July 2014 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2014:0945-1: moderate: php5: security fixes
by opensuse-security＠opensuse.org 30 Jul '14

30 Jul '14

openSUSE Security Update: php5: security fixes ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0945-1 Rating: moderate References: #885961 #886059 #886060 Cross-References: CVE-2014-4670 CVE-2014-4698 CVE-2014-4721 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: php5 was updated to fix security issues: CVE-2014-4670: Use-after-free vulnerability in ext/spl/spl_dllist.c in the SPL component in PHP allowed context-dependent attackers to cause a denial of service or possibly have unspecified other impact via crafted iterator usage within applications in certain web-hosting environments. CVE-2014-4698: Use-after-free vulnerability in ext/spl/spl_array.c in the SPL component in PHP allowed context-dependent attackers to cause a denial of service or possibly have unspecified other impact via crafted ArrayIterator usage within applications in certain web-hosting environments. CVE-2014-4721: The phpinfo implementation in ext/standard/info.c in PHP did not ensure use of the string data type for the PHP_AUTH_PW, PHP_AUTH_TYPE, PHP_AUTH_USER, and PHP_SELF variables, which might allow context-dependent attackers to obtain sensitive information from process memory by using the integer data type with crafted values, related to a "type confusion" vulnerability, as demonstrated by reading a private SSL key in an Apache HTTP Server web-hosting environment with mod_ssl and a PHP 5.3.x mod_php. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014- - openSUSE 12.3: zypper in -t patch openSUSE-2014- To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): apache2-mod_php5-5.4.20-21.1 apache2-mod_php5-debuginfo-5.4.20-21.1 php5-5.4.20-21.1 php5-bcmath-5.4.20-21.1 php5-bcmath-debuginfo-5.4.20-21.1 php5-bz2-5.4.20-21.1 php5-bz2-debuginfo-5.4.20-21.1 php5-calendar-5.4.20-21.1 php5-calendar-debuginfo-5.4.20-21.1 php5-ctype-5.4.20-21.1 php5-ctype-debuginfo-5.4.20-21.1 php5-curl-5.4.20-21.1 php5-curl-debuginfo-5.4.20-21.1 php5-dba-5.4.20-21.1 php5-dba-debuginfo-5.4.20-21.1 php5-debuginfo-5.4.20-21.1 php5-debugsource-5.4.20-21.1 php5-devel-5.4.20-21.1 php5-dom-5.4.20-21.1 php5-dom-debuginfo-5.4.20-21.1 php5-enchant-5.4.20-21.1 php5-enchant-debuginfo-5.4.20-21.1 php5-exif-5.4.20-21.1 php5-exif-debuginfo-5.4.20-21.1 php5-fastcgi-5.4.20-21.1 php5-fastcgi-debuginfo-5.4.20-21.1 php5-fileinfo-5.4.20-21.1 php5-fileinfo-debuginfo-5.4.20-21.1 php5-firebird-5.4.20-21.1 php5-firebird-debuginfo-5.4.20-21.1 php5-fpm-5.4.20-21.1 php5-fpm-debuginfo-5.4.20-21.1 php5-ftp-5.4.20-21.1 php5-ftp-debuginfo-5.4.20-21.1 php5-gd-5.4.20-21.1 php5-gd-debuginfo-5.4.20-21.1 php5-gettext-5.4.20-21.1 php5-gettext-debuginfo-5.4.20-21.1 php5-gmp-5.4.20-21.1 php5-gmp-debuginfo-5.4.20-21.1 php5-iconv-5.4.20-21.1 php5-iconv-debuginfo-5.4.20-21.1 php5-imap-5.4.20-21.1 php5-imap-debuginfo-5.4.20-21.1 php5-intl-5.4.20-21.1 php5-intl-debuginfo-5.4.20-21.1 php5-json-5.4.20-21.1 php5-json-debuginfo-5.4.20-21.1 php5-ldap-5.4.20-21.1 php5-ldap-debuginfo-5.4.20-21.1 php5-mbstring-5.4.20-21.1 php5-mbstring-debuginfo-5.4.20-21.1 php5-mcrypt-5.4.20-21.1 php5-mcrypt-debuginfo-5.4.20-21.1 php5-mssql-5.4.20-21.1 php5-mssql-debuginfo-5.4.20-21.1 php5-mysql-5.4.20-21.1 php5-mysql-debuginfo-5.4.20-21.1 php5-odbc-5.4.20-21.1 php5-odbc-debuginfo-5.4.20-21.1 php5-openssl-5.4.20-21.1 php5-openssl-debuginfo-5.4.20-21.1 php5-pcntl-5.4.20-21.1 php5-pcntl-debuginfo-5.4.20-21.1 php5-pdo-5.4.20-21.1 php5-pdo-debuginfo-5.4.20-21.1 php5-pgsql-5.4.20-21.1 php5-pgsql-debuginfo-5.4.20-21.1 php5-phar-5.4.20-21.1 php5-phar-debuginfo-5.4.20-21.1 php5-posix-5.4.20-21.1 php5-posix-debuginfo-5.4.20-21.1 php5-pspell-5.4.20-21.1 php5-pspell-debuginfo-5.4.20-21.1 php5-readline-5.4.20-21.1 php5-readline-debuginfo-5.4.20-21.1 php5-shmop-5.4.20-21.1 php5-shmop-debuginfo-5.4.20-21.1 php5-snmp-5.4.20-21.1 php5-snmp-debuginfo-5.4.20-21.1 php5-soap-5.4.20-21.1 php5-soap-debuginfo-5.4.20-21.1 php5-sockets-5.4.20-21.1 php5-sockets-debuginfo-5.4.20-21.1 php5-sqlite-5.4.20-21.1 php5-sqlite-debuginfo-5.4.20-21.1 php5-suhosin-5.4.20-21.1 php5-suhosin-debuginfo-5.4.20-21.1 php5-sysvmsg-5.4.20-21.1 php5-sysvmsg-debuginfo-5.4.20-21.1 php5-sysvsem-5.4.20-21.1 php5-sysvsem-debuginfo-5.4.20-21.1 