June 2012 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2012:0695-1: moderate: update for php5
by opensuse-security＠opensuse.org 05 Jun '12

05 Jun '12

openSUSE Security Update: update for php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0695-1 Rating: moderate References: #763814 Cross-References: CVE-2012-2386 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Specially crafted tar archives could cause an integer overflow in the phar extension Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-311 - openSUSE 11.4: zypper in -t patch openSUSE-2012-311 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): apache2-mod_php5-5.3.8-4.21.2 apache2-mod_php5-debuginfo-5.3.8-4.21.2 php5-5.3.8-4.21.2 php5-bcmath-5.3.8-4.21.2 php5-bcmath-debuginfo-5.3.8-4.21.2 php5-bz2-5.3.8-4.21.2 php5-bz2-debuginfo-5.3.8-4.21.2 php5-calendar-5.3.8-4.21.2 php5-calendar-debuginfo-5.3.8-4.21.2 php5-ctype-5.3.8-4.21.2 php5-ctype-debuginfo-5.3.8-4.21.2 php5-curl-5.3.8-4.21.2 php5-curl-debuginfo-5.3.8-4.21.2 php5-dba-5.3.8-4.21.2 php5-dba-debuginfo-5.3.8-4.21.2 php5-debuginfo-5.3.8-4.21.2 php5-debugsource-5.3.8-4.21.2 php5-devel-5.3.8-4.21.2 php5-dom-5.3.8-4.21.2 php5-dom-debuginfo-5.3.8-4.21.2 php5-enchant-5.3.8-4.21.2 php5-enchant-debuginfo-5.3.8-4.21.2 php5-exif-5.3.8-4.21.2 php5-exif-debuginfo-5.3.8-4.21.2 php5-fastcgi-5.3.8-4.21.2 php5-fastcgi-debuginfo-5.3.8-4.21.2 php5-fileinfo-5.3.8-4.21.2 php5-fileinfo-debuginfo-5.3.8-4.21.2 php5-fpm-5.3.8-4.21.2 php5-fpm-debuginfo-5.3.8-4.21.2 php5-ftp-5.3.8-4.21.2 php5-ftp-debuginfo-5.3.8-4.21.2 php5-gd-5.3.8-4.21.2 php5-gd-debuginfo-5.3.8-4.21.2 php5-gettext-5.3.8-4.21.2 php5-gettext-debuginfo-5.3.8-4.21.2 php5-gmp-5.3.8-4.21.2 php5-gmp-debuginfo-5.3.8-4.21.2 php5-iconv-5.3.8-4.21.2 php5-iconv-debuginfo-5.3.8-4.21.2 php5-imap-5.3.8-4.21.2 php5-imap-debuginfo-5.3.8-4.21.2 php5-intl-5.3.8-4.21.2 php5-intl-debuginfo-5.3.8-4.21.2 php5-json-5.3.8-4.21.2 php5-json-debuginfo-5.3.8-4.21.2 php5-ldap-5.3.8-4.21.2 php5-ldap-debuginfo-5.3.8-4.21.2 php5-mbstring-5.3.8-4.21.2 php5-mbstring-debuginfo-5.3.8-4.21.2 php5-mcrypt-5.3.8-4.21.2 php5-mcrypt-debuginfo-5.3.8-4.21.2 php5-mssql-5.3.8-4.21.2 php5-mssql-debuginfo-5.3.8-4.21.2 php5-mysql-5.3.8-4.21.2 php5-mysql-debuginfo-5.3.8-4.21.2 php5-odbc-5.3.8-4.21.2 php5-odbc-debuginfo-5.3.8-4.21.2 php5-openssl-5.3.8-4.21.2 php5-openssl-debuginfo-5.3.8-4.21.2 php5-pcntl-5.3.8-4.21.2 