August 2012 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2012:1069-1: nut: fixed a denial of service
by opensuse-security＠opensuse.org 30 Aug '12

30 Aug '12

openSUSE Security Update: nut: fixed a denial of service ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1069-1 Rating: low References: #764699 Cross-References: CVE-2012-2944 Affected Products: openSUSE 12.2 openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The nut upsd is prone to multiple flaws that allow remote attackers to cause a denial of service (application crash) by sending unexpected data. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-539 - openSUSE 12.1: zypper in -t patch openSUSE-2012-539 - openSUSE 11.4: zypper in -t patch openSUSE-2012-539 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): libupsclient1-2.6.3-2.4.3 libupsclient1-debuginfo-2.6.3-2.4.3 nut-2.6.3-2.4.3 nut-cgi-2.6.3-2.4.3 nut-cgi-debuginfo-2.6.3-2.4.3 nut-debuginfo-2.6.3-2.4.3 nut-debugsource-2.6.3-2.4.3 nut-devel-2.6.3-2.4.3 nut-drivers-net-2.6.3-2.4.3 nut-drivers-net-debuginfo-2.6.3-2.4.3 - openSUSE 12.1 (i586 x86_64): libupsclient1-2.6.1-3.4.1 libupsclient1-debuginfo-2.6.1-3.4.1 nut-2.6.1-3.4.1 nut-cgi-2.6.1-3.4.1 nut-cgi-debuginfo-2.6.1-3.4.1 nut-debuginfo-2.6.1-3.4.1 nut-debugsource-2.6.1-3.4.1 nut-devel-2.6.1-3.4.1 nut-drivers-net-2.6.1-3.4.1 nut-drivers-net-debuginfo-2.6.1-3.4.1 - openSUSE 11.4 (i586 x86_64): libupsclient1-2.6.0-4.11.1 libupsclient1-debuginfo-2.6.0-4.11.1 nut-2.6.0-4.11.1 nut-cgi-2.6.0-4.11.1 nut-cgi-debuginfo-2.6.0-4.11.1 nut-classic-2.6.0-4.11.1 nut-classic-debuginfo-2.6.0-4.11.1 nut-debuginfo-2.6.0-4.11.1 nut-debugsource-2.6.0-4.11.1 nut-devel-2.6.0-4.11.1 nut-drivers-net-2.6.0-4.11.1 nut-drivers-net-debuginfo-2.6.0-4.11.1 nut-hal-2.6.0-4.11.1 nut-hal-debuginfo-2.6.0-4.11.1 References: http://support.novell.com/security/cve/CVE-2012-2944.html https://bugzilla.novell.com/764699

1 0

openSUSE-SU-2012:1068-1: moderate: tor: fixed some security bugs
by opensuse-security＠opensuse.org 30 Aug '12

30 Aug '12

openSUSE Security Update: tor: fixed some security bugs ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1068-1 Rating: moderate References: #776642 Cross-References: CVE-2012-3517 CVE-2012-3518 CVE-2012-3519 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: Tor 0.2.2.38 fixes a rare race condition that can crash exit relays; fixes a remotely triggerable crash bug; and fixes a timing attack that could in theory leak path information. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-541 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): tor-0.2.2.38-3.4.1 tor-debuginfo-0.2.2.38-3.4.1 tor-debugsource-0.2.2.38-3.4.1 References: http://support.novell.com/security/cve/CVE-2012-3517.html http://support.novell.com/security/cve/CVE-2012-3518.html http://support.novell.com/security/cve/CVE-2012-3519.html https://bugzilla.novell.com/776642

1 0

openSUSE-SU-2012:1067-1: moderate: wireshark: update to 1.8.2
by opensuse-security＠opensuse.org 30 Aug '12

30 Aug '12

openSUSE Security Update: wireshark: update to 1.8.2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1067-1 Rating: moderate References: #776083 Cross-References: CVE-2012-4285 CVE-2012-4286 CVE-2012-4287 CVE-2012-4288 CVE-2012-4289 CVE-2012-4290 CVE-2012-4291 CVE-2012-4292 CVE-2012-4293 CVE-2012-4294 CVE-2012-4295 CVE-2012-4296 CVE-2012-4297 CVE-2012-4298 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that fixes 14 vulnerabilities is now available. Description: Wireshark was updated to 1.8.2: * The DCP ETSI dissector could trigger a zero division. (wnpa-sec-2012-13 CVE-2012-4285) * The MongoDB dissector could go into a large loop. (wnpa-sec-2012-14 CVE-2012-4287) * The XTP dissector could go into an infinite loop. (wnpa-sec-2012-15 CVE-2012-4288) * The ERF dissector could overflow a buffer. (wnpa-sec-2012-16 CVE-2012-4294 CVE-2012-4295) * The AFP dissector could go into a large loop. (wnpa-sec-2012-17 CVE-2012-4289) * The RTPS2 dissector could overflow a buffer. (wnpa-sec-2012-18 CVE-2012-4296) * The GSM RLC MAC dissector could overflow a buffer. (wnpa-sec-2012-19 CVE-2012-4297) * The CIP dissector could exhaust system memory. (wnpa-sec-2012-20 CVE-2012-4291) * The STUN dissector could crash. (wnpa-sec-2012-21 CVE-2012-4292) * The EtherCAT Mailbox dissector could abort. (wnpa-sec-2012-22 CVE-2012-4293) * The CTDB dissector could go into a large loop. (wnpa-sec-2012-23 CVE-2012-4290) * The pcap-ng file parser could trigger a zero division. (wnpa-sec-2012-24 CVE-2012-4286) * The Ixia IxVeriWave file parser could overflow a buffer. (wnpa-sec-2012-25 CVE-2012-4298) Further bug fixes and updated protocol support as listed in: http://www.wireshark.org/docs/relnotes/wireshark-1.8.2.html Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-540 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): wireshark-1.8.2-1.3.1 wireshark-debuginfo-1.8.2-1.3.1 wireshark-debugsource-1.8.2-1.3.1 wireshark-devel-1.8.2-1.3.1 References: http://support.novell.com/security/cve/CVE-2012-4285.html http://support.novell.com/security/cve/CVE-2012-4286.html http://support.novell.com/security/cve/CVE-2012-4287.html http://support.novell.com/security/cve/CVE-2012-4288.html http://support.novell.com/security/cve/CVE-2012-4289.html http://support.novell.com/security/cve/CVE-2012-4290.html http://support.novell.com/security/cve/CVE-2012-4291.html http://support.novell.com/security/cve/CVE-2012-4292.html http://support.novell.com/security/cve/CVE-2012-4293.html http://support.novell.com/security/cve/CVE-2012-4294.html http://support.novell.com/security/cve/CVE-2012-4295.html http://support.novell.com/security/cve/CVE-2012-4296.html http://support.novell.com/security/cve/CVE-2012-4297.html http://support.novell.com/security/cve/CVE-2012-4298.html https://bugzilla.novell.com/776083

1 0

openSUSE-SU-2012:1066-1: moderate: update for rubygem-actionmailer-3_2, rubygem-actionpack-3_2, rubygem-activemodel-3_2, rubygem-activerecord-3_2, rubygem-activeresource-3_2, rubygem-activesupport-3_2, rubygem-journey-1_0, rubygem-rails-3_2, rubygem-railties-3_2, rubygem-sprockets-2_1
by opensuse-security＠opensuse.org 30 Aug '12

30 Aug '12

openSUSE Security Update: update for rubygem-actionmailer-3_2, rubygem-actionpack-3_2, rubygem-activemodel-3_2, rubygem-activerecord-3_2, rubygem-activeresource-3_2, rubygem-activesupport-3_2, rubygem-journey-1_0, rubygem-rails-3_2, rubygem-railties-3_2, rubygem-sprockets-2_1 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1066-1 Rating: moderate References: Cross-References: CVE-2012-2660 CVE-2012-2661 CVE-2012-2694 CVE-2012-2695 CVE-2012-3424 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: Multiple version upgrades for rails components. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-536 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): rubygem-actionmailer-3_2-3.2.7-2.4.1 rubygem-actionmailer-3_2-doc-3.2.7-2.4.1 rubygem-actionpack-3_2-3.2.7-3.4.1 rubygem-actionpack-3_2-doc-3.2.7-3.4.1 rubygem-activemodel-3_2-3.2.7-2.4.1 rubygem-activemodel-3_2-doc-3.2.7-2.4.1 rubygem-activerecord-3_2-3.2.7-2.4.1 rubygem-activerecord-3_2-doc-3.2.7-2.4.1 rubygem-activeresource-3_2-3.2.7-2.4.1 rubygem-activeresource-3_2-doc-3.2.7-2.4.1 rubygem-activesupport-3_2-3.2.7-2.4.1 rubygem-activesupport-3_2-doc-3.2.7-2.4.1 rubygem-journey-1_0-1.0.4-3.4.1 rubygem-journey-1_0-doc-1.0.4-3.4.1 rubygem-journey-1_0-testsuite-1.0.4-3.4.1 rubygem-rails-3_2-3.2.7-2.4.1 rubygem-rails-3_2-doc-3.2.7-2.4.1 rubygem-railties-3_2-3.2.7-2.4.1 rubygem-railties-3_2-doc-3.2.7-2.4.1 rubygem-sprockets-2_1-2.1.3-3.4.1 rubygem-sprockets-2_1-doc-2.1.3-3.4.1 References: http://support.novell.com/security/cve/CVE-2012-2660.html http://support.novell.com/security/cve/CVE-2012-2661.html http://support.novell.com/security/cve/CVE-2012-2694.html http://support.novell.com/security/cve/CVE-2012-2695.html http://support.novell.com/security/cve/CVE-2012-3424.html

1 0

openSUSE-SU-2012:1065-1: critical: MozillaFirefox: Update to version 15
by opensuse-security＠opensuse.org 30 Aug '12

30 Aug '12

openSUSE Security Update: MozillaFirefox: Update to version 15 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1065-1 Rating: critical References: #777588 Cross-References: CVE-2012-1956 CVE-2012-1970 CVE-2012-1972 CVE-2012-1973 CVE-2012-1974 CVE-2012-1975 CVE-2012-1976 CVE-2012-3956 CVE-2012-3957 CVE-2012-3958 CVE-2012-3959 CVE-2012-3960 CVE-2012-3961 CVE-2012-3962 CVE-2012-3963 CVE-2012-3964 CVE-2012-3965 CVE-2012-3966 CVE-2012-3967 CVE-2012-3968 CVE-2012-3969 CVE-2012-3970 CVE-2012-3971 CVE-2012-3972 CVE-2012-3973 CVE-2012-3975 CVE-2012-3976 CVE-2012-3978 CVE-2012-3980 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that fixes 29 vulnerabilities is now available. Description: Mozilla Firefox, Thunderbird, xulrunner, seamonkey 15.0 update (bnc#777588) * MFSA 2012-57/CVE-2012-1970 Miscellaneous memory safety hazards * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1 975 CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE- 2012-3959 CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE- 2012-3964 Use-after-free issues found using Address Sanitizer * MFSA 2012-59/CVE-2012-1956 (bmo#756719) Location object can be shadowed using Object.defineProperty * MFSA 2012-60/CVE-2012-3965 (bmo#769108) Escalation of privilege through about:newtab * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793) Memory corruption with bitmap format images with negative height * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968 WebGL use-after-free and memory corruption * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970 SVG buffer overflow and use-after-free issues * MFSA 2012-64/CVE-2012-3971 Graphite 2 memory corruption * MFSA 2012-65/CVE-2012-3972 (bmo#746855) Out-of-bounds read in format-number in XSLT * MFSA 2012-66/CVE-2012-3973 (bmo#757128) HTTPMonitor extension allows for remote debugging without explicit activation * MFSA 2012-68/CVE-2012-3975 (bmo#770684) DOMParser loads linked resources in extensions when parsing text/html * MFSA 2012-69/CVE-2012-3976 (bmo#768568) Incorrect site SSL certificate data display * MFSA 2012-70/CVE-2012-3978 (bmo#770429) Location object security checks bypassed by chrome code * MFSA 2012-72/CVE-2012-3980 (bmo#771859) Web console eval capable of executing chrome-privileged code - fix HTML5 video crash with GStreamer enabled (bmo#761030) - GStreamer is only used for MP4 (no WebM, OGG) - updated filelist - moved browser specific preferences to correct location Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-538 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): MozillaFirefox-15.0-2.7.1 MozillaFirefox-branding-upstream-15.0-2.7.1 MozillaFirefox-buildsymbols-15.0-2.7.1 MozillaFirefox-debuginfo-15.0-2.7.1 MozillaFirefox-debugsource-15.0-2.7.1 MozillaFirefox-devel-15.0-2.7.1 MozillaFirefox-translations-common-15.0-2.7.1 MozillaFirefox-translations-other-15.0-2.7.1 MozillaThunderbird-15.0-49.9.1 MozillaThunderbird-buildsymbols-15.0-49.9.1 MozillaThunderbird-debuginfo-15.0-49.9.1 MozillaThunderbird-debugsource-15.0-49.9.1 MozillaThunderbird-devel-15.0-49.9.1 MozillaThunderbird-devel-debuginfo-15.0-49.9.1 MozillaThunderbird-translations-common-15.0-49.9.1 MozillaThunderbird-translations-other-15.0-49.9.1 enigmail-1.4.4+15.0-49.9.1 enigmail-debuginfo-1.4.4+15.0-49.9.1 libfreebl3-3.13.6-2.7.1 libfreebl3-debuginfo-3.13.6-2.7.1 libsoftokn3-3.13.6-2.7.1 libsoftokn3-debuginfo-3.13.6-2.7.1 mozilla-js-15.0-2.8.1 mozilla-js-debuginfo-15.0-2.8.1 mozilla-nss-3.13.6-2.7.1 mozilla-nss-certs-3.13.6-2.7.1 mozilla-nss-certs-debuginfo-3.13.6-2.7.1 mozilla-nss-debuginfo-3.13.6-2.7.1 mozilla-nss-debugsource-3.13.6-2.7.1 mozilla-nss-devel-3.13.6-2.7.1 mozilla-nss-sysinit-3.13.6-2.7.1 mozilla-nss-sysinit-debuginfo-3.13.6-2.7.1 mozilla-nss-tools-3.13.6-2.7.1 mozilla-nss-tools-debuginfo-3.13.6-2.7.1 seamonkey-2.12-2.8.1 seamonkey-debuginfo-2.12-2.8.1 seamonkey-debugsource-2.12-2.8.1 seamonkey-dom-inspector-2.12-2.8.1 seamonkey-irc-2.12-2.8.1 seamonkey-translations-common-2.12-2.8.1 seamonkey-translations-other-2.12-2.8.1 seamonkey-venkman-2.12-2.8.1 xulrunner-15.0-2.8.1 xulrunner-buildsymbols-15.0-2.8.1 xulrunner-debuginfo-15.0-2.8.1 xulrunner-debugsource-15.0-2.8.1 xulrunner-devel-15.0-2.8.1 xulrunner-devel-debuginfo-15.0-2.8.1 - openSUSE 12.2 (x86_64): libfreebl3-32bit-3.13.6-2.7.1 libfreebl3-debuginfo-32bit-3.13.6-2.7.1 libsoftokn3-32bit-3.13.6-2.7.1 libsoftokn3-debuginfo-32bit-3.13.6-2.7.1 mozilla-js-32bit-15.0-2.8.1 mozilla-js-debuginfo-32bit-15.0-2.8.1 mozilla-nss-32bit-3.13.6-2.7.1 mozilla-nss-certs-32bit-3.13.6-2.7.1 mozilla-nss-certs-debuginfo-32bit-3.13.6-2.7.1 mozilla-nss-debuginfo-32bit-3.13.6-2.7.1 mozilla-nss-sysinit-32bit-3.13.6-2.7.1 mozilla-nss-sysinit-debuginfo-32bit-3.13.6-2.7.1 xulrunner-32bit-15.0-2.8.1 xulrunner-debuginfo-32bit-15.0-2.8.1 References: http://support.novell.com/security/cve/CVE-2012-1956.html http://support.novell.com/security/cve/CVE-2012-1970.html http://support.novell.com/security/cve/CVE-2012-1972.html http://support.novell.com/security/cve/CVE-2012-1973.html http://support.novell.com/security/cve/CVE-2012-1974.html http://support.novell.com/security/cve/CVE-2012-1975.html http://support.novell.com/security/cve/CVE-2012-1976.html http://support.novell.com/security/cve/CVE-2012-3956.html http://support.novell.com/security/cve/CVE-2012-3957.html http://support.novell.com/security/cve/CVE-2012-3958.html http://support.novell.com/security/cve/CVE-2012-3959.html http://support.novell.com/security/cve/CVE-2012-3960.html http://support.novell.com/security/cve/CVE-2012-3961.html http://support.novell.com/security/cve/CVE-2012-3962.html http://support.novell.com/security/cve/CVE-2012-3963.html http://support.novell.com/security/cve/CVE-2012-3964.html http://support.novell.com/security/cve/CVE-2012-3965.html http://support.novell.com/security/cve/CVE-2012-3966.html http://support.novell.com/security/cve/CVE-2012-3967.html http://support.novell.com/security/cve/CVE-2012-3968.html http://support.novell.com/security/cve/CVE-2012-3969.html http://support.novell.com/security/cve/CVE-2012-3970.html http://support.novell.com/security/cve/CVE-2012-3971.html http://support.novell.com/security/cve/CVE-2012-3972.html http://support.novell.com/security/cve/CVE-2012-3973.html http://support.novell.com/security/cve/CVE-2012-3975.html http://support.novell.com/security/cve/CVE-2012-3976.html http://support.novell.com/security/cve/CVE-2012-3978.html http://support.novell.com/security/cve/CVE-2012-3980.html https://bugzilla.novell.com/777588

