August 2012 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2012:1069-1: nut: fixed a denial of service
by opensuse-security＠opensuse.org 30 Aug '12

30 Aug '12

openSUSE Security Update: nut: fixed a denial of service ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1069-1 Rating: low References: #764699 Cross-References: CVE-2012-2944 Affected Products: openSUSE 12.2 openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The nut upsd is prone to multiple flaws that allow remote attackers to cause a denial of service (application crash) by sending unexpected data. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-539 - openSUSE 12.1: zypper in -t patch openSUSE-2012-539 - openSUSE 11.4: zypper in -t patch openSUSE-2012-539 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): libupsclient1-2.6.3-2.4.3 libupsclient1-debuginfo-2.6.3-2.4.3 nut-2.6.3-2.4.3 nut-cgi-2.6.3-2.4.3 nut-cgi-debuginfo-2.6.3-2.4.3 nut-debuginfo-2.6.3-2.4.3 nut-debugsource-2.6.3-2.4.3 nut-devel-2.6.3-2.4.3 nut-drivers-net-2.6.3-2.4.3 nut-drivers-net-debuginfo-2.6.3-2.4.3 - openSUSE 12.1 (i586 x86_64): libupsclient1-2.6.1-3.4.1 libupsclient1-debuginfo-2.6.1-3.4.1 nut-2.6.1-3.4.1 nut-cgi-2.6.1-3.4.1 nut-cgi-debuginfo-2.6.1-3.4.1 nut-debuginfo-2.6.1-3.4.1 nut-debugsource-2.6.1-3.4.1 nut-devel-2.6.1-3.4.1 nut-drivers-net-2.6.1-3.4.1 nut-drivers-net-debuginfo-2.6.1-3.4.1 - openSUSE 11.4 (i586 x86_64): libupsclient1-2.6.0-4.11.1 libupsclient1-debuginfo-2.6.0-4.11.1 nut-2.6.0-4.11.1 nut-cgi-2.6.0-4.11.1 nut-cgi-debuginfo-2.6.0-4.11.1 nut-classic-2.6.0-4.11.1 nut-classic-debuginfo-2.6.0-4.11.1 nut-debuginfo-2.6.0-4.11.1 nut-debugsource-2.6.0-4.11.1 nut-devel-2.6.0-4.11.1 nut-drivers-net-2.6.0-4.11.1 nut-drivers-net-debuginfo-2.6.0-4.11.1 nut-hal-2.6.0-4.11.1 nut-hal-debuginfo-2.6.0-4.11.1 References: http://support.novell.com/security/cve/CVE-2012-2944.html https://bugzilla.novell.com/764699

1 0

openSUSE-SU-2012:1068-1: moderate: tor: fixed some security bugs
by opensuse-security＠opensuse.org 30 Aug '12

30 Aug '12

openSUSE Security Update: tor: fixed some security bugs ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1068-1 Rating: moderate References: #776642 Cross-References: CVE-2012-3517 CVE-2012-3518 CVE-2012-3519 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: Tor 0.2.2.38 fixes a rare race condition that can crash exit relays; fixes a remotely triggerable crash bug; and fixes a timing attack that could in theory leak path information. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-541 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): tor-0.2.2.38-3.4.1 tor-debuginfo-0.2.2.38-3.4.1 tor-debugsource-0.2.2.38-3.4.1 References: http://support.novell.com/security/cve/CVE-2012-3517.html http://support.novell.com/security/cve/CVE-2012-3518.html http://support.novell.com/security/cve/CVE-2012-3519.html https://bugzilla.novell.com/776642

1 0

openSUSE-SU-2012:1067-1: moderate: wireshark: update to 1.8.2
by opensuse-security＠opensuse.org 30 Aug '12

