December 2015 - openSUSE Security Announce

[security-announce] openSUSE-SU-2015:2406-1: important: Security update for Mozilla Thunderbird
by opensuse-security＠opensuse.org 31 Dec '15

31 Dec '15

openSUSE Security Update: Security update for Mozilla Thunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2406-1 Rating: important References: #959277 Cross-References: CVE-2015-7201 CVE-2015-7205 CVE-2015-7210 CVE-2015-7212 CVE-2015-7213 CVE-2015-7214 CVE-2015-7222 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: Mozilla Thunderbird was updated to 38.5.0 to fix multiple security issues. The following vulnerabilities were fixed: (boo#959277) * CVE-2015-7201: Miscellaneous memory safety hazards * CVE-2015-7210: Use-after-free in WebRTC when datachannel is used after being destroyed * CVE-2015-7212: Integer overflow allocating extremely large textures * CVE-2015-7205: Underflow through code inspection * CVE-2015-7213: Integer overflow in MP4 playback in 64-bit versions * CVE-2015-7222: Integer underflow and buffer overflow processing MP4 metadata in libstagefright * CVE-2015-7214: Cross-site reading attack through data and view-source URIs Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-977=1 - openSUSE 13.2: zypper in -t patch openSUSE-2015-977=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-977=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): MozillaThunderbird-38.5.0-7.2 MozillaThunderbird-buildsymbols-38.5.0-7.2 MozillaThunderbird-debuginfo-38.5.0-7.2 MozillaThunderbird-debugsource-38.5.0-7.2 MozillaThunderbird-devel-38.5.0-7.2 MozillaThunderbird-translations-common-38.5.0-7.2 MozillaThunderbird-translations-other-38.5.0-7.2 - openSUSE 13.2 (i586 x86_64): MozillaThunderbird-38.5.0-34.2 MozillaThunderbird-buildsymbols-38.5.0-34.2 MozillaThunderbird-debuginfo-38.5.0-34.2 MozillaThunderbird-debugsource-38.5.0-34.2 MozillaThunderbird-devel-38.5.0-34.2 MozillaThunderbird-translations-common-38.5.0-34.2 MozillaThunderbird-translations-other-38.5.0-34.2 - openSUSE 13.1 (i586 x86_64): MozillaThunderbird-38.5.0-70.71.1 MozillaThunderbird-buildsymbols-38.5.0-70.71.1 MozillaThunderbird-debuginfo-38.5.0-70.71.1 MozillaThunderbird-debugsource-38.5.0-70.71.1 MozillaThunderbird-devel-38.5.0-70.71.1 MozillaThunderbird-translations-common-38.5.0-70.71.1 MozillaThunderbird-translations-other-38.5.0-70.71.1 References: https://www.suse.com/security/cve/CVE-2015-7201.html https://www.suse.com/security/cve/CVE-2015-7205.html https://www.suse.com/security/cve/CVE-2015-7210.html https://www.suse.com/security/cve/CVE-2015-7212.html https://www.suse.com/security/cve/CVE-2015-7213.html https://www.suse.com/security/cve/CVE-2015-7214.html https://www.suse.com/security/cve/CVE-2015-7222.html https://bugzilla.suse.com/959277 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2015:2403-1: important: Security update for flash-player
by opensuse-security＠opensuse.org 30 Dec '15