php5-sysvshm-5.4.20-21.1 php5-sysvshm-debuginfo-5.4.20-21.1 php5-tidy-5.4.20-21.1 php5-tidy-debuginfo-5.4.20-21.1 php5-tokenizer-5.4.20-21.1 php5-tokenizer-debuginfo-5.4.20-21.1 php5-wddx-5.4.20-21.1 php5-wddx-debuginfo-5.4.20-21.1 php5-xmlreader-5.4.20-21.1 php5-xmlreader-debuginfo-5.4.20-21.1 php5-xmlrpc-5.4.20-21.1 php5-xmlrpc-debuginfo-5.4.20-21.1 php5-xmlwriter-5.4.20-21.1 php5-xmlwriter-debuginfo-5.4.20-21.1 php5-xsl-5.4.20-21.1 php5-xsl-debuginfo-5.4.20-21.1 php5-zip-5.4.20-21.1 php5-zip-debuginfo-5.4.20-21.1 php5-zlib-5.4.20-21.1 php5-zlib-debuginfo-5.4.20-21.1 - openSUSE 13.1 (noarch): php5-pear-5.4.20-21.1 - openSUSE 12.3 (i586 x86_64): apache2-mod_php5-5.3.17-3.25.1 apache2-mod_php5-debuginfo-5.3.17-3.25.1 php5-5.3.17-3.25.1 php5-bcmath-5.3.17-3.25.1 php5-bcmath-debuginfo-5.3.17-3.25.1 php5-bz2-5.3.17-3.25.1 php5-bz2-debuginfo-5.3.17-3.25.1 php5-calendar-5.3.17-3.25.1 php5-calendar-debuginfo-5.3.17-3.25.1 php5-ctype-5.3.17-3.25.1 php5-ctype-debuginfo-5.3.17-3.25.1 php5-curl-5.3.17-3.25.1 php5-curl-debuginfo-5.3.17-3.25.1 php5-dba-5.3.17-3.25.1 php5-dba-debuginfo-5.3.17-3.25.1 php5-debuginfo-5.3.17-3.25.1 php5-debugsource-5.3.17-3.25.1 php5-devel-5.3.17-3.25.1 php5-dom-5.3.17-3.25.1 php5-dom-debuginfo-5.3.17-3.25.1 php5-enchant-5.3.17-3.25.1 php5-enchant-debuginfo-5.3.17-3.25.1 php5-exif-5.3.17-3.25.1 php5-exif-debuginfo-5.3.17-3.25.1 php5-fastcgi-5.3.17-3.25.1 php5-fastcgi-debuginfo-5.3.17-3.25.1 php5-fileinfo-5.3.17-3.25.1 php5-fileinfo-debuginfo-5.3.17-3.25.1 php5-fpm-5.3.17-3.25.1 php5-fpm-debuginfo-5.3.17-3.25.1 php5-ftp-5.3.17-3.25.1 php5-ftp-debuginfo-5.3.17-3.25.1 php5-gd-5.3.17-3.25.1 php5-gd-debuginfo-5.3.17-3.25.1 php5-gettext-5.3.17-3.25.1 php5-gettext-debuginfo-5.3.17-3.25.1 php5-gmp-5.3.17-3.25.1 php5-gmp-debuginfo-5.3.17-3.25.1 php5-iconv-5.3.17-3.25.1 php5-iconv-debuginfo-5.3.17-3.25.1 php5-imap-5.3.17-3.25.1 php5-imap-debuginfo-5.3.17-3.25.1 php5-intl-5.3.17-3.25.1 php5-intl-debuginfo-5.3.17-3.25.1 php5-json-5.3.17-3.25.1 php5-json-debuginfo-5.3.17-3.25.1 php5-ldap-5.3.17-3.25.1 php5-ldap-debuginfo-5.3.17-3.25.1 php5-mbstring-5.3.17-3.25.1 php5-mbstring-debuginfo-5.3.17-3.25.1 php5-mcrypt-5.3.17-3.25.1 php5-mcrypt-debuginfo-5.3.17-3.25.1 php5-mssql-5.3.17-3.25.1 php5-mssql-debuginfo-5.3.17-3.25.1 php5-mysql-5.3.17-3.25.1 php5-mysql-debuginfo-5.3.17-3.25.1 php5-odbc-5.3.17-3.25.1 php5-odbc-debuginfo-5.3.17-3.25.1 php5-openssl-5.3.17-3.25.1 php5-openssl-debuginfo-5.3.17-3.25.1 php5-pcntl-5.3.17-3.25.1 php5-pcntl-debuginfo-5.3.17-3.25.1 php5-pdo-5.3.17-3.25.1 php5-pdo-debuginfo-5.3.17-3.25.1 php5-pgsql-5.3.17-3.25.1 php5-pgsql-debuginfo-5.3.17-3.25.1 php5-phar-5.3.17-3.25.1 php5-phar-debuginfo-5.3.17-3.25.1 php5-posix-5.3.17-3.25.1 php5-posix-debuginfo-5.3.17-3.25.1 php5-pspell-5.3.17-3.25.1 php5-pspell-debuginfo-5.3.17-3.25.1 php5-readline-5.3.17-3.25.1 php5-readline-debuginfo-5.3.17-3.25.1 php5-shmop-5.3.17-3.25.1 php5-shmop-debuginfo-5.3.17-3.25.1 php5-snmp-5.3.17-3.25.1 php5-snmp-debuginfo-5.3.17-3.25.1 php5-soap-5.3.17-3.25.1 php5-soap-debuginfo-5.3.17-3.25.1 php5-sockets-5.3.17-3.25.1 php5-sockets-debuginfo-5.3.17-3.25.1 php5-sqlite-5.3.17-3.25.1 php5-sqlite-debuginfo-5.3.17-3.25.1 php5-suhosin-5.3.17-3.25.1 php5-suhosin-debuginfo-5.3.17-3.25.1 php5-sysvmsg-5.3.17-3.25.1 php5-sysvmsg-debuginfo-5.3.17-3.25.1 php5-sysvsem-5.3.17-3.25.1 php5-sysvsem-debuginfo-5.3.17-3.25.1 php5-sysvshm-5.3.17-3.25.1 php5-sysvshm-debuginfo-5.3.17-3.25.1 php5-tidy-5.3.17-3.25.1 php5-tidy-debuginfo-5.3.17-3.25.1 php5-tokenizer-5.3.17-3.25.1 php5-tokenizer-debuginfo-5.3.17-3.25.1 php5-wddx-5.3.17-3.25.1 php5-wddx-debuginfo-5.3.17-3.25.1 php5-xmlreader-5.3.17-3.25.1 php5-xmlreader-debuginfo-5.3.17-3.25.1 php5-xmlrpc-5.3.17-3.25.1 php5-xmlrpc-debuginfo-5.3.17-3.25.1 php5-xmlwriter-5.3.17-3.25.1 php5-xmlwriter-debuginfo-5.3.17-3.25.1 php5-xsl-5.3.17-3.25.1 php5-xsl-debuginfo-5.3.17-3.25.1 php5-zip-5.3.17-3.25.1 php5-zip-debuginfo-5.3.17-3.25.1 php5-zlib-5.3.17-3.25.1 php5-zlib-debuginfo-5.3.17-3.25.1 - openSUSE 12.3 (noarch): php5-pear-5.3.17-3.25.1 References: http://support.novell.com/security/cve/CVE-2014-4670.html http://support.novell.com/security/cve/CVE-2014-4698.html http://support.novell.com/security/cve/CVE-2014-4721.html https://bugzilla.novell.com/885961 https://bugzilla.novell.com/886059 https://bugzilla.novell.com/886060

