June 2014 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2014:0804-1: moderate: sendmail: Close file descriptors before executing programs
by opensuse-security＠opensuse.org 17 Jun '14

17 Jun '14

openSUSE Security Update: sendmail: Close file descriptors before executing programs ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0804-1 Rating: moderate References: #881284 Cross-References: CVE-2014-3956 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: sendmail was updated to properly close file descriptors before executing programs. These security issues were fixed: - Not properly closing file descriptors before executing programs (CVE-2014-3956). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-425 - openSUSE 12.3: zypper in -t patch openSUSE-2014-425 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): rmail-8.14.7-92.5.2 rmail-debuginfo-8.14.7-92.5.2 sendmail-8.14.7-92.5.2 sendmail-debuginfo-8.14.7-92.5.2 sendmail-debugsource-8.14.7-92.5.2 sendmail-devel-8.14.7-92.5.2 uucp-1.07-92.5.2 uucp-debuginfo-1.07-92.5.2 uucp-debugsource-1.07-92.5.2 - openSUSE 12.3 (i586 x86_64): rmail-8.14.3-85.4.2 rmail-debuginfo-8.14.3-85.4.2 sendmail-8.14.5-85.4.2 sendmail-debuginfo-8.14.5-85.4.2 sendmail-debugsource-8.14.5-85.4.2 sendmail-devel-8.14.5-85.4.2 uucp-1.07-85.4.1 uucp-debuginfo-1.07-85.4.1 uucp-debugsource-1.07-85.4.1 References: http://support.novell.com/security/cve/CVE-2014-3956.html https://bugzilla.novell.com/881284

1 0

openSUSE-RU-2014:0803-1: systemd-mini: set ACL on nvidia-uvm
by maintenance＠opensuse.org 17 Jun '14

17 Jun '14

openSUSE Recommended Update: systemd-mini: set ACL on nvidia-uvm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0803-1 Rating: low References: #879767 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues with systemd-mini: -bnc#879767: applied patch to set ACL on nvidia-uvm device Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-424 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libgudev-1_0-0-208-23.3 libgudev-1_0-0-debuginfo-208-23.3 libgudev-1_0-devel-208-23.3 libudev-devel-208-23.3 libudev-mini-devel-208-23.1 libudev-mini1-208-23.1 libudev-mini1-debuginfo-208-23.1 libudev1-208-23.3 libudev1-debuginfo-208-23.3 nss-myhostname-208-23.3 nss-myhostname-debuginfo-208-23.3 systemd-208-23.3 systemd-debuginfo-208-23.3 systemd-debugsource-208-23.3 systemd-devel-208-23.3 systemd-journal-gateway-208-23.3 systemd-journal-gateway-debuginfo-208-23.3 systemd-logger-208-23.3 systemd-mini-208-23.1 systemd-mini-debuginfo-208-23.1 systemd-mini-debugsource-208-23.1 systemd-mini-devel-208-23.1 systemd-mini-sysvinit-208-23.1 systemd-sysvinit-208-23.3 typelib-1_0-GUdev-1_0-208-23.3 udev-208-23.3 udev-debuginfo-208-23.3 udev-mini-208-23.1 udev-mini-debuginfo-208-23.1 - openSUSE 13.1 (x86_64): libgudev-1_0-0-32bit-208-23.3 libgudev-1_0-0-debuginfo-32bit-208-23.3 libudev1-32bit-208-23.3 libudev1-debuginfo-32bit-208-23.3 nss-myhostname-32bit-208-23.3 nss-myhostname-debuginfo-32bit-208-23.3 systemd-32bit-208-23.3 systemd-debuginfo-32bit-208-23.3 - openSUSE 13.1 (noarch): systemd-rpm-macros-2-23.1 References: https://bugzilla.novell.com/879767

1 0

openSUSE-SU-2014:0799-1: moderate: flash-player: Update to fix six security issues
by opensuse-security＠opensuse.org 16 Jun '14

16 Jun '14

openSUSE Security Update: flash-player: Update to fix six security issues ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0799-1 Rating: moderate References: #882187 Cross-References: CVE-2014-0531 CVE-2014-0532 CVE-2014-0533 CVE-2014-0534 CVE-2014-0535 CVE-2014-0536 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: flash-player was updated to version 11.2.202.378 to fix six security issues. These security issues were fixed: - Cross-site-scripting vulnerabilities (CVE-2014-0531, CVE-2014-0532, CVE-2014-0533). - Security bypass vulnerabilities (CVE-2014-0534, CVE-2014-0535). - A memory corruption vulner Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2014-65 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): flash-player-11.2.202.378-115.1 flash-player-gnome-11.2.202.378-115.1 flash-player-kde4-11.2.202.378-115.1 References: http://support.novell.com/security/cve/CVE-2014-0531.html http://support.novell.com/security/cve/CVE-2014-0532.html http://support.novell.com/security/cve/CVE-2014-0533.html http://support.novell.com/security/cve/CVE-2014-0534.html http://support.novell.com/security/cve/CVE-2014-0535.html http://support.novell.com/security/cve/CVE-2014-0536.html https://bugzilla.novell.com/882187

1 0

openSUSE-SU-2014:0798-1: moderate: flash-player: Update to fix six security issues
by opensuse-security＠opensuse.org 16 Jun '14

