 openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update of libproxy fixed a buffer overflow flaw. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-720 - openSUSE 12.1: zypper in -t patch openSUSE-2012-720 - openSUSE 11.4: zypper in -t patch openSUSE-2012-720 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): libproxy-debugsource-0.4.7-14.4.1 libproxy-devel-0.4.7-14.4.1 libproxy-sharp-0.4.7-14.4.1 libproxy-tools-0.4.7-14.4.1 libproxy-tools-debuginfo-0.4.7-14.4.1 libproxy1-0.4.7-14.4.1 libproxy1-debuginfo-0.4.7-14.4.1 perl-Net-Libproxy-0.4.7-14.4.1 perl-Net-Libproxy-debuginfo-0.4.7-14.4.1 - openSUSE 12.2 (x86_64): libproxy-plugins-debugsource-0.4.7-14.4.1 libproxy1-32bit-0.4.7-14.4.1 libproxy1-config-gnome3-0.4.7-14.4.1 libproxy1-config-gnome3-debuginfo-0.4.7-14.4.1 libproxy1-config-kde4-0.4.7-14.4.1 libproxy1-config-kde4-debuginfo-0.4.7-14.4.1 libproxy1-debuginfo-32bit-0.4.7-14.4.1 libproxy1-networkmanager-0.4.7-14.4.1 libproxy1-networkmanager-debuginfo-0.4.7-14.4.1 libproxy1-pacrunner-webkit-0.4.7-14.4.1 libproxy1-pacrunner-webkit-debuginfo-0.4.7-14.4.1 - openSUSE 12.2 (noarch): python-libproxy-0.4.7-14.4.1 - openSUSE 12.1 (i586 x86_64): libproxy-debugsource-0.4.7-7.7.1 libproxy-devel-0.4.7-7.7.1 libproxy-plugins-debugsource-0.4.7-7.7.1 libproxy-sharp-0.4.7-7.7.1 libproxy-tools-0.4.7-7.7.1 libproxy-tools-debuginfo-0.4.7-7.7.1 libproxy1-0.4.7-7.7.1 libproxy1-config-gnome3-0.4.7-7.7.1 libproxy1-config-gnome3-debuginfo-0.4.7-7.7.1 libproxy1-config-kde4-0.4.7-7.7.1 libproxy1-config-kde4-debuginfo-0.4.7-7.7.1 libproxy1-debuginfo-0.4.7-7.7.1 libproxy1-networkmanager-0.4.7-7.7.1 libproxy1-networkmanager-debuginfo-0.4.7-7.7.1 libproxy1-pacrunner-mozjs-0.4.7-7.7.1 libproxy1-pacrunner-mozjs-debuginfo-0.4.7-7.7.1 libproxy1-pacrunner-webkit-0.4.7-7.7.1 libproxy1-pacrunner-webkit-debuginfo-0.4.7-7.7.1 perl-Net-Libproxy-0.4.7-7.7.1 perl-Net-Libproxy-debuginfo-0.4.7-7.7.1 - openSUSE 12.1 (x86_64): libproxy1-32bit-0.4.7-7.7.1 libproxy1-config-gnome3-32bit-0.4.7-7.7.1 libproxy1-config-gnome3-debuginfo-32bit-0.4.7-7.7.1 libproxy1-config-kde4-32bit-0.4.7-7.7.1 libproxy1-config-kde4-debuginfo-32bit-0.4.7-7.7.1 libproxy1-debuginfo-32bit-0.4.7-7.7.1 libproxy1-networkmanager-32bit-0.4.7-7.7.1 libproxy1-networkmanager-debuginfo-32bit-0.4.7-7.7.1 libproxy1-pacrunner-mozjs-32bit-0.4.7-7.7.1 libproxy1-pacrunner-mozjs-debuginfo-32bit-0.4.7-7.7.1 libproxy1-pacrunner-webkit-32bit-0.4.7-7.7.1 libproxy1-pacrunner-webkit-debuginfo-32bit-0.4.7-7.7.1 - openSUSE 12.1 (noarch): python-libproxy-0.4.7-7.7.1 - openSUSE 12.1 (ia64): libproxy1-config-gnome3-debuginfo-x86-0.4.7-7.7.1 libproxy1-config-gnome3-x86-0.4.7-7.7.1 libproxy1-config-kde4-debuginfo-x86-0.4.7-7.7.1 libproxy1-config-kde4-x86-0.4.7-7.7.1 libproxy1-debuginfo-x86-0.4.7-7.7.1 libproxy1-networkmanager-debuginfo-x86-0.4.7-7.7.1 libproxy1-networkmanager-x86-0.4.7-7.7.1 libproxy1-pacrunner-mozjs-debuginfo-x86-0.4.7-7.7.1 libproxy1-pacrunner-mozjs-x86-0.4.7-7.7.1 libproxy1-pacrunner-webkit-debuginfo-x86-0.4.7-7.7.1 libproxy1-pacrunner-webkit-x86-0.4.7-7.7.1 libproxy1-x86-0.4.7-7.7.1 - openSUSE 11.4 (i586 x86_64): libproxy-debugsource-0.4.7-6.28.1 libproxy-devel-0.4.7-6.28.1 libproxy-plugins-debugsource-0.4.7-6.28.1 libproxy-sharp-0.4.7-6.28.1 libproxy-tools-0.4.7-6.28.1 libproxy-tools-debuginfo-0.4.7-6.28.1 libproxy1-0.4.7-6.28.1 libproxy1-config-gnome-0.4.7-6.28.1 libproxy1-config-gnome-debuginfo-0.4.7-6.28.1 libproxy1-config-kde4-0.4.7-6.28.1 libproxy1-config-kde4-debuginfo-0.4.7-6.28.1 libproxy1-debuginfo-0.4.7-6.28.1 libproxy1-networkmanager-0.4.7-6.28.1 libproxy1-networkmanager-debuginfo-0.4.7-6.28.1 libproxy1-pacrunner-mozjs-0.4.7-6.28.1 libproxy1-pacrunner-mozjs-debuginfo-0.4.7-6.28.1 libproxy1-pacrunner-webkit-0.4.7-6.28.1 libproxy1-pacrunner-webkit-debuginfo-0.4.7-6.28.1 perl-Net-Libproxy-0.4.7-6.28.1 perl-Net-Libproxy-debuginfo-0.4.7-6.28.1 - openSUSE 11.4 (x86_64): libproxy1-32bit-0.4.7-6.28.1 libproxy1-config-gnome-32bit-0.4.7-6.28.1 libproxy1-config-gnome-debuginfo-32bit-0.4.7-6.28.1 libproxy1-debuginfo-32bit-0.4.7-6.28.1 libproxy1-networkmanager-32bit-0.4.7-6.28.1 libproxy1-networkmanager-debuginfo-32bit-0.4.7-6.28.1 libproxy1-pacrunner-mozjs-32bit-0.4.7-6.28.1 libproxy1-pacrunner-mozjs-debuginfo-32bit-0.4.7-6.28.1 libproxy1-pacrunner-webkit-32bit-0.4.7-6.28.1 libproxy1-pacrunner-webkit-debuginfo-32bit-0.4.7-6.28.1 - openSUSE 11.4 (noarch): python-libproxy-0.4.7-6.28.1 - openSUSE 11.4 (ia64): libproxy1-config-gnome-debuginfo-x86-0.4.7-6.28.1 libproxy1-config-gnome-x86-0.4.7-6.28.1 libproxy1-debuginfo-x86-0.4.7-6.28.1 libproxy1-networkmanager-debuginfo-x86-0.4.7-6.28.1 libproxy1-networkmanager-x86-0.4.7-6.28.1 libproxy1-pacrunner-mozjs-debuginfo-x86-0.4.7-6.28.1 libproxy1-pacrunner-mozjs-x86-0.4.7-6.28.1 libproxy1-pacrunner-webkit-debuginfo-x86-0.4.7-6.28.1 libproxy1-pacrunner-webkit-x86-0.4.7-6.28.1 libproxy1-x86-0.4.7-6.28.1 References: http://support.novell.com/security/cve/CVE-2012-4504.html http://support.novell.com/security/cve/CVE-2012-4505.html https://bugzilla.novell.com/784523

