May 2013 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2013:0825-1: important: MozillaFirefox: update to version 21.0
by opensuse-security＠opensuse.org 24 May '13

24 May '13

openSUSE Security Update: MozillaFirefox: update to version 21.0 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0825-1 Rating: important References: #801121 #814101 #819204 Cross-References: CVE-2013-0801 CVE-2013-1669 CVE-2013-1670 CVE-2013-1671 CVE-2013-1674 CVE-2013-1675 CVE-2013-1676 CVE-2013-1677 CVE-2013-1678 CVE-2013-1679 CVE-2013-1680 CVE-2013-1681 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that fixes 12 vulnerabilities is now available. Description: MozillaFirefox was updated to Firefox 21.0 (bnc#819204) * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669 Miscellaneous memory safety hazards * MFSA 2013-42/CVE-2013-1670 (bmo#853709) Privileged access for content level constructor * MFSA 2013-43/CVE-2013-1671 (bmo#842255) File input control has access to full path * MFSA 2013-46/CVE-2013-1674 (bmo#860971) Use-after-free with video and onresize event * MFSA 2013-47/CVE-2013-1675 (bmo#866825) Uninitialized functions in DOMSVGZoomEvent * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/ CVE-2013-1679/CVE-2013-1680/CVE-2013-1681 Memory corruption found using Address Sanitizer Changes in MozillaFirefox-branding-openSUSE: - modified file locations for Firefox 21 and above - added DuckDuckGo as search option (bnc#801121) Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-438 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): MozillaFirefox-21.0-2.47.1 MozillaFirefox-branding-openSUSE-21-1.4.1 MozillaFirefox-branding-upstream-21.0-2.47.1 MozillaFirefox-buildsymbols-21.0-2.47.1 MozillaFirefox-debuginfo-21.0-2.47.1 MozillaFirefox-debugsource-21.0-2.47.1 MozillaFirefox-devel-21.0-2.47.1 MozillaFirefox-translations-common-21.0-2.47.1 MozillaFirefox-translations-other-21.0-2.47.1 References: http://support.novell.com/security/cve/CVE-2013-0801.html http://support.novell.com/security/cve/CVE-2013-1669.html http://support.novell.com/security/cve/CVE-2013-1670.html http://support.novell.com/security/cve/CVE-2013-1671.html http://support.novell.com/security/cve/CVE-2013-1674.html http://support.novell.com/security/cve/CVE-2013-1675.html http://support.novell.com/security/cve/CVE-2013-1676.html http://support.novell.com/security/cve/CVE-2013-1677.html http://support.novell.com/security/cve/CVE-2013-1678.html http://support.novell.com/security/cve/CVE-2013-1679.html http://support.novell.com/security/cve/CVE-2013-1680.html http://support.novell.com/security/cve/CVE-2013-1681.html https://bugzilla.novell.com/801121 https://bugzilla.novell.com/814101 https://bugzilla.novell.com/819204

1 0

openSUSE-SU-2013:0824-1: moderate: kernel: Security and Bugfix update for 3.4.42
by opensuse-security＠opensuse.org 24 May '13