30 Dec '15

openSUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2403-1 Rating: important References: #960317 Cross-References: CVE-2015-8459 CVE-2015-8460 CVE-2015-8634 CVE-2015-8635 CVE-2015-8636 CVE-2015-8638 CVE-2015-8639 CVE-2015-8640 CVE-2015-8641 CVE-2015-8642 CVE-2015-8643 CVE-2015-8644 CVE-2015-8645 CVE-2015-8646 CVE-2015-8647 CVE-2015-8648 CVE-2015-8649 CVE-2015-8650 CVE-2015-8651 Affected Products: openSUSE Evergreen 11.4 ______________________________________________________________________________ An update that fixes 19 vulnerabilities is now available. Description: This update for flash-player fixes the following issues: - Security update to 11.2.202.559 (boo#960317): * APSB16-01, CVE-2015-8459, CVE-2015-8460, CVE-2015-8634, CVE-2015-8635, CVE-2015-8636, CVE-2015-8638, CVE-2015-8639, CVE-2015-8640, CVE-2015-8641, CVE-2015-8642, CVE-2015-8643, CVE-2015-8644, CVE-2015-8645, CVE-2015-8646, CVE-2015-8647, CVE-2015-8648, CVE-2015-8649, CVE-2015-8650, CVE-2015-8651 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Evergreen 11.4: zypper in -t patch 2015-976=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Evergreen 11.4 (i586 x86_64): flash-player-11.2.202.559-179.1 flash-player-gnome-11.2.202.559-179.1 flash-player-kde4-11.2.202.559-179.1 References: https://www.suse.com/security/cve/CVE-2015-8459.html https://www.suse.com/security/cve/CVE-2015-8460.html https://www.suse.com/security/cve/CVE-2015-8634.html https://www.suse.com/security/cve/CVE-2015-8635.html https://www.suse.com/security/cve/CVE-2015-8636.html https://www.suse.com/security/cve/CVE-2015-8638.html https://www.suse.com/security/cve/CVE-2015-8639.html https://www.suse.com/security/cve/CVE-2015-8640.html https://www.suse.com/security/cve/CVE-2015-8641.html https://www.suse.com/security/cve/CVE-2015-8642.html https://www.suse.com/security/cve/CVE-2015-8643.html https://www.suse.com/security/cve/CVE-2015-8644.html https://www.suse.com/security/cve/CVE-2015-8645.html https://www.suse.com/security/cve/CVE-2015-8646.html https://www.suse.com/security/cve/CVE-2015-8647.html https://www.suse.com/security/cve/CVE-2015-8648.html https://www.suse.com/security/cve/CVE-2015-8649.html https://www.suse.com/security/cve/CVE-2015-8650.html https://www.suse.com/security/cve/CVE-2015-8651.html https://bugzilla.suse.com/960317 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:2402-1: important: Security update for flash-player
by opensuse-security＠opensuse.org 30 Dec '15

30 Dec '15

SUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:2402-1 Rating: important References: #960317 Cross-References: CVE-2015-8459 CVE-2015-8460 CVE-2015-8634 CVE-2015-8635 CVE-2015-8636 CVE-2015-8638 CVE-2015-8639 CVE-2015-8640 CVE-2015-8641 CVE-2015-8642 CVE-2015-8643 CVE-2015-8644 CVE-2015-8645 CVE-2015-8646 CVE-2015-8647 CVE-2015-8648 CVE-2015-8649 CVE-2015-8650 CVE-2015-8651 Affected Products: SUSE Linux Enterprise Desktop 11-SP4 SUSE Linux Enterprise Desktop 11-SP3 ______________________________________________________________________________ An update that fixes 19 vulnerabilities is now available. Description: This update for flash-player fixes the following issues: - CVE-2015-8644: Type confusion vulnerability that could lead to code execution. - CVE-2015-8651: Integer overflow vulnerability that could lead to code execution. - CVE-2015-8634, CVE-2015-8635, CVE-2015-8638, CVE-2015-8639, CVE-2015-8640, CVE-2015-8641, CVE-2015-8642, CVE-2015-8643, CVE-2015-8646, CVE-2015-8647, CVE-2015-8648, CVE-2015-8649, CVE-2015-8650: Use-after-free vulnerabilities that could lead to code execution. - CVE-2015-8459, CVE-2015-8460, CVE-2015-8636, CVE-2015-8645: Memory corruption vulnerabilities that could lead to code execution. Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Desktop 11-SP4: zypper in -t patch sledsp4-flash-player-12291=1 - SUSE Linux Enterprise Desktop 11-SP3: zypper in -t patch sledsp3-flash-player-12291=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Desktop 11-SP4 (i586 x86_64): flash-player-11.2.202.559-0.32.1 flash-player-gnome-11.2.202.559-0.32.1 flash-player-kde4-11.2.202.559-0.32.1 - SUSE Linux Enterprise Desktop 11-SP3 (i586 x86_64): flash-player-11.2.202.559-0.32.1 flash-player-gnome-11.2.202.559-0.32.1 flash-player-kde4-11.2.202.559-0.32.1 References: https://www.suse.com/security/cve/CVE-2015-8459.html https://www.suse.com/security/cve/CVE-2015-8460.html https://www.suse.com/security/cve/CVE-2015-8634.html https://www.suse.com/security/cve/CVE-2015-8635.html https://www.suse.com/security/cve/CVE-2015-8636.html https://www.suse.com/security/cve/CVE-2015-8638.html https://www.suse.com/security/cve/CVE-2015-8639.html https://www.suse.com/security/cve/CVE-2015-8640.html https://www.suse.com/security/cve/CVE-2015-8641.html https://www.suse.com/security/cve/CVE-2015-8642.html https://www.suse.com/security/cve/CVE-2015-8643.html https://www.suse.com/security/cve/CVE-2015-8644.html https://www.suse.com/security/cve/CVE-2015-8645.html https://www.suse.com/security/cve/CVE-2015-8646.html https://www.suse.com/security/cve/CVE-2015-8647.html https://www.suse.com/security/cve/CVE-2015-8648.html https://www.suse.com/security/cve/CVE-2015-8649.html https://www.suse.com/security/cve/CVE-2015-8650.html https://www.suse.com/security/cve/CVE-2015-8651.html https://bugzilla.suse.com/960317 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:2401-1: important: Security update for flash-player
by opensuse-security＠opensuse.org 30 Dec '15

