An update that fixes 9 vulnerabilities is now available.. openSUSE Security Update: chromium to 33.0.1750.152 stable release ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0501-1 Rating: important References: #866959 Cross-References: CVE-2014-1700 CVE-2014-1701 CVE-2014-1702 CVE-2014-1703 CVE-2014-1704 CVE-2014-1705 CVE-2014-1713 CVE-2014-1714 CVE-2014-1715 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: Chromium was updated to the 33.0.1750.152 stable channel uodate: - Security fixes: * CVE-2014-1713: Use-after-free in Blink bindings * CVE-2014-1714: Windows clipboard vulnerability * CVE-2014-1705: Memory corruption in V8 * CVE-2014-1715: Directory traversal issue Previous stable channel update 33.0.1750.149: - Security fixes: * CVE-2014-1700: Use-after-free in speech * CVE-2014-1701: UXSS in events * CVE-2014-1702: Use-after-free in web database * CVE-2014-1703: Potential sandbox escape due to a use-after-free in web sockets * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in version 3.23.17.18 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-280 - openSUSE 12.3: zypper in -t patch openSUSE-2014-280 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): chromedriver-33.0.1750.152-25.2 chromedriver-debuginfo-33.0.1750.152-25.2 chromium-33.0.1750.152-25.2 chromium-debuginfo-33.0.1750.152-25.2 chromium-debugsource-33.0.1750.152-25.2 chromium-desktop-gnome-33.0.1750.152-25.2 chromium-desktop-kde-33.0.1750.152-25.2 chromium-ffmpegsumo-33.0.1750.152-25.2 chromium-ffmpegsumo-debuginfo-33.0.1750.152-25.2 chromium-suid-helper-33.0.1750.152-25.2 chromium-suid-helper-debuginfo-33.0.1750.152-25.2 - openSUSE 12.3 (i586 x86_64): chromedriver-33.0.1750.152-1.33.2 chromedriver-debuginfo-33.0.1750.152-1.33.2 chromium-33.0.1750.152-1.33.2 chromium-debuginfo-33.0.1750.152-1.33.2 chromium-debugsource-33.0.1750.152-1.33.2 chromium-desktop-gnome-33.0.1750.152-1.33.2 chromium-desktop-kde-33.0.1750.152-1.33.2 chromium-ffmpegsumo-33.0.1750.152-1.33.2 chromium-ffmpegsumo-debuginfo-33.0.1750.152-1.33.2 chromium-suid-helper-33.0.1750.152-1.33.2 chromium-suid-helper-debuginfo-33.0.1750.152-1.33.2 References: https://www.suse.com/security/cve/CVE-2014-1700.html https://www.suse.com/security/cve/CVE-2014-1701.html https://www.suse.com/security/cve/CVE-2014-1702.html https://www.suse.com/security/cve/CVE-2014-1703.html https://www.suse.com/security/cve/CVE-2014-1704.html https://www.suse.com/security/cve/CVE-2014-1705.html https://www.suse.com/security/cve/CVE-2014-1713.html https://www.suse.com/security/cve/CVE-2014-1714.html https://www.suse.com/security/cve/CVE-2014-1715.html -- . The latest openSUSE patch resolves 10 vulnerabilities in firefox, boosting overall system security and functionality.. openSUSE Security Update, Chromium Patch, Memory Corruption Fix, Clipboard Vulnerability. . Severity: Important. LinuxSecurity.com Team
An update that fixes two vulnerabilities is now available.. openSUSE Security Update: flash-player to 11.2.202.346 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0377-1 Rating: important References: #867808 Cross-References: CVE-2013-0504 CVE-2014-0503 Affected Products: openSUSE 13.1:NonFree openSUSE 12.3:NonFree ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: Adobe Flash Player was updated to version 11.2.202.346 to fix security issues: CVE-2014-0503: A vulnerability that could be used to bypass the same origin policy was fixed. CVE-2014-0504: A vulnerability that could be used to read the contents of the clipboard was fixed. More information can be found on: -08.html Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1:NonFree: zypper in -t patch openSUSE-2014-212 - openSUSE 12.3:NonFree: zypper in -t patch openSUSE-2014-212 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1:NonFree (i586 x86_64): flash-player-11.2.202.346-38.1 flash-player-gnome-11.2.202.346-38.1 flash-player-kde4-11.2.202.346-38.1 - openSUSE 12.3:NonFree (i586 x86_64): flash-player-11.2.202.346-2.64.1 flash-player-gnome-11.2.202.346-2.64.1 flash-player-kde4-11.2.202.346-2.64.1 References: https://www.suse.com/security/cve/CVE-2013-0504.html https://www.suse.com/security/cve/CVE-2014-0503.html -- . New update for openSUSE: flash-player version 11.2.202.346 has been released, fixing important security vulnerabilities. Upgrade now!. openSUSE Updates, Flash Player Security, Important Updates, Software Vulnerabilities. . Severity:Important. LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.