30 Aug '12

openSUSE Security Update: wireshark: update to 1.8.2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1067-1 Rating: moderate References: #776083 Cross-References: CVE-2012-4285 CVE-2012-4286 CVE-2012-4287 CVE-2012-4288 CVE-2012-4289 CVE-2012-4290 CVE-2012-4291 CVE-2012-4292 CVE-2012-4293 CVE-2012-4294 CVE-2012-4295 CVE-2012-4296 CVE-2012-4297 CVE-2012-4298 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that fixes 14 vulnerabilities is now available. Description: Wireshark was updated to 1.8.2: * The DCP ETSI dissector could trigger a zero division. (wnpa-sec-2012-13 CVE-2012-4285) * The MongoDB dissector could go into a large loop. (wnpa-sec-2012-14 CVE-2012-4287) * The XTP dissector could go into an infinite loop. (wnpa-sec-2012-15 CVE-2012-4288) * The ERF dissector could overflow a buffer. (wnpa-sec-2012-16 CVE-2012-4294 CVE-2012-4295) * The AFP dissector could go into a large loop. (wnpa-sec-2012-17 CVE-2012-4289) * The RTPS2 dissector could overflow a buffer. (wnpa-sec-2012-18 CVE-2012-4296) * The GSM RLC MAC dissector could overflow a buffer. (wnpa-sec-2012-19 CVE-2012-4297) * The CIP dissector could exhaust system memory. (wnpa-sec-2012-20 CVE-2012-4291) * The STUN dissector could crash. (wnpa-sec-2012-21 CVE-2012-4292) * The EtherCAT Mailbox dissector could abort. (wnpa-sec-2012-22 CVE-2012-4293) * The CTDB dissector could go into a large loop. (wnpa-sec-2012-23 CVE-2012-4290) * The pcap-ng file parser could trigger a zero division. (wnpa-sec-2012-24 CVE-2012-4286) * The Ixia IxVeriWave file parser could overflow a buffer. (wnpa-sec-2012-25 CVE-2012-4298) Further bug fixes and updated protocol support as listed in: http://www.wireshark.org/docs/relnotes/wireshark-1.8.2.html Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-540 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): wireshark-1.8.2-1.3.1 wireshark-debuginfo-1.8.2-1.3.1 wireshark-debugsource-1.8.2-1.3.1 wireshark-devel-1.8.2-1.3.1 References: http://support.novell.com/security/cve/CVE-2012-4285.html http://support.novell.com/security/cve/CVE-2012-4286.html http://support.novell.com/security/cve/CVE-2012-4287.html http://support.novell.com/security/cve/CVE-2012-4288.html http://support.novell.com/security/cve/CVE-2012-4289.html http://support.novell.com/security/cve/CVE-2012-4290.html http://support.novell.com/security/cve/CVE-2012-4291.html http://support.novell.com/security/cve/CVE-2012-4292.html http://support.novell.com/security/cve/CVE-2012-4293.html http://support.novell.com/security/cve/CVE-2012-4294.html http://support.novell.com/security/cve/CVE-2012-4295.html http://support.novell.com/security/cve/CVE-2012-4296.html http://support.novell.com/security/cve/CVE-2012-4297.html http://support.novell.com/security/cve/CVE-2012-4298.html https://bugzilla.novell.com/776083

1 0

openSUSE-SU-2012:1066-1: moderate: update for rubygem-actionmailer-3_2, rubygem-actionpack-3_2, rubygem-activemodel-3_2, rubygem-activerecord-3_2, rubygem-activeresource-3_2, rubygem-activesupport-3_2, rubygem-journey-1_0, rubygem-rails-3_2, rubygem-railties-3_2, rubygem-sprockets-2_1
by opensuse-security＠opensuse.org 30 Aug '12

30 Aug '12

openSUSE Security Update: update for rubygem-actionmailer-3_2, rubygem-actionpack-3_2, rubygem-activemodel-3_2, rubygem-activerecord-3_2, rubygem-activeresource-3_2, rubygem-activesupport-3_2, rubygem-journey-1_0, rubygem-rails-3_2, rubygem-railties-3_2, rubygem-sprockets-2_1 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1066-1 Rating: moderate References: Cross-References: CVE-2012-2660 CVE-2012-2661 CVE-2012-2694 CVE-2012-2695 CVE-2012-3424 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: Multiple version upgrades for rails components. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-536 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): rubygem-actionmailer-3_2-3.2.7-2.4.1 rubygem-actionmailer-3_2-doc-3.2.7-2.4.1 rubygem-actionpack-3_2-3.2.7-3.4.1 rubygem-actionpack-3_2-doc-3.2.7-3.4.1 rubygem-activemodel-3_2-3.2.7-2.4.1 rubygem-activemodel-3_2-doc-3.2.7-2.4.1 rubygem-activerecord-3_2-3.2.7-2.4.1 rubygem-activerecord-3_2-doc-3.2.7-2.4.1 rubygem-activeresource-3_2-3.2.7-2.4.1 rubygem-activeresource-3_2-doc-3.2.7-2.4.1 rubygem-activesupport-3_2-3.2.7-2.4.1 rubygem-activesupport-3_2-doc-3.2.7-2.4.1 rubygem-journey-1_0-1.0.4-3.4.1 rubygem-journey-1_0-doc-1.0.4-3.4.1 rubygem-journey-1_0-testsuite-1.0.4-3.4.1 rubygem-rails-3_2-3.2.7-2.4.1 rubygem-rails-3_2-doc-3.2.7-2.4.1 rubygem-railties-3_2-3.2.7-2.4.1 rubygem-railties-3_2-doc-3.2.7-2.4.1 rubygem-sprockets-2_1-2.1.3-3.4.1 rubygem-sprockets-2_1-doc-2.1.3-3.4.1 References: http://support.novell.com/security/cve/CVE-2012-2660.html http://support.novell.com/security/cve/CVE-2012-2661.html http://support.novell.com/security/cve/CVE-2012-2694.html http://support.novell.com/security/cve/CVE-2012-2695.html http://support.novell.com/security/cve/CVE-2012-3424.html

1 0

openSUSE-SU-2012:1065-1: critical: MozillaFirefox: Update to version 15
by opensuse-security＠opensuse.org 30 Aug '12