24 May '13

openSUSE Security Update: kernel: Security and Bugfix update for 3.4.42 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0824-1 Rating: moderate References: #792500 #802153 #805633 #806138 #806976 #806980 #808829 #809155 #809330 #809748 #813963 Cross-References: CVE-2013-0913 CVE-2013-1763 CVE-2013-1767 CVE-2013-1774 CVE-2013-1796 CVE-2013-1797 CVE-2013-1798 CVE-2013-1848 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that solves 8 vulnerabilities and has three fixes is now available. Description: Linux kernel was updated to kernel 3.4.42 fixing various bugs and security issues. - Refresh patches.suse/SUSE-bootsplash. Fix bootsplash breakage due to stable fix (bnc#813963) - Linux 3.4.39. - kABI: protect struct tracer. - Linux 3.4.38 (bnc#808829,CVE-2013-0913). - patches.kabi/kabi-protect-struct-sk_buff.patch: kABI: protect struct sk_buff. - patches.kabi/kabi-ipv4-remove-inclusion.patch: kABI: ipv4, remove inclusion. - USB: io_ti: Fix NULL dereference in chase_port() (bnc#806976, CVE-2013-1774). - Linux 3.4.37 (bnc#809155 bnc#809330 bnc#809748 CVE-2013-1848). - Linux 3.4.36. - KVM: Convert MSR_KVM_SYSTEM_TIME to use gfn_to_hva_cache_init (bnc#806980 CVE-2013-1797). - KVM: Fix bounds checking in ioapic indirect register read (bnc#806980 CVE-2013-1798). - KVM: Fix for buffer overflow in handling of MSR_KVM_SYSTEM_TIME (bnc#806980 CVE-2013-1796). - kabi/severities: Allow kvm abi changes - kvm modules are self consistent - loopdev: fix a deadlock (bnc#809748). - block: use i_size_write() in bd_set_size() (bnc#809748). - drm/i915: bounds check execbuffer relocation count (bnc#808829,CVE-2013-0913). - TTY: do not reset master's packet mode (bnc#809330). - Update patches.fixes/ext3-Fix-format-string-issues.patch (bnc#809155 CVE-2013-1848). - ext3: Fix format string issues (bnc#809155). - Linux 3.4.35 (bnc#802153). - Linux 3.4.34 (CVE-2013-1763 CVE-2013-1767 bnc#792500 bnc#806138 bnc#805633). - tmpfs: fix use-after-free of mempolicy object (bnc#806138, CVE-2013-1767). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-440 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): kernel-default-3.4.42-2.28.1 kernel-default-base-3.4.42-2.28.1 kernel-default-base-debuginfo-3.4.42-2.28.1 kernel-default-debuginfo-3.4.42-2.28.1 kernel-default-debugsource-3.4.42-2.28.1 kernel-default-devel-3.4.42-2.28.1 kernel-default-devel-debuginfo-3.4.42-2.28.1 kernel-syms-3.4.42-2.28.1 - openSUSE 12.2 (i686 x86_64): kernel-debug-3.4.42-2.28.1 kernel-debug-base-3.4.42-2.28.1 kernel-debug-base-debuginfo-3.4.42-2.28.1 kernel-debug-debuginfo-3.4.42-2.28.1 kernel-debug-debugsource-3.4.42-2.28.1 kernel-debug-devel-3.4.42-2.28.1 kernel-debug-devel-debuginfo-3.4.42-2.28.1 kernel-desktop-3.4.42-2.28.1 kernel-desktop-base-3.4.42-2.28.1 kernel-desktop-base-debuginfo-3.4.42-2.28.1 kernel-desktop-debuginfo-3.4.42-2.28.1 kernel-desktop-debugsource-3.4.42-2.28.1 kernel-desktop-devel-3.4.42-2.28.1 kernel-desktop-devel-debuginfo-3.4.42-2.28.1 kernel-ec2-3.4.42-2.28.1 kernel-ec2-base-3.4.42-2.28.1 kernel-ec2-base-debuginfo-3.4.42-2.28.1 kernel-ec2-debuginfo-3.4.42-2.28.1 kernel-ec2-debugsource-3.4.42-2.28.1 kernel-ec2-devel-3.4.42-2.28.1 kernel-ec2-devel-debuginfo-3.4.42-2.28.1 kernel-ec2-extra-3.4.42-2.28.1 kernel-ec2-extra-debuginfo-3.4.42-2.28.1 kernel-trace-3.4.42-2.28.1 kernel-trace-base-3.4.42-2.28.1 kernel-trace-base-debuginfo-3.4.42-2.28.1 kernel-trace-debuginfo-3.4.42-2.28.1 kernel-trace-debugsource-3.4.42-2.28.1 kernel-trace-devel-3.4.42-2.28.1 kernel-trace-devel-debuginfo-3.4.42-2.28.1 kernel-vanilla-3.4.42-2.28.1 kernel-vanilla-debuginfo-3.4.42-2.28.1 kernel-vanilla-debugsource-3.4.42-2.28.1 kernel-vanilla-devel-3.4.42-2.28.1 kernel-vanilla-devel-debuginfo-3.4.42-2.28.1 kernel-xen-3.4.42-2.28.1 kernel-xen-base-3.4.42-2.28.1 kernel-xen-base-debuginfo-3.4.42-2.28.1 kernel-xen-debuginfo-3.4.42-2.28.1 kernel-xen-debugsource-3.4.42-2.28.1 kernel-xen-devel-3.4.42-2.28.1 kernel-xen-devel-debuginfo-3.4.42-2.28.1 - openSUSE 12.2 (noarch): kernel-devel-3.4.42-2.28.1 kernel-docs-3.4.42-2.28.2 kernel-source-3.4.42-2.28.1 kernel-source-vanilla-3.4.42-2.28.1 - openSUSE 12.2 (i686): kernel-pae-3.4.42-2.28.1 kernel-pae-base-3.4.42-2.28.1 kernel-pae-base-debuginfo-3.4.42-2.28.1 kernel-pae-debuginfo-3.4.42-2.28.1 kernel-pae-debugsource-3.4.42-2.28.1 kernel-pae-devel-3.4.42-2.28.1 kernel-pae-devel-debuginfo-3.4.42-2.28.1 References: http://support.novell.com/security/cve/CVE-2013-0913.html http://support.novell.com/security/cve/CVE-2013-1763.html http://support.novell.com/security/cve/CVE-2013-1767.html http://support.novell.com/security/cve/CVE-2013-1774.html http://support.novell.com/security/cve/CVE-2013-1796.html http://support.novell.com/security/cve/CVE-2013-1797.html http://support.novell.com/security/cve/CVE-2013-1798.html http://support.novell.com/security/cve/CVE-2013-1848.html https://bugzilla.novell.com/792500 https://bugzilla.novell.com/802153 https://bugzilla.novell.com/805633 https://bugzilla.novell.com/806138 https://bugzilla.novell.com/806976 https://bugzilla.novell.com/806980 https://bugzilla.novell.com/808829 https://bugzilla.novell.com/809155 https://bugzilla.novell.com/809330 https://bugzilla.novell.com/809748 https://bugzilla.novell.com/813963

