September 2014 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2014:1151-1: important: chromium to 37.0.2062.94
by opensuse-security＠opensuse.org 22 Sep '14

22 Sep '14

openSUSE Security Update: chromium to 37.0.2062.94 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1151-1 Rating: important References: #893720 Cross-References: CVE-2014-3168 CVE-2014-3169 CVE-2014-3170 CVE-2014-3171 CVE-2014-3172 CVE-2014-3173 CVE-2014-3174 CVE-2014-3176 CVE-2014-3177 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: Chromium was updated to 37.0.2062.94 containing security Fixes (bnc#893720). A full list of changes is available in the log: https://chromium.googlesource.com/chromium/src/+log/36.0.1985.0..37.0.2062. 0?pretty=full This update includes 50 security fixes. Below, we highlight fixes that were either contributed by external researchers or particularly interesting. Please see the Chromium security page for more information. Critical CVE-2014-3176, CVE-2014-3177: A special reward to lokihardt@asrt for a combination of bugs in V8, IPC, sync, and extensions that can lead to remote code execution outside of the sandbox. High CVE-2014-3168: Use-after-free in SVG. Credit to cloudfuzzer. High CVE-2014-3169: Use-after-free in DOM. Credit to Andrzej Dyjak. High CVE-2014-3170: Extension permission dialog spoofing. Credit to Rob Wu. High CVE-2014-3171: Use-after-free in bindings. Credit to cloudfuzzer. Medium CVE-2014-3172: Issue related to extension debugging. Credit to Eli Grey. Medium CVE-2014-3173: Uninitialized memory read in WebGL. Credit to jmuizelaar. Medium CVE-2014-3174: Uninitialized memory read in Web Audio. Credit to Atte Kettunen from OUSPG. We would also like to thank Collin Payne, Christoph Diehl, Sebastian Mauer, Atte Kettunen, and cloudfuzzer for working with us during the development cycle to prevent security bugs from ever reaching the stable channel. $8000 in additional rewards were issued. As usual, our ongoing internal security work responsible for a wide range of fixes: CVE-2014-3175: Various fixes from internal audits, fuzzing and other initiatives (Chrome 37). Many of the above bugs were detected using AddressSanitizer. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-550 - openSUSE 12.3: zypper in -t patch openSUSE-2014-550 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): chromedriver-37.0.2062.94-50.1 chromedriver-debuginfo-37.0.2062.94-50.1 chromium-37.0.2062.94-50.1 chromium-debuginfo-37.0.2062.94-50.1 chromium-debugsource-37.0.2062.94-50.1 chromium-desktop-gnome-37.0.2062.94-50.1 chromium-desktop-kde-37.0.2062.94-50.1 chromium-ffmpegsumo-37.0.2062.94-50.1 chromium-ffmpegsumo-debuginfo-37.0.2062.94-50.1 - openSUSE 12.3 (i586 x86_64): chromedriver-37.0.2062.94-1.55.3 chromedriver-debuginfo-37.0.2062.94-1.55.3 chromium-37.0.2062.94-1.55.3 chromium-debuginfo-37.0.2062.94-1.55.3 chromium-debugsource-37.0.2062.94-1.55.3 chromium-desktop-gnome-37.0.2062.94-1.55.3 chromium-desktop-kde-37.0.2062.94-1.55.3 chromium-ffmpegsumo-37.0.2062.94-1.55.3 chromium-ffmpegsumo-debuginfo-37.0.2062.94-1.55.3 References: http://support.novell.com/security/cve/CVE-2014-3168.html http://support.novell.com/security/cve/CVE-2014-3169.html http://support.novell.com/security/cve/CVE-2014-3170.html http://support.novell.com/security/cve/CVE-2014-3171.html http://support.novell.com/security/cve/CVE-2014-3172.html http://support.novell.com/security/cve/CVE-2014-3173.html http://support.novell.com/security/cve/CVE-2014-3174.html http://support.novell.com/security/cve/CVE-2014-3176.html http://support.novell.com/security/cve/CVE-2014-3177.html https://bugzilla.novell.com/893720

1 0

openSUSE-SU-2014:1150-1: moderate: phpMyAdmin to 4.1.14.4
by opensuse-security＠opensuse.org 22 Sep '14