16 Jun '14

openSUSE Security Update: flash-player: Update to fix six security issues ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0798-1 Rating: moderate References: #882187 Cross-References: CVE-2014-0531 CVE-2014-0532 CVE-2014-0533 CVE-2014-0534 CVE-2014-0535 CVE-2014-0536 Affected Products: openSUSE 13.1:NonFree openSUSE 12.3:NonFree ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: flash-player was updated to version 11.2.202.378 to fix six security issues. These security issues were fixed: - Cross-site-scripting vulnerabilities (CVE-2014-0531, CVE-2014-0532, CVE-2014-0533). - Security bypass vulnerabilities (CVE-2014-0534, CVE-2014-0535). - A memory corruption vulnerability that could result in arbitrary code execution (CVE-2014-0536). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1:NonFree: zypper in -t patch openSUSE-2014-423 - openSUSE 12.3:NonFree: zypper in -t patch openSUSE-2014-423 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1:NonFree (i586 x86_64): flash-player-11.2.202.378-54.1 flash-player-gnome-11.2.202.378-54.1 flash-player-kde4-11.2.202.378-54.1 - openSUSE 12.3:NonFree (i586 x86_64): flash-player-11.2.202.378-2.80.1 flash-player-gnome-11.2.202.378-2.80.1 flash-player-kde4-11.2.202.378-2.80.1 References: http://support.novell.com/security/cve/CVE-2014-0531.html http://support.novell.com/security/cve/CVE-2014-0532.html http://support.novell.com/security/cve/CVE-2014-0533.html http://support.novell.com/security/cve/CVE-2014-0534.html http://support.novell.com/security/cve/CVE-2014-0535.html http://support.novell.com/security/cve/CVE-2014-0536.html https://bugzilla.novell.com/882187

1 0

openSUSE-SU-2014:0797-1: critical: Mozilla updates 2014/06
by opensuse-security＠opensuse.org 16 Jun '14

16 Jun '14

openSUSE Security Update: Mozilla updates 2014/06 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0797-1 Rating: critical References: #881874 Cross-References: CVE-2014-1533 CVE-2014-1534 CVE-2014-1536 CVE-2014-1537 CVE-2014-1538 CVE-2014-1541 CVE-2014-1545 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: These updates contain the latest security and maintenance updates for - Mozilla Firefox 24.6esr - Mozilla Thunderbird 24.6 - Mozilla NSPR is also updated to 4.10.6 to fix * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534 Miscellaneous memory safety hazards * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538 Use-after-free and out of bounds issues found using Address Sanitizer * MFSA 2014-52/CVE-2014-1541 Use-after-free with SMIL Animation Controller * MFSA 2014-55/CVE-2014-1545 Out of bounds write in NSPR Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2014-64 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): MozillaFirefox-24.6.0-115.1 MozillaFirefox-branding-upstream-24.6.0-115.1 MozillaFirefox-buildsymbols-24.6.0-115.1 MozillaFirefox-debuginfo-24.6.0-115.1 MozillaFirefox-debugsource-24.6.0-115.1 MozillaFirefox-devel-24.6.0-115.1 MozillaFirefox-translations-common-24.6.0-115.1 MozillaFirefox-translations-other-24.6.0-115.1 MozillaThunderbird-24.6.0-97.1 MozillaThunderbird-buildsymbols-24.6.0-97.1 MozillaThunderbird-debuginfo-24.6.0-97.1 MozillaThunderbird-debugsource-24.6.0-97.1 MozillaThunderbird-devel-24.6.0-97.1 MozillaThunderbird-translations-common-24.6.0-97.1 MozillaThunderbird-translations-other-24.6.0-97.1 enigmail-1.6.0+24.6.0-97.1 mozilla-nspr-4.10.6-44.1 mozilla-nspr-debuginfo-4.10.6-44.1 mozilla-nspr-debugsource-4.10.6-44.1 mozilla-nspr-devel-4.10.6-44.1 - openSUSE 11.4 (x86_64): mozilla-nspr-32bit-4.10.6-44.1 mozilla-nspr-debuginfo-32bit-4.10.6-44.1 - openSUSE 11.4 (ia64): mozilla-nspr-debuginfo-x86-4.10.6-44.1 mozilla-nspr-x86-4.10.6-44.1 References: http://support.novell.com/security/cve/CVE-2014-1533.html http://support.novell.com/security/cve/CVE-2014-1534.html http://support.novell.com/security/cve/CVE-2014-1536.html http://support.novell.com/security/cve/CVE-2014-1537.html http://support.novell.com/security/cve/CVE-2014-1538.html http://support.novell.com/security/cve/CVE-2014-1541.html http://support.novell.com/security/cve/CVE-2014-1545.html https://bugzilla.novell.com/881874

1 0

openSUSE-RU-2014:0792-1: udisks2: Fix failure of some discs
by maintenance＠opensuse.org 13 Jun '14