30 Aug '12

openSUSE Security Update: MozillaFirefox: Update to version 15 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1065-1 Rating: critical References: #777588 Cross-References: CVE-2012-1956 CVE-2012-1970 CVE-2012-1972 CVE-2012-1973 CVE-2012-1974 CVE-2012-1975 CVE-2012-1976 CVE-2012-3956 CVE-2012-3957 CVE-2012-3958 CVE-2012-3959 CVE-2012-3960 CVE-2012-3961 CVE-2012-3962 CVE-2012-3963 CVE-2012-3964 CVE-2012-3965 CVE-2012-3966 CVE-2012-3967 CVE-2012-3968 CVE-2012-3969 CVE-2012-3970 CVE-2012-3971 CVE-2012-3972 CVE-2012-3973 CVE-2012-3975 CVE-2012-3976 CVE-2012-3978 CVE-2012-3980 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that fixes 29 vulnerabilities is now available. Description: Mozilla Firefox, Thunderbird, xulrunner, seamonkey 15.0 update (bnc#777588) * MFSA 2012-57/CVE-2012-1970 Miscellaneous memory safety hazards * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1 975 CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE- 2012-3959 CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE- 2012-3964 Use-after-free issues found using Address Sanitizer * MFSA 2012-59/CVE-2012-1956 (bmo#756719) Location object can be shadowed using Object.defineProperty * MFSA 2012-60/CVE-2012-3965 (bmo#769108) Escalation of privilege through about:newtab * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793) Memory corruption with bitmap format images with negative height * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968 WebGL use-after-free and memory corruption * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970 SVG buffer overflow and use-after-free issues * MFSA 2012-64/CVE-2012-3971 Graphite 2 memory corruption * MFSA 2012-65/CVE-2012-3972 (bmo#746855) Out-of-bounds read in format-number in XSLT * MFSA 2012-66/CVE-2012-3973 (bmo#757128) HTTPMonitor extension allows for remote debugging without explicit activation * MFSA 2012-68/CVE-2012-3975 (bmo#770684) DOMParser loads linked resources in extensions when parsing text/html * MFSA 2012-69/CVE-2012-3976 (bmo#768568) Incorrect site SSL certificate data display * MFSA 2012-70/CVE-2012-3978 (bmo#770429) Location object security checks bypassed by chrome code * MFSA 2012-72/CVE-2012-3980 (bmo#771859) Web console eval capable of executing chrome-privileged code - fix HTML5 video crash with GStreamer enabled (bmo#761030) - GStreamer is only used for MP4 (no WebM, OGG) - updated filelist - moved browser specific preferences to correct location Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-538 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): MozillaFirefox-15.0-2.7.1 MozillaFirefox-branding-upstream-15.0-2.7.1 MozillaFirefox-buildsymbols-15.0-2.7.1 MozillaFirefox-debuginfo-15.0-2.7.1 MozillaFirefox-debugsource-15.0-2.7.1 MozillaFirefox-devel-15.0-2.7.1 MozillaFirefox-translations-common-15.0-2.7.1 MozillaFirefox-translations-other-15.0-2.7.1 MozillaThunderbird-15.0-49.9.1 MozillaThunderbird-buildsymbols-15.0-49.9.1 MozillaThunderbird-debuginfo-15.0-49.9.1 MozillaThunderbird-debugsource-15.0-49.9.1 MozillaThunderbird-devel-15.0-49.9.1 MozillaThunderbird-devel-debuginfo-15.0-49.9.1 MozillaThunderbird-translations-common-15.0-49.9.1 MozillaThunderbird-translations-other-15.0-49.9.1 enigmail-1.4.4+15.0-49.9.1 enigmail-debuginfo-1.4.4+15.0-49.9.1 libfreebl3-3.13.6-2.7.1 libfreebl3-debuginfo-3.13.6-2.7.1 libsoftokn3-3.13.6-2.7.1 libsoftokn3-debuginfo-3.13.6-2.7.1 mozilla-js-15.0-2.8.1 mozilla-js-debuginfo-15.0-2.8.1 mozilla-nss-3.13.6-2.7.1 mozilla-nss-certs-3.13.6-2.7.1 mozilla-nss-certs-debuginfo-3.13.6-2.7.1 mozilla-nss-debuginfo-3.13.6-2.7.1 mozilla-nss-debugsource-3.13.6-2.7.1 mozilla-nss-devel-3.13.6-2.7.1 mozilla-nss-sysinit-3.13.6-2.7.1 mozilla-nss-sysinit-debuginfo-3.13.6-2.7.1 mozilla-nss-tools-3.13.6-2.7.1 mozilla-nss-tools-debuginfo-3.13.6-2.7.1 seamonkey-2.12-2.8.1 seamonkey-debuginfo-2.12-2.8.1 seamonkey-debugsource-2.12-2.8.1 seamonkey-dom-inspector-2.12-2.8.1 seamonkey-irc-2.12-2.8.1 seamonkey-translations-common-2.12-2.8.1 seamonkey-translations-other-2.12-2.8.1 seamonkey-venkman-2.12-2.8.1 xulrunner-15.0-2.8.1 xulrunner-buildsymbols-15.0-2.8.1 xulrunner-debuginfo-15.0-2.8.1 xulrunner-debugsource-15.0-2.8.1 xulrunner-devel-15.0-2.8.1 xulrunner-devel-debuginfo-15.0-2.8.1 - openSUSE 12.2 (x86_64): libfreebl3-32bit-3.13.6-2.7.1 libfreebl3-debuginfo-32bit-3.13.6-2.7.1 libsoftokn3-32bit-3.13.6-2.7.1 libsoftokn3-debuginfo-32bit-3.13.6-2.7.1 mozilla-js-32bit-15.0-2.8.1 mozilla-js-debuginfo-32bit-15.0-2.8.1 mozilla-nss-32bit-3.13.6-2.7.1 mozilla-nss-certs-32bit-3.13.6-2.7.1 mozilla-nss-certs-debuginfo-32bit-3.13.6-2.7.1 mozilla-nss-debuginfo-32bit-3.13.6-2.7.1 mozilla-nss-sysinit-32bit-3.13.6-2.7.1 mozilla-nss-sysinit-debuginfo-32bit-3.13.6-2.7.1 xulrunner-32bit-15.0-2.8.1 xulrunner-debuginfo-32bit-15.0-2.8.1 References: http://support.novell.com/security/cve/CVE-2012-1956.html http://support.novell.com/security/cve/CVE-2012-1970.html http://support.novell.com/security/cve/CVE-2012-1972.html http://support.novell.com/security/cve/CVE-2012-1973.html http://support.novell.com/security/cve/CVE-2012-1974.html http://support.novell.com/security/cve/CVE-2012-1975.html http://support.novell.com/security/cve/CVE-2012-1976.html http://support.novell.com/security/cve/CVE-2012-3956.html http://support.novell.com/security/cve/CVE-2012-3957.html http://support.novell.com/security/cve/CVE-2012-3958.html http://support.novell.com/security/cve/CVE-2012-3959.html http://support.novell.com/security/cve/CVE-2012-3960.html http://support.novell.com/security/cve/CVE-2012-3961.html http://support.novell.com/security/cve/CVE-2012-3962.html http://support.novell.com/security/cve/CVE-2012-3963.html http://support.novell.com/security/cve/CVE-2012-3964.html http://support.novell.com/security/cve/CVE-2012-3965.html http://support.novell.com/security/cve/CVE-2012-3966.html http://support.novell.com/security/cve/CVE-2012-3967.html http://support.novell.com/security/cve/CVE-2012-3968.html http://support.novell.com/security/cve/CVE-2012-3969.html http://support.novell.com/security/cve/CVE-2012-3970.html http://support.novell.com/security/cve/CVE-2012-3971.html http://support.novell.com/security/cve/CVE-2012-3972.html http://support.novell.com/security/cve/CVE-2012-3973.html http://support.novell.com/security/cve/CVE-2012-3975.html http://support.novell.com/security/cve/CVE-2012-3976.html http://support.novell.com/security/cve/CVE-2012-3978.html http://support.novell.com/security/cve/CVE-2012-3980.html https://bugzilla.novell.com/777588