1 0

openSUSE-SU-2012:1064-1: critical: MozillaFirefox: Update to version 15
by opensuse-security＠opensuse.org 30 Aug '12

30 Aug '12

openSUSE Security Update: MozillaFirefox: Update to version 15 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1064-1 Rating: critical References: #777588 Cross-References: CVE-2012-1956 CVE-2012-1970 CVE-2012-1972 CVE-2012-1973 CVE-2012-1974 CVE-2012-1975 CVE-2012-1976 CVE-2012-3956 CVE-2012-3957 CVE-2012-3958 CVE-2012-3959 CVE-2012-3960 CVE-2012-3961 CVE-2012-3962 CVE-2012-3963 CVE-2012-3964 CVE-2012-3965 CVE-2012-3966 CVE-2012-3967 CVE-2012-3968 CVE-2012-3969 CVE-2012-3970 CVE-2012-3971 CVE-2012-3972 CVE-2012-3973 CVE-2012-3975 CVE-2012-3976 CVE-2012-3978 CVE-2012-3980 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes 29 vulnerabilities is now available. Description: Mozilla Firefox, Thunderbird, xulrunner, seamonkey 15.0 update (bnc#777588) * MFSA 2012-57/CVE-2012-1970 Miscellaneous memory safety hazards * MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1 975 CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE- 2012-3959 CVE-2012-3960/CVE-2012-3961/CVE-2012-3962/CVE-2012-3963/CVE- 2012-3964 Use-after-free issues found using Address Sanitizer * MFSA 2012-59/CVE-2012-1956 (bmo#756719) Location object can be shadowed using Object.defineProperty * MFSA 2012-60/CVE-2012-3965 (bmo#769108) Escalation of privilege through about:newtab * MFSA 2012-61/CVE-2012-3966 (bmo#775794, bmo#775793) Memory corruption with bitmap format images with negative height * MFSA 2012-62/CVE-2012-3967/CVE-2012-3968 WebGL use-after-free and memory corruption * MFSA 2012-63/CVE-2012-3969/CVE-2012-3970 SVG buffer overflow and use-after-free issues * MFSA 2012-64/CVE-2012-3971 Graphite 2 memory corruption * MFSA 2012-65/CVE-2012-3972 (bmo#746855) Out-of-bounds read in format-number in XSLT * MFSA 2012-66/CVE-2012-3973 (bmo#757128) HTTPMonitor extension allows for remote debugging without explicit activation * MFSA 2012-68/CVE-2012-3975 (bmo#770684) DOMParser loads linked resources in extensions when parsing text/html * MFSA 2012-69/CVE-2012-3976 (bmo#768568) Incorrect site SSL certificate data display * MFSA 2012-70/CVE-2012-3978 (bmo#770429) Location object security checks bypassed by chrome code * MFSA 2012-72/CVE-2012-3980 (bmo#771859) Web console eval capable of executing chrome-privileged code - fix HTML5 video crash with GStreamer enabled (bmo#761030) - GStreamer is only used for MP4 (no WebM, OGG) - updated filelist - moved browser specific preferences to correct location Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-534 - openSUSE 11.4: zypper in -t patch openSUSE-2012-534 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): MozillaFirefox-15.0-2.36.1 MozillaFirefox-branding-upstream-15.0-2.36.1 MozillaFirefox-buildsymbols-15.0-2.36.1 MozillaFirefox-debuginfo-15.0-2.36.1 MozillaFirefox-debugsource-15.0-2.36.1 MozillaFirefox-devel-15.0-2.36.1 MozillaFirefox-translations-common-15.0-2.36.1 MozillaFirefox-translations-other-15.0-2.36.1 MozillaThunderbird-15.0-33.29.1 MozillaThunderbird-buildsymbols-15.0-33.29.1 MozillaThunderbird-debuginfo-15.0-33.29.1 MozillaThunderbird-debugsource-15.0-33.29.1 MozillaThunderbird-devel-15.0-33.29.1 MozillaThunderbird-devel-debuginfo-15.0-33.29.1 MozillaThunderbird-translations-common-15.0-33.29.1 MozillaThunderbird-translations-other-15.0-33.29.1 enigmail-1.4.4+15.0-33.29.1 enigmail-debuginfo-1.4.4+15.0-33.29.1 libfreebl3-3.13.6-9.17.1 libfreebl3-debuginfo-3.13.6-9.17.1 libsoftokn3-3.13.6-9.17.1 libsoftokn3-debuginfo-3.13.6-9.17.1 mozilla-js-15.0-2.35.1 mozilla-js-debuginfo-15.0-2.35.1 mozilla-nspr-4.9.2-3.6.1 mozilla-nspr-debuginfo-4.9.2-3.6.1 mozilla-nspr-debugsource-4.9.2-3.6.1 mozilla-nspr-devel-4.9.2-3.6.1 mozilla-nss-3.13.6-9.17.1 mozilla-nss-certs-3.13.6-9.17.1 mozilla-nss-certs-debuginfo-3.13.6-9.17.1 mozilla-nss-debuginfo-3.13.6-9.17.1 mozilla-nss-debugsource-3.13.6-9.17.1 mozilla-nss-devel-3.13.6-9.17.1 mozilla-nss-sysinit-3.13.6-9.17.1 mozilla-nss-sysinit-debuginfo-3.13.6-9.17.1 mozilla-nss-tools-3.13.6-9.17.1 mozilla-nss-tools-debuginfo-3.13.6-9.17.1 seamonkey-2.12-2.27.1 seamonkey-debuginfo-2.12-2.27.1 seamonkey-debugsource-2.12-2.27.1 seamonkey-dom-inspector-2.12-2.27.1 seamonkey-irc-2.12-2.27.1 seamonkey-translations-common-2.12-2.27.1 seamonkey-translations-other-2.12-2.27.1 seamonkey-venkman-2.12-2.27.1 xulrunner-15.0-2.35.1 xulrunner-buildsymbols-15.0-2.35.1 xulrunner-debuginfo-15.0-2.35.1 xulrunner-debugsource-15.0-2.35.1 xulrunner-devel-15.0-2.35.1 xulrunner-devel-debuginfo-15.0-2.35.1 - openSUSE 12.1 (x86_64): libfreebl3-32bit-3.13.6-9.17.1 libfreebl3-debuginfo-32bit-3.13.6-9.17.1 libsoftokn3-32bit-3.13.6-9.17.1 libsoftokn3-debuginfo-32bit-3.13.6-9.17.1 mozilla-js-32bit-15.0-2.35.1 mozilla-js-debuginfo-32bit-15.0-2.35.1 mozilla-nspr-32bit-4.9.2-3.6.1 mozilla-nspr-debuginfo-32bit-4.9.2-3.6.1 mozilla-nss-32bit-3.13.6-9.17.1 mozilla-nss-certs-32bit-3.13.6-9.17.1 mozilla-nss-certs-debuginfo-32bit-3.13.6-9.17.1 mozilla-nss-debuginfo-32bit-3.13.6-9.17.1 mozilla-nss-sysinit-32bit-3.13.6-9.17.1 mozilla-nss-sysinit-debuginfo-32bit-3.13.6-9.17.1 xulrunner-32bit-15.0-2.35.1 xulrunner-debuginfo-32bit-15.0-2.35.1 - openSUSE 12.1 (ia64): libfreebl3-debuginfo-x86-3.13.6-9.17.1 libfreebl3-x86-3.13.6-9.17.1 libsoftokn3-debuginfo-x86-3.13.6-9.17.1 libsoftokn3-x86-3.13.6-9.17.1 mozilla-js-debuginfo-x86-15.0-2.35.1 mozilla-js-x86-15.0-2.35.1 mozilla-nspr-debuginfo-x86-4.9.2-3.6.1 mozilla-nspr-x86-4.9.2-3.6.1 mozilla-nss-certs-debuginfo-x86-3.13.6-9.17.1 mozilla-nss-certs-x86-3.13.6-9.17.1 mozilla-nss-debuginfo-x86-3.13.6-9.17.1 mozilla-nss-sysinit-debuginfo-x86-3.13.6-9.17.1 mozilla-nss-sysinit-x86-3.13.6-9.17.1 mozilla-nss-x86-3.13.6-9.17.1 xulrunner-debuginfo-x86-15.0-2.35.1 xulrunner-x86-15.0-2.35.1 - openSUSE 11.4 (i586 x86_64): MozillaFirefox-15.0-31.1 MozillaFirefox-branding-upstream-15.0-31.1 MozillaFirefox-buildsymbols-15.0-31.1 MozillaFirefox-debuginfo-15.0-31.1 MozillaFirefox-debugsource-15.0-31.1 MozillaFirefox-devel-15.0-31.1 MozillaFirefox-translations-common-15.0-31.1 MozillaFirefox-translations-other-15.0-31.1 MozillaThunderbird-15.0-27.1 MozillaThunderbird-buildsymbols-15.0-27.1 MozillaThunderbird-debuginfo-15.0-27.1 MozillaThunderbird-debugsource-15.0-27.1 MozillaThunderbird-devel-15.0-27.1 MozillaThunderbird-devel-debuginfo-15.0-27.1 MozillaThunderbird-translations-common-15.0-27.1 MozillaThunderbird-translations-other-15.0-27.1 enigmail-1.4.4+15.0-27.1 enigmail-debuginfo-1.4.4+15.0-27.1 libfreebl3-3.13.6-47.1 libfreebl3-debuginfo-3.13.6-47.1 libsoftokn3-3.13.6-47.1 libsoftokn3-debuginfo-3.13.6-47.1 mozilla-nspr-4.9.2-16.1 mozilla-nspr-debuginfo-4.9.2-16.1 mozilla-nspr-debugsource-4.9.2-16.1 mozilla-nspr-devel-4.9.2-16.1 mozilla-nss-3.13.6-47.1 mozilla-nss-certs-3.13.6-47.1 mozilla-nss-certs-debuginfo-3.13.6-47.1 mozilla-nss-debuginfo-3.13.6-47.1 mozilla-nss-debugsource-3.13.6-47.1 mozilla-nss-devel-3.13.6-47.1 mozilla-nss-sysinit-3.13.6-47.1 mozilla-nss-sysinit-debuginfo-3.13.6-47.1 mozilla-nss-tools-3.13.6-47.1 mozilla-nss-tools-debuginfo-3.13.6-47.1 seamonkey-2.12-27.1 seamonkey-debuginfo-2.12-27.1 seamonkey-debugsource-2.12-27.1 seamonkey-dom-inspector-2.12-27.1 seamonkey-irc-2.12-27.1 seamonkey-translations-common-2.12-27.1 seamonkey-translations-other-2.12-27.1 seamonkey-venkman-2.12-27.1 - openSUSE 11.4 (x86_64): libfreebl3-32bit-3.13.6-47.1 libfreebl3-debuginfo-32bit-3.13.6-47.1 libsoftokn3-32bit-3.13.6-47.1 libsoftokn3-debuginfo-32bit-3.13.6-47.1 mozilla-nspr-32bit-4.9.2-16.1 mozilla-nspr-debuginfo-32bit-4.9.2-16.1 mozilla-nss-32bit-3.13.6-47.1 mozilla-nss-certs-32bit-3.13.6-47.1 mozilla-nss-certs-debuginfo-32bit-3.13.6-47.1 mozilla-nss-debuginfo-32bit-3.13.6-47.1 mozilla-nss-sysinit-32bit-3.13.6-47.1 mozilla-nss-sysinit-debuginfo-32bit-3.13.6-47.1 - openSUSE 11.4 (ia64): libfreebl3-debuginfo-x86-3.13.6-47.1 libfreebl3-x86-3.13.6-47.1 libsoftokn3-debuginfo-x86-3.13.6-47.1 libsoftokn3-x86-3.13.6-47.1 mozilla-nspr-debuginfo-x86-4.9.2-16.1 mozilla-nspr-x86-4.9.2-16.1 mozilla-nss-certs-debuginfo-x86-3.13.6-47.1 mozilla-nss-certs-x86-3.13.6-47.1 mozilla-nss-debuginfo-x86-3.13.6-47.1 mozilla-nss-sysinit-debuginfo-x86-3.13.6-47.1 mozilla-nss-sysinit-x86-3.13.6-47.1 mozilla-nss-x86-3.13.6-47.1 References: http://support.novell.com/security/cve/CVE-2012-1956.html http://support.novell.com/security/cve/CVE-2012-1970.html http://support.novell.com/security/cve/CVE-2012-1972.html http://support.novell.com/security/cve/CVE-2012-1973.html http://support.novell.com/security/cve/CVE-2012-1974.html http://support.novell.com/security/cve/CVE-2012-1975.html http://support.novell.com/security/cve/CVE-2012-1976.html http://support.novell.com/security/cve/CVE-2012-3956.html http://support.novell.com/security/cve/CVE-2012-3957.html http://support.novell.com/security/cve/CVE-2012-3958.html http://support.novell.com/security/cve/CVE-2012-3959.html http://support.novell.com/security/cve/CVE-2012-3960.html http://support.novell.com/security/cve/CVE-2012-3961.html http://support.novell.com/security/cve/CVE-2012-3962.html http://support.novell.com/security/cve/CVE-2012-3963.html http://support.novell.com/security/cve/CVE-2012-3964.html http://support.novell.com/security/cve/CVE-2012-3965.html http://support.novell.com/security/cve/CVE-2012-3966.html http://support.novell.com/security/cve/CVE-2012-3967.html http://support.novell.com/security/cve/CVE-2012-3968.html http://support.novell.com/security/cve/CVE-2012-3969.html http://support.novell.com/security/cve/CVE-2012-3970.html http://support.novell.com/security/cve/CVE-2012-3971.html http://support.novell.com/security/cve/CVE-2012-3972.html http://support.novell.com/security/cve/CVE-2012-3973.html http://support.novell.com/security/cve/CVE-2012-3975.html http://support.novell.com/security/cve/CVE-2012-3976.html http://support.novell.com/security/cve/CVE-2012-3978.html http://support.novell.com/security/cve/CVE-2012-3980.html https://bugzilla.novell.com/777588