1 0

openSUSE-SU-2013:0823-1: This submission supersedes the Samba packages currently available from
by opensuse-security＠opensuse.org 23 May '13

23 May '13

openSUSE Security Update: This submission supersedes the Samba packages currently available from ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0823-1 Rating: low References: #786350 #792294 #800782 #802031 #807334 #811975 #815994 Cross-References: CVE-2013-0454 Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that solves one vulnerability and has 6 fixes is now available. Description: This submission supersedes the Samba packages currently available from http://download.openSUSE.org/pub/opensuse/update/12.*-test/ - Add support for PFC_FLAG_OBJECT_UUID when parsing packets; (bso#9382). - Fix "guest ok", "force user" and "force group" for guest users; (bso#9746). - Fix 'map untrusted to domain' with NTLMv2; (bso#9817). - Fix crash bug in Winbind; (bso#9854). - Fix panic in nt_printer_publish_ads; (bso#9830). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-435 - openSUSE 12.1: zypper in -t patch openSUSE-2013-435 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): ldapsmb-1.34b-48.20.1 libnetapi-devel-3.6.7-48.20.1 libnetapi0-3.6.7-48.20.1 libnetapi0-debuginfo-3.6.7-48.20.1 libsmbclient-devel-3.6.7-48.20.1 libsmbclient0-3.6.7-48.20.1 libsmbclient0-debuginfo-3.6.7-48.20.1 libsmbsharemodes-devel-3.6.7-48.20.1 libsmbsharemodes0-3.6.7-48.20.1 libsmbsharemodes0-debuginfo-3.6.7-48.20.1 libwbclient-devel-3.6.7-48.20.1 libwbclient0-3.6.7-48.20.1 libwbclient0-debuginfo-3.6.7-48.20.1 samba-3.6.7-48.20.1 samba-client-3.6.7-48.20.1 samba-client-debuginfo-3.6.7-48.20.1 samba-debuginfo-3.6.7-48.20.1 samba-debugsource-3.6.7-48.20.1 samba-devel-3.6.7-48.20.1 samba-krb-printing-3.6.7-48.20.1 samba-krb-printing-debuginfo-3.6.7-48.20.1 samba-winbind-3.6.7-48.20.1 samba-winbind-debuginfo-3.6.7-48.20.1 - openSUSE 12.2 (x86_64): libsmbclient0-32bit-3.6.7-48.20.1 libsmbclient0-debuginfo-32bit-3.6.7-48.20.1 libwbclient0-32bit-3.6.7-48.20.1 libwbclient0-debuginfo-32bit-3.6.7-48.20.1 samba-32bit-3.6.7-48.20.1 samba-client-32bit-3.6.7-48.20.1 samba-client-debuginfo-32bit-3.6.7-48.20.1 samba-debuginfo-32bit-3.6.7-48.20.1 samba-winbind-32bit-3.6.7-48.20.1 samba-winbind-debuginfo-32bit-3.6.7-48.20.1 - openSUSE 12.2 (noarch): samba-doc-3.6.7-48.20.1 - openSUSE 12.1 (i586 x86_64): ldapsmb-1.34b-34.20.1 libldb-devel-1.0.2-34.20.1 libldb1-1.0.2-34.20.1 libldb1-debuginfo-1.0.2-34.20.1 libnetapi-devel-3.6.3-34.20.1 libnetapi0-3.6.3-34.20.1 libnetapi0-debuginfo-3.6.3-34.20.1 