1 0

openSUSE-SU-2012:1374-1: claws-mail: fixed a denial of service attack
by opensuse-security＠opensuse.org 22 Oct '12

22 Oct '12

openSUSE Security Update: claws-mail: fixed a denial of service attack ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1374-1 Rating: low References: #784463 Cross-References: CVE-2012-4507 Affected Products: openSUSE 12.2 openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: A denial of service attack (NULL ptr dereference) in claws mail was fixed. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-719 - openSUSE 12.1: zypper in -t patch openSUSE-2012-719 - openSUSE 11.4: zypper in -t patch openSUSE-2012-719 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): claws-mail-3.8.1-1.4.1 claws-mail-debuginfo-3.8.1-1.4.1 claws-mail-debugsource-3.8.1-1.4.1 claws-mail-devel-3.8.1-1.4.1 - openSUSE 12.2 (noarch): claws-mail-lang-3.8.1-1.4.1 - openSUSE 12.1 (i586 x86_64): claws-mail-3.7.10-3.4.1 claws-mail-debuginfo-3.7.10-3.4.1 claws-mail-debugsource-3.7.10-3.4.1 claws-mail-devel-3.7.10-3.4.1 - openSUSE 12.1 (noarch): claws-mail-lang-3.7.10-3.4.1 - openSUSE 11.4 (i586 x86_64): claws-mail-3.7.8-11.1 claws-mail-debuginfo-3.7.8-11.1 claws-mail-debugsource-3.7.8-11.1 claws-mail-devel-3.7.8-11.1 - openSUSE 11.4 (noarch): claws-mail-lang-3.7.8-11.1 References: http://support.novell.com/security/cve/CVE-2012-4507.html https://bugzilla.novell.com/784463

1 0

openSUSE-SU-2012:1372-1: important: bind: Specially crafted DNS data can cause a lockup in named.
by opensuse-security＠opensuse.org 19 Oct '12

19 Oct '12

openSUSE Security Update: bind: Specially crafted DNS data can cause a lockup in named. ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1372-1 Rating: important References: #784602 Cross-References: CVE-2012-5166 Affected Products: openSUSE 12.2 openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The bind nameserver was updated to fix specially crafted DNS data can cause a lockup in named. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-716 - openSUSE 12.1: zypper in -t patch openSUSE-2012-716 - openSUSE 11.4: zypper in -t patch openSUSE-2012-716 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): bind-9.9.1P4-1.8.1 bind-chrootenv-9.9.1P4-1.8.1 bind-debuginfo-9.9.1P4-1.8.1 bind-debugsource-9.9.1P4-1.8.1 bind-devel-9.9.1P4-1.8.1 bind-libs-9.9.1P4-1.8.1 bind-libs-debuginfo-9.9.1P4-1.8.1 bind-lwresd-9.9.1P4-1.8.1 bind-lwresd-debuginfo-9.9.1P4-1.8.1 bind-utils-9.9.1P4-1.8.1 bind-utils-debuginfo-9.9.1P4-1.8.1 - openSUSE 12.2 (x86_64): bind-libs-32bit-9.9.1P4-1.8.1 bind-libs-debuginfo-32bit-9.9.1P4-1.8.1 - openSUSE 12.2 (noarch): bind-doc-9.9.1P4-1.8.1 - openSUSE 12.1 (i586 x86_64): bind-9.8.3P4-4.24.1 bind-chrootenv-9.8.3P4-4.24.1 bind-debuginfo-9.8.3P4-4.24.1 bind-debugsource-9.8.3P4-4.24.1 bind-devel-9.8.3P4-4.24.1 bind-libs-9.8.3P4-4.24.1 bind-libs-debuginfo-9.8.3P4-4.24.1 bind-lwresd-9.8.3P4-4.24.1 bind-lwresd-debuginfo-9.8.3P4-4.24.1 bind-utils-9.8.3P4-4.24.1 bind-utils-debuginfo-9.8.3P4-4.24.1 - openSUSE 12.1 (x86_64): bind-libs-32bit-9.8.3P4-4.24.1 bind-libs-debuginfo-32bit-9.8.3P4-4.24.1 - openSUSE 12.1 (noarch): bind-doc-9.8.3P4-4.24.1 - openSUSE 12.1 (ia64): bind-libs-debuginfo-x86-9.8.3P4-4.24.1 bind-libs-x86-9.8.3P4-4.24.1 - openSUSE 11.4 (i586 x86_64): bind-9.7.6P4-0.41.1 bind-chrootenv-9.7.6P4-0.41.1 bind-debuginfo-9.7.6P4-0.41.1 bind-debugsource-9.7.6P4-0.41.1 bind-devel-9.7.6P4-0.41.1 bind-libs-9.7.6P4-0.41.1 bind-libs-debuginfo-9.7.6P4-0.41.1 bind-lwresd-9.7.6P4-0.41.1 bind-lwresd-debuginfo-9.7.6P4-0.41.1 bind-utils-9.7.6P4-0.41.1 bind-utils-debuginfo-9.7.6P4-0.41.1 - openSUSE 11.4 (x86_64): bind-libs-32bit-9.7.6P4-0.41.1 bind-libs-debuginfo-32bit-9.7.6P4-0.41.1 - openSUSE 11.4 (noarch): bind-doc-9.7.6P4-0.41.1 - openSUSE 11.4 (ia64): bind-libs-debuginfo-x86-9.7.6P4-0.41.1 bind-libs-x86-9.7.6P4-0.41.1 References: http://support.novell.com/security/cve/CVE-2012-5166.html https://bugzilla.novell.com/784602

