SUSE Security Update: Security update for libssh2
______________________________________________________________________________

Announcement ID:    SUSE-SU-2012:1520-1
Rating:             important
References:         #789827
Cross-References:   CVE-2012-4562
Affected Products:
                    SUSE Linux Enterprise Software Development Kit 11 SP2
                    SUSE Linux Enterprise Desktop 11 SP2
______________________________________________________________________________

   An update that fixes one vulnerability is now available.

Description:


   This update of libssh fixes multiple integer overflows.
   CVE-2012-4562 has  been assigned to this issue.

   Security Issue reference:

   * CVE-2012-4562
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4562
   >


Patch Instructions:

   To install this SUSE Security Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   - SUSE Linux Enterprise Software Development Kit 11 SP2:

      zypper in -t patch sdksp2-libssh2-7073

   - SUSE Linux Enterprise Desktop 11 SP2:

      zypper in -t patch sledsp2-libssh2-7073

   To bring your system up-to-date, use "zypper patch".


Package List:

   - SUSE Linux Enterprise Software Development Kit 11 SP2 (i586 ia64 ppc64 s390x
x86_64):

      libssh2-0.2-5.18.1

   - SUSE Linux Enterprise Desktop 11 SP2 (i586 x86_64):

      libssh2-0.2-5.18.1


References:

   http://support.novell.com/security/cve/CVE-2012-4562.html
   https://bugzilla.novell.com/789827
   http://download.novell.com/patch/finder/?keywords=2e1c319ecc84f3419428796ffd252ae7

A closer look at Mega cloud storage

Posted on 21 May 2013.  |  Once a novelty, nowadays many cloud storage services are fighting for their piece of the market in the virtual world. Mega offers 50GB of free space with great pricing on Pro accounts.

The CSO perspective on healthcare security and compliance

Posted on 20 May 2013.  |  Randall Gamby is the CSO of the Medicaid Information Service Center of New York. In this interview he discusses healthcare security and compliance challenges and offers a variety of tips.

Cyber espionage campaign uses professionally-made malware

Posted on 20 May 2013.  |  A massive cyber espionage campaign has been hitting government ministries, IT companies, academic research institutions, and more.

Ransomware adds password stealing to its arsenal

Posted on 17 May 2013.  |  Microsoft researchers are warning about a new variant of the well-known Reveton ransomware doing rounds.

IT security jobs: What's in demand and how to meet it

Posted on 15 May 2013.  |  Let's say you want a career in information security, where do you start? What credentials do you need? What are employers looking for? Read on to find some answers.