30 Dec '15

SUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:2401-1 Rating: important References: #960317 Cross-References: CVE-2015-8459 CVE-2015-8460 CVE-2015-8634 CVE-2015-8635 CVE-2015-8636 CVE-2015-8638 CVE-2015-8639 CVE-2015-8640 CVE-2015-8641 CVE-2015-8642 CVE-2015-8643 CVE-2015-8644 CVE-2015-8645 CVE-2015-8646 CVE-2015-8647 CVE-2015-8648 CVE-2015-8649 CVE-2015-8650 CVE-2015-8651 Affected Products: SUSE Linux Enterprise Workstation Extension 12-SP1 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Desktop 12-SP1 SUSE Linux Enterprise Desktop 12 ______________________________________________________________________________ An update that fixes 19 vulnerabilities is now available. Description: This update for flash-player fixes the following issues: - CVE-2015-8644: Type confusion vulnerability that could lead to code execution . - CVE-2015-8651: Integer overflow vulnerability that could lead to code execution. - CVE-2015-8634, CVE-2015-8635, CVE-2015-8638, CVE-2015-8639, CVE-2015-8640, CVE-2015-8641, CVE-2015-8642, CVE-2015-8643, CVE-2015-8646, CVE-2015-8647, CVE-2015-8648, CVE-2015-8649, CVE-2015-8650: Use-after-free vulnerabilities that could lead to code execution. - CVE-2015-8459, CVE-2015-8460, CVE-2015-8636, CVE-2015-8645: Memory corruption vulnerabilities that could lead to code execution. Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Workstation Extension 12-SP1: zypper in -t patch SUSE-SLE-WE-12-SP1-2015-1033=1 - SUSE Linux Enterprise Workstation Extension 12: zypper in -t patch SUSE-SLE-WE-12-2015-1033=1 - SUSE Linux Enterprise Desktop 12-SP1: zypper in -t patch SUSE-SLE-DESKTOP-12-SP1-2015-1033=1 - SUSE Linux Enterprise Desktop 12: zypper in -t patch SUSE-SLE-DESKTOP-12-2015-1033=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Workstation Extension 12-SP1 (x86_64): flash-player-11.2.202.559-117.1 flash-player-gnome-11.2.202.559-117.1 - SUSE Linux Enterprise Workstation Extension 12 (x86_64): flash-player-11.2.202.559-117.1 flash-player-gnome-11.2.202.559-117.1 - SUSE Linux Enterprise Desktop 12-SP1 (x86_64): flash-player-11.2.202.559-117.1 flash-player-gnome-11.2.202.559-117.1 - SUSE Linux Enterprise Desktop 12 (x86_64): flash-player-11.2.202.559-117.1 flash-player-gnome-11.2.202.559-117.1 References: https://www.suse.com/security/cve/CVE-2015-8459.html https://www.suse.com/security/cve/CVE-2015-8460.html https://www.suse.com/security/cve/CVE-2015-8634.html https://www.suse.com/security/cve/CVE-2015-8635.html https://www.suse.com/security/cve/CVE-2015-8636.html https://www.suse.com/security/cve/CVE-2015-8638.html https://www.suse.com/security/cve/CVE-2015-8639.html https://www.suse.com/security/cve/CVE-2015-8640.html https://www.suse.com/security/cve/CVE-2015-8641.html https://www.suse.com/security/cve/CVE-2015-8642.html https://www.suse.com/security/cve/CVE-2015-8643.html https://www.suse.com/security/cve/CVE-2015-8644.html https://www.suse.com/security/cve/CVE-2015-8645.html https://www.suse.com/security/cve/CVE-2015-8646.html https://www.suse.com/security/cve/CVE-2015-8647.html https://www.suse.com/security/cve/CVE-2015-8648.html https://www.suse.com/security/cve/CVE-2015-8649.html https://www.suse.com/security/cve/CVE-2015-8650.html https://www.suse.com/security/cve/CVE-2015-8651.html https://bugzilla.suse.com/960317 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2015:2400-1: important: Security update for flash-player
by opensuse-security＠opensuse.org 30 Dec '15