php5-pcntl-debuginfo-5.3.8-4.21.2 php5-pdo-5.3.8-4.21.2 php5-pdo-debuginfo-5.3.8-4.21.2 php5-pgsql-5.3.8-4.21.2 php5-pgsql-debuginfo-5.3.8-4.21.2 php5-phar-5.3.8-4.21.2 php5-phar-debuginfo-5.3.8-4.21.2 php5-posix-5.3.8-4.21.2 php5-posix-debuginfo-5.3.8-4.21.2 php5-pspell-5.3.8-4.21.2 php5-pspell-debuginfo-5.3.8-4.21.2 php5-readline-5.3.8-4.21.2 php5-readline-debuginfo-5.3.8-4.21.2 php5-shmop-5.3.8-4.21.2 php5-shmop-debuginfo-5.3.8-4.21.2 php5-snmp-5.3.8-4.21.2 php5-snmp-debuginfo-5.3.8-4.21.2 php5-soap-5.3.8-4.21.2 php5-soap-debuginfo-5.3.8-4.21.2 php5-sockets-5.3.8-4.21.2 php5-sockets-debuginfo-5.3.8-4.21.2 php5-sqlite-5.3.8-4.21.2 php5-sqlite-debuginfo-5.3.8-4.21.2 php5-suhosin-5.3.8-4.21.2 php5-suhosin-debuginfo-5.3.8-4.21.2 php5-sysvmsg-5.3.8-4.21.2 php5-sysvmsg-debuginfo-5.3.8-4.21.2 php5-sysvsem-5.3.8-4.21.2 php5-sysvsem-debuginfo-5.3.8-4.21.2 php5-sysvshm-5.3.8-4.21.2 php5-sysvshm-debuginfo-5.3.8-4.21.2 php5-tidy-5.3.8-4.21.2 php5-tidy-debuginfo-5.3.8-4.21.2 php5-tokenizer-5.3.8-4.21.2 php5-tokenizer-debuginfo-5.3.8-4.21.2 php5-wddx-5.3.8-4.21.2 php5-wddx-debuginfo-5.3.8-4.21.2 php5-xmlreader-5.3.8-4.21.2 php5-xmlreader-debuginfo-5.3.8-4.21.2 php5-xmlrpc-5.3.8-4.21.2 php5-xmlrpc-debuginfo-5.3.8-4.21.2 php5-xmlwriter-5.3.8-4.21.2 php5-xmlwriter-debuginfo-5.3.8-4.21.2 php5-xsl-5.3.8-4.21.2 php5-xsl-debuginfo-5.3.8-4.21.2 php5-zip-5.3.8-4.21.2 php5-zip-debuginfo-5.3.8-4.21.2 php5-zlib-5.3.8-4.21.2 php5-zlib-debuginfo-5.3.8-4.21.2 - openSUSE 12.1 (noarch): php5-pear-5.3.8-4.21.2 - openSUSE 11.4 (i586 x86_64): apache2-mod_php5-5.3.5-338.2 apache2-mod_php5-debuginfo-5.3.5-338.2 php5-5.3.5-338.2 php5-bcmath-5.3.5-338.2 php5-bcmath-debuginfo-5.3.5-338.2 php5-bz2-5.3.5-338.2 php5-bz2-debuginfo-5.3.5-338.2 php5-calendar-5.3.5-338.2 php5-calendar-debuginfo-5.3.5-338.2 php5-ctype-5.3.5-338.2 php5-ctype-debuginfo-5.3.5-338.2 php5-curl-5.3.5-338.2 php5-curl-debuginfo-5.3.5-338.2 php5-dba-5.3.5-338.2 php5-dba-debuginfo-5.3.5-338.2 php5-debuginfo-5.3.5-338.2 php5-debugsource-5.3.5-338.2 php5-devel-5.3.5-338.2 php5-dom-5.3.5-338.2 php5-dom-debuginfo-5.3.5-338.2 php5-enchant-5.3.5-338.2 php5-enchant-debuginfo-5.3.5-338.2 php5-exif-5.3.5-338.2 php5-exif-debuginfo-5.3.5-338.2 php5-fastcgi-5.3.5-338.2 php5-fastcgi-debuginfo-5.3.5-338.2 php5-fileinfo-5.3.5-338.2 php5-fileinfo-debuginfo-5.3.5-338.2 php5-fpm-5.3.5-338.2 php5-fpm-debuginfo-5.3.5-338.2 php5-ftp-5.3.5-338.2 