1 0

openSUSE-SU-2012:1064-1: critical: MozillaFirefox: Update to version 15
by opensuse-security＠opensuse.org 30 Aug '12

30 Aug '12

openSUSE Security Update: MozillaFirefox: Update to version 15 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1064-1 Rating: critical References: #777588 Cross-References: CVE-2012-1956 CVE-2012-1970 CVE-2012-1972 CVE-2012-1973 CVE-2012-1974 CVE-2012-1975 CVE-2012-1976 CVE-2012-3956 CVE-2012-3957 CVE-2012-3958 CVE-2012-3959 CVE-2012-3960 CVE-2012-3961 CVE-2012-3962 CVE-2012-3963 CVE-2012-3964 CVE-2012-3965 CVE-2012-3966 CVE-2012-3967 CVE-2012-3968 CVE-2012-3969 CVE-2012-3970 CVE-2012-3971 CVE-2012-3972 CVE-2012-3973 CVE-2012-3975 CVE-2012-3976 CVE-2012-3978 CVE-2012-3980 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes 29 vulnerabilities is now available. Description: Mozilla Firefox, Thunderbird, xulrunner, seamonkey 15.0 update (bnc#777588) * MFSA 2012-57/CVE-2012-1970 Miscellaneous memory safety hazards * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1 975 CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE- 2012-3959 CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE- 2012-3964 Use-after-free issues found using Address Sanitizer * MFSA 2012-59/CVE-2012-1956 (bmo#756719) Location object can be shadowed using Object.defineProperty * MFSA 2012-60/CVE-2012-3965 (bmo#769108) Escalation of privilege through about:newtab * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793) Memory corruption with bitmap format images with negative height * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968 WebGL use-after-free and memory corruption * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970 SVG buffer overflow and use-after-free issues * MFSA 2012-64/CVE-2012-3971 Graphite 2 memory corruption * MFSA 2012-65/CVE-2012-3972 (bmo#746855) Out-of-bounds read in format-number in XSLT * MFSA 2012-66/CVE-2012-3973 (bmo#757128) HTTPMonitor extension allows for remote debugging without explicit activation * MFSA 2012-68/CVE-2012-3975 (bmo#770684) DOMParser loads linked resources in extensions when parsing text/html * MFSA 2012-69/CVE-2012-3976 (bmo#768568) Incorrect site SSL certificate data display * MFSA 2012-70/CVE-2012-3978 (bmo#770429) Location object security checks bypassed by chrome code * MFSA 2012-72/CVE-2012-3980 (bmo#771859) Web console eval capable of executing chrome-privileged code - fix HTML5 video crash with GStreamer enabled (bmo#761030) - GStreamer is only used for MP4 (no WebM, OGG) - updated filelist - moved browser specific preferences to correct location Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-534 - openSUSE 11.4: zypper in -t patch openSUSE-2012-534 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): MozillaFirefox-15.0-2.36.1 MozillaFirefox-branding-upstream-15.0-2.36.1 MozillaFirefox-buildsymbols-15.0-2.36.1 MozillaFirefox-debuginfo-15.0-2.36.1 MozillaFirefox-debugsource-15.0-2.36.1 MozillaFirefox-devel-15.0-2.36.1 MozillaFirefox-translations-common-15.0-2.36.1 MozillaFirefox-translations-other-15.0-2.36.1 MozillaThunderbird-15.0-33.29.1 MozillaThunderbird-buildsymbols-15.0-33.29.1 MozillaThunderbird-debuginfo-15.0-33.29.1 MozillaThunderbird-debugsource-15.0-33.29.1 MozillaThunderbird-devel-15.0-33.29.1 MozillaThunderbird-devel-debuginfo-15.0-33.29.1 MozillaThunderbird-translations-common-15.0-33.29.1 