1 0

openSUSE-SU-2014:0944-1: moderate: samba: update to fix DOS and crash
by opensuse-security＠opensuse.org 30 Jul '14

30 Jul '14

openSUSE Security Update: samba: update to fix DOS and crash ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0944-1 Rating: moderate References: #880962 #883758 Cross-References: CVE-2014-0244 CVE-2014-3493 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: samba was updated to fix two security issues. These security issues were fixed: - Fix segmentation fault in smbd_marshall_dir_entry()'s SMB_FIND_FILE_UNIX handler (CVE-2014-3493) - Fix nmbd denial of service (CVE-2014-0244) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2014- To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): ldapsmb-1.34b-134.1 libldb-devel-1.0.2-134.1 libldb1-1.0.2-134.1 libldb1-debuginfo-1.0.2-134.1 libnetapi-devel-3.6.3-134.1 libnetapi0-3.6.3-134.1 libnetapi0-debuginfo-3.6.3-134.1 libsmbclient-devel-3.6.3-134.1 libsmbclient0-3.6.3-134.1 libsmbclient0-debuginfo-3.6.3-134.1 libsmbsharemodes-devel-3.6.3-134.1 libsmbsharemodes0-3.6.3-134.1 libsmbsharemodes0-debuginfo-3.6.3-134.1 libtalloc-devel-2.0.5-134.1 libtalloc2-2.0.5-134.1 libtalloc2-debuginfo-2.0.5-134.1 libtdb-devel-1.2.9-134.1 libtdb1-1.2.9-134.1 libtdb1-debuginfo-1.2.9-134.1 libtevent-devel-0.9.11-134.1 libtevent0-0.9.11-134.1 libtevent0-debuginfo-0.9.11-134.1 libwbclient-devel-3.6.3-134.1 libwbclient0-3.6.3-134.1 libwbclient0-debuginfo-3.6.3-134.1 samba-3.6.3-134.1 samba-client-3.6.3-134.1 samba-client-debuginfo-3.6.3-134.1 samba-debuginfo-3.6.3-134.1 samba-debugsource-3.6.3-134.1 samba-devel-3.6.3-134.1 samba-krb-printing-3.6.3-134.1 samba-krb-printing-debuginfo-3.6.3-134.1 samba-winbind-3.6.3-134.1 samba-winbind-debuginfo-3.6.3-134.1 - openSUSE 11.4 (x86_64): libldb1-32bit-1.0.2-134.1 libldb1-debuginfo-32bit-1.0.2-134.1 libsmbclient0-32bit-3.6.3-134.1 libsmbclient0-debuginfo-32bit-3.6.3-134.1 libtalloc2-32bit-2.0.5-134.1 libtalloc2-debuginfo-32bit-2.0.5-134.1 libtdb1-32bit-1.2.9-134.1 libtdb1-debuginfo-32bit-1.2.9-134.1 libtevent0-32bit-0.9.11-134.1 libtevent0-debuginfo-32bit-0.9.11-134.1 libwbclient0-32bit-3.6.3-134.1 libwbclient0-debuginfo-32bit-3.6.3-134.1 samba-32bit-3.6.3-134.1 samba-client-32bit-3.6.3-134.1 samba-client-debuginfo-32bit-3.6.3-134.1 samba-debuginfo-32bit-3.6.3-134.1 samba-winbind-32bit-3.6.3-134.1 samba-winbind-debuginfo-32bit-3.6.3-134.1 - openSUSE 11.4 (noarch): samba-doc-3.6.3-134.1 - openSUSE 11.4 (ia64): libldb1-debuginfo-x86-1.0.2-134.1 libldb1-x86-1.0.2-134.1 libsmbclient0-debuginfo-x86-3.6.3-134.1 libsmbclient0-x86-3.6.3-134.1 libtalloc2-debuginfo-x86-2.0.5-134.1 libtalloc2-x86-2.0.5-134.1 libtdb1-debuginfo-x86-1.2.9-134.1 libtdb1-x86-1.2.9-134.1 libtevent0-debuginfo-x86-0.9.11-134.1 libtevent0-x86-0.9.11-134.1 libwbclient0-debuginfo-x86-3.6.3-134.1 libwbclient0-x86-3.6.3-134.1 samba-client-debuginfo-x86-3.6.3-134.1 samba-client-x86-3.6.3-134.1 samba-debuginfo-x86-3.6.3-134.1 samba-winbind-debuginfo-x86-3.6.3-134.1 samba-winbind-x86-3.6.3-134.1 samba-x86-3.6.3-134.1 References: http://support.novell.com/security/cve/CVE-2014-0244.html http://support.novell.com/security/cve/CVE-2014-3493.html https://bugzilla.novell.com/880962 https://bugzilla.novell.com/883758

1 0

openSUSE-SU-2014:0943-1: moderate: apache2-mod_wsgi: fixed off-by-one error in setgroups
by opensuse-security＠opensuse.org 30 Jul '14

30 Jul '14

openSUSE Security Update: apache2-mod_wsgi: fixed off-by-one error in setgroups ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0943-1 Rating: moderate References: #883229 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: apache2-mod_wsgi was updated to fix a small of-by-one error in its use of setgroups. Please see http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.2.4.html for more information. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014- To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): apache2-mod_wsgi-3.4-2.12.1 apache2-mod_wsgi-debuginfo-3.4-2.12.1 apache2-mod_wsgi-debugsource-3.4-2.12.1 References: https://bugzilla.novell.com/883229

1 0

openSUSE-SU-2014:0942-1: moderate: Update to prevent insecure DNS TXT record parsing
by opensuse-security＠opensuse.org 30 Jul '14