13 Jun '14

openSUSE Recommended Update: udisks2: Fix failure of some discs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0792-1 Rating: low References: #880631 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues with udisks2: -bnc#880631: fixes stalling and resetting of some discs when udisks2 tries to identify the device. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-422 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libudisks2-0-2.1.1-2.8.1 libudisks2-0-debuginfo-2.1.1-2.8.1 typelib-1_0-UDisks-2_0-2.1.1-2.8.1 udisks2-2.1.1-2.8.1 udisks2-debuginfo-2.1.1-2.8.1 udisks2-debugsource-2.1.1-2.8.1 udisks2-devel-2.1.1-2.8.1 - openSUSE 13.1 (noarch): udisks2-lang-2.1.1-2.8.1 References: https://bugzilla.novell.com/880631

1 0

openSUSE-RU-2014:0787-1: moderate: ca-certificates-mozilla: update to 1.97 state
by maintenance＠opensuse.org 12 Jun '14

12 Jun '14

openSUSE Recommended Update: ca-certificates-mozilla: update to 1.97 state ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0787-1 Rating: moderate References: #881241 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: ca-certificates-mozilla was updated to match the current Mozilla NSS storage, version 1.97, changes done: new: "Atos TrustedRoot 2011" (codeSigning emailProtection serverAuth) new: "Tugra Certification Authority" (codeSigning serverAuth) removed: "Firmaprofesional Root CA" removed: "TDC OCES Root CA" new: "TeliaSonera Root CA v1" (emailProtection serverAuth) new: "T-TeleSec GlobalRoot Class 2" (emailProtection serverAuth) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2014-63 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (noarch): ca-certificates-mozilla-1.97-25.1 References: https://bugzilla.novell.com/881241

1 0

openSUSE-SU-2014:0786-1: moderate: php5: Update fixes several security issues
by opensuse-security＠opensuse.org 12 Jun '14

12 Jun '14

openSUSE Security Update: php5: Update fixes several security issues ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0786-1 Rating: moderate References: #868624 #875826 #880904 #880905 Cross-References: CVE-2014-0185 CVE-2014-0237 CVE-2014-0238 CVE-2014-2497 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: php5 was updated to fix several security issues. These issues were fixed: * Performance degradation by too many file_printf calls (CVE-2014-0237) * DoS in Fileinfo component (CVE-2014-0238) * NULL pointer dereference in GD XPM decoder (CVE-2014-2497) * Privilege escalation due to insecure default config (CVE-2014-0185) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2014-62 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): apache2-mod_php5-5.3.5-363.2 apache2-mod_php5-debuginfo-5.3.5-363.2 php5-5.3.5-363.2 php5-bcmath-5.3.5-363.2 php5-bcmath-debuginfo-5.3.5-363.2 php5-bz2-5.3.5-363.2 php5-bz2-debuginfo-5.3.5-363.2 php5-calendar-5.3.5-363.2 php5-calendar-debuginfo-5.3.5-363.2 php5-ctype-5.3.5-363.2 php5-ctype-debuginfo-5.3.5-363.2 php5-curl-5.3.5-363.2 php5-curl-debuginfo-5.3.5-363.2 php5-dba-5.3.5-363.2 php5-dba-debuginfo-5.3.5-363.2 php5-debuginfo-5.3.5-363.2 php5-debugsource-5.3.5-363.2 php5-devel-5.3.5-363.2 php5-dom-5.3.5-363.2 php5-dom-debuginfo-5.3.5-363.2 php5-enchant-5.3.5-363.2 php5-enchant-debuginfo-5.3.5-363.2 php5-exif-5.3.5-363.2 php5-exif-debuginfo-5.3.5-363.2 php5-fastcgi-5.3.5-363.2 php5-fastcgi-debuginfo-5.3.5-363.2 php5-fileinfo-5.3.5-363.2 php5-fileinfo-debuginfo-5.3.5-363.2 php5-fpm-5.3.5-363.2 php5-fpm-debuginfo-5.3.5-363.2 php5-ftp-5.3.5-363.2 php5-ftp-debuginfo-5.3.5-363.2 php5-gd-5.3.5-363.2 php5-gd-debuginfo-5.3.5-363.2 php5-gettext-5.3.5-363.2 php5-gettext-debuginfo-5.3.5-363.2 php5-gmp-5.3.5-363.2 php5-gmp-debuginfo-5.3.5-363.2 php5-hash-5.3.5-363.2 php5-hash-debuginfo-5.3.5-363.2 php5-iconv-5.3.5-363.2 php5-iconv-debuginfo-5.3.5-363.2 php5-imap-5.3.5-363.2 php5-imap-debuginfo-5.3.5-363.2 php5-intl-5.3.5-363.2 php5-intl-debuginfo-5.3.5-363.2 php5-json-5.3.5-363.2 php5-json-debuginfo-5.3.5-363.2 php5-ldap-5.3.5-363.2 php5-ldap-debuginfo-5.3.5-363.2 php5-mbstring-5.3.5-363.2 php5-mbstring-debuginfo-5.3.5-363.2 php5-mcrypt-5.3.5-363.2 php5-mcrypt-debuginfo-5.3.5-363.2 php5-mysql-5.3.5-363.2 php5-mysql-debuginfo-5.3.5-363.2 php5-odbc-5.3.5-363.2 php5-odbc-debuginfo-5.3.5-363.2 php5-openssl-5.3.5-363.2 php5-openssl-debuginfo-5.3.5-363.2 php5-pcntl-5.3.5-363.2 php5-pcntl-debuginfo-5.3.5-363.2 php5-pdo-5.3.5-363.2 php5-pdo-debuginfo-5.3.5-363.2 php5-pgsql-5.3.5-363.2 php5-pgsql-debuginfo-5.3.5-363.2 php5-phar-5.3.5-363.2 php5-phar-debuginfo-5.3.5-363.2 php5-posix-5.3.5-363.2 php5-posix-debuginfo-5.3.5-363.2 php5-pspell-5.3.5-363.2 php5-pspell-debuginfo-5.3.5-363.2 php5-readline-5.3.5-363.2 php5-readline-debuginfo-5.3.5-363.2 php5-shmop-5.3.5-363.2 php5-shmop-debuginfo-5.3.5-363.2 php5-snmp-5.3.5-363.2 php5-snmp-debuginfo-5.3.5-363.2 php5-soap-5.3.5-363.2 php5-soap-debuginfo-5.3.5-363.2 php5-sockets-5.3.5-363.2 php5-sockets-debuginfo-5.3.5-363.2 php5-sqlite-5.3.5-363.2 php5-sqlite-debuginfo-5.3.5-363.2 php5-suhosin-5.3.5-363.2 php5-suhosin-debuginfo-5.3.5-363.2 php5-sysvmsg-5.3.5-363.2 php5-sysvmsg-debuginfo-5.3.5-363.2 php5-sysvsem-5.3.5-363.2 php5-sysvsem-debuginfo-5.3.5-363.2 php5-sysvshm-5.3.5-363.2 php5-sysvshm-debuginfo-5.3.5-363.2 php5-tidy-5.3.5-363.2 php5-tidy-debuginfo-5.3.5-363.2 php5-tokenizer-5.3.5-363.2 php5-tokenizer-debuginfo-5.3.5-363.2 php5-wddx-5.3.5-363.2 php5-wddx-debuginfo-5.3.5-363.2 php5-xmlreader-5.3.5-363.2 php5-xmlreader-debuginfo-5.3.5-363.2 php5-xmlrpc-5.3.5-363.2 php5-xmlrpc-debuginfo-5.3.5-363.2 php5-xmlwriter-5.3.5-363.2 php5-xmlwriter-debuginfo-5.3.5-363.2 php5-xsl-5.3.5-363.2 php5-xsl-debuginfo-5.3.5-363.2 php5-zip-5.3.5-363.2 php5-zip-debuginfo-5.3.5-363.2 php5-zlib-5.3.5-363.2 php5-zlib-debuginfo-5.3.5-363.2 - openSUSE 11.4 (noarch): php5-pear-5.3.5-363.2 References: http://support.novell.com/security/cve/CVE-2014-0185.html http://support.novell.com/security/cve/CVE-2014-0237.html http://support.novell.com/security/cve/CVE-2014-0238.html http://support.novell.com/security/cve/CVE-2014-2497.html https://bugzilla.novell.com/868624 https://bugzilla.novell.com/875826 https://bugzilla.novell.com/880904 https://bugzilla.novell.com/880905