MozillaThunderbird-translations-other-15.0-33.29.1 enigmail-1.4.4+15.0-33.29.1 enigmail-debuginfo-1.4.4+15.0-33.29.1 libfreebl3-3.13.6-9.17.1 libfreebl3-debuginfo-3.13.6-9.17.1 libsoftokn3-3.13.6-9.17.1 libsoftokn3-debuginfo-3.13.6-9.17.1 mozilla-js-15.0-2.35.1 mozilla-js-debuginfo-15.0-2.35.1 mozilla-nspr-4.9.2-3.6.1 mozilla-nspr-debuginfo-4.9.2-3.6.1 mozilla-nspr-debugsource-4.9.2-3.6.1 mozilla-nspr-devel-4.9.2-3.6.1 mozilla-nss-3.13.6-9.17.1 mozilla-nss-certs-3.13.6-9.17.1 mozilla-nss-certs-debuginfo-3.13.6-9.17.1 mozilla-nss-debuginfo-3.13.6-9.17.1 mozilla-nss-debugsource-3.13.6-9.17.1 mozilla-nss-devel-3.13.6-9.17.1 mozilla-nss-sysinit-3.13.6-9.17.1 mozilla-nss-sysinit-debuginfo-3.13.6-9.17.1 mozilla-nss-tools-3.13.6-9.17.1 mozilla-nss-tools-debuginfo-3.13.6-9.17.1 seamonkey-2.12-2.27.1 seamonkey-debuginfo-2.12-2.27.1 seamonkey-debugsource-2.12-2.27.1 seamonkey-dom-inspector-2.12-2.27.1 seamonkey-irc-2.12-2.27.1 seamonkey-translations-common-2.12-2.27.1 seamonkey-translations-other-2.12-2.27.1 seamonkey-venkman-2.12-2.27.1 xulrunner-15.0-2.35.1 xulrunner-buildsymbols-15.0-2.35.1 xulrunner-debuginfo-15.0-2.35.1 xulrunner-debugsource-15.0-2.35.1 xulrunner-devel-15.0-2.35.1 xulrunner-devel-debuginfo-15.0-2.35.1 - openSUSE 12.1 (x86_64): libfreebl3-32bit-3.13.6-9.17.1 libfreebl3-debuginfo-32bit-3.13.6-9.17.1 libsoftokn3-32bit-3.13.6-9.17.1 libsoftokn3-debuginfo-32bit-3.13.6-9.17.1 mozilla-js-32bit-15.0-2.35.1 mozilla-js-debuginfo-32bit-15.0-2.35.1 mozilla-nspr-32bit-4.9.2-3.6.1 mozilla-nspr-debuginfo-32bit-4.9.2-3.6.1 mozilla-nss-32bit-3.13.6-9.17.1 mozilla-nss-certs-32bit-3.13.6-9.17.1 mozilla-nss-certs-debuginfo-32bit-3.13.6-9.17.1 mozilla-nss-debuginfo-32bit-3.13.6-9.17.1 mozilla-nss-sysinit-32bit-3.13.6-9.17.1 mozilla-nss-sysinit-debuginfo-32bit-3.13.6-9.17.1 xulrunner-32bit-15.0-2.35.1 xulrunner-debuginfo-32bit-15.0-2.35.1 - openSUSE 12.1 (ia64): libfreebl3-debuginfo-x86-3.13.6-9.17.1 libfreebl3-x86-3.13.6-9.17.1 libsoftokn3-debuginfo-x86-3.13.6-9.17.1 libsoftokn3-x86-3.13.6-9.17.1 mozilla-js-debuginfo-x86-15.0-2.35.1 mozilla-js-x86-15.0-2.35.1 mozilla-nspr-debuginfo-x86-4.9.2-3.6.1 mozilla-nspr-x86-4.9.2-3.6.1 mozilla-nss-certs-debuginfo-x86-3.13.6-9.17.1 mozilla-nss-certs-x86-3.13.6-9.17.1 mozilla-nss-debuginfo-x86-3.13.6-9.17.1 mozilla-nss-sysinit-debuginfo-x86-3.13.6-9.17.1 mozilla-nss-sysinit-x86-3.13.6-9.17.1 mozilla-nss-x86-3.13.6-9.17.1 xulrunner-debuginfo-x86-15.0-2.35.1 xulrunner-x86-15.0-2.35.1 - openSUSE 11.4 (i586 x86_64): MozillaFirefox-15.0-31.1 MozillaFirefox-branding-upstream-15.0-31.1 MozillaFirefox-buildsymbols-15.0-31.1 MozillaFirefox-debuginfo-15.0-31.1 MozillaFirefox-debugsource-15.0-31.1 MozillaFirefox-devel-15.0-31.1 MozillaFirefox-translations-common-15.0-31.1 MozillaFirefox-translations-other-15.0-31.1 MozillaThunderbird-15.0-27.1 MozillaThunderbird-buildsymbols-15.0-27.1 MozillaThunderbird-debuginfo-15.0-27.1 MozillaThunderbird-debugsource-15.0-27.1 MozillaThunderbird-devel-15.0-27.1 MozillaThunderbird-devel-debuginfo-15.0-27.1 MozillaThunderbird-translations-common-15.0-27.1 MozillaThunderbird-translations-other-15.0-27.1 enigmail-1.4.4+15.0-27.1 enigmail-debuginfo-1.4.4+15.0-27.1 libfreebl3-3.13.6-47.1 libfreebl3-debuginfo-3.13.6-47.1 libsoftokn3-3.13.6-47.1 libsoftokn3-debuginfo-3.13.6-47.1 mozilla-nspr-4.9.2-16.1 