1 0

openSUSE-SU-2012:1063-1: openttd: update to 1.2.2
by opensuse-security＠opensuse.org 30 Aug '12

30 Aug '12

openSUSE Security Update: openttd: update to 1.2.2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1063-1 Rating: low References: #775023 Cross-References: CVE-2012-3436 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: openttd was updated to 1.2.2 - many bugfixes including: Fix: In some cases ships could be covered with land [FS#5254] (CVE-2012-3436, bnc#775023) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-537 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): openttd-1.2.2-2.4.1 openttd-debuginfo-1.2.2-2.4.1 openttd-dedicated-1.2.2-2.4.1 openttd-dedicated-debuginfo-1.2.2-2.4.1 - openSUSE 12.2 (noarch): openttd-data-1.2.2-2.4.1 References: http://support.novell.com/security/cve/CVE-2012-3436.html https://bugzilla.novell.com/775023

1 0

openSUSE-SU-2012:1062-1: moderate: phpMyAdmin: update to 3.5.2.2
by opensuse-security＠opensuse.org 30 Aug '12

30 Aug '12

openSUSE Security Update: phpMyAdmin: update to 3.5.2.2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1062-1 Rating: moderate References: #776698 #776701 Cross-References: CVE-2012-4219 CVE-2012-4345 Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: phpMyAdmin was updated to 3.5.2.2 - fix for bnc#776698, bnc#776701 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-535 - openSUSE 12.1: zypper in -t patch openSUSE-2012-535 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (noarch): phpMyAdmin-3.5.2.2-1.4.1 - openSUSE 12.1 (noarch): phpMyAdmin-3.5.2.2-1.27.1 References: http://support.novell.com/security/cve/CVE-2012-4219.html http://support.novell.com/security/cve/CVE-2012-4345.html https://bugzilla.novell.com/776698 https://bugzilla.novell.com/776701

1 0

openSUSE-SU-2012:1061-1: important: calligra: security and bugfix update.
by opensuse-security＠opensuse.org 30 Aug '12

30 Aug '12

openSUSE Security Update: calligra: security and bugfix update. ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1061-1 Rating: important References: #774534 Cross-References: CVE-2012-3456 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Fix buffer overflow in MS Word ODF filter among other non-security related bugs. Also a version update to 2.4.3 happened: * Words: - Always show vertical scroll bar to avoid race condition (kde#301076) - Do not save with an attribue that makes LibreOffice and OpenOffice crash (kde#298689 ) * Kexi: - Fixed import from csv when “Start at Line” value changed (kde#302209) - Set limit to 255 characters for Text type (VARCHAR) (kde#301277 and 301136) + - Remove limits for Text data type, leave as option (kde#301277) - Fixed data saving when focus policy for one of widgets is NoFocus (kde#301109) * Krita: - Read and set the resolution for psd images * Charts: - Fix load/save styles of all shapes (title,subtitle,axistitles,footer,etc.) - Lines in the chart should be displayed (kde#271771) - Combined Bar and Line Charts only show bars (Trendlines not supported) (kde#288537) - Load/save chart type for each dataset (kde#271771 and 288537) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-533 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): calligra-2.4.3-2.4.1 calligra-braindump-2.4.3-2.4.1 calligra-braindump-debuginfo-2.4.3-2.4.1 calligra-debuginfo-2.4.3-2.4.1 calligra-debugsource-2.4.3-2.4.1 calligra-devel-2.4.3-2.4.1 calligra-flow-2.4.3-2.4.1 calligra-flow-debuginfo-2.4.3-2.4.1 calligra-karbon-2.4.3-2.4.1 calligra-karbon-debuginfo-2.4.3-2.4.1 calligra-kexi-2.4.3-2.4.1 calligra-kexi-debuginfo-2.4.3-2.4.1 calligra-kexi-mssql-driver-2.4.3-2.4.1 calligra-kexi-mssql-driver-debuginfo-2.4.3-2.4.1 calligra-kexi-mysql-driver-2.4.3-2.4.1 calligra-kexi-mysql-driver-debuginfo-2.4.3-2.4.1 calligra-kexi-postgresql-driver-2.4.3-2.4.1 calligra-kexi-postgresql-driver-debuginfo-2.4.3-2.4.1 calligra-kexi-spreadsheet-import-2.4.3-2.4.1 calligra-kexi-spreadsheet-import-debuginfo-2.4.3-2.4.1 calligra-kexi-xbase-driver-2.4.3-2.4.1 calligra-kexi-xbase-driver-debuginfo-2.4.3-2.4.1 calligra-krita-2.4.3-2.4.1 calligra-krita-debuginfo-2.4.3-2.4.1 calligra-kthesaurus-2.4.3-2.4.1 calligra-kthesaurus-debuginfo-2.4.3-2.4.1 calligra-plan-2.4.3-2.4.1 calligra-plan-debuginfo-2.4.3-2.4.1 calligra-sheets-2.4.3-2.4.1 calligra-sheets-debuginfo-2.4.3-2.4.1 calligra-stage-2.4.3-2.4.1 calligra-stage-debuginfo-2.4.3-2.4.1 calligra-tools-2.4.3-2.4.1 calligra-tools-debuginfo-2.4.3-2.4.1 calligra-words-2.4.3-2.4.1 calligra-words-debuginfo-2.4.3-2.4.1 - openSUSE 12.2 (noarch): calligra-doc-2.4.3-2.4.1 References: http://support.novell.com/security/cve/CVE-2012-3456.html https://bugzilla.novell.com/774534

1 0

openSUSE-SU-2012:1060-1: moderate: koffice: Fix buffer overflow in MS Word ODF import filter
by opensuse-security＠opensuse.org 30 Aug '12

30 Aug '12

openSUSE Security Update: koffice: Fix buffer overflow in MS Word ODF import filter ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1060-1 Rating: moderate References: #774533 Cross-References: CVE-2012-3455 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update fixes a buffer overflow in MS Word ODF import filter. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-532 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): koffice2-2.3.1-12.4.1 koffice2-debuginfo-2.3.1-12.4.1 koffice2-debugsource-2.3.1-12.4.1 koffice2-devel-2.3.1-12.4.1 koffice2-karbon-2.3.1-12.4.1 koffice2-karbon-debuginfo-2.3.1-12.4.1 koffice2-kexi-2.3.1-12.4.1 koffice2-kexi-debuginfo-2.3.1-12.4.1 koffice2-kformula-2.3.1-12.4.1 koffice2-kformula-debuginfo-2.3.1-12.4.1 koffice2-kplato-2.3.1-12.4.1 koffice2-kplato-debuginfo-2.3.1-12.4.1 koffice2-kpresenter-2.3.1-12.4.1 koffice2-kpresenter-debuginfo-2.3.1-12.4.1 koffice2-krita-2.3.1-12.4.1 koffice2-krita-debuginfo-2.3.1-12.4.1 koffice2-kspread-2.3.1-12.4.1 koffice2-kspread-debuginfo-2.3.1-12.4.1 koffice2-kthesaurus-2.3.1-12.4.1 koffice2-kthesaurus-debuginfo-2.3.1-12.4.1 koffice2-kword-2.3.1-12.4.1 koffice2-kword-debuginfo-2.3.1-12.4.1 - openSUSE 12.1 (noarch): koffice2-doc-2.3.1-12.4.1 References: http://support.novell.com/security/cve/CVE-2012-3455.html https://bugzilla.novell.com/774533

1 0

openSUSE-RU-2012:1059-1: autofs: Collective update for AutoFS
by maintenance＠opensuse.org 30 Aug '12

30 Aug '12

openSUSE Recommended Update: autofs: Collective update for AutoFS ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1059-1 Rating: low References: #733479 #734924 #748588 #752044 #753693 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update resolves the following issues: * Do not mask the failure to unmount busy volumes (bnc#733479) * Fix umount recovery of busy direct mounts (bnc#734924) * Fix remount deadlock that can happen on a restart when there are nested direct mounts busy (bnc#733479) * Duplicate parent options for included maps (bnc#753693) * Fix segmentation fault in get_query_dn() (bnc#752044) * Fix segmentation fault in do_remount_indirect() when scandir() fails (bnc#748588). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch openSUSE-2012-531 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): autofs-5.0.5-14.27.1 autofs-debuginfo-5.0.5-14.27.1 autofs-debugsource-5.0.5-14.27.1 References: https://bugzilla.novell.com/733479 https://bugzilla.novell.com/734924 https://bugzilla.novell.com/748588 https://bugzilla.novell.com/752044 https://bugzilla.novell.com/753693

1 0

openSUSE-SU-2012:1058-1: moderate: quota: fixed good_client in rquota_svc.c
by opensuse-security＠opensuse.org 29 Aug '12

29 Aug '12

openSUSE Security Update: quota: fixed good_client in rquota_svc.c ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1058-1 Rating: moderate References: #772570 Cross-References: CVE-2012-3417 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: quota was fixed to handle tcp wrappers in rquotad correctly. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch openSUSE-2012-529 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): quota-3.17-20.1 quota-debuginfo-3.17-20.1 quota-debugsource-3.17-20.1 quota-nfs-3.17-20.1 quota-nfs-debuginfo-3.17-20.1 References: http://support.novell.com/security/cve/CVE-2012-3417.html https://bugzilla.novell.com/772570

1 0

openSUSE-RU-2012:1057-1: turpial: Fix start up problems
by maintenance＠opensuse.org 29 Aug '12

29 Aug '12

openSUSE Recommended Update: turpial: Fix start up problems ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1057-1 Rating: low References: #751192 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Turpial fails to launch under certain conditions, as not all Requirements are correctly defined. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-530 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (noarch): turpial-1.5.0-3.4.1 turpial-lang-1.5.0-3.4.1 References: https://bugzilla.novell.com/751192

1 0

openSUSE-RU-2012:1046-1: postfix: fix for ldap_aliases problem
by maintenance＠opensuse.org 27 Aug '12

27 Aug '12

openSUSE Recommended Update: postfix: fix for ldap_aliases problem ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1046-1 Rating: low References: #771303 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Postfix was adjusted to fix a ldap-aliases problem. * add 'version = 3' to ldap_aliases.cf Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-528 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): postfix-2.8.8-3.16.1 postfix-debuginfo-2.8.8-3.16.1 postfix-debugsource-2.8.8-3.16.1 postfix-devel-2.8.8-3.16.1 postfix-mysql-2.8.8-3.16.1 postfix-mysql-debuginfo-2.8.8-3.16.1 postfix-postgresql-2.8.8-3.16.1 postfix-postgresql-debuginfo-2.8.8-3.16.1 - openSUSE 12.1 (noarch): postfix-doc-2.8.8-3.16.1 References: https://bugzilla.novell.com/771303

1 0

openSUSE-RU-2012:1041-1: icinga: rcido2db failed when lock directory /var/run/icinga was missing
by maintenance＠opensuse.org 27 Aug '12

27 Aug '12

openSUSE Recommended Update: icinga: rcido2db failed when lock directory /var/run/icinga was missing ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1041-1 Rating: low References: #776186 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: icinga was updated to fix bnc#776186 - rcido2db failed when lock directory /var/run/icinga was missing Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-527 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): icinga-1.5.1-5.7.1 icinga-debuginfo-1.5.1-5.7.1 icinga-debugsource-1.5.1-5.7.1 icinga-devel-1.5.1-5.7.1 icinga-doc-1.5.1-5.7.1 icinga-idoutils-1.5.1-5.7.1 icinga-idoutils-debuginfo-1.5.1-5.7.1 icinga-idoutils-mysql-1.5.1-5.7.1 icinga-idoutils-oracle-1.5.1-5.7.1 icinga-idoutils-pgsql-1.5.1-5.7.1 icinga-plugins-eventhandlers-1.5.1-5.7.1 icinga-www-1.5.1-5.7.1 icinga-www-debuginfo-1.5.1-5.7.1 References: https://bugzilla.novell.com/776186

1 0

openSUSE-SU-2012:1036-1: pcp: Update to 3.6.5.
by opensuse-security＠opensuse.org 24 Aug '12