1 0

openSUSE-SU-2014:0784-1: moderate: php5: Update fixes several security issues
by opensuse-security＠opensuse.org 12 Jun '14

12 Jun '14

openSUSE Security Update: php5: Update fixes several security issues ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0784-1 Rating: moderate References: #868624 #875826 #880904 #880905 Cross-References: CVE-2014-0185 CVE-2014-0237 CVE-2014-0238 CVE-2014-2497 Affected Products: openSUSE 13.1 openSUSE 12.3 openSUSE 12.2 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: php5 was updated to fix several security issues. These issues were fixed: * Performance degradation by too many file_printf calls (CVE-2014-0237) * DoS in Fileinfo component (CVE-2014-0238) * NULL pointer dereference in GD XPM decoder (CVE-2014-2497) * Privilege escalation due to insecure default config (CVE-2014-0185) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-419 - openSUSE 12.3: zypper in -t patch openSUSE-2014-419 - openSUSE 12.2: zypper in -t patch openSUSE-2014-419 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): apache2-mod_php5-5.4.20-8.2 apache2-mod_php5-debuginfo-5.4.20-8.2 php5-5.4.20-8.2 php5-bcmath-5.4.20-8.2 php5-bcmath-debuginfo-5.4.20-8.2 php5-bz2-5.4.20-8.2 php5-bz2-debuginfo-5.4.20-8.2 php5-calendar-5.4.20-8.2 php5-calendar-debuginfo-5.4.20-8.2 php5-ctype-5.4.20-8.2 php5-ctype-debuginfo-5.4.20-8.2 php5-curl-5.4.20-8.2 php5-curl-debuginfo-5.4.20-8.2 php5-dba-5.4.20-8.2 php5-dba-debuginfo-5.4.20-8.2 php5-debuginfo-5.4.20-8.2 php5-debugsource-5.4.20-8.2 php5-devel-5.4.20-8.2 php5-dom-5.4.20-8.2 php5-dom-debuginfo-5.4.20-8.2 php5-enchant-5.4.20-8.2 php5-enchant-debuginfo-5.4.20-8.2 php5-exif-5.4.20-8.2 php5-exif-debuginfo-5.4.20-8.2 php5-fastcgi-5.4.20-8.2 php5-fastcgi-debuginfo-5.4.20-8.2 php5-fileinfo-5.4.20-8.2 php5-fileinfo-debuginfo-5.4.20-8.2 php5-firebird-5.4.20-8.2 php5-firebird-debuginfo-5.4.20-8.2 php5-fpm-5.4.20-8.2 php5-fpm-debuginfo-5.4.20-8.2 php5-ftp-5.4.20-8.2 php5-ftp-debuginfo-5.4.20-8.2 php5-gd-5.4.20-8.2 php5-gd-debuginfo-5.4.20-8.2 php5-gettext-5.4.20-8.2 php5-gettext-debuginfo-5.4.20-8.2 php5-gmp-5.4.20-8.2 php5-gmp-debuginfo-5.4.20-8.2 php5-iconv-5.4.20-8.2 php5-iconv-debuginfo-5.4.20-8.2 php5-imap-5.4.20-8.2 php5-imap-debuginfo-5.4.20-8.2 php5-intl-5.4.20-8.2 php5-intl-debuginfo-5.4.20-8.2 php5-json-5.4.20-8.2 php5-json-debuginfo-5.4.20-8.2 php5-ldap-5.4.20-8.2 php5-ldap-debuginfo-5.4.20-8.2 php5-mbstring-5.4.20-8.2 php5-mbstring-debuginfo-5.4.20-8.2 php5-mcrypt-5.4.20-8.2 php5-mcrypt-debuginfo-5.4.20-8.2 php5-mssql-5.4.20-8.2 php5-mssql-debuginfo-5.4.20-8.2 php5-mysql-5.4.20-8.2 php5-mysql-debuginfo-5.4.20-8.2 php5-odbc-5.4.20-8.2 php5-odbc-debuginfo-5.4.20-8.2 php5-openssl-5.4.20-8.2 php5-openssl-debuginfo-5.4.20-8.2 php5-pcntl-5.4.20-8.2 php5-pcntl-debuginfo-5.4.20-8.2 php5-pdo-5.4.20-8.2 php5-pdo-debuginfo-5.4.20-8.2 