22 Sep '14

openSUSE Security Update: phpMyAdmin to 4.1.14.4 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1150-1 Rating: moderate References: #896635 Cross-References: CVE-2014-6300 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: phpMyAdmin was updated to 4.1.14.4 (2014-09-13) fixing bugs and security issues. * PMASA-2014-10 (CVE-2014-6300, CWE-661 CWE-352) http://www.phpmyadmin.net/home_page/security/PMASA-2014-10.php A DOM based XSS was fixed that resulted to a CSRF that creates a ROOT account in certain conditions. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-551 - openSUSE 12.3: zypper in -t patch openSUSE-2014-551 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (noarch): phpMyAdmin-4.1.14.4-12.1 - openSUSE 12.3 (noarch): phpMyAdmin-4.1.14.4-1.20.1 References: http://support.novell.com/security/cve/CVE-2014-6300.html https://bugzilla.novell.com/896635

1 0

openSUSE-SU-2014:1149-1: moderate: Avoid ntp being used as a DDoS amplifier
by opensuse-security＠opensuse.org 20 Sep '14

20 Sep '14

openSUSE Security Update: Avoid ntp being used as a DDoS amplifier ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1149-1 Rating: moderate References: #857195 Cross-References: CVE-2013-5211 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: restrict query, configuration, modification access from world by default. Avoids that ntp can be used as a DDoS amplifier. The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service (traffic amplification) via forged (1) REQ_MON_GETLIST or (2) REQ_MON_GETLIST_1 requests, as exploited in the wild in December 2013. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2014-84 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): ntp-4.2.6p3-6.24.1 ntp-debuginfo-4.2.6p3-6.24.1 ntp-debugsource-4.2.6p3-6.24.1 ntp-doc-4.2.6p3-6.24.1 References: http://support.novell.com/security/cve/CVE-2013-5211.html https://bugzilla.novell.com/857195

1 0

openSUSE-SU-2014:1145-1: moderate: lua
by opensuse-security＠opensuse.org 19 Sep '14

19 Sep '14

openSUSE Security Update: lua ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1145-1 Rating: moderate References: #893824 Cross-References: CVE-2014-5461 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: lua was updated to fix an overflow in varargs functions (CVE-2014-5461 ,bnc#893824) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-549 - openSUSE 12.3: zypper in -t patch openSUSE-2014-549 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): liblua5_2-5.2.2-2.4.1 liblua5_2-debuginfo-5.2.2-2.4.1 lua-5.2.2-2.4.1 lua-debuginfo-5.2.2-2.4.1 lua-debugsource-5.2.2-2.4.1 lua-devel-5.2.2-2.4.1 - openSUSE 13.1 (x86_64): liblua5_2-32bit-5.2.2-2.4.1 liblua5_2-debuginfo-32bit-5.2.2-2.4.1 - openSUSE 13.1 (noarch): lua-doc-5.2.2-2.4.1 - openSUSE 12.3 (i586 x86_64): liblua5_2-5.2.1-2.5.1 liblua5_2-debuginfo-5.2.1-2.5.1 lua-5.2.1-2.5.1 lua-debuginfo-5.2.1-2.5.1 lua-debugsource-5.2.1-2.5.1 lua-devel-5.2.1-2.5.1 - openSUSE 12.3 (x86_64): liblua5_2-32bit-5.2.1-2.5.1 liblua5_2-debuginfo-32bit-5.2.1-2.5.1 - openSUSE 12.3 (noarch): lua-doc-5.2.1-2.5.1 References: http://support.novell.com/security/cve/CVE-2014-5461.html https://bugzilla.novell.com/893824

1 0

openSUSE-SU-2014:1144-1: moderate: squid: security and bugfixes
by opensuse-security＠opensuse.org 19 Sep '14

19 Sep '14

openSUSE Security Update: squid: security and bugfixes ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1144-1 Rating: moderate References: #893649 #894636 #894840 Cross-References: CVE-2014-3609 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update fixes the following security issues and bugs with squid: A denial of Service in Range header processing was fixed that could be used by proxy users to crash squid. (CVE-2014-3609) Also the following bugs were fixed: - bnc#894840: removed unnecessary 'sharedscripts' in squid's logrotate snippet - bnc#894636: fixes run of init script when logrotate is called Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-548 - openSUSE 12.3: zypper in -t patch openSUSE-2014-548 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): squid-3.3.13-2.10.1 squid-debuginfo-3.3.13-2.10.1 squid-debugsource-3.3.13-2.10.1 - openSUSE 12.3 (i586 x86_64): squid-3.2.11-3.16.1 squid-debuginfo-3.2.11-3.16.1 squid-debugsource-3.2.11-3.16.1 References: http://support.novell.com/security/cve/CVE-2014-3609.html https://bugzilla.novell.com/893649 https://bugzilla.novell.com/894636 https://bugzilla.novell.com/894840