24 Aug '12

openSUSE Security Update: pcp: Update to 3.6.5. ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1036-1 Rating: low References: #775009 #775010 #775011 #775013 Cross-References: CVE-2012-3418 CVE-2012-3419 CVE-2012-3420 CVE-2012-3421 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: Update to pcp-3.6.5. + Fixes for security advisory CVE-2012-3418; (bnc#775009). + Workaround for security advisory CVE-2012-3419; (bnc#775010). + Fixes for security advisory CVE-2012-3420; (bnc#775011). + Fixes for security advisory CVE-2012-3421; (bnc#775013). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-525 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): libpcp-devel-3.6.5-5.4.1 libpcp-devel-debuginfo-3.6.5-5.4.1 libpcp3-3.6.5-5.4.1 libpcp3-debuginfo-3.6.5-5.4.1 pcp-3.6.5-5.4.1 pcp-debuginfo-3.6.5-5.4.1 pcp-debugsource-3.6.5-5.4.1 pcp-import-iostat2pcp-3.6.5-5.4.1 pcp-import-mrtg2pcp-3.6.5-5.4.1 pcp-import-sar2pcp-3.6.5-5.4.1 pcp-import-sheet2pcp-3.6.5-5.4.1 perl-PCP-LogImport-3.6.5-5.4.1 perl-PCP-LogImport-debuginfo-3.6.5-5.4.1 perl-PCP-LogSummary-3.6.5-5.4.1 perl-PCP-MMV-3.6.5-5.4.1 perl-PCP-MMV-debuginfo-3.6.5-5.4.1 perl-PCP-PMDA-3.6.5-5.4.1 perl-PCP-PMDA-debuginfo-3.6.5-5.4.1 References: http://support.novell.com/security/cve/CVE-2012-3418.html http://support.novell.com/security/cve/CVE-2012-3419.html http://support.novell.com/security/cve/CVE-2012-3420.html http://support.novell.com/security/cve/CVE-2012-3421.html https://bugzilla.novell.com/775009 https://bugzilla.novell.com/775010 https://bugzilla.novell.com/775011 https://bugzilla.novell.com/775013

1 0

openSUSE-SU-2012:1035-1: moderate: wireshark: update to 1.4.15
by opensuse-security＠opensuse.org 24 Aug '12

24 Aug '12

openSUSE Security Update: wireshark: update to 1.4.15 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1035-1 Rating: moderate References: #776083 Cross-References: CVE-2012-4285 CVE-2012-4288 CVE-2012-4289 CVE-2012-4290 CVE-2012-4291 CVE-2012-4292 CVE-2012-4293 CVE-2012-4296 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: wireshark was updated to 1.4.15 * The DCP ETSI dissector could trigger a zero division. (wnpa-sec-2012-13 CVE-2012-4285) * The XTP dissector could go into an infinite loop. (wnpa-sec-2012-15 CVE-2012-4288) * The AFP dissector could go into a large loop. (wnpa-sec-2012-17 CVE-2012-4289) * The RTPS2 dissector could overflow a buffer. (wnpa-sec-2012-18 CVE-2012-4296) * The CIP dissector could exhaust system memory. (wnpa-sec-2012-20 CVE-2012-4291) * The STUN dissector could crash. (wnpa-sec-2012-21 CVE-2012-4292) * The EtherCAT Mailbox dissector could abort. (wnpa-sec-2012-22 CVE-2012-4293) * The CTDB dissector could go into a large loop. (wnpa-sec-2012-23 CVE-2012-4290) Further bug fixes and updated protocol support as listed in: http://www.wireshark.org/docs/relnotes/wireshark-1.4.15.html Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-526 - openSUSE 11.4: zypper in -t patch openSUSE-2012-526 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): wireshark-1.4.15-3.20.1 wireshark-debuginfo-1.4.15-3.20.1 wireshark-debugsource-1.4.15-3.20.1 wireshark-devel-1.4.15-3.20.1 - openSUSE 11.4 (i586 x86_64): wireshark-1.4.15-0.22.1 wireshark-debuginfo-1.4.15-0.22.1 wireshark-debugsource-1.4.15-0.22.1 wireshark-devel-1.4.15-0.22.1 References: http://support.novell.com/security/cve/CVE-2012-4285.html http://support.novell.com/security/cve/CVE-2012-4288.html http://support.novell.com/security/cve/CVE-2012-4289.html http://support.novell.com/security/cve/CVE-2012-4290.html http://support.novell.com/security/cve/CVE-2012-4291.html http://support.novell.com/security/cve/CVE-2012-4292.html http://support.novell.com/security/cve/CVE-2012-4293.html http://support.novell.com/security/cve/CVE-2012-4296.html https://bugzilla.novell.com/776083

1 0

openSUSE-RU-2012:1018-1: java-1_6_0-openjdk: fixed the permissions of gnome-java-bridge.jar
by maintenance＠opensuse.org 22 Aug '12

22 Aug '12

openSUSE Recommended Update: java-1_6_0-openjdk: fixed the permissions of gnome-java-bridge.jar ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1018-1 Rating: low References: #765270 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the permissions of gnome-java-bridge.jar, which was only readable for root. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-524 - openSUSE 11.4: zypper in -t patch openSUSE-2012-524 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): java-1_6_0-openjdk-1.6.0.0_b24.1.11.3-9.1 java-1_6_0-openjdk-debuginfo-1.6.0.0_b24.1.11.3-9.1 java-1_6_0-openjdk-debugsource-1.6.0.0_b24.1.11.3-9.1 java-1_6_0-openjdk-demo-1.6.0.0_b24.1.11.3-9.1 java-1_6_0-openjdk-demo-debuginfo-1.6.0.0_b24.1.11.3-9.1 java-1_6_0-openjdk-devel-1.6.0.0_b24.1.11.3-9.1 java-1_6_0-openjdk-devel-debuginfo-1.6.0.0_b24.1.11.3-9.1 java-1_6_0-openjdk-javadoc-1.6.0.0_b24.1.11.3-9.1 java-1_6_0-openjdk-src-1.6.0.0_b24.1.11.3-9.1 - openSUSE 11.4 (i586 x86_64): java-1_6_0-openjdk-1.6.0.0_b24.1.11.3-0.14.1 java-1_6_0-openjdk-debuginfo-1.6.0.0_b24.1.11.3-0.14.1 java-1_6_0-openjdk-debugsource-1.6.0.0_b24.1.11.3-0.14.1 java-1_6_0-openjdk-demo-1.6.0.0_b24.1.11.3-0.14.1 java-1_6_0-openjdk-demo-debuginfo-1.6.0.0_b24.1.11.3-0.14.1 java-1_6_0-openjdk-devel-1.6.0.0_b24.1.11.3-0.14.1 java-1_6_0-openjdk-devel-debuginfo-1.6.0.0_b24.1.11.3-0.14.1 java-1_6_0-openjdk-javadoc-1.6.0.0_b24.1.11.3-0.14.1 java-1_6_0-openjdk-src-1.6.0.0_b24.1.11.3-0.14.1 References: https://bugzilla.novell.com/765270

1 0

openSUSE-RU-2012:1017-1: bnc#642296, lvremove sometimes fails.
by maintenance＠opensuse.org 22 Aug '12

22 Aug '12

openSUSE Recommended Update: bnc#642296, lvremove sometimes fails. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:1017-1 Rating: low References: Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: bnc#642296, lvremove sometimes fails. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-523 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): lvm2-2.02.84-19.8.1 lvm2-debuginfo-2.02.84-19.8.1 lvm2-debugsource-2.02.84-19.8.1 References:

1 0

openSUSE-SU-2012:1006-1: moderate: update for dhcp
by opensuse-security＠opensuse.org 20 Aug '12

20 Aug '12

openSUSE Security Update: update for dhcp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1006-1 Rating: moderate References: #721829 #739696 #762108 #767661 #770236 #772924 Cross-References: CVE-2012-3570 CVE-2012-3571 CVE-2012-3954 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that solves three vulnerabilities and has three fixes is now available. Description: This update of dhcp fixed multiple security vulnerabilities (memory leak, Denial of Service). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-522 - openSUSE 11.4: zypper in -t patch openSUSE-2012-522 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): dhcp-4.2.4.P1-0.6.10.1 dhcp-client-4.2.4.P1-0.6.10.1 dhcp-client-debuginfo-4.2.4.P1-0.6.10.1 dhcp-debuginfo-4.2.4.P1-0.6.10.1 dhcp-debugsource-4.2.4.P1-0.6.10.1 dhcp-devel-4.2.4.P1-0.6.10.1 dhcp-doc-4.2.4.P1-0.6.10.1 dhcp-relay-4.2.4.P1-0.6.10.1 dhcp-relay-debuginfo-4.2.4.P1-0.6.10.1 dhcp-server-4.2.4.P1-0.6.10.1 dhcp-server-debuginfo-4.2.4.P1-0.6.10.1 - openSUSE 11.4 (i586 x86_64): dhcp-4.2.4.P1-0.27.1 dhcp-client-4.2.4.P1-0.27.1 dhcp-client-debuginfo-4.2.4.P1-0.27.1 dhcp-debuginfo-4.2.4.P1-0.27.1 dhcp-debugsource-4.2.4.P1-0.27.1 dhcp-devel-4.2.4.P1-0.27.1 dhcp-doc-4.2.4.P1-0.27.1 dhcp-relay-4.2.4.P1-0.27.1 dhcp-relay-debuginfo-4.2.4.P1-0.27.1 dhcp-server-4.2.4.P1-0.27.1 dhcp-server-debuginfo-4.2.4.P1-0.27.1 References: http://support.novell.com/security/cve/CVE-2012-3570.html http://support.novell.com/security/cve/CVE-2012-3571.html http://support.novell.com/security/cve/CVE-2012-3954.html https://bugzilla.novell.com/721829 https://bugzilla.novell.com/739696 https://bugzilla.novell.com/762108 https://bugzilla.novell.com/767661 https://bugzilla.novell.com/770236 https://bugzilla.novell.com/772924

1 0

openSUSE-SU-2012:1000-1: moderate: update for perl-YAML-LibYAML
by opensuse-security＠opensuse.org 17 Aug '12

17 Aug '12

openSUSE Security Update: update for perl-YAML-LibYAML ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1000-1 Rating: moderate References: #751503 Cross-References: CVE-2012-1152 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update of perl-YAML-LibYAML fixed multiple format string flaws that could cause a crash or potentially allow the execution of arbitrary code. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-521 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): perl-YAML-LibYAML-0.37-2.4.1 perl-YAML-LibYAML-debuginfo-0.37-2.4.1 perl-YAML-LibYAML-debugsource-0.37-2.4.1 References: http://support.novell.com/security/cve/CVE-2012-1152.html https://bugzilla.novell.com/751503

1 0

openSUSE-RU-2012:0999-1: moderate: MozillaFirefox-branding-openSUSE: move Firefox specific prefs to defaults/preferences
by maintenance＠opensuse.org 17 Aug '12

17 Aug '12

openSUSE Recommended Update: MozillaFirefox-branding-openSUSE: move Firefox specific prefs to defaults/preferences ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0999-1 Rating: moderate References: #737709 #768942 #774914 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: Various updates to MozillaFirefox-branding-openSUSE: - move Firefox specific prefs to defaults/preferences (bnc#774914) - update susefox to snapshot 20120626 * add window controls for Gnome 3 (bnc#768942) - bumped version to 6.0 - support firefox-esr RPM packages - removed MozillaFirefox build dependency and PreReq * everything controlled by Supplements and Requirements from base package - make openSUSE software search version specific (bnc#737709) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-520 - openSUSE 11.4: zypper in -t patch openSUSE-2012-520 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): MozillaFirefox-branding-openSUSE-6.1-7.10.1 - openSUSE 11.4 (i586 x86_64): MozillaFirefox-branding-openSUSE-6.1-13.1 References: https://bugzilla.novell.com/737709 https://bugzilla.novell.com/768942 https://bugzilla.novell.com/774914

1 0

openSUSE-SU-2012:0996-1: critical: flash-player to 11.2.202.238
by opensuse-security＠opensuse.org 16 Aug '12

16 Aug '12

openSUSE Security Update: flash-player to 11.2.202.238 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0996-1 Rating: critical References: #775986 Cross-References: CVE-2012-1535 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Adobe Flash Player was updated to 11.2.202.238 fixing various bugs and security issues. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-518 - openSUSE 11.4: zypper in -t patch openSUSE-2012-518 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): flash-player-11.2.202.238-27.1 flash-player-gnome-11.2.202.238-27.1 flash-player-kde4-11.2.202.238-27.1 - openSUSE 11.4 (i586 x86_64): flash-player-11.2.202.238-20.1 flash-player-gnome-11.2.202.238-20.1 flash-player-kde4-11.2.202.238-20.1 References: http://support.novell.com/security/cve/CVE-2012-1535.html https://bugzilla.novell.com/775986

1 0

openSUSE-RU-2012:0994-1: important: Go language - openSUSE 12.1 bugfix and
by maintenance＠opensuse.org 15 Aug '12

15 Aug '12

openSUSE Recommended Update: Go language - openSUSE 12.1 bugfix and ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0994-1 Rating: important References: #774262 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update brings the core Go language package up to date with the latest bugfixes and supported version. In addition to the numerous smaller bug, documentation and language fixes the following two issues are addressed. - Potential DoS from an algorithmic complexity attack on the hashmap implementation. - Too many successive collisions in the underlying hash algorithm could cause the runtime to skip fields or values in a hashmap. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-517 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): go-1.0.2-2.6.1 go-debuginfo-1.0.2-2.6.1 go-debugsource-1.0.2-2.6.1 go-doc-1.0.2-2.6.1 go-emacs-1.0.2-2.6.1 go-go-gtk-0.0.0+git20120304-1.4.1 go-go-gtk-doc-0.0.0+git20120304-1.4.1 go-goauth2-0.0.0+hg20111205-2.4.1 go-goauth2-doc-0.0.0+hg20111205-2.4.1 go-httplib.go-0.0.0+git20111213-2.4.1 go-httplib.go-doc-0.0.0+git20111213-2.4.1 go-kate-1.0.2-2.6.1 go-mustache.go-0.0.0+git20120208-3.4.1 go-mustache.go-doc-0.0.0+git20120208-3.4.1 go-vim-1.0.2-2.6.1 go-web.go-0.0.0+git20120217-2.4.1 go-web.go-doc-0.0.0+git20120217-2.4.1 References: https://bugzilla.novell.com/774262

1 0

openSUSE-SU-2012:0993-1: important: update for chromium, v8
by opensuse-security＠opensuse.org 15 Aug '12