php5-pgsql-5.4.20-8.2 php5-pgsql-debuginfo-5.4.20-8.2 php5-phar-5.4.20-8.2 php5-phar-debuginfo-5.4.20-8.2 php5-posix-5.4.20-8.2 php5-posix-debuginfo-5.4.20-8.2 php5-pspell-5.4.20-8.2 php5-pspell-debuginfo-5.4.20-8.2 php5-readline-5.4.20-8.2 php5-readline-debuginfo-5.4.20-8.2 php5-shmop-5.4.20-8.2 php5-shmop-debuginfo-5.4.20-8.2 php5-snmp-5.4.20-8.2 php5-snmp-debuginfo-5.4.20-8.2 php5-soap-5.4.20-8.2 php5-soap-debuginfo-5.4.20-8.2 php5-sockets-5.4.20-8.2 php5-sockets-debuginfo-5.4.20-8.2 php5-sqlite-5.4.20-8.2 php5-sqlite-debuginfo-5.4.20-8.2 php5-suhosin-5.4.20-8.2 php5-suhosin-debuginfo-5.4.20-8.2 php5-sysvmsg-5.4.20-8.2 php5-sysvmsg-debuginfo-5.4.20-8.2 php5-sysvsem-5.4.20-8.2 php5-sysvsem-debuginfo-5.4.20-8.2 php5-sysvshm-5.4.20-8.2 php5-sysvshm-debuginfo-5.4.20-8.2 php5-tidy-5.4.20-8.2 php5-tidy-debuginfo-5.4.20-8.2 php5-tokenizer-5.4.20-8.2 php5-tokenizer-debuginfo-5.4.20-8.2 php5-wddx-5.4.20-8.2 php5-wddx-debuginfo-5.4.20-8.2 php5-xmlreader-5.4.20-8.2 php5-xmlreader-debuginfo-5.4.20-8.2 php5-xmlrpc-5.4.20-8.2 php5-xmlrpc-debuginfo-5.4.20-8.2 php5-xmlwriter-5.4.20-8.2 php5-xmlwriter-debuginfo-5.4.20-8.2 php5-xsl-5.4.20-8.2 php5-xsl-debuginfo-5.4.20-8.2 php5-zip-5.4.20-8.2 php5-zip-debuginfo-5.4.20-8.2 php5-zlib-5.4.20-8.2 php5-zlib-debuginfo-5.4.20-8.2 - openSUSE 13.1 (noarch): php5-pear-5.4.20-8.2 - openSUSE 12.3 (i586 x86_64): apache2-mod_php5-5.3.17-3.12.2 apache2-mod_php5-debuginfo-5.3.17-3.12.2 php5-5.3.17-3.12.2 php5-bcmath-5.3.17-3.12.2 php5-bcmath-debuginfo-5.3.17-3.12.2 php5-bz2-5.3.17-3.12.2 php5-bz2-debuginfo-5.3.17-3.12.2 php5-calendar-5.3.17-3.12.2 php5-calendar-debuginfo-5.3.17-3.12.2 php5-ctype-5.3.17-3.12.2 php5-ctype-debuginfo-5.3.17-3.12.2 php5-curl-5.3.17-3.12.2 php5-curl-debuginfo-5.3.17-3.12.2 php5-dba-5.3.17-3.12.2 php5-dba-debuginfo-5.3.17-3.12.2 php5-debuginfo-5.3.17-3.12.2 php5-debugsource-5.3.17-3.12.2 php5-devel-5.3.17-3.12.2 php5-dom-5.3.17-3.12.2 php5-dom-debuginfo-5.3.17-3.12.2 php5-enchant-5.3.17-3.12.2 php5-enchant-debuginfo-5.3.17-3.12.2 php5-exif-5.3.17-3.12.2 php5-exif-debuginfo-5.3.17-3.12.2 php5-fastcgi-5.3.17-3.12.2 php5-fastcgi-debuginfo-5.3.17-3.12.2 php5-fileinfo-5.3.17-3.12.2 php5-fileinfo-debuginfo-5.3.17-3.12.2 php5-fpm-5.3.17-3.12.2 php5-fpm-debuginfo-5.3.17-3.12.2 php5-ftp-5.3.17-3.12.2 php5-ftp-debuginfo-5.3.17-3.12.2 php5-gd-5.3.17-3.12.2 php5-gd-debuginfo-5.3.17-3.12.2 php5-gettext-5.3.17-3.12.2 php5-gettext-debuginfo-5.3.17-3.12.2 php5-gmp-5.3.17-3.12.2 php5-gmp-debuginfo-5.3.17-3.12.2 php5-iconv-5.3.17-3.12.2 php5-iconv-debuginfo-5.3.17-3.12.2 php5-imap-5.3.17-3.12.2 php5-imap-debuginfo-5.3.17-3.12.2 php5-intl-5.3.17-3.12.2 php5-intl-debuginfo-5.3.17-3.12.2 php5-json-5.3.17-3.12.2 php5-json-debuginfo-5.3.17-3.12.2 php5-ldap-5.3.17-3.12.2 php5-ldap-debuginfo-5.3.17-3.12.2 php5-mbstring-5.3.17-3.12.2 php5-mbstring-debuginfo-5.3.17-3.12.2 