SUSE 12 SP2: 2013:0457-1 Critical: libpng Buffer Overflow

Specially crafted Ogg files could cause a heap-based buffer overflow in the vorbis audio compression library that could potentially be exploited by attackers to cause a crash or execute arbitrary code (CVE-2012-0444). Security Issue reference: * CVE-2012-0444 Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11 SP1 FOR SP2: zypper in -t patch sdksp1fsp2-libvorbis-5851 - SUSE Linux Enterprise Software Development Kit 11 SP1: zypper in -t patch sdksp1-libvorbis-5851 - SUSE Linux Enterprise Server 11 SP1 for VMware: zypper in -t patch slessp1-libvorbis-5851