15 Aug '12

openSUSE Security Update: update for chromium, v8 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0993-1 Rating: important References: #760264 #770821 Cross-References: CVE-2011-3084 CVE-2011-3098 CVE-2012-2842 CVE-2012-2843 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: Version upgrade of chromium to address multiple security vulnerabilities. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-516 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): chromedriver-22.0.1226.0-1.29.1 chromedriver-debuginfo-22.0.1226.0-1.29.1 chromium-22.0.1226.0-1.29.1 chromium-debuginfo-22.0.1226.0-1.29.1 chromium-debugsource-22.0.1226.0-1.29.1 chromium-desktop-gnome-22.0.1226.0-1.29.1 chromium-desktop-kde-22.0.1226.0-1.29.1 chromium-suid-helper-22.0.1226.0-1.29.1 chromium-suid-helper-debuginfo-22.0.1226.0-1.29.1 libv8-3-3.12.19.1-1.33.1 libv8-3-debuginfo-3.12.19.1-1.33.1 v8-devel-3.12.19.1-1.33.1 v8-private-headers-devel-3.12.19.1-1.33.1 References: http://support.novell.com/security/cve/CVE-2011-3084.html http://support.novell.com/security/cve/CVE-2011-3098.html http://support.novell.com/security/cve/CVE-2012-2842.html http://support.novell.com/security/cve/CVE-2012-2843.html https://bugzilla.novell.com/760264 https://bugzilla.novell.com/770821

1 0

openSUSE-SU-2012:0992-1: important: opera to 12.01
by opensuse-security＠opensuse.org 15 Aug '12

15 Aug '12

openSUSE Security Update: opera to 12.01 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0992-1 Rating: important References: #774191 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: Opera was updated to version 12.1, fixing various bugs and security issues. http://www.opera.com/docs/changelogs/unix/1201/ Fixes and Stability Enhancements since Opera 12.00 General and User Interface Several general fixes and stability improvements Website thumbnail memory usage improvements Address bar inline auto-completion no longer prefers shortest domain Corrected an error that could occur after removing the plugin wrapper Resolved an issue where favicons were squeezed too much when many tabs were open Display and Scripting Resolved an error with XHR transfers where content-type was incorrectly determined Improved handling of object literals with numeric duplicate properties Changed behavior of nested/chained comma expressions: now expressing and compiling them as a list rather than a tree Aligned behavior of the #caller property on function code objects in ECMAScript 5 strict mode with the specification Fixed an issue where input type=month would return an incorrect value in its valueAsDate property Resolved an issue with JSON.stringify() that could occur on cached number conversion Fixed a problem with redefining special properties using Object.defineProperty() Network and Site-Specific Fixed an issue where loading would stop at "Document 100%" but the page would still be loading tuenti.com: Corrected behavior when long content was displayed https://twitter.com: Fixed an issue with secure transaction errors Fixed an issue with Google Maps Labs that occured when compiling top-level loops inside strict evals Corrected a problem that could occur with DISQUS Fixed a crash occurring on Lenovo's "Shop now" page Corrected issues when calling window.console.log via a variable at watch4you Resolved an issue with Yahoo! chat Mail, News, Chat Resolved an issue where under certain conditions the mail panel would continuously scroll up Fixed a crash occurring when loading mail databases on startup Security Re-fixed an issue where certain URL constructs could allow arbitrary code execution, as reported by Andrey Stroganov; see our advisory Fixed an issue where certain characters in HTML could incorrectly be ignored, which could facilitate XSS attacks; see our advisory Fixed another issue where small windows could be used to trick users into executing downloads as reported by Jordi Chancel; see our advisory Fixed an issue where an element's HTML content could be incorrectly returned without escaping, bypassing some HTML sanitizers; see our advisory Fixed a low severity issue, details will be disclosed at a later date Advisory links from above: http://www.opera.com/support/kb/view/1016/ http://www.opera.com/support/kb/view/1026/ http://www.opera.com/support/kb/view/1027/ http://www.opera.com/support/kb/view/1025/ Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-515 - openSUSE 11.4: zypper in -t patch openSUSE-2012-515 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): opera-12.01-19.1 opera-gtk-12.01-19.1 opera-kde4-12.01-19.1 - openSUSE 11.4 (i586 x86_64): opera-12.01-25.1 opera-gtk-12.01-25.1 opera-kde4-12.01-25.1 References: https://bugzilla.novell.com/774191

1 0

openSUSE-SU-2012:0991-1: moderate: libvirt to fix remote dos
by opensuse-security＠opensuse.org 15 Aug '12

15 Aug '12

openSUSE Security Update: libvirt to fix remote dos ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0991-1 Rating: moderate References: #773955 Cross-References: CVE-2012-3445 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: libvirt was updated to fix a remote denial of service which could lead to crashes in virtd. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-514 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): libvirt-0.9.6-3.9.1 libvirt-client-0.9.6-3.9.1 libvirt-client-debuginfo-0.9.6-3.9.1 libvirt-debuginfo-0.9.6-3.9.1 libvirt-debugsource-0.9.6-3.9.1 libvirt-devel-0.9.6-3.9.1 libvirt-doc-0.9.6-3.9.1 libvirt-python-0.9.6-3.9.1 libvirt-python-debuginfo-0.9.6-3.9.1 - openSUSE 12.1 (x86_64): libvirt-client-32bit-0.9.6-3.9.1 libvirt-client-debuginfo-32bit-0.9.6-3.9.1 libvirt-devel-32bit-0.9.6-3.9.1 - openSUSE 12.1 (ia64): libvirt-client-debuginfo-x86-0.9.6-3.9.1 libvirt-client-x86-0.9.6-3.9.1 References: http://support.novell.com/security/cve/CVE-2012-3445.html https://bugzilla.novell.com/773955

1 0

openSUSE-SU-2012:0982-1: important: update for icedtea-web
by opensuse-security＠opensuse.org 13 Aug '12

13 Aug '12

openSUSE Security Update: update for icedtea-web ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0982-1 Rating: important References: #773458 Cross-References: CVE-2012-3422 CVE-2012-3423 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update of icedtea-web fixed multiple hewap buffer overflows. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-513 - openSUSE 11.4: zypper in -t patch openSUSE-2012-513 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): icedtea-web-1.2.1-10.1 icedtea-web-debuginfo-1.2.1-10.1 icedtea-web-debugsource-1.2.1-10.1 - openSUSE 12.1 (noarch): icedtea-web-javadoc-1.2.1-10.1 - openSUSE 11.4 (i586 x86_64): icedtea-web-1.2.1-0.17.1 icedtea-web-debuginfo-1.2.1-0.17.1 icedtea-web-debugsource-1.2.1-0.17.1 - openSUSE 11.4 (noarch): icedtea-web-javadoc-1.2.1-0.17.1 References: http://support.novell.com/security/cve/CVE-2012-3422.html http://support.novell.com/security/cve/CVE-2012-3423.html https://bugzilla.novell.com/773458

1 0

openSUSE-SU-2012:0981-1: important: icedtea-web: Update to 1.2.1 (bnc#)
by opensuse-security＠opensuse.org 10 Aug '12

10 Aug '12

openSUSE Security Update: icedtea-web: Update to 1.2.1 (bnc#) ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0981-1 Rating: important References: #773458 Cross-References: CVE-2012-3422 CVE-2012-3423 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: - update to 1.2.1 (bnc#773458) - Security Updates * CVE-2012-3422, RH840592: Potential read from an uninitialized memory location * CVE-2012-3423, RH841345: Incorrect handling of not 0-terminated strings - NetX * PR898: signed applications with big jnlp-file doesn't start (webstart affect like "frozen") * PR811: javaws is not handling urls with spaces (and other characters needing encoding) correctly * 816592: icedtea-web not loading GeoGebra java applets in Firefox or Chrome - Plugin * PR863: Error passing strings to applet methods in Chromium * PR895: IcedTea-Web searches for missing classes on each loadClass or findClass * PR518: NPString.utf8characters not guaranteed to be nul-terminated - Common * RH838417: Disambiguate signed applet security prompt from certificate warning * RH838559: Disambiguate signed applet security prompt from certificate warning Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-512 - openSUSE 11.4: zypper in -t patch openSUSE-2012-512 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): icedtea-web-1.2.1-6.1 icedtea-web-debuginfo-1.2.1-6.1 icedtea-web-debugsource-1.2.1-6.1 - openSUSE 12.1 (noarch): icedtea-web-javadoc-1.2.1-6.1 - openSUSE 11.4 (i586 x86_64): icedtea-web-1.2.1-0.13.1 icedtea-web-debuginfo-1.2.1-0.13.1 icedtea-web-debugsource-1.2.1-0.13.1 - openSUSE 11.4 (noarch): icedtea-web-javadoc-1.2.1-0.13.1 References: http://support.novell.com/security/cve/CVE-2012-3422.html http://support.novell.com/security/cve/CVE-2012-3423.html https://bugzilla.novell.com/773458

1 0

openSUSE-SU-2012:0978-1: important: rubygem-actionpack/activerecord-2_3
by opensuse-security＠opensuse.org 09 Aug '12

09 Aug '12

openSUSE Security Update: rubygem-actionpack/activerecord-2_3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0978-1 Rating: important References: #765097 #766792 Cross-References: CVE-2012-2660 CVE-2012-2694 CVE-2012-2695 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: 3 Security issues were fixed in rails 2.3 core components. 2 NULL query issues where fixed in the actionpack gem. 1 SQL injection was fixed in the activerecord gem. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-508 - openSUSE 11.4: zypper in -t patch openSUSE-2012-508 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): rubygem-actionpack-2_3-2.3.14-3.8.1 rubygem-actionpack-2_3-doc-2.3.14-3.8.1 rubygem-actionpack-2_3-testsuite-2.3.14-3.8.1 rubygem-activerecord-2_3-2.3.14-3.8.1 rubygem-activerecord-2_3-doc-2.3.14-3.8.1 rubygem-activerecord-2_3-testsuite-2.3.14-3.8.1 - openSUSE 11.4 (i586 x86_64): rubygem-actionpack-2_3-2.3.14-0.16.1 rubygem-actionpack-2_3-doc-2.3.14-0.16.1 rubygem-actionpack-2_3-testsuite-2.3.14-0.16.1 rubygem-activerecord-2_3-2.3.14-0.16.1 rubygem-activerecord-2_3-doc-2.3.14-0.16.1 rubygem-activerecord-2_3-testsuite-2.3.14-0.16.1 References: http://support.novell.com/security/cve/CVE-2012-2660.html http://support.novell.com/security/cve/CVE-2012-2694.html http://support.novell.com/security/cve/CVE-2012-2695.html https://bugzilla.novell.com/765097 https://bugzilla.novell.com/766792

1 0

openSUSE-SU-2012:0976-1: moderate: php5
by opensuse-security＠opensuse.org 09 Aug '12