30 Jul '14

openSUSE Security Update: Update to prevent insecure DNS TXT record parsing ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0942-1 Rating: moderate References: #882992 Cross-References: CVE-2014-4049 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: php5 was updated to prevent insecure DNS TXT record parsing. This security issue was fixed: - Heap-based buffer overflow in DNS TXT record parsing (CVE-2014-4049) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2014- To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): apache2-mod_php5-5.3.5-367.1 apache2-mod_php5-debuginfo-5.3.5-367.1 php5-5.3.5-367.1 php5-bcmath-5.3.5-367.1 php5-bcmath-debuginfo-5.3.5-367.1 php5-bz2-5.3.5-367.1 php5-bz2-debuginfo-5.3.5-367.1 php5-calendar-5.3.5-367.1 php5-calendar-debuginfo-5.3.5-367.1 php5-ctype-5.3.5-367.1 php5-ctype-debuginfo-5.3.5-367.1 php5-curl-5.3.5-367.1 php5-curl-debuginfo-5.3.5-367.1 php5-dba-5.3.5-367.1 php5-dba-debuginfo-5.3.5-367.1 php5-debuginfo-5.3.5-367.1 php5-debugsource-5.3.5-367.1 php5-devel-5.3.5-367.1 php5-dom-5.3.5-367.1 php5-dom-debuginfo-5.3.5-367.1 php5-enchant-5.3.5-367.1 php5-enchant-debuginfo-5.3.5-367.1 php5-exif-5.3.5-367.1 php5-exif-debuginfo-5.3.5-367.1 php5-fastcgi-5.3.5-367.1 php5-fastcgi-debuginfo-5.3.5-367.1 php5-fileinfo-5.3.5-367.1 php5-fileinfo-debuginfo-5.3.5-367.1 php5-fpm-5.3.5-367.1 php5-fpm-debuginfo-5.3.5-367.1 php5-ftp-5.3.5-367.1 php5-ftp-debuginfo-5.3.5-367.1 php5-gd-5.3.5-367.1 php5-gd-debuginfo-5.3.5-367.1 php5-gettext-5.3.5-367.1 php5-gettext-debuginfo-5.3.5-367.1 php5-gmp-5.3.5-367.1 php5-gmp-debuginfo-5.3.5-367.1 php5-hash-5.3.5-367.1 php5-hash-debuginfo-5.3.5-367.1 php5-iconv-5.3.5-367.1 php5-iconv-debuginfo-5.3.5-367.1 php5-imap-5.3.5-367.1 php5-imap-debuginfo-5.3.5-367.1 php5-intl-5.3.5-367.1 php5-intl-debuginfo-5.3.5-367.1 php5-json-5.3.5-367.1 php5-json-debuginfo-5.3.5-367.1 php5-ldap-5.3.5-367.1 php5-ldap-debuginfo-5.3.5-367.1 php5-mbstring-5.3.5-367.1 php5-mbstring-debuginfo-5.3.5-367.1 php5-mcrypt-5.3.5-367.1 php5-mcrypt-debuginfo-5.3.5-367.1 php5-mysql-5.3.5-367.1 php5-mysql-debuginfo-5.3.5-367.1 php5-odbc-5.3.5-367.1 php5-odbc-debuginfo-5.3.5-367.1 php5-openssl-5.3.5-367.1 php5-openssl-debuginfo-5.3.5-367.1 php5-pcntl-5.3.5-367.1 php5-pcntl-debuginfo-5.3.5-367.1 php5-pdo-5.3.5-367.1 php5-pdo-debuginfo-5.3.5-367.1 php5-pgsql-5.3.5-367.1 php5-pgsql-debuginfo-5.3.5-367.1 php5-phar-5.3.5-367.1 php5-phar-debuginfo-5.3.5-367.1 php5-posix-5.3.5-367.1 php5-posix-debuginfo-5.3.5-367.1 php5-pspell-5.3.5-367.1 php5-pspell-debuginfo-5.3.5-367.1 php5-readline-5.3.5-367.1 php5-readline-debuginfo-5.3.5-367.1 php5-shmop-5.3.5-367.1 php5-shmop-debuginfo-5.3.5-367.1 php5-snmp-5.3.5-367.1 php5-snmp-debuginfo-5.3.5-367.1 php5-soap-5.3.5-367.1 php5-soap-debuginfo-5.3.5-367.1 php5-sockets-5.3.5-367.1 php5-sockets-debuginfo-5.3.5-367.1 php5-sqlite-5.3.5-367.1 php5-sqlite-debuginfo-5.3.5-367.1 php5-suhosin-5.3.5-367.1 php5-suhosin-debuginfo-5.3.5-367.1 php5-sysvmsg-5.3.5-367.1 php5-sysvmsg-debuginfo-5.3.5-367.1 php5-sysvsem-5.3.5-367.1 php5-sysvsem-debuginfo-5.3.5-367.1 php5-sysvshm-5.3.5-367.1 php5-sysvshm-debuginfo-5.3.5-367.1 php5-tidy-5.3.5-367.1 php5-tidy-debuginfo-5.3.5-367.1 php5-tokenizer-5.3.5-367.1 php5-tokenizer-debuginfo-5.3.5-367.1 php5-wddx-5.3.5-367.1 php5-wddx-debuginfo-5.3.5-367.1 php5-xmlreader-5.3.5-367.1 php5-xmlreader-debuginfo-5.3.5-367.1 php5-xmlrpc-5.3.5-367.1 php5-xmlrpc-debuginfo-5.3.5-367.1 php5-xmlwriter-5.3.5-367.1 php5-xmlwriter-debuginfo-5.3.5-367.1 php5-xsl-5.3.5-367.1 php5-xsl-debuginfo-5.3.5-367.1 php5-zip-5.3.5-367.1 php5-zip-debuginfo-5.3.5-367.1 php5-zlib-5.3.5-367.1 php5-zlib-debuginfo-5.3.5-367.1 - openSUSE 11.4 (noarch): php5-pear-5.3.5-367.1 References: http://support.novell.com/security/cve/CVE-2014-4049.html https://bugzilla.novell.com/882992

1 0

openSUSE-RU-2014:0941-1: vorbis-tools: Fixes segmentation fault of vcut
by maintenance＠opensuse.org 30 Jul '14

30 Jul '14

openSUSE Recommended Update: vorbis-tools: Fixes segmentation fault of vcut ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0941-1 Rating: low References: #888360 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues with vorbis-tools: -bnc#888360: Fixes segmentation fault of vcut Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014- To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): vorbis-tools-1.4.0-14.4.1 vorbis-tools-debuginfo-1.4.0-14.4.1 vorbis-tools-debugsource-1.4.0-14.4.1 - openSUSE 13.1 (noarch): vorbis-tools-lang-1.4.0-14.4.1 References: https://bugzilla.novell.com/888360

1 0

openSUSE-RU-2014:0940-1: ImageMagick: enable fft support
by maintenance＠opensuse.org 30 Jul '14