30 Dec '15

openSUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2400-1 Rating: important References: #960317 Cross-References: CVE-2015-8459 CVE-2015-8460 CVE-2015-8634 CVE-2015-8635 CVE-2015-8636 CVE-2015-8638 CVE-2015-8639 CVE-2015-8640 CVE-2015-8641 CVE-2015-8642 CVE-2015-8643 CVE-2015-8644 CVE-2015-8645 CVE-2015-8646 CVE-2015-8647 CVE-2015-8648 CVE-2015-8649 CVE-2015-8650 CVE-2015-8651 Affected Products: openSUSE 13.2 NonFree openSUSE 13.1 NonFree ______________________________________________________________________________ An update that fixes 19 vulnerabilities is now available. Description: This update for flash-player fixes the following issues: - Security update to 11.2.202.559 (boo#960317): * APSB16-01, CVE-2015-8459, CVE-2015-8460, CVE-2015-8634, CVE-2015-8635, CVE-2015-8636, CVE-2015-8638, CVE-2015-8639, CVE-2015-8640, CVE-2015-8641, CVE-2015-8642, CVE-2015-8643, CVE-2015-8644, CVE-2015-8645, CVE-2015-8646, CVE-2015-8647, CVE-2015-8648, CVE-2015-8649, CVE-2015-8650, CVE-2015-8651 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2 NonFree: zypper in -t patch openSUSE-2015-975=1 - openSUSE 13.1 NonFree: zypper in -t patch openSUSE-2015-975=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 NonFree (i586 x86_64): flash-player-11.2.202.559-2.85.1 flash-player-gnome-11.2.202.559-2.85.1 flash-player-kde4-11.2.202.559-2.85.1 - openSUSE 13.1 NonFree (i586 x86_64): flash-player-11.2.202.559-150.1 flash-player-gnome-11.2.202.559-150.1 flash-player-kde4-11.2.202.559-150.1 References: https://www.suse.com/security/cve/CVE-2015-8459.html https://www.suse.com/security/cve/CVE-2015-8460.html https://www.suse.com/security/cve/CVE-2015-8634.html https://www.suse.com/security/cve/CVE-2015-8635.html https://www.suse.com/security/cve/CVE-2015-8636.html https://www.suse.com/security/cve/CVE-2015-8638.html https://www.suse.com/security/cve/CVE-2015-8639.html https://www.suse.com/security/cve/CVE-2015-8640.html https://www.suse.com/security/cve/CVE-2015-8641.html https://www.suse.com/security/cve/CVE-2015-8642.html https://www.suse.com/security/cve/CVE-2015-8643.html https://www.suse.com/security/cve/CVE-2015-8644.html https://www.suse.com/security/cve/CVE-2015-8645.html https://www.suse.com/security/cve/CVE-2015-8646.html https://www.suse.com/security/cve/CVE-2015-8647.html https://www.suse.com/security/cve/CVE-2015-8648.html https://www.suse.com/security/cve/CVE-2015-8649.html https://www.suse.com/security/cve/CVE-2015-8650.html https://www.suse.com/security/cve/CVE-2015-8651.html https://bugzilla.suse.com/960317 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:2399-1: important: Security update for grub2
by opensuse-security＠opensuse.org 30 Dec '15