1 0

openSUSE-SU-2012:1371-1: Validate the message length of EAP-TLS to avoid DoS
by opensuse-security＠opensuse.org 19 Oct '12

19 Oct '12

openSUSE Security Update: Validate the message length of EAP-TLS to avoid DoS ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1371-1 Rating: low References: #781740 Cross-References: CVE-2012-4445 Affected Products: openSUSE 12.2 openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This patch validated the message length of EAP-TLS to avoid the potential DoS attack Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-718 - openSUSE 12.1: zypper in -t patch openSUSE-2012-718 - openSUSE 11.4: zypper in -t patch openSUSE-2012-718 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): hostapd-1.0-2.4.1 hostapd-debuginfo-1.0-2.4.1 hostapd-debugsource-1.0-2.4.1 - openSUSE 12.1 (i586 x86_64): hostapd-0.7.3-2.4.1 hostapd-debuginfo-0.7.3-2.4.1 hostapd-debugsource-0.7.3-2.4.1 - openSUSE 11.4 (i586 x86_64): hostapd-0.6.10-9.1 hostapd-debuginfo-0.6.10-9.1 hostapd-debugsource-0.6.10-9.1 References: http://support.novell.com/security/cve/CVE-2012-4445.html https://bugzilla.novell.com/781740

1 0

openSUSE-SU-2012:1370-1: moderate: openjpeg
by opensuse-security＠opensuse.org 19 Oct '12

19 Oct '12

openSUSE Security Update: openjpeg ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1370-1 Rating: moderate References: #777445 Cross-References: CVE-2012-3535 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update fixes a heap-based buffer overflow in OpenJPEG which could allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted JPEG2000 file. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-717 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): libopenjpeg1-1.5.0-2.7.1 libopenjpeg1-debuginfo-1.5.0-2.7.1 openjpeg-1.5.0-2.7.1 openjpeg-debuginfo-1.5.0-2.7.1 openjpeg-debugsource-1.5.0-2.7.1 openjpeg-devel-1.5.0-2.7.1 - openSUSE 12.2 (x86_64): libopenjpeg1-32bit-1.5.0-2.7.1 libopenjpeg1-debuginfo-32bit-1.5.0-2.7.1 openjpeg-devel-32bit-1.5.0-2.7.1 References: http://support.novell.com/security/cve/CVE-2012-3535.html https://bugzilla.novell.com/777445

1 0