30 Jul '14

openSUSE Recommended Update: ImageMagick: enable fft support ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0940-1 Rating: low References: #885334 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues with ImageMagick: -bnc#885334: enable fft support Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014- To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): ImageMagick-6.8.6.9-2.16.1 ImageMagick-debuginfo-6.8.6.9-2.16.1 ImageMagick-debugsource-6.8.6.9-2.16.1 ImageMagick-devel-6.8.6.9-2.16.1 ImageMagick-extra-6.8.6.9-2.16.1 ImageMagick-extra-debuginfo-6.8.6.9-2.16.1 libMagick++-6_Q16-2-6.8.6.9-2.16.1 libMagick++-6_Q16-2-debuginfo-6.8.6.9-2.16.1 libMagick++-devel-6.8.6.9-2.16.1 libMagickCore-6_Q16-1-6.8.6.9-2.16.1 libMagickCore-6_Q16-1-debuginfo-6.8.6.9-2.16.1 libMagickWand-6_Q16-1-6.8.6.9-2.16.1 libMagickWand-6_Q16-1-debuginfo-6.8.6.9-2.16.1 perl-PerlMagick-6.8.6.9-2.16.1 perl-PerlMagick-debuginfo-6.8.6.9-2.16.1 - openSUSE 13.1 (x86_64): ImageMagick-devel-32bit-6.8.6.9-2.16.1 libMagick++-6_Q16-2-32bit-6.8.6.9-2.16.1 libMagick++-6_Q16-2-debuginfo-32bit-6.8.6.9-2.16.1 libMagick++-devel-32bit-6.8.6.9-2.16.1 libMagickCore-6_Q16-1-32bit-6.8.6.9-2.16.1 libMagickCore-6_Q16-1-debuginfo-32bit-6.8.6.9-2.16.1 libMagickWand-6_Q16-1-32bit-6.8.6.9-2.16.1 libMagickWand-6_Q16-1-debuginfo-32bit-6.8.6.9-2.16.1 - openSUSE 13.1 (noarch): ImageMagick-doc-6.8.6.9-2.16.1 References: https://bugzilla.novell.com/885334

1 0

openSUSE-SU-2014:0939-1: important: MozillaFirefox: Update to Mozilla Firefox 31
by opensuse-security＠opensuse.org 30 Jul '14

30 Jul '14

openSUSE Security Update: MozillaFirefox: Update to Mozilla Firefox 31 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0939-1 Rating: important References: #887746 Cross-References: CVE-2014-1544 CVE-2014-1547 CVE-2014-1548 CVE-2014-1549 CVE-2014-1550 CVE-2014-1552 CVE-2014-1555 CVE-2014-1556 CVE-2014-1557 CVE-2014-1558 CVE-2014-1559 CVE-2014-1560 CVE-2014-1561 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that fixes 13 vulnerabilities is now available. Description: MozillaFirefox was updated to version 31 to fix various security issues and bugs: * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548 Miscellaneous memory safety hazards * MFSA 2014-57/CVE-2014-1549 (bmo#1020205) Buffer overflow during Web Audio buffering for playback * MFSA 2014-58/CVE-2014-1550 (bmo#1020411) Use-after-free in Web Audio due to incorrect control message ordering * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375) Toolbar dialog customization event spoofing * MFSA 2014-61/CVE-2014-1555 (bmo#1023121) Use-after-free with FireOnStateChange event * MFSA 2014-62/CVE-2014-1556 (bmo#1028891) Exploitable WebGL crash with Cesium JavaScript library * MFSA 2014-63/CVE-2014-1544 (bmo#963150) Use-after-free while when manipulating certificates in the trusted cache (solved with NSS 3.16.2 requirement) * MFSA 2014-64/CVE-2014-1557 (bmo#913805) Crash in Skia library when scaling high quality images * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560 (bmo#1015973, bmo#1026022, bmo#997795) Certificate parsing broken by non-standard character encoding * MFSA 2014-66/CVE-2014-1552 (bmo#985135) IFRAME sandbox same-origin access through redirect Mozilla-nss was updated to 3.16.3: New Functions: * CERT_GetGeneralNameTypeFromString (This function was already added in NSS 3.16.2, however, it wasn't declared in a public header file.) Notable Changes: * The following 1024-bit CA certificates were removed - Entrust.net Secure Server Certification Authority - GTE CyberTrust Global Root - ValiCert Class 1 Policy Validation Authority - ValiCert Class 2 Policy Validation Authority - ValiCert Class 3 Policy Validation Authority * Additionally, the following CA certificate was removed as requested by the CA: - TDC Internet Root CA * The following CA certificates were added: - Certification Authority of WoSign - CA 沃通根证书 - DigiCert Assured ID Root G2 - DigiCert Assured ID Root G3 - DigiCert Global Root G2 - DigiCert Global Root G3 - DigiCert Trusted Root G4 - QuoVadis Root CA 1 G3 - QuoVadis Root CA 2 G3 - QuoVadis Root CA 3 G3 * The Trust Bits were changed for the following CA certificates - Class 3 Public Primary Certification Authority - Class 3 Public Primary Certification Authority - Class 2 Public Primary Certification Authority - G2 - VeriSign Class 2 Public Primary Certification Authority - G3 - AC Raíz Certicámara S.A. - NetLock Uzleti (Class B) Tanusitvanykiado - NetLock Expressz (Class C) Tanusitvanykiado changes in 3.16.2 New functionality: * DTLS 1.2 is supported. * The TLS application layer protocol negotiation (ALPN) extension is also supported on the server side. * RSA-OEAP is supported. Use the new PK11_PrivDecrypt and PK11_PubEncrypt functions with the CKM_RSA_PKCS_OAEP mechanism. * New Intel AES assembly code for 32-bit and 64-bit Windows, contributed by Shay Gueron and Vlad Krasnov of Intel. Notable Changes: * The btoa command has a new command-line option -w suffix, which causes the output to be wrapped in BEGIN/END lines with the given suffix * The certutil commands supports additionals types of subject alt name extensions. * The certutil command supports generic certificate extensions, by loading binary data from files, which have been prepared using external tools, or which have been extracted from other existing certificates and dumped to file. * The certutil command supports three new certificate usage specifiers. * The pp command supports printing UTF-8 (-u). * On Linux, NSS is built with the -ffunction-sections -fdata-sections compiler flags and the --gc-sections linker flag to allow unused functions to be discarded. changes in 3.16.1 New functionality: * Added the "ECC" flag for modutil to select the module used for elliptic curve cryptography (ECC) operations. New Macros * PUBLIC_MECH_ECC_FLAG a public mechanism flag for elliptic curve cryptography (ECC) operations * SECMOD_ECC_FLAG an NSS-internal mechanism flag for elliptic curve cryptography (ECC) operations. This macro has the same numeric value as PUBLIC_MECH_ECC_FLAG. Notable Changes: * Imposed name constraints on the French government root CA ANSSI (DCISS). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014- - openSUSE 12.3: zypper in -t patch openSUSE-2014- To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): MozillaFirefox-31.0-33.1 MozillaFirefox-branding-upstream-31.0-33.1 MozillaFirefox-buildsymbols-31.0-33.1 MozillaFirefox-debuginfo-31.0-33.1 MozillaFirefox-debugsource-31.0-33.1 MozillaFirefox-devel-31.0-33.1 MozillaFirefox-translations-common-31.0-33.1 MozillaFirefox-translations-other-31.0-33.1 libfreebl3-3.16.3-27.1 libfreebl3-debuginfo-3.16.3-27.1 libsoftokn3-3.16.3-27.1 libsoftokn3-debuginfo-3.16.3-27.1 mozilla-nss-3.16.3-27.1 mozilla-nss-certs-3.16.3-27.1 mozilla-nss-certs-debuginfo-3.16.3-27.1 mozilla-nss-debuginfo-3.16.3-27.1 mozilla-nss-debugsource-3.16.3-27.1 mozilla-nss-devel-3.16.3-27.1 mozilla-nss-sysinit-3.16.3-27.1 mozilla-nss-sysinit-debuginfo-3.16.3-27.1 mozilla-nss-tools-3.16.3-27.1 mozilla-nss-tools-debuginfo-3.16.3-27.1 - openSUSE 13.1 (x86_64): libfreebl3-32bit-3.16.3-27.1 libfreebl3-debuginfo-32bit-3.16.3-27.1 libsoftokn3-32bit-3.16.3-27.1 libsoftokn3-debuginfo-32bit-3.16.3-27.1 mozilla-nss-32bit-3.16.3-27.1 mozilla-nss-certs-32bit-3.16.3-27.1 mozilla-nss-certs-debuginfo-32bit-3.16.3-27.1 mozilla-nss-debuginfo-32bit-3.16.3-27.1 mozilla-nss-sysinit-32bit-3.16.3-27.1 mozilla-nss-sysinit-debuginfo-32bit-3.16.3-27.1 - openSUSE 12.3 (i586 x86_64): MozillaFirefox-31.0-1.72.1 MozillaFirefox-branding-upstream-31.0-1.72.1 MozillaFirefox-buildsymbols-31.0-1.72.1 MozillaFirefox-debuginfo-31.0-1.72.1 MozillaFirefox-debugsource-31.0-1.72.1 MozillaFirefox-devel-31.0-1.72.1 MozillaFirefox-translations-common-31.0-1.72.1 MozillaFirefox-translations-other-31.0-1.72.1 libfreebl3-3.16.3-1.43.1 libfreebl3-debuginfo-3.16.3-1.43.1 libsoftokn3-3.16.3-1.43.1 libsoftokn3-debuginfo-3.16.3-1.43.1 mozilla-nss-3.16.3-1.43.1 mozilla-nss-certs-3.16.3-1.43.1 mozilla-nss-certs-debuginfo-3.16.3-1.43.1 mozilla-nss-debuginfo-3.16.3-1.43.1 mozilla-nss-debugsource-3.16.3-1.43.1 mozilla-nss-devel-3.16.3-1.43.1 mozilla-nss-sysinit-3.16.3-1.43.1 mozilla-nss-sysinit-debuginfo-3.16.3-1.43.1 mozilla-nss-tools-3.16.3-1.43.1 mozilla-nss-tools-debuginfo-3.16.3-1.43.1 - openSUSE 12.3 (x86_64): libfreebl3-32bit-3.16.3-1.43.1 libfreebl3-debuginfo-32bit-3.16.3-1.43.1 libsoftokn3-32bit-3.16.3-1.43.1 libsoftokn3-debuginfo-32bit-3.16.3-1.43.1 mozilla-nss-32bit-3.16.3-1.43.1 mozilla-nss-certs-32bit-3.16.3-1.43.1 mozilla-nss-certs-debuginfo-32bit-3.16.3-1.43.1 mozilla-nss-debuginfo-32bit-3.16.3-1.43.1 mozilla-nss-sysinit-32bit-3.16.3-1.43.1 mozilla-nss-sysinit-debuginfo-32bit-3.16.3-1.43.1 References: http://support.novell.com/security/cve/CVE-2014-1544.html http://support.novell.com/security/cve/CVE-2014-1547.html http://support.novell.com/security/cve/CVE-2014-1548.html http://support.novell.com/security/cve/CVE-2014-1549.html http://support.novell.com/security/cve/CVE-2014-1550.html http://support.novell.com/security/cve/CVE-2014-1552.html http://support.novell.com/security/cve/CVE-2014-1555.html http://support.novell.com/security/cve/CVE-2014-1556.html http://support.novell.com/security/cve/CVE-2014-1557.html http://support.novell.com/security/cve/CVE-2014-1558.html http://support.novell.com/security/cve/CVE-2014-1559.html http://support.novell.com/security/cve/CVE-2014-1560.html http://support.novell.com/security/cve/CVE-2014-1561.html https://bugzilla.novell.com/887746