mozilla-nspr-debuginfo-4.9.2-16.1 mozilla-nspr-debugsource-4.9.2-16.1 mozilla-nspr-devel-4.9.2-16.1 mozilla-nss-3.13.6-47.1 mozilla-nss-certs-3.13.6-47.1 mozilla-nss-certs-debuginfo-3.13.6-47.1 mozilla-nss-debuginfo-3.13.6-47.1 mozilla-nss-debugsource-3.13.6-47.1 mozilla-nss-devel-3.13.6-47.1 mozilla-nss-sysinit-3.13.6-47.1 mozilla-nss-sysinit-debuginfo-3.13.6-47.1 mozilla-nss-tools-3.13.6-47.1 mozilla-nss-tools-debuginfo-3.13.6-47.1 seamonkey-2.12-27.1 seamonkey-debuginfo-2.12-27.1 seamonkey-debugsource-2.12-27.1 seamonkey-dom-inspector-2.12-27.1 seamonkey-irc-2.12-27.1 seamonkey-translations-common-2.12-27.1 seamonkey-translations-other-2.12-27.1 seamonkey-venkman-2.12-27.1 - openSUSE 11.4 (x86_64): libfreebl3-32bit-3.13.6-47.1 libfreebl3-debuginfo-32bit-3.13.6-47.1 libsoftokn3-32bit-3.13.6-47.1 libsoftokn3-debuginfo-32bit-3.13.6-47.1 mozilla-nspr-32bit-4.9.2-16.1 mozilla-nspr-debuginfo-32bit-4.9.2-16.1 mozilla-nss-32bit-3.13.6-47.1 mozilla-nss-certs-32bit-3.13.6-47.1 mozilla-nss-certs-debuginfo-32bit-3.13.6-47.1 mozilla-nss-debuginfo-32bit-3.13.6-47.1 mozilla-nss-sysinit-32bit-3.13.6-47.1 mozilla-nss-sysinit-debuginfo-32bit-3.13.6-47.1 - openSUSE 11.4 (ia64): libfreebl3-debuginfo-x86-3.13.6-47.1 libfreebl3-x86-3.13.6-47.1 libsoftokn3-debuginfo-x86-3.13.6-47.1 libsoftokn3-x86-3.13.6-47.1 mozilla-nspr-debuginfo-x86-4.9.2-16.1 mozilla-nspr-x86-4.9.2-16.1 mozilla-nss-certs-debuginfo-x86-3.13.6-47.1 mozilla-nss-certs-x86-3.13.6-47.1 mozilla-nss-debuginfo-x86-3.13.6-47.1 mozilla-nss-sysinit-debuginfo-x86-3.13.6-47.1 mozilla-nss-sysinit-x86-3.13.6-47.1 mozilla-nss-x86-3.13.6-47.1 References: http://support.novell.com/security/cve/CVE-2012-1956.html http://support.novell.com/security/cve/CVE-2012-1970.html http://support.novell.com/security/cve/CVE-2012-1972.html http://support.novell.com/security/cve/CVE-2012-1973.html http://support.novell.com/security/cve/CVE-2012-1974.html http://support.novell.com/security/cve/CVE-2012-1975.html http://support.novell.com/security/cve/CVE-2012-1976.html http://support.novell.com/security/cve/CVE-2012-3956.html http://support.novell.com/security/cve/CVE-2012-3957.html http://support.novell.com/security/cve/CVE-2012-3958.html http://support.novell.com/security/cve/CVE-2012-3959.html http://support.novell.com/security/cve/CVE-2012-3960.html http://support.novell.com/security/cve/CVE-2012-3961.html http://support.novell.com/security/cve/CVE-2012-3962.html http://support.novell.com/security/cve/CVE-2012-3963.html http://support.novell.com/security/cve/CVE-2012-3964.html http://support.novell.com/security/cve/CVE-2012-3965.html http://support.novell.com/security/cve/CVE-2012-3966.html http://support.novell.com/security/cve/CVE-2012-3967.html http://support.novell.com/security/cve/CVE-2012-3968.html http://support.novell.com/security/cve/CVE-2012-3969.html http://support.novell.com/security/cve/CVE-2012-3970.html http://support.novell.com/security/cve/CVE-2012-3971.html http://support.novell.com/security/cve/CVE-2012-3972.html http://support.novell.com/security/cve/CVE-2012-3973.html http://support.novell.com/security/cve/CVE-2012-3975.html http://support.novell.com/security/cve/CVE-2012-3976.html http://support.novell.com/security/cve/CVE-2012-3978.html http://support.novell.com/security/cve/CVE-2012-3980.html https://bugzilla.novell.com/777588