libsmbclient-devel-3.6.3-34.20.1 libsmbclient0-3.6.3-34.20.1 libsmbclient0-debuginfo-3.6.3-34.20.1 libsmbsharemodes-devel-3.6.3-34.20.1 libsmbsharemodes0-3.6.3-34.20.1 libsmbsharemodes0-debuginfo-3.6.3-34.20.1 libtalloc-devel-2.0.5-34.20.1 libtalloc2-2.0.5-34.20.1 libtalloc2-debuginfo-2.0.5-34.20.1 libtdb-devel-1.2.9-34.20.1 libtdb1-1.2.9-34.20.1 libtdb1-debuginfo-1.2.9-34.20.1 libtevent-devel-0.9.11-34.20.1 libtevent0-0.9.11-34.20.1 libtevent0-debuginfo-0.9.11-34.20.1 libwbclient-devel-3.6.3-34.20.1 libwbclient0-3.6.3-34.20.1 libwbclient0-debuginfo-3.6.3-34.20.1 samba-3.6.3-34.20.1 samba-client-3.6.3-34.20.1 samba-client-debuginfo-3.6.3-34.20.1 samba-debuginfo-3.6.3-34.20.1 samba-debugsource-3.6.3-34.20.1 samba-devel-3.6.3-34.20.1 samba-krb-printing-3.6.3-34.20.1 samba-krb-printing-debuginfo-3.6.3-34.20.1 samba-winbind-3.6.3-34.20.1 samba-winbind-debuginfo-3.6.3-34.20.1 - openSUSE 12.1 (x86_64): libldb1-32bit-1.0.2-34.20.1 libldb1-debuginfo-32bit-1.0.2-34.20.1 libsmbclient0-32bit-3.6.3-34.20.1 libsmbclient0-debuginfo-32bit-3.6.3-34.20.1 libtalloc2-32bit-2.0.5-34.20.1 libtalloc2-debuginfo-32bit-2.0.5-34.20.1 libtdb1-32bit-1.2.9-34.20.1 libtdb1-debuginfo-32bit-1.2.9-34.20.1 libtevent0-32bit-0.9.11-34.20.1 libtevent0-debuginfo-32bit-0.9.11-34.20.1 libwbclient0-32bit-3.6.3-34.20.1 libwbclient0-debuginfo-32bit-3.6.3-34.20.1 samba-32bit-3.6.3-34.20.1 samba-client-32bit-3.6.3-34.20.1 samba-client-debuginfo-32bit-3.6.3-34.20.1 samba-debuginfo-32bit-3.6.3-34.20.1 samba-winbind-32bit-3.6.3-34.20.1 samba-winbind-debuginfo-32bit-3.6.3-34.20.1 - openSUSE 12.1 (noarch): samba-doc-3.6.3-34.20.1 - openSUSE 12.1 (ia64): libldb1-debuginfo-x86-1.0.2-34.20.1 libldb1-x86-1.0.2-34.20.1 libsmbclient0-debuginfo-x86-3.6.3-34.20.1 libsmbclient0-x86-3.6.3-34.20.1 libtalloc2-debuginfo-x86-2.0.5-34.20.1 libtalloc2-x86-2.0.5-34.20.1 libtdb1-debuginfo-x86-1.2.9-34.20.1 libtdb1-x86-1.2.9-34.20.1 libtevent0-debuginfo-x86-0.9.11-34.20.1 libtevent0-x86-0.9.11-34.20.1 libwbclient0-debuginfo-x86-3.6.3-34.20.1 libwbclient0-x86-3.6.3-34.20.1 samba-client-debuginfo-x86-3.6.3-34.20.1 samba-client-x86-3.6.3-34.20.1 samba-debuginfo-x86-3.6.3-34.20.1 samba-winbind-debuginfo-x86-3.6.3-34.20.1 samba-winbind-x86-3.6.3-34.20.1 samba-x86-3.6.3-34.20.1 References: http://support.novell.com/security/cve/CVE-2013-0454.html https://bugzilla.novell.com/786350 https://bugzilla.novell.com/792294 https://bugzilla.novell.com/800782 https://bugzilla.novell.com/802031 https://bugzilla.novell.com/807334 https://bugzilla.novell.com/811975 https://bugzilla.novell.com/815994