09 Aug '12

openSUSE Security Update: php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0976-1 Rating: moderate References: #769785 #772580 #772582 Cross-References: CVE-2012-2688 CVE-2012-3365 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: Three security issues were fixed in php5: CVE-2012-2688: php5: potential overflow in _php_stream_scandir CVE-2012-3365: open_basedir bypass via SQLite extension Also a out of band read sql denial of service was fixed (bnc#769785) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-502 - openSUSE 11.4: zypper in -t patch openSUSE-2012-502 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): apache2-mod_php5-5.3.8-4.27.1 apache2-mod_php5-debuginfo-5.3.8-4.27.1 php5-5.3.8-4.27.1 php5-bcmath-5.3.8-4.27.1 php5-bcmath-debuginfo-5.3.8-4.27.1 php5-bz2-5.3.8-4.27.1 php5-bz2-debuginfo-5.3.8-4.27.1 php5-calendar-5.3.8-4.27.1 php5-calendar-debuginfo-5.3.8-4.27.1 php5-ctype-5.3.8-4.27.1 php5-ctype-debuginfo-5.3.8-4.27.1 php5-curl-5.3.8-4.27.1 php5-curl-debuginfo-5.3.8-4.27.1 php5-dba-5.3.8-4.27.1 php5-dba-debuginfo-5.3.8-4.27.1 php5-debuginfo-5.3.8-4.27.1 php5-debugsource-5.3.8-4.27.1 php5-devel-5.3.8-4.27.1 php5-dom-5.3.8-4.27.1 php5-dom-debuginfo-5.3.8-4.27.1 php5-enchant-5.3.8-4.27.1 php5-enchant-debuginfo-5.3.8-4.27.1 php5-exif-5.3.8-4.27.1 php5-exif-debuginfo-5.3.8-4.27.1 php5-fastcgi-5.3.8-4.27.1 php5-fastcgi-debuginfo-5.3.8-4.27.1 php5-fileinfo-5.3.8-4.27.1 php5-fileinfo-debuginfo-5.3.8-4.27.1 php5-fpm-5.3.8-4.27.1 php5-fpm-debuginfo-5.3.8-4.27.1 php5-ftp-5.3.8-4.27.1 php5-ftp-debuginfo-5.3.8-4.27.1 php5-gd-5.3.8-4.27.1 php5-gd-debuginfo-5.3.8-4.27.1 php5-gettext-5.3.8-4.27.1 php5-gettext-debuginfo-5.3.8-4.27.1 php5-gmp-5.3.8-4.27.1 php5-gmp-debuginfo-5.3.8-4.27.1 php5-iconv-5.3.8-4.27.1 php5-iconv-debuginfo-5.3.8-4.27.1 php5-imap-5.3.8-4.27.1 php5-imap-debuginfo-5.3.8-4.27.1 php5-intl-5.3.8-4.27.1 php5-intl-debuginfo-5.3.8-4.27.1 php5-json-5.3.8-4.27.1 php5-json-debuginfo-5.3.8-4.27.1 php5-ldap-5.3.8-4.27.1 php5-ldap-debuginfo-5.3.8-4.27.1 php5-mbstring-5.3.8-4.27.1 php5-mbstring-debuginfo-5.3.8-4.27.1 php5-mcrypt-5.3.8-4.27.1 php5-mcrypt-debuginfo-5.3.8-4.27.1 php5-mssql-5.3.8-4.27.1 php5-mssql-debuginfo-5.3.8-4.27.1 php5-mysql-5.3.8-4.27.1 php5-mysql-debuginfo-5.3.8-4.27.1 php5-odbc-5.3.8-4.27.1 php5-odbc-debuginfo-5.3.8-4.27.1 php5-openssl-5.3.8-4.27.1 php5-openssl-debuginfo-5.3.8-4.27.1 php5-pcntl-5.3.8-4.27.1 php5-pcntl-debuginfo-5.3.8-4.27.1 php5-pdo-5.3.8-4.27.1 php5-pdo-debuginfo-5.3.8-4.27.1 php5-pgsql-5.3.8-4.27.1 php5-pgsql-debuginfo-5.3.8-4.27.1 php5-phar-5.3.8-4.27.1 php5-phar-debuginfo-5.3.8-4.27.1 php5-posix-5.3.8-4.27.1 php5-posix-debuginfo-5.3.8-4.27.1 php5-pspell-5.3.8-4.27.1 php5-pspell-debuginfo-5.3.8-4.27.1 php5-readline-5.3.8-4.27.1 php5-readline-debuginfo-5.3.8-4.27.1 php5-shmop-5.3.8-4.27.1 php5-shmop-debuginfo-5.3.8-4.27.1 php5-snmp-5.3.8-4.27.1 php5-snmp-debuginfo-5.3.8-4.27.1 php5-soap-5.3.8-4.27.1 php5-soap-debuginfo-5.3.8-4.27.1 php5-sockets-5.3.8-4.27.1 php5-sockets-debuginfo-5.3.8-4.27.1 php5-sqlite-5.3.8-4.27.1 php5-sqlite-debuginfo-5.3.8-4.27.1 php5-suhosin-5.3.8-4.27.1 php5-suhosin-debuginfo-5.3.8-4.27.1 php5-sysvmsg-5.3.8-4.27.1 php5-sysvmsg-debuginfo-5.3.8-4.27.1 php5-sysvsem-5.3.8-4.27.1 php5-sysvsem-debuginfo-5.3.8-4.27.1 php5-sysvshm-5.3.8-4.27.1 php5-sysvshm-debuginfo-5.3.8-4.27.1 php5-tidy-5.3.8-4.27.1 php5-tidy-debuginfo-5.3.8-4.27.1 php5-tokenizer-5.3.8-4.27.1 php5-tokenizer-debuginfo-5.3.8-4.27.1 php5-wddx-5.3.8-4.27.1 php5-wddx-debuginfo-5.3.8-4.27.1 php5-xmlreader-5.3.8-4.27.1 php5-xmlreader-debuginfo-5.3.8-4.27.1 php5-xmlrpc-5.3.8-4.27.1 php5-xmlrpc-debuginfo-5.3.8-4.27.1 php5-xmlwriter-5.3.8-4.27.1 php5-xmlwriter-debuginfo-5.3.8-4.27.1 php5-xsl-5.3.8-4.27.1 php5-xsl-debuginfo-5.3.8-4.27.1 php5-zip-5.3.8-4.27.1 php5-zip-debuginfo-5.3.8-4.27.1 php5-zlib-5.3.8-4.27.1 php5-zlib-debuginfo-5.3.8-4.27.1 - openSUSE 12.1 (noarch): php5-pear-5.3.8-4.27.1 - openSUSE 11.4 (i586 x86_64): apache2-mod_php5-5.3.5-344.1 apache2-mod_php5-debuginfo-5.3.5-344.1 php5-5.3.5-344.1 php5-bcmath-5.3.5-344.1 php5-bcmath-debuginfo-5.3.5-344.1 php5-bz2-5.3.5-344.1 php5-bz2-debuginfo-5.3.5-344.1 php5-calendar-5.3.5-344.1 php5-calendar-debuginfo-5.3.5-344.1 php5-ctype-5.3.5-344.1 php5-ctype-debuginfo-5.3.5-344.1 php5-curl-5.3.5-344.1 php5-curl-debuginfo-5.3.5-344.1 php5-dba-5.3.5-344.1 php5-dba-debuginfo-5.3.5-344.1 php5-debuginfo-5.3.5-344.1 php5-debugsource-5.3.5-344.1 php5-devel-5.3.5-344.1 php5-dom-5.3.5-344.1 php5-dom-debuginfo-5.3.5-344.1 php5-enchant-5.3.5-344.1 php5-enchant-debuginfo-5.3.5-344.1 php5-exif-5.3.5-344.1 php5-exif-debuginfo-5.3.5-344.1 php5-fastcgi-5.3.5-344.1 php5-fastcgi-debuginfo-5.3.5-344.1 php5-fileinfo-5.3.5-344.1 php5-fileinfo-debuginfo-5.3.5-344.1 php5-fpm-5.3.5-344.1 php5-fpm-debuginfo-5.3.5-344.1 php5-ftp-5.3.5-344.1 php5-ftp-debuginfo-5.3.5-344.1 php5-gd-5.3.5-344.1 php5-gd-debuginfo-5.3.5-344.1 php5-gettext-5.3.5-344.1 php5-gettext-debuginfo-5.3.5-344.1 php5-gmp-5.3.5-344.1 php5-gmp-debuginfo-5.3.5-344.1 php5-hash-5.3.5-344.1 php5-hash-debuginfo-5.3.5-344.1 php5-iconv-5.3.5-344.1 php5-iconv-debuginfo-5.3.5-344.1 php5-imap-5.3.5-344.1 php5-imap-debuginfo-5.3.5-344.1 php5-intl-5.3.5-344.1 php5-intl-debuginfo-5.3.5-344.1 php5-json-5.3.5-344.1 php5-json-debuginfo-5.3.5-344.1 php5-ldap-5.3.5-344.1 php5-ldap-debuginfo-5.3.5-344.1 php5-mbstring-5.3.5-344.1 php5-mbstring-debuginfo-5.3.5-344.1 php5-mcrypt-5.3.5-344.1 php5-mcrypt-debuginfo-5.3.5-344.1 php5-mysql-5.3.5-344.1 php5-mysql-debuginfo-5.3.5-344.1 php5-odbc-5.3.5-344.1 php5-odbc-debuginfo-5.3.5-344.1 php5-openssl-5.3.5-344.1 php5-openssl-debuginfo-5.3.5-344.1 php5-pcntl-5.3.5-344.1 php5-pcntl-debuginfo-5.3.5-344.1 php5-pdo-5.3.5-344.1 php5-pdo-debuginfo-5.3.5-344.1 php5-pgsql-5.3.5-344.1 php5-pgsql-debuginfo-5.3.5-344.1 php5-phar-5.3.5-344.1 php5-phar-debuginfo-5.3.5-344.1 php5-posix-5.3.5-344.1 php5-posix-debuginfo-5.3.5-344.1 php5-pspell-5.3.5-344.1 php5-pspell-debuginfo-5.3.5-344.1 php5-readline-5.3.5-344.1 php5-readline-debuginfo-5.3.5-344.1 php5-shmop-5.3.5-344.1 php5-shmop-debuginfo-5.3.5-344.1 php5-snmp-5.3.5-344.1 php5-snmp-debuginfo-5.3.5-344.1 php5-soap-5.3.5-344.1 php5-soap-debuginfo-5.3.5-344.1 php5-sockets-5.3.5-344.1 php5-sockets-debuginfo-5.3.5-344.1 php5-sqlite-5.3.5-344.1 php5-sqlite-debuginfo-5.3.5-344.1 php5-suhosin-5.3.5-344.1 php5-suhosin-debuginfo-5.3.5-344.1 php5-sysvmsg-5.3.5-344.1 php5-sysvmsg-debuginfo-5.3.5-344.1 php5-sysvsem-5.3.5-344.1 php5-sysvsem-debuginfo-5.3.5-344.1 php5-sysvshm-5.3.5-344.1 php5-sysvshm-debuginfo-5.3.5-344.1 php5-tidy-5.3.5-344.1 php5-tidy-debuginfo-5.3.5-344.1 php5-tokenizer-5.3.5-344.1 php5-tokenizer-debuginfo-5.3.5-344.1 php5-wddx-5.3.5-344.1 php5-wddx-debuginfo-5.3.5-344.1 php5-xmlreader-5.3.5-344.1 php5-xmlreader-debuginfo-5.3.5-344.1 php5-xmlrpc-5.3.5-344.1 php5-xmlrpc-debuginfo-5.3.5-344.1 php5-xmlwriter-5.3.5-344.1 php5-xmlwriter-debuginfo-5.3.5-344.1 php5-xsl-5.3.5-344.1 php5-xsl-debuginfo-5.3.5-344.1 php5-zip-5.3.5-344.1 php5-zip-debuginfo-5.3.5-344.1 php5-zlib-5.3.5-344.1 php5-zlib-debuginfo-5.3.5-344.1 - openSUSE 11.4 (noarch): php5-pear-5.3.5-344.1 References: http://support.novell.com/security/cve/CVE-2012-2688.html http://support.novell.com/security/cve/CVE-2012-3365.html https://bugzilla.novell.com/769785 https://bugzilla.novell.com/772580 https://bugzilla.novell.com/772582

1 0

openSUSE-SU-2012:0975-1: moderate: libxml2: fixed integer overflow
by opensuse-security＠opensuse.org 09 Aug '12

09 Aug '12

openSUSE Security Update: libxml2: fixed integer overflow ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0975-1 Rating: moderate References: #769184 Cross-References: CVE-2012-2807 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Fixed an integer overflow in libxml2 which could lead to crashes or potential code execution. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-501 - openSUSE 11.4: zypper in -t patch openSUSE-2012-501 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): libxml2-2.7.8+git20110708-3.11.1 libxml2-debuginfo-2.7.8+git20110708-3.11.1 libxml2-debugsource-2.7.8+git20110708-3.11.1 libxml2-devel-2.7.8+git20110708-3.11.1 - openSUSE 12.1 (x86_64): libxml2-32bit-2.7.8+git20110708-3.11.1 libxml2-debuginfo-32bit-2.7.8+git20110708-3.11.1 libxml2-devel-32bit-2.7.8+git20110708-3.11.1 - openSUSE 12.1 (noarch): libxml2-doc-2.7.8+git20110708-3.11.1 - openSUSE 12.1 (ia64): libxml2-debuginfo-x86-2.7.8+git20110708-3.11.1 libxml2-x86-2.7.8+git20110708-3.11.1 - openSUSE 11.4 (i586 x86_64): libxml2-2.7.8-34.1 libxml2-debuginfo-2.7.8-34.1 libxml2-debugsource-2.7.8-34.1 libxml2-devel-2.7.8-34.1 - openSUSE 11.4 (x86_64): libxml2-32bit-2.7.8-34.1 libxml2-debuginfo-32bit-2.7.8-34.1 libxml2-devel-32bit-2.7.8-34.1 - openSUSE 11.4 (noarch): libxml2-doc-2.7.8-34.1 - openSUSE 11.4 (ia64): libxml2-debuginfo-x86-2.7.8-34.1 libxml2-x86-2.7.8-34.1 References: http://support.novell.com/security/cve/CVE-2012-2807.html https://bugzilla.novell.com/769184

1 0

openSUSE-SU-2012:0974-1: moderate: mono-web: Fixed a XSS attack in the HttpForbidden class
by opensuse-security＠opensuse.org 09 Aug '12

09 Aug '12

openSUSE Security Update: mono-web: Fixed a XSS attack in the HttpForbidden class ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0974-1 Rating: moderate References: #769799 Cross-References: CVE-2012-3382 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Mono was updated to fix: A cross site scripting attack in the System.Web class "forbidden extensions" filtering was fixed. (CVE-2012-3382) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-498 - openSUSE 11.4: zypper in -t patch openSUSE-2012-498 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): ibm-data-db2-2.10.6-2.4.1 libmono-2_0-1-2.10.6-2.4.1 libmono-2_0-1-debuginfo-2.10.6-2.4.1 libmono-2_0-devel-2.10.6-2.4.1 libmonosgen-2_0-0-2.10.6-2.4.1 libmonosgen-2_0-0-debuginfo-2.10.6-2.4.1 libmonosgen-2_0-devel-2.10.6-2.4.1 mono-complete-2.10.6-2.4.1 mono-core-2.10.6-2.4.1 mono-core-debuginfo-2.10.6-2.4.1 mono-core-debugsource-2.10.6-2.4.1 mono-data-2.10.6-2.4.1 mono-data-oracle-2.10.6-2.4.1 mono-data-postgresql-2.10.6-2.4.1 mono-data-sqlite-2.10.6-2.4.1 mono-devel-2.10.6-2.4.1 mono-devel-debuginfo-2.10.6-2.4.1 mono-extras-2.10.6-2.4.1 mono-locale-extras-2.10.6-2.4.1 mono-mvc-2.10.6-2.4.1 mono-nunit-2.10.6-2.4.1 mono-wcf-2.10.6-2.4.1 mono-web-2.10.6-2.4.1 mono-winforms-2.10.6-2.4.1 mono-winfxcore-2.10.6-2.4.1 monodoc-core-2.10.6-2.4.1 - openSUSE 11.4 (i586 x86_64): ibm-data-db2-2.8.2-0.5.1 libmono-2_0-1-2.8.2-0.5.1 libmono-2_0-1-debuginfo-2.8.2-0.5.1 libmono-2_0-devel-2.8.2-0.5.1 libmonosgen-2_0-0-2.8.2-0.5.1 libmonosgen-2_0-0-debuginfo-2.8.2-0.5.1 libmonosgen-2_0-devel-2.8.2-0.5.1 mono-complete-2.8.2-0.5.1 mono-core-2.8.2-0.5.1 mono-core-debuginfo-2.8.2-0.5.1 mono-core-debugsource-2.8.2-0.5.1 mono-data-2.8.2-0.5.1 mono-data-oracle-2.8.2-0.5.1 mono-data-postgresql-2.8.2-0.5.1 mono-data-sqlite-2.8.2-0.5.1 mono-devel-2.8.2-0.5.1 mono-devel-debuginfo-2.8.2-0.5.1 mono-extras-2.8.2-0.5.1 mono-locale-extras-2.8.2-0.5.1 mono-mvc-2.8.2-0.5.1 mono-nunit-2.8.2-0.5.1 mono-wcf-2.8.2-0.5.1 mono-web-2.8.2-0.5.1 mono-winforms-2.8.2-0.5.1 mono-winfxcore-2.8.2-0.5.1 monodoc-core-2.8.2-0.5.1 References: http://support.novell.com/security/cve/CVE-2012-3382.html https://bugzilla.novell.com/769799

1 0

openSUSE-SU-2012:0971-1: moderate: bind: update to fix a remote denial of service in DNSSEC
by opensuse-security＠opensuse.org 08 Aug '12

08 Aug '12

openSUSE Security Update: bind: update to fix a remote denial of service in DNSSEC ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0971-1 Rating: moderate References: #772945 Cross-References: CVE-2012-3817 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: bind was updated to fix a remote denial of service (crash) problem in high load DNSSEC scenarious. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch openSUSE-2012-493 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): bind-9.7.6P2-0.34.1 bind-chrootenv-9.7.6P2-0.34.1 bind-debuginfo-9.7.6P2-0.34.1 bind-debugsource-9.7.6P2-0.34.1 bind-devel-9.7.6P2-0.34.1 bind-libs-9.7.6P2-0.34.1 bind-libs-debuginfo-9.7.6P2-0.34.1 bind-lwresd-9.7.6P2-0.34.1 bind-lwresd-debuginfo-9.7.6P2-0.34.1 bind-utils-9.7.6P2-0.34.1 bind-utils-debuginfo-9.7.6P2-0.34.1 - openSUSE 11.4 (x86_64): bind-libs-32bit-9.7.6P2-0.34.1 bind-libs-debuginfo-32bit-9.7.6P2-0.34.1 - openSUSE 11.4 (noarch): bind-doc-9.7.6P2-0.34.1 - openSUSE 11.4 (ia64): bind-libs-debuginfo-x86-9.7.6P2-0.34.1 bind-libs-x86-9.7.6P2-0.34.1 References: http://support.novell.com/security/cve/CVE-2012-3817.html https://bugzilla.novell.com/772945