1 0

openSUSE-RU-2014:0927-1: SuSEfirewall2: enable DHCPv6 reply handling
by maintenance＠opensuse.org 21 Jul '14

21 Jul '14

openSUSE Recommended Update: SuSEfirewall2: enable DHCPv6 reply handling ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:0927-1 Rating: low References: #783002 #887850 Affected Products: openSUSE 12.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issues with SuSEfirewall2: - bnc#783002: + allows DHCPv6 replies to arrive at the machine, even with the firewall enabled. + This avoids curious effects in networks where IPv6 numbers are distributed via DHCPv6. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.3: zypper in -t patch openSUSE-2014-468 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.3 (noarch): SuSEfirewall2-3.6.302-1.8.1 References: https://bugzilla.novell.com/783002 https://bugzilla.novell.com/887850

1 0

openSUSE-SU-2014:0926-1: moderate: dbus-1: fixes several issues
by opensuse-security＠opensuse.org 21 Jul '14

21 Jul '14

openSUSE Security Update: dbus-1: fixes several issues ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0926-1 Rating: moderate References: #885241 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: CVE-2014-3532 CVE-2014-3533 bnc#885241 fdo#80163 fdo#79694 fdo#80469 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-465 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): dbus-1-1.7.4-4.16.2 dbus-1-debuginfo-1.7.4-4.16.2 dbus-1-debugsource-1.7.4-4.16.1 dbus-1-devel-1.7.4-4.16.1 dbus-1-x11-1.7.4-4.16.2 dbus-1-x11-debuginfo-1.7.4-4.16.2 dbus-1-x11-debugsource-1.7.4-4.16.2 libdbus-1-3-1.7.4-4.16.1 libdbus-1-3-debuginfo-1.7.4-4.16.1 - openSUSE 13.1 (x86_64): dbus-1-debuginfo-32bit-1.7.4-4.16.2 dbus-1-devel-32bit-1.7.4-4.16.1 libdbus-1-3-32bit-1.7.4-4.16.1 libdbus-1-3-debuginfo-32bit-1.7.4-4.16.1 - openSUSE 13.1 (noarch): dbus-1-devel-doc-1.7.4-4.16.2 References: https://bugzilla.novell.com/885241

1 0

openSUSE-SU-2014:0925-1: php, php5, php53: fixes several security issues
by opensuse-security＠opensuse.org 21 Jul '14