1 0

openSUSE-SU-2014:1139-1: important: curl
by opensuse-security＠opensuse.org 17 Sep '14

17 Sep '14

openSUSE Security Update: curl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1139-1 Rating: important References: #894575 #895991 Cross-References: CVE-2014-3613 CVE-2014-3620 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: libcurl was updated to fix security issues: CVE-2014-3613: Cookies for hosts specified by numeric IP could be assigned or used for other numeric IP hosts if portions of the numerics were the same. CVE-2014-3620: libcurl allowed cookies to be set for toplevel domains, making them to broad. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-547 - openSUSE 12.3: zypper in -t patch openSUSE-2014-547 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): curl-7.32.0-2.27.1 curl-debuginfo-7.32.0-2.27.1 curl-debugsource-7.32.0-2.27.1 libcurl-devel-7.32.0-2.27.1 libcurl4-7.32.0-2.27.1 libcurl4-debuginfo-7.32.0-2.27.1 - openSUSE 13.1 (x86_64): libcurl4-32bit-7.32.0-2.27.1 libcurl4-debuginfo-32bit-7.32.0-2.27.1 - openSUSE 12.3 (i586 x86_64): curl-7.28.1-4.43.1 curl-debuginfo-7.28.1-4.43.1 curl-debugsource-7.28.1-4.43.1 libcurl-devel-7.28.1-4.43.1 libcurl4-7.28.1-4.43.1 libcurl4-debuginfo-7.28.1-4.43.1 - openSUSE 12.3 (x86_64): libcurl4-32bit-7.28.1-4.43.1 libcurl4-debuginfo-32bit-7.28.1-4.43.1 References: http://support.novell.com/security/cve/CVE-2014-3613.html http://support.novell.com/security/cve/CVE-2014-3620.html https://bugzilla.novell.com/894575 https://bugzilla.novell.com/895991

1 0

openSUSE-RU-2014:1136-1: kbd: added /usr/bin/kbd, a simple userfriedly keymap switcher
by maintenance＠opensuse.org 16 Sep '14

16 Sep '14

openSUSE Recommended Update: kbd: added /usr/bin/kbd, a simple userfriedly keymap switcher ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1136-1 Rating: low References: Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update fixes the following issue with kbd: - added /usr/bin/kbd, a simple userfriedly keymap switcher from https://github.com/jnweiger/kbd-wrapper Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-544 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): kbd-1.15.5-5.5.1 kbd-debuginfo-1.15.5-5.5.1 kbd-debugsource-1.15.5-5.5.1 References:

1 0

openSUSE-SU-2014:1135-1: moderate: ppp: fixed integer overflow in option parsing
by opensuse-security＠opensuse.org 16 Sep '14

16 Sep '14

openSUSE Security Update: ppp: fixed integer overflow in option parsing ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1135-1 Rating: moderate References: #891489 Cross-References: CVE-2014-3158 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: ppp was updated to fix an integer overflow in option parsing. (CVE-2014-3158, bnc#891489). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-545 - openSUSE 12.3: zypper in -t patch openSUSE-2014-545 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): ppp-2.4.5-20.4.1 ppp-debuginfo-2.4.5-20.4.1 ppp-debugsource-2.4.5-20.4.1 ppp-devel-2.4.5-20.4.1 - openSUSE 12.3 (i586 x86_64): ppp-2.4.5-15.4.1 ppp-debuginfo-2.4.5-15.4.1 ppp-debugsource-2.4.5-15.4.1 ppp-devel-2.4.5-15.4.1 References: http://support.novell.com/security/cve/CVE-2014-3158.html https://bugzilla.novell.com/891489

1 0

openSUSE-RU-2014:1134-1: alsa-utils: Fixes a few alsactl bugs
by maintenance＠opensuse.org 16 Sep '14

16 Sep '14

openSUSE Recommended Update: alsa-utils: Fixes a few alsactl bugs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1134-1 Rating: low References: #895581 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues with alsa-utils: - bnc#895581: Fixes a few alsactl bugs (bnc#895581) - now the lock file is created in /var/lock directory instead of /var/lib Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-543 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): alsa-utils-1.0.27.2-4.5.1 alsa-utils-debuginfo-1.0.27.2-4.5.1 alsa-utils-debugsource-1.0.27.2-4.5.1 References: https://bugzilla.novell.com/895581