php5-mcrypt-5.3.17-3.12.2 php5-mcrypt-debuginfo-5.3.17-3.12.2 php5-mssql-5.3.17-3.12.2 php5-mssql-debuginfo-5.3.17-3.12.2 php5-mysql-5.3.17-3.12.2 php5-mysql-debuginfo-5.3.17-3.12.2 php5-odbc-5.3.17-3.12.2 php5-odbc-debuginfo-5.3.17-3.12.2 php5-openssl-5.3.17-3.12.2 php5-openssl-debuginfo-5.3.17-3.12.2 php5-pcntl-5.3.17-3.12.2 php5-pcntl-debuginfo-5.3.17-3.12.2 php5-pdo-5.3.17-3.12.2 php5-pdo-debuginfo-5.3.17-3.12.2 php5-pgsql-5.3.17-3.12.2 php5-pgsql-debuginfo-5.3.17-3.12.2 php5-phar-5.3.17-3.12.2 php5-phar-debuginfo-5.3.17-3.12.2 php5-posix-5.3.17-3.12.2 php5-posix-debuginfo-5.3.17-3.12.2 php5-pspell-5.3.17-3.12.2 php5-pspell-debuginfo-5.3.17-3.12.2 php5-readline-5.3.17-3.12.2 php5-readline-debuginfo-5.3.17-3.12.2 php5-shmop-5.3.17-3.12.2 php5-shmop-debuginfo-5.3.17-3.12.2 php5-snmp-5.3.17-3.12.2 php5-snmp-debuginfo-5.3.17-3.12.2 php5-soap-5.3.17-3.12.2 php5-soap-debuginfo-5.3.17-3.12.2 php5-sockets-5.3.17-3.12.2 php5-sockets-debuginfo-5.3.17-3.12.2 php5-sqlite-5.3.17-3.12.2 php5-sqlite-debuginfo-5.3.17-3.12.2 php5-suhosin-5.3.17-3.12.2 php5-suhosin-debuginfo-5.3.17-3.12.2 php5-sysvmsg-5.3.17-3.12.2 php5-sysvmsg-debuginfo-5.3.17-3.12.2 php5-sysvsem-5.3.17-3.12.2 php5-sysvsem-debuginfo-5.3.17-3.12.2 php5-sysvshm-5.3.17-3.12.2 php5-sysvshm-debuginfo-5.3.17-3.12.2 php5-tidy-5.3.17-3.12.2 php5-tidy-debuginfo-5.3.17-3.12.2 php5-tokenizer-5.3.17-3.12.2 php5-tokenizer-debuginfo-5.3.17-3.12.2 php5-wddx-5.3.17-3.12.2 php5-wddx-debuginfo-5.3.17-3.12.2 php5-xmlreader-5.3.17-3.12.2 php5-xmlreader-debuginfo-5.3.17-3.12.2 php5-xmlrpc-5.3.17-3.12.2 php5-xmlrpc-debuginfo-5.3.17-3.12.2 php5-xmlwriter-5.3.17-3.12.2 php5-xmlwriter-debuginfo-5.3.17-3.12.2 php5-xsl-5.3.17-3.12.2 php5-xsl-debuginfo-5.3.17-3.12.2 php5-zip-5.3.17-3.12.2 php5-zip-debuginfo-5.3.17-3.12.2 php5-zlib-5.3.17-3.12.2 php5-zlib-debuginfo-5.3.17-3.12.2 - openSUSE 12.3 (noarch): php5-pear-5.3.17-3.12.2 - openSUSE 12.2 (i586 x86_64): apache2-mod_php5-5.3.15-1.25.1 apache2-mod_php5-debuginfo-5.3.15-1.25.1 php5-5.3.15-1.25.1 php5-bcmath-5.3.15-1.25.1 php5-bcmath-debuginfo-5.3.15-1.25.1 php5-bz2-5.3.15-1.25.1 php5-bz2-debuginfo-5.3.15-1.25.1 php5-calendar-5.3.15-1.25.1 php5-calendar-debuginfo-5.3.15-1.25.1 php5-ctype-5.3.15-1.25.1 php5-ctype-debuginfo-5.3.15-1.25.1 php5-curl-5.3.15-1.25.1 php5-curl-debuginfo-5.3.15-1.25.1 php5-dba-5.3.15-1.25.1 php5-dba-debuginfo-5.3.15-1.25.1 php5-debuginfo-5.3.15-1.25.1 php5-debugsource-5.3.15-1.25.1 php5-devel-5.3.15-1.25.1 php5-dom-5.3.15-1.25.1 php5-dom-debuginfo-5.3.15-1.25.1 php5-enchant-5.3.15-1.25.1 php5-enchant-debuginfo-5.3.15-1.25.1 php5-exif-5.3.15-1.25.1 php5-exif-debuginfo-5.3.15-1.25.1 php5-fastcgi-5.3.15-1.25.1 php5-fastcgi-debuginfo-5.3.15-1.25.1 php5-fileinfo-5.3.15-1.25.1 php5-fileinfo-debuginfo-5.3.15-1.25.1 php5-fpm-5.3.15-1.25.1 php5-fpm-debuginfo-5.3.15-1.25.1 php5-ftp-5.3.15-1.25.1 