21 Jul '14

openSUSE Security Update: php, php5, php53: fixes several security issues ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0925-1 Rating: low References: #884986 #884987 #884989 #884990 #884991 #884992 Cross-References: CVE-2014-0207 CVE-2014-3478 CVE-2014-3479 CVE-2014-3480 CVE-2014-3487 CVE-2014-3515 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update fixes the following security issues with php, php5 and php53: - bnc#884986, CVE-2014-0207: file: php5: cdf_read_short_sector insufficient boundary check - bnc#884987, CVE-2014-3478: file: mconvert incorrect handling of truncated pascal string size - bnc#884989, CVE-2014-3479: php53: file: cdf_check_stream_offset insufficient boundary check - bnc#884990, CVE-2014-3480: php53: file: cdf_count_chain insufficient boundary check - bnc#884991, CVE-2014-3487: php53: file: cdf_read_property_info insufficient boundary check - bnc#884992, CVE-2014-3515: php5: unserialize() SPL ArrayObject / SPLObjectStorage Type Confusion Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-464 - openSUSE 12.3: zypper in -t patch openSUSE-2014-464 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): apache2-mod_php5-5.4.20-16.1 apache2-mod_php5-debuginfo-5.4.20-16.1 php5-5.4.20-16.1 php5-bcmath-5.4.20-16.1 php5-bcmath-debuginfo-5.4.20-16.1 php5-bz2-5.4.20-16.1 php5-bz2-debuginfo-5.4.20-16.1 php5-calendar-5.4.20-16.1 php5-calendar-debuginfo-5.4.20-16.1 php5-ctype-5.4.20-16.1 php5-ctype-debuginfo-5.4.20-16.1 php5-curl-5.4.20-16.1 php5-curl-debuginfo-5.4.20-16.1 php5-dba-5.4.20-16.1 php5-dba-debuginfo-5.4.20-16.1 php5-debuginfo-5.4.20-16.1 php5-debugsource-5.4.20-16.1 php5-devel-5.4.20-16.1 php5-dom-5.4.20-16.1 php5-dom-debuginfo-5.4.20-16.1 php5-enchant-5.4.20-16.1 php5-enchant-debuginfo-5.4.20-16.1 php5-exif-5.4.20-16.1 php5-exif-debuginfo-5.4.20-16.1 php5-fastcgi-5.4.20-16.1 php5-fastcgi-debuginfo-5.4.20-16.1 php5-fileinfo-5.4.20-16.1 php5-fileinfo-debuginfo-5.4.20-16.1 php5-firebird-5.4.20-16.1 php5-firebird-debuginfo-5.4.20-16.1 php5-fpm-5.4.20-16.1 php5-fpm-debuginfo-5.4.20-16.1 php5-ftp-5.4.20-16.1 php5-ftp-debuginfo-5.4.20-16.1 php5-gd-5.4.20-16.1 php5-gd-debuginfo-5.4.20-16.1 php5-gettext-5.4.20-16.1 php5-gettext-debuginfo-5.4.20-16.1 php5-gmp-5.4.20-16.1 php5-gmp-debuginfo-5.4.20-16.1 php5-iconv-5.4.20-16.1 php5-iconv-debuginfo-5.4.20-16.1 php5-imap-5.4.20-16.1 php5-imap-debuginfo-5.4.20-16.1 php5-intl-5.4.20-16.1 php5-intl-debuginfo-5.4.20-16.1 php5-json-5.4.20-16.1 php5-json-debuginfo-5.4.20-16.1 php5-ldap-5.4.20-16.1 php5-ldap-debuginfo-5.4.20-16.1 php5-mbstring-5.4.20-16.1 php5-mbstring-debuginfo-5.4.20-16.1 php5-mcrypt-5.4.20-16.1 php5-mcrypt-debuginfo-5.4.20-16.1 php5-mssql-5.4.20-16.1 php5-mssql-debuginfo-5.4.20-16.1 php5-mysql-5.4.20-16.1 php5-mysql-debuginfo-5.4.20-16.1 php5-odbc-5.4.20-16.1 php5-odbc-debuginfo-5.4.20-16.1 php5-openssl-5.4.20-16.1 php5-openssl-debuginfo-5.4.20-16.1 php5-pcntl-5.4.20-16.1 php5-pcntl-debuginfo-5.4.20-16.1 php5-pdo-5.4.20-16.1 php5-pdo-debuginfo-5.4.20-16.1 php5-pgsql-5.4.20-16.1 php5-pgsql-debuginfo-5.4.20-16.1 php5-phar-5.4.20-16.1 php5-phar-debuginfo-5.4.20-16.1 php5-posix-5.4.20-16.1 php5-posix-debuginfo-5.4.20-16.1 php5-pspell-5.4.20-16.1 php5-pspell-debuginfo-5.4.20-16.1 php5-readline-5.4.20-16.1 php5-readline-debuginfo-5.4.20-16.1 php5-shmop-5.4.20-16.1 php5-shmop-debuginfo-5.4.20-16.1 php5-snmp-5.4.20-16.1 php5-snmp-debuginfo-5.4.20-16.1 php5-soap-5.4.20-16.1 php5-soap-debuginfo-5.4.20-16.1 php5-sockets-5.4.20-16.1 php5-sockets-debuginfo-5.4.20-16.1 php5-sqlite-5.4.20-16.1 php5-sqlite-debuginfo-5.4.20-16.1 php5-suhosin-5.4.20-16.1 php5-suhosin-debuginfo-5.4.20-16.1 php5-sysvmsg-5.4.20-16.1 php5-sysvmsg-debuginfo-5.4.20-16.1 php5-sysvsem-5.4.20-16.1 php5-sysvsem-debuginfo-5.4.20-16.1 php5-sysvshm-5.4.20-16.1 php5-sysvshm-debuginfo-5.4.20-16.1 php5-tidy-5.4.20-16.1 php5-tidy-debuginfo-5.4.20-16.1 php5-tokenizer-5.4.20-16.1 php5-tokenizer-debuginfo-5.4.20-16.1 php5-wddx-5.4.20-16.1 php5-wddx-debuginfo-5.4.20-16.1 php5-xmlreader-5.4.20-16.1 php5-xmlreader-debuginfo-5.4.20-16.1 php5-xmlrpc-5.4.20-16.1 php5-xmlrpc-debuginfo-5.4.20-16.1 php5-xmlwriter-5.4.20-16.1 php5-xmlwriter-debuginfo-5.4.20-16.1 