1 0

openSUSE-SU-2014:1133-1: moderate: php5
by opensuse-security＠opensuse.org 16 Sep '14

16 Sep '14

openSUSE Security Update: php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1133-1 Rating: moderate References: #893849 #893853 #893855 #895658 Cross-References: CVE-2014-3597 CVE-2014-5120 CVE-2014-5459 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: php5 was updated to fix three security issues: - Insecure temporary file use for cache data was fixed by switching to a different root only directory /var/cache/php-pear (CVE-2014-5459) - An incomplete fix for CVE-2014-4049 (CVE-2014-3597) - gd extension: NUL byte injection in filenames passed to image handling functions was fixed (CVE-2014-5120) Also a bug was fixed: - fixed suhosin crash if used with php session_set_save_handler() [bnc#895658] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-546 - openSUSE 12.3: zypper in -t patch openSUSE-2014-546 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): apache2-mod_php5-5.4.20-30.1 apache2-mod_php5-debuginfo-5.4.20-30.1 php5-5.4.20-30.1 php5-bcmath-5.4.20-30.1 php5-bcmath-debuginfo-5.4.20-30.1 php5-bz2-5.4.20-30.1 php5-bz2-debuginfo-5.4.20-30.1 php5-calendar-5.4.20-30.1 php5-calendar-debuginfo-5.4.20-30.1 php5-ctype-5.4.20-30.1 php5-ctype-debuginfo-5.4.20-30.1 php5-curl-5.4.20-30.1 php5-curl-debuginfo-5.4.20-30.1 php5-dba-5.4.20-30.1 php5-dba-debuginfo-5.4.20-30.1 php5-debuginfo-5.4.20-30.1 php5-debugsource-5.4.20-30.1 php5-devel-5.4.20-30.1 php5-dom-5.4.20-30.1 php5-dom-debuginfo-5.4.20-30.1 php5-enchant-5.4.20-30.1 php5-enchant-debuginfo-5.4.20-30.1 php5-exif-5.4.20-30.1 php5-exif-debuginfo-5.4.20-30.1 php5-fastcgi-5.4.20-30.1 php5-fastcgi-debuginfo-5.4.20-30.1 php5-fileinfo-5.4.20-30.1 php5-fileinfo-debuginfo-5.4.20-30.1 php5-firebird-5.4.20-30.1 php5-firebird-debuginfo-5.4.20-30.1 php5-fpm-5.4.20-30.1 php5-fpm-debuginfo-5.4.20-30.1 php5-ftp-5.4.20-30.1 php5-ftp-debuginfo-5.4.20-30.1 php5-gd-5.4.20-30.1 php5-gd-debuginfo-5.4.20-30.1 php5-gettext-5.4.20-30.1 php5-gettext-debuginfo-5.4.20-30.1 php5-gmp-5.4.20-30.1 php5-gmp-debuginfo-5.4.20-30.1 php5-iconv-5.4.20-30.1 php5-iconv-debuginfo-5.4.20-30.1 php5-imap-5.4.20-30.1 php5-imap-debuginfo-5.4.20-30.1 php5-intl-5.4.20-30.1 php5-intl-debuginfo-5.4.20-30.1 php5-json-5.4.20-30.1 php5-json-debuginfo-5.4.20-30.1 php5-ldap-5.4.20-30.1 php5-ldap-debuginfo-5.4.20-30.1 php5-mbstring-5.4.20-30.1 php5-mbstring-debuginfo-5.4.20-30.1 php5-mcrypt-5.4.20-30.1 php5-mcrypt-debuginfo-5.4.20-30.1 php5-mssql-5.4.20-30.1 php5-mssql-debuginfo-5.4.20-30.1 php5-mysql-5.4.20-30.1 php5-mysql-debuginfo-5.4.20-30.1 php5-odbc-5.4.20-30.1 php5-odbc-debuginfo-5.4.20-30.1 