php5-ftp-debuginfo-5.3.15-1.25.1 php5-gd-5.3.15-1.25.1 php5-gd-debuginfo-5.3.15-1.25.1 php5-gettext-5.3.15-1.25.1 php5-gettext-debuginfo-5.3.15-1.25.1 php5-gmp-5.3.15-1.25.1 php5-gmp-debuginfo-5.3.15-1.25.1 php5-iconv-5.3.15-1.25.1 php5-iconv-debuginfo-5.3.15-1.25.1 php5-imap-5.3.15-1.25.1 php5-imap-debuginfo-5.3.15-1.25.1 php5-intl-5.3.15-1.25.1 php5-intl-debuginfo-5.3.15-1.25.1 php5-json-5.3.15-1.25.1 php5-json-debuginfo-5.3.15-1.25.1 php5-ldap-5.3.15-1.25.1 php5-ldap-debuginfo-5.3.15-1.25.1 php5-mbstring-5.3.15-1.25.1 php5-mbstring-debuginfo-5.3.15-1.25.1 php5-mcrypt-5.3.15-1.25.1 php5-mcrypt-debuginfo-5.3.15-1.25.1 php5-mssql-5.3.15-1.25.1 php5-mssql-debuginfo-5.3.15-1.25.1 php5-mysql-5.3.15-1.25.1 php5-mysql-debuginfo-5.3.15-1.25.1 php5-odbc-5.3.15-1.25.1 php5-odbc-debuginfo-5.3.15-1.25.1 php5-openssl-5.3.15-1.25.1 php5-openssl-debuginfo-5.3.15-1.25.1 php5-pcntl-5.3.15-1.25.1 php5-pcntl-debuginfo-5.3.15-1.25.1 php5-pdo-5.3.15-1.25.1 php5-pdo-debuginfo-5.3.15-1.25.1 php5-pgsql-5.3.15-1.25.1 php5-pgsql-debuginfo-5.3.15-1.25.1 php5-phar-5.3.15-1.25.1 php5-phar-debuginfo-5.3.15-1.25.1 php5-posix-5.3.15-1.25.1 php5-posix-debuginfo-5.3.15-1.25.1 php5-pspell-5.3.15-1.25.1 php5-pspell-debuginfo-5.3.15-1.25.1 php5-readline-5.3.15-1.25.1 php5-readline-debuginfo-5.3.15-1.25.1 php5-shmop-5.3.15-1.25.1 php5-shmop-debuginfo-5.3.15-1.25.1 php5-snmp-5.3.15-1.25.1 php5-snmp-debuginfo-5.3.15-1.25.1 php5-soap-5.3.15-1.25.1 php5-soap-debuginfo-5.3.15-1.25.1 php5-sockets-5.3.15-1.25.1 php5-sockets-debuginfo-5.3.15-1.25.1 php5-sqlite-5.3.15-1.25.1 php5-sqlite-debuginfo-5.3.15-1.25.1 php5-suhosin-5.3.15-1.25.1 php5-suhosin-debuginfo-5.3.15-1.25.1 php5-sysvmsg-5.3.15-1.25.1 php5-sysvmsg-debuginfo-5.3.15-1.25.1 php5-sysvsem-5.3.15-1.25.1 php5-sysvsem-debuginfo-5.3.15-1.25.1 php5-sysvshm-5.3.15-1.25.1 php5-sysvshm-debuginfo-5.3.15-1.25.1 php5-tidy-5.3.15-1.25.1 php5-tidy-debuginfo-5.3.15-1.25.1 php5-tokenizer-5.3.15-1.25.1 php5-tokenizer-debuginfo-5.3.15-1.25.1 php5-wddx-5.3.15-1.25.1 php5-wddx-debuginfo-5.3.15-1.25.1 php5-xmlreader-5.3.15-1.25.1 php5-xmlreader-debuginfo-5.3.15-1.25.1 php5-xmlrpc-5.3.15-1.25.1 php5-xmlrpc-debuginfo-5.3.15-1.25.1 php5-xmlwriter-5.3.15-1.25.1 php5-xmlwriter-debuginfo-5.3.15-1.25.1 php5-xsl-5.3.15-1.25.1 php5-xsl-debuginfo-5.3.15-1.25.1 php5-zip-5.3.15-1.25.1 php5-zip-debuginfo-5.3.15-1.25.1 php5-zlib-5.3.15-1.25.1 php5-zlib-debuginfo-5.3.15-1.25.1 - openSUSE 12.2 (noarch): php5-pear-5.3.15-1.25.1 References: http://support.novell.com/security/cve/CVE-2014-0185.html http://support.novell.com/security/cve/CVE-2014-0237.html http://support.novell.com/security/cve/CVE-2014-0238.html http://support.novell.com/security/cve/CVE-2014-2497.html https://bugzilla.novell.com/868624 https://bugzilla.novell.com/875826 https://bugzilla.novell.com/880904 https://bugzilla.novell.com/880905