1 0

openSUSE-RU-2013:0820-1: moderate: nodejs: update to match v8
by maintenance＠opensuse.org 22 May '13

22 May '13

openSUSE Recommended Update: nodejs: update to match v8 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2013:0820-1 Rating: moderate References: #805253 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: nodejs was updated to fix bnc#805253 by removing bundled sources for shared dependencies This way we force nodejs to use v8 installed system headers. Otherwise, and that was the bug, it was using the embedded headers but linking against the system libraries. That is why updating v8 broke nodejs. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-432 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): nodejs-0.6.19-1.4.1 nodejs-debuginfo-0.6.19-1.4.1 nodejs-debugsource-0.6.19-1.4.1 nodejs-devel-0.6.19-1.4.1 References: https://bugzilla.novell.com/805253

1 0

openSUSE-SU-2013:0813-2: moderate: Update for clamav to version 0.97.8.
by opensuse-security＠opensuse.org 21 May '13

21 May '13

openSUSE Security Update: Update for clamav to version 0.97.8. ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0813-2 Rating: moderate References: #816865 Cross-References: CVE-2013-2020 CVE-2013-2021 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: New clamav version 0.97.8 (bnc#816865): * CVE-2013-2020: Fix heap corruption * CVE-2013-2021: Fix overflow due to PDF key length computation. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-430 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): clamav-0.97.8-1.12.1 clamav-debuginfo-0.97.8-1.12.1 clamav-debugsource-0.97.8-1.12.1 - openSUSE 12.2 (noarch): clamav-db-0.97.8-1.12.1 References: http://support.novell.com/security/cve/CVE-2013-2020.html http://support.novell.com/security/cve/CVE-2013-2021.html https://bugzilla.novell.com/816865

1 0

openSUSE-SU-2013:0812-2: moderate: tiff
by opensuse-security＠opensuse.org 21 May '13

21 May '13

openSUSE Security Update: tiff ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0812-2 Rating: moderate References: #817573 #818117 Cross-References: CVE-2013-1960 CVE-2013-1961 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: libtiff security update: * CVE-2013-1961.patch [bnc#818117] * CVE-2013-1960.patch [bnc#817573] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-431 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): libtiff-devel-4.0.2-1.16.1 libtiff5-4.0.2-1.16.1 libtiff5-debuginfo-4.0.2-1.16.1 tiff-4.0.2-1.16.1 tiff-debuginfo-4.0.2-1.16.1 tiff-debugsource-4.0.2-1.16.1 - openSUSE 12.2 (x86_64): libtiff-devel-32bit-4.0.2-1.16.1 libtiff5-32bit-4.0.2-1.16.1 libtiff5-debuginfo-32bit-4.0.2-1.16.1 References: http://support.novell.com/security/cve/CVE-2013-1960.html http://support.novell.com/security/cve/CVE-2013-1961.html https://bugzilla.novell.com/817573 https://bugzilla.novell.com/818117

1 0

openSUSE-SU-2013:0813-1: moderate: Update for clamav to version 0.97.8.
by opensuse-security＠opensuse.org 21 May '13

21 May '13

openSUSE Security Update: Update for clamav to version 0.97.8. ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0813-1 Rating: moderate References: #816865 Cross-References: CVE-2013-2020 CVE-2013-2021 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: New clamav version 0.97.8 (bnc#816865): * CVE-2013-2020: Fix heap corruption * CVE-2013-2021: Fix overflow due to PDF key length computation. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2013-430 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): clamav-0.97.8-15.1 clamav-debuginfo-0.97.8-15.1 clamav-debugsource-0.97.8-15.1 - openSUSE 12.1 (noarch): clamav-db-0.97.8-15.1 References: http://support.novell.com/security/cve/CVE-2013-2020.html http://support.novell.com/security/cve/CVE-2013-2021.html https://bugzilla.novell.com/816865

1 0

openSUSE-SU-2013:0812-1: moderate: tiff
by opensuse-security＠opensuse.org 21 May '13