php5-openssl-5.4.20-30.1 php5-openssl-debuginfo-5.4.20-30.1 php5-pcntl-5.4.20-30.1 php5-pcntl-debuginfo-5.4.20-30.1 php5-pdo-5.4.20-30.1 php5-pdo-debuginfo-5.4.20-30.1 php5-pgsql-5.4.20-30.1 php5-pgsql-debuginfo-5.4.20-30.1 php5-phar-5.4.20-30.1 php5-phar-debuginfo-5.4.20-30.1 php5-posix-5.4.20-30.1 php5-posix-debuginfo-5.4.20-30.1 php5-pspell-5.4.20-30.1 php5-pspell-debuginfo-5.4.20-30.1 php5-readline-5.4.20-30.1 php5-readline-debuginfo-5.4.20-30.1 php5-shmop-5.4.20-30.1 php5-shmop-debuginfo-5.4.20-30.1 php5-snmp-5.4.20-30.1 php5-snmp-debuginfo-5.4.20-30.1 php5-soap-5.4.20-30.1 php5-soap-debuginfo-5.4.20-30.1 php5-sockets-5.4.20-30.1 php5-sockets-debuginfo-5.4.20-30.1 php5-sqlite-5.4.20-30.1 php5-sqlite-debuginfo-5.4.20-30.1 php5-suhosin-5.4.20-30.1 php5-suhosin-debuginfo-5.4.20-30.1 php5-sysvmsg-5.4.20-30.1 php5-sysvmsg-debuginfo-5.4.20-30.1 php5-sysvsem-5.4.20-30.1 php5-sysvsem-debuginfo-5.4.20-30.1 php5-sysvshm-5.4.20-30.1 php5-sysvshm-debuginfo-5.4.20-30.1 php5-tidy-5.4.20-30.1 php5-tidy-debuginfo-5.4.20-30.1 php5-tokenizer-5.4.20-30.1 php5-tokenizer-debuginfo-5.4.20-30.1 php5-wddx-5.4.20-30.1 php5-wddx-debuginfo-5.4.20-30.1 php5-xmlreader-5.4.20-30.1 php5-xmlreader-debuginfo-5.4.20-30.1 php5-xmlrpc-5.4.20-30.1 php5-xmlrpc-debuginfo-5.4.20-30.1 php5-xmlwriter-5.4.20-30.1 php5-xmlwriter-debuginfo-5.4.20-30.1 php5-xsl-5.4.20-30.1 php5-xsl-debuginfo-5.4.20-30.1 php5-zip-5.4.20-30.1 php5-zip-debuginfo-5.4.20-30.1 php5-zlib-5.4.20-30.1 php5-zlib-debuginfo-5.4.20-30.1 - openSUSE 13.1 (noarch): php5-pear-5.4.20-30.1 - openSUSE 12.3 (i586 x86_64): apache2-mod_php5-5.3.17-3.34.1 apache2-mod_php5-debuginfo-5.3.17-3.34.1 php5-5.3.17-3.34.1 php5-bcmath-5.3.17-3.34.1 php5-bcmath-debuginfo-5.3.17-3.34.1 php5-bz2-5.3.17-3.34.1 php5-bz2-debuginfo-5.3.17-3.34.1 php5-calendar-5.3.17-3.34.1 php5-calendar-debuginfo-5.3.17-3.34.1 php5-ctype-5.3.17-3.34.1 php5-ctype-debuginfo-5.3.17-3.34.1 php5-curl-5.3.17-3.34.1 php5-curl-debuginfo-5.3.17-3.34.1 php5-dba-5.3.17-3.34.1 php5-dba-debuginfo-5.3.17-3.34.1 php5-debuginfo-5.3.17-3.34.1 php5-debugsource-5.3.17-3.34.1 php5-devel-5.3.17-3.34.1 php5-dom-5.3.17-3.34.1 php5-dom-debuginfo-5.3.17-3.34.1 php5-enchant-5.3.17-3.34.1 php5-enchant-debuginfo-5.3.17-3.34.1 php5-exif-5.3.17-3.34.1 php5-exif-debuginfo-5.3.17-3.34.1 php5-fastcgi-5.3.17-3.34.1 php5-fastcgi-debuginfo-5.3.17-3.34.1 php5-fileinfo-5.3.17-3.34.1 php5-fileinfo-debuginfo-5.3.17-3.34.1 php5-fpm-5.3.17-3.34.1 php5-fpm-debuginfo-5.3.17-3.34.1 php5-ftp-5.3.17-3.34.1 php5-ftp-debuginfo-5.3.17-3.34.1 php5-gd-5.3.17-3.34.1 php5-gd-debuginfo-5.3.17-3.34.1 php5-gettext-5.3.17-3.34.1 php5-gettext-debuginfo-5.3.17-3.34.1 