1 0

openSUSE-SU-2014:0783-1: moderate: chromium: Various security fixes
by opensuse-security＠opensuse.org 12 Jun '14

12 Jun '14

openSUSE Security Update: chromium: Various security fixes ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0783-1 Rating: moderate References: Cross-References: CVE-2014-1740 CVE-2014-1741 CVE-2014-1742 CVE-2014-1743 CVE-2014-1744 CVE-2014-1745 CVE-2014-1746 CVE-2014-1747 CVE-2014-1748 CVE-2014-1749 CVE-2014-3152 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that fixes 11 vulnerabilities is now available. Description: chromium was updated to version 35.0.1916.114 to fix various security issues. Security fixes: * CVE-2014-1743: Use-after-free in styles * CVE-2014-1744: Integer overflow in audio * CVE-2014-1745: Use-after-free in SVG * CVE-2014-1746: Out-of-bounds read in media filters * CVE-2014-1747: UXSS with local MHTML file * CVE-2014-1748: UI spoofing with scrollbar * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives * CVE-2014-3152: Integer underflow in V8 fixed * CVE-2014-1740: Use-after-free in WebSockets * CVE-2014-1741: Integer overflow in DOM range * CVE-2014-1742: Use-after-free in editing and 17 more for which no detailed information is given. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-420 - openSUSE 12.3: zypper in -t patch openSUSE-2014-420 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): chromedriver-35.0.1916.114-37.4 chromedriver-debuginfo-35.0.1916.114-37.4 chromium-35.0.1916.114-37.4 chromium-debuginfo-35.0.1916.114-37.4 chromium-debugsource-35.0.1916.114-37.4 chromium-desktop-gnome-35.0.1916.114-37.4 chromium-desktop-kde-35.0.1916.114-37.4 chromium-ffmpegsumo-35.0.1916.114-37.4 chromium-ffmpegsumo-debuginfo-35.0.1916.114-37.4 chromium-suid-helper-35.0.1916.114-37.4 chromium-suid-helper-debuginfo-35.0.1916.114-37.4 - openSUSE 12.3 (i586 x86_64): chromedriver-35.0.1916.114-1.45.4 chromedriver-debuginfo-35.0.1916.114-1.45.4 chromium-35.0.1916.114-1.45.4 chromium-debuginfo-35.0.1916.114-1.45.4 chromium-debugsource-35.0.1916.114-1.45.4 chromium-desktop-gnome-35.0.1916.114-1.45.4 chromium-desktop-kde-35.0.1916.114-1.45.4 chromium-ffmpegsumo-35.0.1916.114-1.45.4 chromium-ffmpegsumo-debuginfo-35.0.1916.114-1.45.4 chromium-suid-helper-35.0.1916.114-1.45.4 chromium-suid-helper-debuginfo-35.0.1916.114-1.45.4 ninja-3.0+git.20130603.0f53fd3-2.6.3 ninja-debuginfo-3.0+git.20130603.0f53fd3-2.6.3 ninja-debugsource-3.0+git.20130603.0f53fd3-2.6.3 References: http://support.novell.com/security/cve/CVE-2014-1740.html http://support.novell.com/security/cve/CVE-2014-1741.html http://support.novell.com/security/cve/CVE-2014-1742.html http://support.novell.com/security/cve/CVE-2014-1743.html http://support.novell.com/security/cve/CVE-2014-1744.html http://support.novell.com/security/cve/CVE-2014-1745.html http://support.novell.com/security/cve/CVE-2014-1746.html http://support.novell.com/security/cve/CVE-2014-1747.html http://support.novell.com/security/cve/CVE-2014-1748.html http://support.novell.com/security/cve/CVE-2014-1749.html http://support.novell.com/security/cve/CVE-2014-3152.html

1 0