1 0

openSUSE-SU-2012:1063-1: openttd: update to 1.2.2
by opensuse-security＠opensuse.org 30 Aug '12

30 Aug '12

openSUSE Security Update: openttd: update to 1.2.2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1063-1 Rating: low References: #775023 Cross-References: CVE-2012-3436 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: openttd was updated to 1.2.2 - many bugfixes including: Fix: In some cases ships could be covered with land [FS#5254] (CVE-2012-3436, bnc#775023) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-537 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): openttd-1.2.2-2.4.1 openttd-debuginfo-1.2.2-2.4.1 openttd-dedicated-1.2.2-2.4.1 openttd-dedicated-debuginfo-1.2.2-2.4.1 - openSUSE 12.2 (noarch): openttd-data-1.2.2-2.4.1 References: http://support.novell.com/security/cve/CVE-2012-3436.html https://bugzilla.novell.com/775023

1 0

openSUSE-SU-2012:1062-1: moderate: phpMyAdmin: update to 3.5.2.2
by opensuse-security＠opensuse.org 30 Aug '12

30 Aug '12

openSUSE Security Update: phpMyAdmin: update to 3.5.2.2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1062-1 Rating: moderate References: #776698 #776701 Cross-References: CVE-2012-4219 CVE-2012-4345 Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: phpMyAdmin was updated to 3.5.2.2 - fix for bnc#776698, bnc#776701 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-535 - openSUSE 12.1: zypper in -t patch openSUSE-2012-535 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (noarch): phpMyAdmin-3.5.2.2-1.4.1 - openSUSE 12.1 (noarch): phpMyAdmin-3.5.2.2-1.27.1 References: http://support.novell.com/security/cve/CVE-2012-4219.html http://support.novell.com/security/cve/CVE-2012-4345.html https://bugzilla.novell.com/776698 https://bugzilla.novell.com/776701

1 0

openSUSE-SU-2012:1061-1: important: calligra: security and bugfix update.
by opensuse-security＠opensuse.org 30 Aug '12