php5-xsl-5.4.20-16.1 php5-xsl-debuginfo-5.4.20-16.1 php5-zip-5.4.20-16.1 php5-zip-debuginfo-5.4.20-16.1 php5-zlib-5.4.20-16.1 php5-zlib-debuginfo-5.4.20-16.1 - openSUSE 13.1 (noarch): php5-pear-5.4.20-16.1 - openSUSE 12.3 (i586 x86_64): apache2-mod_php5-5.3.17-3.20.1 apache2-mod_php5-debuginfo-5.3.17-3.20.1 php5-5.3.17-3.20.1 php5-bcmath-5.3.17-3.20.1 php5-bcmath-debuginfo-5.3.17-3.20.1 php5-bz2-5.3.17-3.20.1 php5-bz2-debuginfo-5.3.17-3.20.1 php5-calendar-5.3.17-3.20.1 php5-calendar-debuginfo-5.3.17-3.20.1 php5-ctype-5.3.17-3.20.1 php5-ctype-debuginfo-5.3.17-3.20.1 php5-curl-5.3.17-3.20.1 php5-curl-debuginfo-5.3.17-3.20.1 php5-dba-5.3.17-3.20.1 php5-dba-debuginfo-5.3.17-3.20.1 php5-debuginfo-5.3.17-3.20.1 php5-debugsource-5.3.17-3.20.1 php5-devel-5.3.17-3.20.1 php5-dom-5.3.17-3.20.1 php5-dom-debuginfo-5.3.17-3.20.1 php5-enchant-5.3.17-3.20.1 php5-enchant-debuginfo-5.3.17-3.20.1 php5-exif-5.3.17-3.20.1 php5-exif-debuginfo-5.3.17-3.20.1 php5-fastcgi-5.3.17-3.20.1 php5-fastcgi-debuginfo-5.3.17-3.20.1 php5-fileinfo-5.3.17-3.20.1 php5-fileinfo-debuginfo-5.3.17-3.20.1 php5-fpm-5.3.17-3.20.1 php5-fpm-debuginfo-5.3.17-3.20.1 php5-ftp-5.3.17-3.20.1 php5-ftp-debuginfo-5.3.17-3.20.1 php5-gd-5.3.17-3.20.1 php5-gd-debuginfo-5.3.17-3.20.1 php5-gettext-5.3.17-3.20.1 php5-gettext-debuginfo-5.3.17-3.20.1 php5-gmp-5.3.17-3.20.1 php5-gmp-debuginfo-5.3.17-3.20.1 php5-iconv-5.3.17-3.20.1 php5-iconv-debuginfo-5.3.17-3.20.1 php5-imap-5.3.17-3.20.1 php5-imap-debuginfo-5.3.17-3.20.1 php5-intl-5.3.17-3.20.1 php5-intl-debuginfo-5.3.17-3.20.1 php5-json-5.3.17-3.20.1 php5-json-debuginfo-5.3.17-3.20.1 php5-ldap-5.3.17-3.20.1 php5-ldap-debuginfo-5.3.17-3.20.1 php5-mbstring-5.3.17-3.20.1 php5-mbstring-debuginfo-5.3.17-3.20.1 php5-mcrypt-5.3.17-3.20.1 php5-mcrypt-debuginfo-5.3.17-3.20.1 php5-mssql-5.3.17-3.20.1 php5-mssql-debuginfo-5.3.17-3.20.1 php5-mysql-5.3.17-3.20.1 php5-mysql-debuginfo-5.3.17-3.20.1 php5-odbc-5.3.17-3.20.1 php5-odbc-debuginfo-5.3.17-3.20.1 php5-openssl-5.3.17-3.20.1 php5-openssl-debuginfo-5.3.17-3.20.1 php5-pcntl-5.3.17-3.20.1 php5-pcntl-debuginfo-5.3.17-3.20.1 php5-pdo-5.3.17-3.20.1 php5-pdo-debuginfo-5.3.17-3.20.1 php5-pgsql-5.3.17-3.20.1 php5-pgsql-debuginfo-5.3.17-3.20.1 php5-phar-5.3.17-3.20.1 php5-phar-debuginfo-5.3.17-3.20.1 php5-posix-5.3.17-3.20.1 php5-posix-debuginfo-5.3.17-3.20.1 php5-pspell-5.3.17-3.20.1 php5-pspell-debuginfo-5.3.17-3.20.1 php5-readline-5.3.17-3.20.1 php5-readline-debuginfo-5.3.17-3.20.1 php5-shmop-5.3.17-3.20.1 php5-shmop-debuginfo-5.3.17-3.20.1 php5-snmp-5.3.17-3.20.1 php5-snmp-debuginfo-5.3.17-3.20.1 php5-soap-5.3.17-3.20.1 php5-soap-debuginfo-5.3.17-3.20.1 php5-sockets-5.3.17-3.20.1 php5-sockets-debuginfo-5.3.17-3.20.1 php5-sqlite-5.3.17-3.20.1 php5-sqlite-debuginfo-5.3.17-3.20.1 php5-suhosin-5.3.17-3.20.1 php5-suhosin-debuginfo-5.3.17-3.20.1 php5-sysvmsg-5.3.17-3.20.1 php5-sysvmsg-debuginfo-5.3.17-3.20.1 php5-sysvsem-5.3.17-3.20.1 php5-sysvsem-debuginfo-5.3.17-3.20.1 php5-sysvshm-5.3.17-3.20.1 php5-sysvshm-debuginfo-5.3.17-3.20.1 php5-tidy-5.3.17-3.20.1 php5-tidy-debuginfo-5.3.17-3.20.1 php5-tokenizer-5.3.17-3.20.1 php5-tokenizer-debuginfo-5.3.17-3.20.1 php5-wddx-5.3.17-3.20.1 php5-wddx-debuginfo-5.3.17-3.20.1 php5-xmlreader-5.3.17-3.20.1 php5-xmlreader-debuginfo-5.3.17-3.20.1 php5-xmlrpc-5.3.17-3.20.1 php5-xmlrpc-debuginfo-5.3.17-3.20.1 php5-xmlwriter-5.3.17-3.20.1 php5-xmlwriter-debuginfo-5.3.17-3.20.1 php5-xsl-5.3.17-3.20.1 php5-xsl-debuginfo-5.3.17-3.20.1 php5-zip-5.3.17-3.20.1 php5-zip-debuginfo-5.3.17-3.20.1 php5-zlib-5.3.17-3.20.1 php5-zlib-debuginfo-5.3.17-3.20.1 - openSUSE 12.3 (noarch): php5-pear-5.3.17-3.20.1 References: http://support.novell.com/security/cve/CVE-2014-0207.html http://support.novell.com/security/cve/CVE-2014-3478.html http://support.novell.com/security/cve/CVE-2014-3479.html http://support.novell.com/security/cve/CVE-2014-3480.html http://support.novell.com/security/cve/CVE-2014-3487.html http://support.novell.com/security/cve/CVE-2014-3515.html https://bugzilla.novell.com/884986 https://bugzilla.novell.com/884987 https://bugzilla.novell.com/884989 https://bugzilla.novell.com/884990 https://bugzilla.novell.com/884991 https://bugzilla.novell.com/884992

1 0