php5-ftp-debuginfo-5.3.5-338.2 php5-gd-5.3.5-338.2 php5-gd-debuginfo-5.3.5-338.2 php5-gettext-5.3.5-338.2 php5-gettext-debuginfo-5.3.5-338.2 php5-gmp-5.3.5-338.2 php5-gmp-debuginfo-5.3.5-338.2 php5-hash-5.3.5-338.2 php5-hash-debuginfo-5.3.5-338.2 php5-iconv-5.3.5-338.2 php5-iconv-debuginfo-5.3.5-338.2 php5-imap-5.3.5-338.2 php5-imap-debuginfo-5.3.5-338.2 php5-intl-5.3.5-338.2 php5-intl-debuginfo-5.3.5-338.2 php5-json-5.3.5-338.2 php5-json-debuginfo-5.3.5-338.2 php5-ldap-5.3.5-338.2 php5-ldap-debuginfo-5.3.5-338.2 php5-mbstring-5.3.5-338.2 php5-mbstring-debuginfo-5.3.5-338.2 php5-mcrypt-5.3.5-338.2 php5-mcrypt-debuginfo-5.3.5-338.2 php5-mysql-5.3.5-338.2 php5-mysql-debuginfo-5.3.5-338.2 php5-odbc-5.3.5-338.2 php5-odbc-debuginfo-5.3.5-338.2 php5-openssl-5.3.5-338.2 php5-openssl-debuginfo-5.3.5-338.2 php5-pcntl-5.3.5-338.2 php5-pcntl-debuginfo-5.3.5-338.2 php5-pdo-5.3.5-338.2 php5-pdo-debuginfo-5.3.5-338.2 php5-pgsql-5.3.5-338.2 php5-pgsql-debuginfo-5.3.5-338.2 php5-phar-5.3.5-338.2 php5-phar-debuginfo-5.3.5-338.2 php5-posix-5.3.5-338.2 php5-posix-debuginfo-5.3.5-338.2 php5-pspell-5.3.5-338.2 php5-pspell-debuginfo-5.3.5-338.2 php5-readline-5.3.5-338.2 php5-readline-debuginfo-5.3.5-338.2 php5-shmop-5.3.5-338.2 php5-shmop-debuginfo-5.3.5-338.2 php5-snmp-5.3.5-338.2 php5-snmp-debuginfo-5.3.5-338.2 php5-soap-5.3.5-338.2 php5-soap-debuginfo-5.3.5-338.2 php5-sockets-5.3.5-338.2 php5-sockets-debuginfo-5.3.5-338.2 php5-sqlite-5.3.5-338.2 php5-sqlite-debuginfo-5.3.5-338.2 php5-suhosin-5.3.5-338.2 php5-suhosin-debuginfo-5.3.5-338.2 php5-sysvmsg-5.3.5-338.2 php5-sysvmsg-debuginfo-5.3.5-338.2 php5-sysvsem-5.3.5-338.2 php5-sysvsem-debuginfo-5.3.5-338.2 php5-sysvshm-5.3.5-338.2 php5-sysvshm-debuginfo-5.3.5-338.2 php5-tidy-5.3.5-338.2 php5-tidy-debuginfo-5.3.5-338.2 php5-tokenizer-5.3.5-338.2 php5-tokenizer-debuginfo-5.3.5-338.2 php5-wddx-5.3.5-338.2 php5-wddx-debuginfo-5.3.5-338.2 php5-xmlreader-5.3.5-338.2 php5-xmlreader-debuginfo-5.3.5-338.2 php5-xmlrpc-5.3.5-338.2 php5-xmlrpc-debuginfo-5.3.5-338.2 php5-xmlwriter-5.3.5-338.2 php5-xmlwriter-debuginfo-5.3.5-338.2 php5-xsl-5.3.5-338.2 php5-xsl-debuginfo-5.3.5-338.2 php5-zip-5.3.5-338.2 php5-zip-debuginfo-5.3.5-338.2 php5-zlib-5.3.5-338.2 php5-zlib-debuginfo-5.3.5-338.2 - openSUSE 11.4 (noarch): php5-pear-5.3.5-338.2 References: http://support.novell.com/security/cve/CVE-2012-2386.html https://bugzilla.novell.com/763814