php5-gmp-5.3.17-3.34.1 php5-gmp-debuginfo-5.3.17-3.34.1 php5-iconv-5.3.17-3.34.1 php5-iconv-debuginfo-5.3.17-3.34.1 php5-imap-5.3.17-3.34.1 php5-imap-debuginfo-5.3.17-3.34.1 php5-intl-5.3.17-3.34.1 php5-intl-debuginfo-5.3.17-3.34.1 php5-json-5.3.17-3.34.1 php5-json-debuginfo-5.3.17-3.34.1 php5-ldap-5.3.17-3.34.1 php5-ldap-debuginfo-5.3.17-3.34.1 php5-mbstring-5.3.17-3.34.1 php5-mbstring-debuginfo-5.3.17-3.34.1 php5-mcrypt-5.3.17-3.34.1 php5-mcrypt-debuginfo-5.3.17-3.34.1 php5-mssql-5.3.17-3.34.1 php5-mssql-debuginfo-5.3.17-3.34.1 php5-mysql-5.3.17-3.34.1 php5-mysql-debuginfo-5.3.17-3.34.1 php5-odbc-5.3.17-3.34.1 php5-odbc-debuginfo-5.3.17-3.34.1 php5-openssl-5.3.17-3.34.1 php5-openssl-debuginfo-5.3.17-3.34.1 php5-pcntl-5.3.17-3.34.1 php5-pcntl-debuginfo-5.3.17-3.34.1 php5-pdo-5.3.17-3.34.1 php5-pdo-debuginfo-5.3.17-3.34.1 php5-pgsql-5.3.17-3.34.1 php5-pgsql-debuginfo-5.3.17-3.34.1 php5-phar-5.3.17-3.34.1 php5-phar-debuginfo-5.3.17-3.34.1 php5-posix-5.3.17-3.34.1 php5-posix-debuginfo-5.3.17-3.34.1 php5-pspell-5.3.17-3.34.1 php5-pspell-debuginfo-5.3.17-3.34.1 php5-readline-5.3.17-3.34.1 php5-readline-debuginfo-5.3.17-3.34.1 php5-shmop-5.3.17-3.34.1 php5-shmop-debuginfo-5.3.17-3.34.1 php5-snmp-5.3.17-3.34.1 php5-snmp-debuginfo-5.3.17-3.34.1 php5-soap-5.3.17-3.34.1 php5-soap-debuginfo-5.3.17-3.34.1 php5-sockets-5.3.17-3.34.1 php5-sockets-debuginfo-5.3.17-3.34.1 php5-sqlite-5.3.17-3.34.1 php5-sqlite-debuginfo-5.3.17-3.34.1 php5-suhosin-5.3.17-3.34.1 php5-suhosin-debuginfo-5.3.17-3.34.1 php5-sysvmsg-5.3.17-3.34.1 php5-sysvmsg-debuginfo-5.3.17-3.34.1 php5-sysvsem-5.3.17-3.34.1 php5-sysvsem-debuginfo-5.3.17-3.34.1 php5-sysvshm-5.3.17-3.34.1 php5-sysvshm-debuginfo-5.3.17-3.34.1 php5-tidy-5.3.17-3.34.1 php5-tidy-debuginfo-5.3.17-3.34.1 php5-tokenizer-5.3.17-3.34.1 php5-tokenizer-debuginfo-5.3.17-3.34.1 php5-wddx-5.3.17-3.34.1 php5-wddx-debuginfo-5.3.17-3.34.1 php5-xmlreader-5.3.17-3.34.1 php5-xmlreader-debuginfo-5.3.17-3.34.1 php5-xmlrpc-5.3.17-3.34.1 php5-xmlrpc-debuginfo-5.3.17-3.34.1 php5-xmlwriter-5.3.17-3.34.1 php5-xmlwriter-debuginfo-5.3.17-3.34.1 php5-xsl-5.3.17-3.34.1 php5-xsl-debuginfo-5.3.17-3.34.1 php5-zip-5.3.17-3.34.1 php5-zip-debuginfo-5.3.17-3.34.1 php5-zlib-5.3.17-3.34.1 php5-zlib-debuginfo-5.3.17-3.34.1 - openSUSE 12.3 (noarch): php5-pear-5.3.17-3.34.1 References: http://support.novell.com/security/cve/CVE-2014-3597.html http://support.novell.com/security/cve/CVE-2014-5120.html http://support.novell.com/security/cve/CVE-2014-5459.html https://bugzilla.novell.com/893849 https://bugzilla.novell.com/893853 https://bugzilla.novell.com/893855 https://bugzilla.novell.com/895658

1 0