1 0

openSUSE-SU-2012:0970-1: moderate: python-django: fixed some security issues
by opensuse-security＠opensuse.org 08 Aug '12

08 Aug '12

openSUSE Security Update: python-django: fixed some security issues ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0970-1 Rating: moderate References: #773769 Cross-References: CVE-2012-3442 CVE-2012-3443 CVE-2012-3444 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: Python Django was updated to fix several security issues. CVE-2012-3442: Cross-site scripting in authentication views CVE-2012-3443: Denial-of-service in image validation CVE-2012-3444: Denial-of-service via get_image_dimensions() Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-495 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (noarch): python-django-1.3.2-3.4.1 References: http://support.novell.com/security/cve/CVE-2012-3442.html http://support.novell.com/security/cve/CVE-2012-3443.html http://support.novell.com/security/cve/CVE-2012-3444.html https://bugzilla.novell.com/773769

1 0

openSUSE-SU-2012:0969-1: moderate: bind: Fixed a remote denial of service in DNSSEC
by opensuse-security＠opensuse.org 08 Aug '12

08 Aug '12

openSUSE Security Update: bind: Fixed a remote denial of service in DNSSEC ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0969-1 Rating: moderate References: #772945 Cross-References: CVE-2012-3817 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Bind was updated to fix a denial of service (crash) during heavy DNSSEC validation load that can cause a "Bad Cache" assertion failure. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-494 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): bind-9.8.3P2-4.17.1 bind-chrootenv-9.8.3P2-4.17.1 bind-debuginfo-9.8.3P2-4.17.1 bind-debugsource-9.8.3P2-4.17.1 bind-devel-9.8.3P2-4.17.1 bind-libs-9.8.3P2-4.17.1 bind-libs-debuginfo-9.8.3P2-4.17.1 bind-lwresd-9.8.3P2-4.17.1 bind-lwresd-debuginfo-9.8.3P2-4.17.1 bind-utils-9.8.3P2-4.17.1 bind-utils-debuginfo-9.8.3P2-4.17.1 - openSUSE 12.1 (x86_64): bind-libs-32bit-9.8.3P2-4.17.1 bind-libs-debuginfo-32bit-9.8.3P2-4.17.1 - openSUSE 12.1 (noarch): bind-doc-9.8.3P2-4.17.1 - openSUSE 12.1 (ia64): bind-libs-debuginfo-x86-9.8.3P2-4.17.1 bind-libs-x86-9.8.3P2-4.17.1 References: http://support.novell.com/security/cve/CVE-2012-3817.html https://bugzilla.novell.com/772945

1 0

openSUSE-SU-2012:0968-1: icinga: Fixed the db permissions in the create mysqldb.sh script
by opensuse-security＠opensuse.org 08 Aug '12

08 Aug '12

openSUSE Security Update: icinga: Fixed the db permissions in the create mysqldb.sh script ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0968-1 Rating: low References: #767319 Cross-References: CVE-2012-3441 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: - fixed icinga-create_mysqldb.sh - it granted icinga access to all dbs - so please check the permissions of your mysql icinga user Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-496 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): icinga-1.5.1-5.4.1 icinga-debuginfo-1.5.1-5.4.1 icinga-debugsource-1.5.1-5.4.1 icinga-devel-1.5.1-5.4.1 icinga-doc-1.5.1-5.4.1 icinga-idoutils-1.5.1-5.4.1 icinga-idoutils-debuginfo-1.5.1-5.4.1 icinga-idoutils-mysql-1.5.1-5.4.1 icinga-idoutils-oracle-1.5.1-5.4.1 icinga-idoutils-pgsql-1.5.1-5.4.1 icinga-plugins-eventhandlers-1.5.1-5.4.1 icinga-www-1.5.1-5.4.1 icinga-www-debuginfo-1.5.1-5.4.1 References: http://support.novell.com/security/cve/CVE-2012-3441.html https://bugzilla.novell.com/767319

1 0

openSUSE-SU-2012:0967-1: moderate: krb5: fixed several potential code execution flaws
by opensuse-security＠opensuse.org 08 Aug '12

08 Aug '12

openSUSE Security Update: krb5: fixed several potential code execution flaws ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0967-1 Rating: moderate References: #770172 Cross-References: CVE-2012-1014 CVE-2012-1015 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: Several potential codeexecution flaws were fixed in krb5. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-497 - openSUSE 11.4: zypper in -t patch openSUSE-2012-497 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): krb5-1.9.1-24.9.1 krb5-client-1.9.1-24.9.1 krb5-client-debuginfo-1.9.1-24.9.1 krb5-debuginfo-1.9.1-24.9.1 krb5-debugsource-1.9.1-24.9.1 krb5-devel-1.9.1-24.9.1 krb5-plugin-kdb-ldap-1.9.1-24.9.1 krb5-plugin-kdb-ldap-debuginfo-1.9.1-24.9.1 krb5-plugin-preauth-pkinit-1.9.1-24.9.1 krb5-plugin-preauth-pkinit-debuginfo-1.9.1-24.9.1 krb5-server-1.9.1-24.9.1 krb5-server-debuginfo-1.9.1-24.9.1 - openSUSE 12.1 (x86_64): krb5-32bit-1.9.1-24.9.1 krb5-debuginfo-32bit-1.9.1-24.9.1 krb5-devel-32bit-1.9.1-24.9.1 - openSUSE 12.1 (ia64): krb5-debuginfo-x86-1.9.1-24.9.1 krb5-x86-1.9.1-24.9.1 - openSUSE 11.4 (i586 x86_64): krb5-1.8.3-52.1 krb5-client-1.8.3-52.1 krb5-client-debuginfo-1.8.3-52.1 krb5-debuginfo-1.8.3-52.1 krb5-debugsource-1.8.3-52.1 krb5-devel-1.8.3-52.1 krb5-plugin-kdb-ldap-1.8.3-52.1 krb5-plugin-kdb-ldap-debuginfo-1.8.3-52.1 krb5-plugin-preauth-pkinit-1.8.3-52.1 krb5-plugin-preauth-pkinit-debuginfo-1.8.3-52.1 krb5-server-1.8.3-52.1 krb5-server-debuginfo-1.8.3-52.1 - openSUSE 11.4 (x86_64): krb5-32bit-1.8.3-52.1 krb5-debuginfo-32bit-1.8.3-52.1 krb5-devel-32bit-1.8.3-52.1 - openSUSE 11.4 (ia64): krb5-debuginfo-x86-1.8.3-52.1 krb5-x86-1.8.3-52.1 References: http://support.novell.com/security/cve/CVE-2012-1014.html http://support.novell.com/security/cve/CVE-2012-1015.html https://bugzilla.novell.com/770172

1 0

openSUSE-SU-2012:0955-1: moderate: tiff (CVE-2012-3401)
by opensuse-security＠opensuse.org 06 Aug '12

06 Aug '12

openSUSE Security Update: tiff (CVE-2012-3401) ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0955-1 Rating: moderate References: #770816 Cross-References: CVE-2012-3401 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The following issues was fixed in tiff: - a overflow in tiff2pdf (CVE-2012-3401) [bnc#770816] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-492 - openSUSE 11.4: zypper in -t patch openSUSE-2012-492 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): libtiff-devel-3.9.5-8.10.1 libtiff3-3.9.5-8.10.1 libtiff3-debuginfo-3.9.5-8.10.1 tiff-3.9.5-8.10.1 tiff-debuginfo-3.9.5-8.10.1 tiff-debugsource-3.9.5-8.10.1 - openSUSE 12.1 (x86_64): libtiff-devel-32bit-3.9.5-8.10.1 libtiff3-32bit-3.9.5-8.10.1 libtiff3-debuginfo-32bit-3.9.5-8.10.1 - openSUSE 12.1 (ia64): libtiff3-debuginfo-x86-3.9.5-8.10.1 libtiff3-x86-3.9.5-8.10.1 - openSUSE 11.4 (i586 x86_64): libtiff-devel-3.9.4-31.1 libtiff3-3.9.4-31.1 libtiff3-debuginfo-3.9.4-31.1 tiff-3.9.4-31.1 tiff-debuginfo-3.9.4-31.1 tiff-debugsource-3.9.4-31.1 - openSUSE 11.4 (x86_64): libtiff-devel-32bit-3.9.4-31.1 libtiff3-32bit-3.9.4-31.1 libtiff3-debuginfo-32bit-3.9.4-31.1 - openSUSE 11.4 (ia64): libtiff3-debuginfo-x86-3.9.4-31.1 libtiff3-x86-3.9.4-31.1 References: http://support.novell.com/security/cve/CVE-2012-3401.html https://bugzilla.novell.com/770816

1 0

openSUSE-SU-2012:0954-1: moderate: rhythmbox (CVE-2012-3355)
by opensuse-security＠opensuse.org 06 Aug '12

06 Aug '12

openSUSE Security Update: rhythmbox (CVE-2012-3355) ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0954-1 Rating: moderate References: #768681 Cross-References: CVE-2012-3355 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This security update fixes problems in rhythmbox: - Add rhythmbox-CVE-2012-3355.patch: fix insecure temporary directory use in context plugin. (bnc#768681, CVE-2012-3355) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-491 - openSUSE 11.4: zypper in -t patch openSUSE-2012-491 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): rhythmbox-0.13.3-17.7.1 rhythmbox-debuginfo-0.13.3-17.7.1 rhythmbox-debugsource-0.13.3-17.7.1 rhythmbox-devel-0.13.3-17.7.1 - openSUSE 12.1 (noarch): rhythmbox-lang-0.13.3-17.7.1 - openSUSE 11.4 (i586 x86_64): rhythmbox-0.13.3-8.1 rhythmbox-debuginfo-0.13.3-8.1 rhythmbox-debugsource-0.13.3-8.1 rhythmbox-devel-0.13.3-8.1 - openSUSE 11.4 (noarch): rhythmbox-lang-0.13.3-8.1 References: http://support.novell.com/security/cve/CVE-2012-3355.html https://bugzilla.novell.com/768681

1 0

openSUSE-RU-2012:0940-1: NetworkManager-gnome: nm-connection-editor cannot save configuration in single-edit mode
by maintenance＠opensuse.org 02 Aug '12

02 Aug '12

openSUSE Recommended Update: NetworkManager-gnome: nm-connection-editor cannot save configuration in single-edit mode ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0940-1 Rating: low References: #772587 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for NetworkManager-gnome: - bnc#772587: When nm-connection-editor was in single-edit mode, it closed the process before gaining the privilege to modify the system connection, so the modified configuration was never saved. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-488 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): NetworkManager-gnome-0.9.1.90-3.18.1 NetworkManager-gnome-debuginfo-0.9.1.90-3.18.1 NetworkManager-gnome-debugsource-0.9.1.90-3.18.1 libnm-gtk-devel-0.9.1.90-3.18.1 libnm-gtk0-0.9.1.90-3.18.1 libnm-gtk0-debuginfo-0.9.1.90-3.18.1 - openSUSE 12.1 (noarch): NetworkManager-gnome-lang-0.9.1.90-3.18.1 References: https://bugzilla.novell.com/772587

1 0

openSUSE-RU-2012:0939-1: gnucash: fixed loading help
by maintenance＠opensuse.org 02 Aug '12

02 Aug '12

openSUSE Recommended Update: gnucash: fixed loading help ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0939-1 Rating: low References: #771530 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issue for gnucash: - bnc#771530: gnucash uses a ghelp: uri to launch the help. Those are mangled up though by susehelp, which results in yelp only spitting an error. - Additionally, fix the gnucash-docs package itself: the german help (allthough being very incomplete) at least now loads. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-489 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (noarch): gnucash-docs-2.4.1.svn-4.4.1 susehelp-2009.10.06-11.4.1 susehelp_cz-2009.10.06-11.4.1 susehelp_de-2009.10.06-11.4.1 susehelp_en-2009.10.06-11.4.1 susehelp_es-2009.10.06-11.4.1 susehelp_fr-2009.10.06-11.4.1 susehelp_hu-2009.10.06-11.4.1 susehelp_it-2009.10.06-11.4.1 References: https://bugzilla.novell.com/771530

1 0

openSUSE-RU-2012:0938-1: glib2: Add glib2-g_hash_table_foreach_crash-fix.patch
by maintenance＠opensuse.org 02 Aug '12

02 Aug '12

openSUSE Recommended Update: glib2: Add glib2-g_hash_table_foreach_crash-fix.patch ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0938-1 Rating: low References: #751127 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues for glib2: - bnc#751127: Add glib2-g_hash_table_foreach_crash-fix.patch Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-487 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): glib2-debugsource-2.30.1-2.4.1 glib2-devel-2.30.1-2.4.1 glib2-devel-debuginfo-2.30.1-2.4.1 glib2-devel-static-2.30.1-2.4.1 glib2-tools-2.30.1-2.4.1 glib2-tools-debuginfo-2.30.1-2.4.1 libgio-2_0-0-2.30.1-2.4.1 libgio-2_0-0-debuginfo-2.30.1-2.4.1 libgio-fam-2.30.1-2.4.1 libgio-fam-debuginfo-2.30.1-2.4.1 libglib-2_0-0-2.30.1-2.4.1 libglib-2_0-0-debuginfo-2.30.1-2.4.1 libgmodule-2_0-0-2.30.1-2.4.1 libgmodule-2_0-0-debuginfo-2.30.1-2.4.1 libgobject-2_0-0-2.30.1-2.4.1 libgobject-2_0-0-debuginfo-2.30.1-2.4.1 libgthread-2_0-0-2.30.1-2.4.1 libgthread-2_0-0-debuginfo-2.30.1-2.4.1 - openSUSE 12.1 (x86_64): glib2-devel-debuginfo-32bit-2.30.1-2.4.1 glib2-tools-32bit-2.30.1-2.4.1 glib2-tools-debuginfo-32bit-2.30.1-2.4.1 libgio-2_0-0-32bit-2.30.1-2.4.1 libgio-2_0-0-debuginfo-32bit-2.30.1-2.4.1 libgio-fam-32bit-2.30.1-2.4.1 libgio-fam-debuginfo-32bit-2.30.1-2.4.1 libglib-2_0-0-32bit-2.30.1-2.4.1 libglib-2_0-0-debuginfo-32bit-2.30.1-2.4.1 libgmodule-2_0-0-32bit-2.30.1-2.4.1 libgmodule-2_0-0-debuginfo-32bit-2.30.1-2.4.1 libgobject-2_0-0-32bit-2.30.1-2.4.1 libgobject-2_0-0-debuginfo-32bit-2.30.1-2.4.1 libgthread-2_0-0-32bit-2.30.1-2.4.1 libgthread-2_0-0-debuginfo-32bit-2.30.1-2.4.1 - openSUSE 12.1 (noarch): gio-branding-upstream-2.30.1-2.4.1 glib2-lang-2.30.1-2.4.1 - openSUSE 12.1 (ia64): glib2-devel-debuginfo-x86-2.30.1-2.4.1 glib2-tools-debuginfo-x86-2.30.1-2.4.1 glib2-tools-x86-2.30.1-2.4.1 libgio-2_0-0-debuginfo-x86-2.30.1-2.4.1 libgio-2_0-0-x86-2.30.1-2.4.1 libgio-fam-debuginfo-x86-2.30.1-2.4.1 libgio-fam-x86-2.30.1-2.4.1 libglib-2_0-0-debuginfo-x86-2.30.1-2.4.1 libglib-2_0-0-x86-2.30.1-2.4.1 libgmodule-2_0-0-debuginfo-x86-2.30.1-2.4.1 libgmodule-2_0-0-x86-2.30.1-2.4.1 libgobject-2_0-0-debuginfo-x86-2.30.1-2.4.1 libgobject-2_0-0-x86-2.30.1-2.4.1 libgthread-2_0-0-debuginfo-x86-2.30.1-2.4.1 libgthread-2_0-0-x86-2.30.1-2.4.1 References: https://bugzilla.novell.com/751127