1 0

openSUSE-SU-2012:0692-1: moderate: update for ImageMagick
by opensuse-security＠opensuse.org 04 Jun '12

04 Jun '12

openSUSE Security Update: update for ImageMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0692-1 Rating: moderate References: #746880 #752879 #754749 #758512 Cross-References: CVE-2012-0247 CVE-2012-0248 CVE-2012-0259 CVE-2012-0260 CVE-2012-1185 CVE-2012-1186 CVE-2012-1610 CVE-2012-1798 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: Specially crafted files could cause overflows in ImageMagick Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-310 - openSUSE 11.4: zypper in -t patch openSUSE-2012-310 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): ImageMagick-6.7.2.7-5.5.1 ImageMagick-debuginfo-6.7.2.7-5.5.1 ImageMagick-debugsource-6.7.2.7-5.5.1 ImageMagick-devel-6.7.2.7-5.5.1 ImageMagick-extra-6.7.2.7-5.5.1 ImageMagick-extra-debuginfo-6.7.2.7-5.5.1 libMagick++-devel-6.7.2.7-5.5.1 libMagick++5-6.7.2.7-5.5.1 libMagick++5-debuginfo-6.7.2.7-5.5.1 libMagickCore5-6.7.2.7-5.5.1 libMagickCore5-debuginfo-6.7.2.7-5.5.1 libMagickWand5-6.7.2.7-5.5.1 libMagickWand5-debuginfo-6.7.2.7-5.5.1 perl-PerlMagick-6.7.2.7-5.5.1 perl-PerlMagick-debuginfo-6.7.2.7-5.5.1 - openSUSE 12.1 (x86_64): ImageMagick-devel-32bit-6.7.2.7-5.5.1 libMagickCore5-32bit-6.7.2.7-5.5.1 libMagickCore5-debuginfo-32bit-6.7.2.7-5.5.1 libMagickWand5-32bit-6.7.2.7-5.5.1 libMagickWand5-debuginfo-32bit-6.7.2.7-5.5.1 - openSUSE 12.1 (noarch): ImageMagick-doc-6.7.2.7-5.5.1 - openSUSE 12.1 (ia64): libMagickCore5-debuginfo-x86-6.7.2.7-5.5.1 libMagickCore5-x86-6.7.2.7-5.5.1 libMagickWand5-debuginfo-x86-6.7.2.7-5.5.1 libMagickWand5-x86-6.7.2.7-5.5.1 - openSUSE 11.4 (i586 x86_64): ImageMagick-6.6.5.8-8.71.1 ImageMagick-debuginfo-6.6.5.8-8.71.1 ImageMagick-debugsource-6.6.5.8-8.71.1 ImageMagick-devel-6.6.5.8-8.71.1 ImageMagick-extra-6.6.5.8-8.71.1 ImageMagick-extra-debuginfo-6.6.5.8-8.71.1 libMagick++-devel-6.6.5.8-8.71.1 libMagick++4-6.6.5.8-8.71.1 libMagick++4-debuginfo-6.6.5.8-8.71.1 libMagickCore4-6.6.5.8-8.71.1 libMagickCore4-debuginfo-6.6.5.8-8.71.1 libMagickWand4-6.6.5.8-8.71.1 libMagickWand4-debuginfo-6.6.5.8-8.71.1 perl-PerlMagick-6.6.5.8-8.71.1 perl-PerlMagick-debuginfo-6.6.5.8-8.71.1 - openSUSE 11.4 (x86_64): libMagickCore4-32bit-6.6.5.8-8.71.1 libMagickCore4-debuginfo-32bit-6.6.5.8-8.71.1 libMagickWand4-32bit-6.6.5.8-8.71.1 libMagickWand4-debuginfo-32bit-6.6.5.8-8.71.1 - openSUSE 11.4 (noarch): ImageMagick-doc-6.6.5.8-8.71.1 - openSUSE 11.4 (ia64): libMagickCore4-debuginfo-x86-6.6.5.8-8.71.1 libMagickCore4-x86-6.6.5.8-8.71.1 libMagickWand4-debuginfo-x86-6.6.5.8-8.71.1 libMagickWand4-x86-6.6.5.8-8.71.1 References: http://support.novell.com/security/cve/CVE-2012-0247.html http://support.novell.com/security/cve/CVE-2012-0248.html http://support.novell.com/security/cve/CVE-2012-0259.html http://support.novell.com/security/cve/CVE-2012-0260.html http://support.novell.com/security/cve/CVE-2012-1185.html http://support.novell.com/security/cve/CVE-2012-1186.html http://support.novell.com/security/cve/CVE-2012-1610.html http://support.novell.com/security/cve/CVE-2012-1798.html https://bugzilla.novell.com/746880 https://bugzilla.novell.com/752879 https://bugzilla.novell.com/754749 https://bugzilla.novell.com/758512