21 May '13

openSUSE Security Update: tiff ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0812-1 Rating: moderate References: #817573 #818117 Cross-References: CVE-2013-1960 CVE-2013-1961 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: libtiff security update: * CVE-2013-1961.patch [bnc#818117] * CVE-2013-1960.patch [bnc#817573] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2013-431 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): libtiff-devel-3.9.5-8.17.1 libtiff3-3.9.5-8.17.1 libtiff3-debuginfo-3.9.5-8.17.1 tiff-3.9.5-8.17.1 tiff-debuginfo-3.9.5-8.17.1 tiff-debugsource-3.9.5-8.17.1 - openSUSE 12.1 (x86_64): libtiff-devel-32bit-3.9.5-8.17.1 libtiff3-32bit-3.9.5-8.17.1 libtiff3-debuginfo-32bit-3.9.5-8.17.1 - openSUSE 12.1 (ia64): libtiff3-debuginfo-x86-3.9.5-8.17.1 libtiff3-x86-3.9.5-8.17.1 References: http://support.novell.com/security/cve/CVE-2013-1960.html http://support.novell.com/security/cve/CVE-2013-1961.html https://bugzilla.novell.com/817573 https://bugzilla.novell.com/818117

1 0

openSUSE-SU-2013:0807-1: moderate: update for gnutls
by opensuse-security＠opensuse.org 17 May '13

17 May '13

openSUSE Security Update: update for gnutls ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0807-1 Rating: moderate References: #802651 Cross-References: CVE-2013-1619 Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Changes in gnutls: - Fix bug[ bnc#802651] CVE-2013-1619( gnutls): Luck-13 issue Add patch file: CVE-2013-1619.patch Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-428 - openSUSE 12.1: zypper in -t patch openSUSE-2013-428 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): gnutls-3.0.20-1.4.1 gnutls-debuginfo-3.0.20-1.4.1 gnutls-debugsource-3.0.20-1.4.1 libgnutls-devel-3.0.20-1.4.1 libgnutls-openssl-devel-3.0.20-1.4.1 libgnutls-openssl27-3.0.20-1.4.1 libgnutls-openssl27-debuginfo-3.0.20-1.4.1 libgnutls28-3.0.20-1.4.1 libgnutls28-debuginfo-3.0.20-1.4.1 libgnutlsxx-devel-3.0.20-1.4.1 libgnutlsxx28-3.0.20-1.4.1 libgnutlsxx28-debuginfo-3.0.20-1.4.1 - openSUSE 12.2 (x86_64): libgnutls-devel-32bit-3.0.20-1.4.1 libgnutls28-32bit-3.0.20-1.4.1 libgnutls28-debuginfo-32bit-3.0.20-1.4.1 - openSUSE 12.1 (i586 x86_64): gnutls-3.0.3-5.15.1 gnutls-debuginfo-3.0.3-5.15.1 gnutls-debugsource-3.0.3-5.15.1 libgnutls-devel-3.0.3-5.15.1 libgnutls-extra-devel-3.0.3-5.15.1 libgnutls-extra28-3.0.3-5.15.1 libgnutls-extra28-debuginfo-3.0.3-5.15.1 libgnutls-openssl-devel-3.0.3-5.15.1 libgnutls-openssl27-3.0.3-5.15.1 libgnutls-openssl27-debuginfo-3.0.3-5.15.1 libgnutls28-3.0.3-5.15.1 libgnutls28-debuginfo-3.0.3-5.15.1 libgnutlsxx-devel-3.0.3-5.15.1 libgnutlsxx28-3.0.3-5.15.1 libgnutlsxx28-debuginfo-3.0.3-5.15.1 - openSUSE 12.1 (x86_64): libgnutls-devel-32bit-3.0.3-5.15.1 libgnutls28-32bit-3.0.3-5.15.1 libgnutls28-debuginfo-32bit-3.0.3-5.15.1 - openSUSE 12.1 (ia64): libgnutls28-debuginfo-x86-3.0.3-5.15.1 libgnutls28-x86-3.0.3-5.15.1 References: http://support.novell.com/security/cve/CVE-2013-1619.html https://bugzilla.novell.com/802651

1 0

openSUSE-SU-2013:0806-1: moderate: update for telepathy-idle
by opensuse-security＠opensuse.org 17 May '13

17 May '13

openSUSE Security Update: update for telepathy-idle ______________________________________________________________________________ Announcement ID: openSUSE-SU-2013:0806-1 Rating: moderate References: #817120 Cross-References: CVE-2007-6746 Affected Products: openSUSE 12.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Changes in telepathy-idle: - Add telepathy-idle-require-tls-validation.patch (bnc#817120, CVE-2007-6746). This fixes flaws in the SSL certificate validation. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2013-427 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): telepathy-idle-0.1.11-3.4.1 telepathy-idle-debuginfo-0.1.11-3.4.1 telepathy-idle-debugsource-0.1.11-3.4.1 References: http://support.novell.com/security/cve/CVE-2007-6746.html https://bugzilla.novell.com/817120

1 0