30 Aug '12

openSUSE Security Update: calligra: security and bugfix update. ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1061-1 Rating: important References: #774534 Cross-References: CVE-2012-3456 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Fix buffer overflow in MS Word ODF filter among other non-security related bugs. Also a version update to 2.4.3 happened: * Words: - Always show vertical scroll bar to avoid race condition (kde#301076) - Do not save with an attribue that makes LibreOffice and OpenOffice crash (kde#298689 ) * Kexi: - Fixed import from csv when “Start at Line” value changed (kde#302209) - Set limit to 255 characters for Text type (VARCHAR) (kde#301277 and 301136) + - Remove limits for Text data type, leave as option (kde#301277) - Fixed data saving when focus policy for one of widgets is NoFocus (kde#301109) * Krita: - Read and set the resolution for psd images * Charts: - Fix load/save styles of all shapes (title,subtitle,axistitles,footer,etc.) - Lines in the chart should be displayed (kde#271771) - Combined Bar and Line Charts only show bars (Trendlines not supported) (kde#288537) - Load/save chart type for each dataset (kde#271771 and 288537) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-533 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): calligra-2.4.3-2.4.1 calligra-braindump-2.4.3-2.4.1 calligra-braindump-debuginfo-2.4.3-2.4.1 calligra-debuginfo-2.4.3-2.4.1 calligra-debugsource-2.4.3-2.4.1 calligra-devel-2.4.3-2.4.1 calligra-flow-2.4.3-2.4.1 calligra-flow-debuginfo-2.4.3-2.4.1 calligra-karbon-2.4.3-2.4.1 calligra-karbon-debuginfo-2.4.3-2.4.1 calligra-kexi-2.4.3-2.4.1 calligra-kexi-debuginfo-2.4.3-2.4.1 calligra-kexi-mssql-driver-2.4.3-2.4.1 calligra-kexi-mssql-driver-debuginfo-2.4.3-2.4.1 calligra-kexi-mysql-driver-2.4.3-2.4.1 calligra-kexi-mysql-driver-debuginfo-2.4.3-2.4.1 calligra-kexi-postgresql-driver-2.4.3-2.4.1 calligra-kexi-postgresql-driver-debuginfo-2.4.3-2.4.1 calligra-kexi-spreadsheet-import-2.4.3-2.4.1 calligra-kexi-spreadsheet-import-debuginfo-2.4.3-2.4.1 calligra-kexi-xbase-driver-2.4.3-2.4.1 calligra-kexi-xbase-driver-debuginfo-2.4.3-2.4.1 calligra-krita-2.4.3-2.4.1 calligra-krita-debuginfo-2.4.3-2.4.1 calligra-kthesaurus-2.4.3-2.4.1 calligra-kthesaurus-debuginfo-2.4.3-2.4.1 calligra-plan-2.4.3-2.4.1 calligra-plan-debuginfo-2.4.3-2.4.1 calligra-sheets-2.4.3-2.4.1 calligra-sheets-debuginfo-2.4.3-2.4.1 calligra-stage-2.4.3-2.4.1 calligra-stage-debuginfo-2.4.3-2.4.1 calligra-tools-2.4.3-2.4.1 calligra-tools-debuginfo-2.4.3-2.4.1 calligra-words-2.4.3-2.4.1 calligra-words-debuginfo-2.4.3-2.4.1 - openSUSE 12.2 (noarch): calligra-doc-2.4.3-2.4.1 References: http://support.novell.com/security/cve/CVE-2012-3456.html https://bugzilla.novell.com/774534

1 0

openSUSE-SU-2012:1060-1: moderate: koffice: Fix buffer overflow in MS Word ODF import filter
by opensuse-security＠opensuse.org 30 Aug '12

30 Aug '12

openSUSE Security Update: koffice: Fix buffer overflow in MS Word ODF import filter ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1060-1 Rating: moderate References: #774533 Cross-References: CVE-2012-3455 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update fixes a buffer overflow in MS Word ODF import filter. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-532 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): koffice2-2.3.1-12.4.1 koffice2-debuginfo-2.3.1-12.4.1 koffice2-debugsource-2.3.1-12.4.1 koffice2-devel-2.3.1-12.4.1 koffice2-karbon-2.3.1-12.4.1 koffice2-karbon-debuginfo-2.3.1-12.4.1 koffice2-kexi-2.3.1-12.4.1 koffice2-kexi-debuginfo-2.3.1-12.4.1 koffice2-kformula-2.3.1-12.4.1 koffice2-kformula-debuginfo-2.3.1-12.4.1 koffice2-kplato-2.3.1-12.4.1 koffice2-kplato-debuginfo-2.3.1-12.4.1 koffice2-kpresenter-2.3.1-12.4.1 koffice2-kpresenter-debuginfo-2.3.1-12.4.1 koffice2-krita-2.3.1-12.4.1 koffice2-krita-debuginfo-2.3.1-12.4.1 koffice2-kspread-2.3.1-12.4.1 koffice2-kspread-debuginfo-2.3.1-12.4.1 koffice2-kthesaurus-2.3.1-12.4.1 koffice2-kthesaurus-debuginfo-2.3.1-12.4.1 koffice2-kword-2.3.1-12.4.1 koffice2-kword-debuginfo-2.3.1-12.4.1 - openSUSE 12.1 (noarch): koffice2-doc-2.3.1-12.4.1 References: http://support.novell.com/security/cve/CVE-2012-3455.html https://bugzilla.novell.com/774533

1 0