1 0

openSUSE-SU-2012:0691-1: important: update for strongswan
by opensuse-security＠opensuse.org 04 Jun '12

04 Jun '12

openSUSE Security Update: update for strongswan ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0691-1 Rating: important References: #761325 Cross-References: CVE-2012-2388 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Strongswan's gmp plugin could treat empty RSA signature as valid ones Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-309 - openSUSE 11.4: zypper in -t patch openSUSE-2012-309 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): strongswan-4.5.3-5.4.1 strongswan-debugsource-4.5.3-5.4.1 strongswan-doc-4.5.3-5.4.1 strongswan-ikev1-4.5.3-5.4.1 strongswan-ikev1-debuginfo-4.5.3-5.4.1 strongswan-ikev2-4.5.3-5.4.1 strongswan-ikev2-debuginfo-4.5.3-5.4.1 strongswan-ipsec-4.5.3-5.4.1 strongswan-ipsec-debuginfo-4.5.3-5.4.1 strongswan-libs0-4.5.3-5.4.1 strongswan-libs0-debuginfo-4.5.3-5.4.1 strongswan-mysql-4.5.3-5.4.1 strongswan-mysql-debuginfo-4.5.3-5.4.1 strongswan-nm-4.5.3-5.4.1 strongswan-nm-debuginfo-4.5.3-5.4.1 strongswan-sqlite-4.5.3-5.4.1 strongswan-sqlite-debuginfo-4.5.3-5.4.1 - openSUSE 11.4 (i586 x86_64): strongswan-4.5.0-6.45.1 strongswan-debugsource-4.5.0-6.45.1 strongswan-doc-4.5.0-6.45.1 strongswan-ikev1-4.5.0-6.45.1 strongswan-ikev1-debuginfo-4.5.0-6.45.1 strongswan-ikev2-4.5.0-6.45.1 strongswan-ikev2-debuginfo-4.5.0-6.45.1 strongswan-ipsec-4.5.0-6.45.1 strongswan-ipsec-debuginfo-4.5.0-6.45.1 strongswan-libs0-4.5.0-6.45.1 strongswan-libs0-debuginfo-4.5.0-6.45.1 strongswan-mysql-4.5.0-6.45.1 strongswan-mysql-debuginfo-4.5.0-6.45.1 strongswan-nm-4.5.0-6.45.1 strongswan-nm-debuginfo-4.5.0-6.45.1 strongswan-sqlite-4.5.0-6.45.1 strongswan-sqlite-debuginfo-4.5.0-6.45.1 References: http://support.novell.com/security/cve/CVE-2012-2388.html https://bugzilla.novell.com/761325

1 0