1 0

openSUSE-RU-2012:0937-1: kernel-firmware: update for iwl2000/iwl2030
by maintenance＠opensuse.org 02 Aug '12

02 Aug '12

openSUSE Recommended Update: kernel-firmware: update for iwl2000/iwl2030 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2012:0937-1 Rating: low References: Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update of kernel firmware contains updates for the Intel Wireless chipsets iwl2000/iwl2030. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-475 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (noarch): kernel-firmware-20111025git-1.13.1 References:

1 0

openSUSE-SU-2012:0935-1: important: seamonkey: Update to Seamonkey 2.11
by opensuse-security＠opensuse.org 01 Aug '12

01 Aug '12

openSUSE Security Update: seamonkey: Update to Seamonkey 2.11 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0935-1 Rating: important References: #771583 Cross-References: CVE-2012-1948 CVE-2012-1949 CVE-2012-1951 CVE-2012-1952 CVE-2012-1953 CVE-2012-1954 CVE-2012-1955 CVE-2012-1957 CVE-2012-1958 CVE-2012-1959 CVE-2012-1960 CVE-2012-1961 CVE-2012-1962 CVE-2012-1963 CVE-2012-1967 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes 15 vulnerabilities is now available. Description: Seamonkey was updated to version 2.11 (bnc#771583) * MFSA 2012-42/CVE-2012-1949/CVE-2012-1948 Miscellaneous memory safety hazards * MFSA 2012-44/CVE-2012-1951/CVE-2012-1954/CVE-2012-1953/CVE-2012-1 952 Gecko memory corruption * MFSA 2012-45/CVE-2012-1955 (bmo#757376) Spoofing issue with location * MFSA 2012-47/CVE-2012-1957 (bmo#750096) Improper filtering of javascript in HTML feed-view * MFSA 2012-48/CVE-2012-1958 (bmo#750820) use-after-free in nsGlobalWindow::PageHidden * MFSA 2012-49/CVE-2012-1959 (bmo#754044, bmo#737559) Same-compartment Security Wrappers can be bypassed * MFSA 2012-50/CVE-2012-1960 (bmo#761014) Out of bounds read in QCMS * MFSA 2012-51/CVE-2012-1961 (bmo#761655) X-Frame-Options header ignored when duplicated * MFSA 2012-52/CVE-2012-1962 (bmo#764296) JSDependentString::undepend string conversion results in memory corruption * MFSA 2012-53/CVE-2012-1963 (bmo#767778) Content Security Policy 1.0 implementation errors cause data leakage * MFSA 2012-56/CVE-2012-1967 (bmo#758344) Code execution through javascript: URLs * relicensed to MPL-2.0 - updated/removed patches - requires NSS 3.13.5 - update to Seamonkey 2.10.1 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-473 - openSUSE 11.4: zypper in -t patch openSUSE-2012-473 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): seamonkey-2.11-2.24.2 seamonkey-debuginfo-2.11-2.24.2 seamonkey-debugsource-2.11-2.24.2 seamonkey-dom-inspector-2.11-2.24.2 seamonkey-irc-2.11-2.24.2 seamonkey-translations-common-2.11-2.24.2 seamonkey-translations-other-2.11-2.24.2 seamonkey-venkman-2.11-2.24.2 - openSUSE 11.4 (i586 x86_64): seamonkey-2.11-24.3 seamonkey-debuginfo-2.11-24.3 seamonkey-debugsource-2.11-24.3 seamonkey-dom-inspector-2.11-24.3 seamonkey-irc-2.11-24.3 seamonkey-translations-common-2.11-24.3 seamonkey-translations-other-2.11-24.3 seamonkey-venkman-2.11-24.3 References: http://support.novell.com/security/cve/CVE-2012-1948.html http://support.novell.com/security/cve/CVE-2012-1949.html http://support.novell.com/security/cve/CVE-2012-1951.html http://support.novell.com/security/cve/CVE-2012-1952.html http://support.novell.com/security/cve/CVE-2012-1953.html http://support.novell.com/security/cve/CVE-2012-1954.html http://support.novell.com/security/cve/CVE-2012-1955.html http://support.novell.com/security/cve/CVE-2012-1957.html http://support.novell.com/security/cve/CVE-2012-1958.html http://support.novell.com/security/cve/CVE-2012-1959.html http://support.novell.com/security/cve/CVE-2012-1960.html http://support.novell.com/security/cve/CVE-2012-1961.html http://support.novell.com/security/cve/CVE-2012-1962.html http://support.novell.com/security/cve/CVE-2012-1963.html http://support.novell.com/security/cve/CVE-2012-1967.html https://bugzilla.novell.com/771583

1 0

openSUSE-SU-2012:0934-1: moderate: libpng14 (CVE-2012-3425)
by opensuse-security＠opensuse.org 01 Aug '12

01 Aug '12

openSUSE Security Update: libpng14 (CVE-2012-3425) ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0934-1 Rating: moderate References: #772760 Cross-References: CVE-2012-3425 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: - fixed CVE-2012-3425 [bnc#772760] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-474 - openSUSE 11.4: zypper in -t patch openSUSE-2012-474 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): libpng14-14-1.4.11-3.12.1 libpng14-14-debuginfo-1.4.11-3.12.1 libpng14-compat-devel-1.4.11-3.12.1 libpng14-debugsource-1.4.11-3.12.1 libpng14-devel-1.4.11-3.12.1 - openSUSE 12.1 (x86_64): libpng14-14-32bit-1.4.11-3.12.1 libpng14-14-debuginfo-32bit-1.4.11-3.12.1 libpng14-compat-devel-32bit-1.4.11-3.12.1 libpng14-devel-32bit-1.4.11-3.12.1 - openSUSE 12.1 (ia64): libpng14-14-debuginfo-x86-1.4.11-3.12.1 libpng14-14-x86-1.4.11-3.12.1 - openSUSE 11.4 (i586 x86_64): libpng14-14-1.4.4-23.1 libpng14-14-debuginfo-1.4.4-23.1 libpng14-compat-devel-1.4.4-23.1 libpng14-debugsource-1.4.4-23.1 libpng14-devel-1.4.4-23.1 - openSUSE 11.4 (x86_64): libpng14-14-32bit-1.4.4-23.1 libpng14-14-debuginfo-32bit-1.4.4-23.1 libpng14-compat-devel-32bit-1.4.4-23.1 libpng14-devel-32bit-1.4.4-23.1 - openSUSE 11.4 (ia64): libpng14-14-debuginfo-x86-1.4.4-23.1 libpng14-14-x86-1.4.4-23.1 References: http://support.novell.com/security/cve/CVE-2012-3425.html https://bugzilla.novell.com/772760

1 0

openSUSE-SU-2012:0933-1: gnome-terminal: Fixed denial of service with escape sequences
by opensuse-security＠opensuse.org 01 Aug '12

01 Aug '12

openSUSE Security Update: gnome-terminal: Fixed denial of service with escape sequences ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0933-1 Rating: low References: #772761 Cross-References: CVE-2012-2738 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Add vte-CVE-2012-2738.patch: fix potential DoS through malicious escape sequences. Fix bnc#772761, CVE-2012-2738. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-472 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): glade3-catalog-vte-0.28.2-4.4.1 libvte9-0.28.2-4.4.1 libvte9-debuginfo-0.28.2-4.4.1 python-vte-0.28.2-4.4.1 python-vte-debuginfo-0.28.2-4.4.1 vte2-debugsource-0.28.2-4.4.1 vte2-devel-0.28.2-4.4.1 vte2-tools-0.28.2-4.4.1 vte2-tools-debuginfo-0.28.2-4.4.1 - openSUSE 12.1 (noarch): vte2-lang-0.28.2-4.4.1 References: http://support.novell.com/security/cve/CVE-2012-2738.html https://bugzilla.novell.com/772761

1 0

openSUSE-SU-2012:0932-1: moderate: libjpeg-turbo (CVE-2012-2806)
by opensuse-security＠opensuse.org 01 Aug '12

01 Aug '12

openSUSE Security Update: libjpeg-turbo (CVE-2012-2806) ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0932-1 Rating: moderate References: #771791 Cross-References: CVE-2012-2806 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: - fixed heap overflow [bnc#771791] * CVE-2012-2806.patch Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-469 - openSUSE 11.4: zypper in -t patch openSUSE-2012-469 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): libjpeg-turbo-1.1.1-10.4.1 libjpeg-turbo-debuginfo-1.1.1-10.4.1 libjpeg-turbo-debugsource-1.1.1-10.4.1 libjpeg62-62.0.0-10.4.1 libjpeg62-debuginfo-62.0.0-10.4.1 libjpeg62-devel-62.0.0-10.4.1 - openSUSE 12.1 (x86_64): libjpeg62-32bit-62.0.0-10.4.1 libjpeg62-debuginfo-32bit-62.0.0-10.4.1 libjpeg62-devel-32bit-62.0.0-10.4.1 - openSUSE 12.1 (ia64): libjpeg62-debuginfo-x86-62.0.0-10.4.1 libjpeg62-x86-62.0.0-10.4.1 - openSUSE 11.4 (i586 x86_64): libjpeg-turbo-1.0.1-6.1 libjpeg-turbo-debuginfo-1.0.1-6.1 libjpeg-turbo-debugsource-1.0.1-6.1 libjpeg62-62.0.0-6.1 libjpeg62-debuginfo-62.0.0-6.1 libjpeg62-devel-62.0.0-6.1 - openSUSE 11.4 (x86_64): libjpeg62-32bit-62.0.0-6.1 libjpeg62-debuginfo-32bit-62.0.0-6.1 libjpeg62-devel-32bit-62.0.0-6.1 - openSUSE 11.4 (ia64): libjpeg62-debuginfo-x86-62.0.0-6.1 libjpeg62-x86-62.0.0-6.1 References: http://support.novell.com/security/cve/CVE-2012-2806.html https://bugzilla.novell.com/771791

1 0

openSUSE-SU-2012:0931-1: vte/gnome-terminal
by opensuse-security＠opensuse.org 01 Aug '12

01 Aug '12

openSUSE Security Update: vte/gnome-terminal ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0931-1 Rating: low References: #699214 #772761 Cross-References: CVE-2011-2198 CVE-2012-2738 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: - Add vte-CVE-2011-2198.patch: fix memory exhaustion through malicious escape sequences. Fix bnc#699214, CVE-2011-2198 (openSUSE 11.4 only). - Add vte-CVE-2012-2738.patch: fix potential DoS through malicious escape sequences. Fix bnc#772761, CVE-2012-2738. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-471 - openSUSE 11.4: zypper in -t patch openSUSE-2012-471 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): glade-catalog-vte-0.30.1-2.4.1 gnome-pty-helper-0.30.1-2.4.1 gnome-pty-helper-debuginfo-0.30.1-2.4.1 libvte2_90-9-0.30.1-2.4.1 libvte2_90-9-debuginfo-0.30.1-2.4.1 vte-debugsource-0.30.1-2.4.1 vte-devel-0.30.1-2.4.1 vte-tools-0.30.1-2.4.1 vte-tools-debuginfo-0.30.1-2.4.1 - openSUSE 12.1 (noarch): vte-lang-0.30.1-2.4.1 - openSUSE 11.4 (i586 x86_64): glade3-catalog-vte-0.26.2-5.1 libvte9-0.26.2-5.1 libvte9-debuginfo-0.26.2-5.1 python-vte-0.26.2-5.1 python-vte-debuginfo-0.26.2-5.1 vte-debugsource-0.26.2-5.1 vte-devel-0.26.2-5.1 vte-tools-0.26.2-5.1 vte-tools-debuginfo-0.26.2-5.1 - openSUSE 11.4 (noarch): vte-lang-0.26.2-5.1 References: http://support.novell.com/security/cve/CVE-2011-2198.html http://support.novell.com/security/cve/CVE-2012-2738.html https://bugzilla.novell.com/699214 https://bugzilla.novell.com/772761

1 0

openSUSE-SU-2012:0930-1: moderate: wireshark (CVE-2012-4048, CVE-2012-4049)
by opensuse-security＠opensuse.org 01 Aug '12

01 Aug '12

openSUSE Security Update: wireshark (CVE-2012-4048, CVE-2012-4049) ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0930-1 Rating: moderate References: #772738 Cross-References: CVE-2012-4048 CVE-2012-4049 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: - This version update fixes the following security issues (bnc#772738): * The PPP dissector could crash (wnpa-sec-2012-11 CVE-2012-4048) * The NFS dissector could use excessive amounts of CPU (wnpa-sec-2012-12 CVE-2012-4049) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-470 - openSUSE 11.4: zypper in -t patch openSUSE-2012-470 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): wireshark-1.4.14-3.17.1 wireshark-debuginfo-1.4.14-3.17.1 wireshark-debugsource-1.4.14-3.17.1 wireshark-devel-1.4.14-3.17.1 - openSUSE 11.4 (i586 x86_64): wireshark-1.4.14-0.19.1 wireshark-debuginfo-1.4.14-0.19.1 wireshark-debugsource-1.4.14-0.19.1 wireshark-devel-1.4.14-0.19.1 References: http://support.novell.com/security/cve/CVE-2012-4048.html http://support.novell.com/security/cve/CVE-2012-4049.html https://bugzilla.novell.com/772738

1 0