30 Dec '15

SUSE Security Update: Security update for grub2 ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:2399-1 Rating: important References: #928131 #943380 #946148 #952539 #956631 Cross-References: CVE-2015-8370 Affected Products: SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Desktop 12 ______________________________________________________________________________ An update that solves one vulnerability and has four fixes is now available. Description: This update for grub2 provides the following fixes and enhancements: Security issue fixed: - Fix buffer overflows when reading username and password. (bsc#956631, CVE-2015-8370) Non security issues fixed: - Expand list of grub.cfg search path in PV Xen guests for systems installed on btrfs snapshots. (bsc#946148, bsc#952539) - Add --image switch to force zipl update to specific kernel. (bsc#928131) - Do not use shim lock protocol for reading PE header as it won't be available when secure boot is disabled. (bsc#943380) - Make firmware flaw condition be more precisely detected and add debug message for the case. Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 12: zypper in -t patch SUSE-SLE-SERVER-12-2015-1032=1 - SUSE Linux Enterprise Desktop 12: zypper in -t patch SUSE-SLE-DESKTOP-12-2015-1032=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Server 12 (ppc64le s390x x86_64): grub2-2.02~beta2-56.9.4 grub2-debuginfo-2.02~beta2-56.9.4 - SUSE Linux Enterprise Server 12 (ppc64le): grub2-powerpc-ieee1275-2.02~beta2-56.9.4 - SUSE Linux Enterprise Server 12 (x86_64): grub2-i386-pc-2.02~beta2-56.9.4 grub2-x86_64-efi-2.02~beta2-56.9.4 grub2-x86_64-xen-2.02~beta2-56.9.4 - SUSE Linux Enterprise Server 12 (noarch): grub2-snapper-plugin-2.02~beta2-56.9.4 - SUSE Linux Enterprise Server 12 (s390x): grub2-debugsource-2.02~beta2-56.9.4 grub2-s390x-emu-2.02~beta2-56.9.4 - SUSE Linux Enterprise Desktop 12 (x86_64): grub2-2.02~beta2-56.9.4 grub2-debuginfo-2.02~beta2-56.9.4 grub2-i386-pc-2.02~beta2-56.9.4 grub2-x86_64-efi-2.02~beta2-56.9.4 grub2-x86_64-xen-2.02~beta2-56.9.4 - SUSE Linux Enterprise Desktop 12 (noarch): grub2-snapper-plugin-2.02~beta2-56.9.4 References: https://www.suse.com/security/cve/CVE-2015-8370.html https://bugzilla.suse.com/928131 https://bugzilla.suse.com/943380 https://bugzilla.suse.com/946148 https://bugzilla.suse.com/952539 https://bugzilla.suse.com/956631 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2015:2392-1: important: Security update for grub2
by opensuse-security＠opensuse.org 29 Dec '15

29 Dec '15

openSUSE Security Update: Security update for grub2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2392-1 Rating: important References: #956631 Cross-References: CVE-2015-8370 Affected Products: openSUSE Evergreen 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for grub2 fixes the following issue: - CVE-2015-8370: Fix for overflow in grub_password_get and grub_user_get functions (bsc#956631) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Evergreen 11.4: zypper in -t patch 2015-970=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Evergreen 11.4 (i586 x86_64): grub2-1.98-14.1 grub2-debuginfo-1.98-14.1 grub2-debugsource-1.98-14.1 References: https://www.suse.com/security/cve/CVE-2015-8370.html https://bugzilla.suse.com/956631 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2015:2391-1: important: Security update for bind
by opensuse-security＠opensuse.org 29 Dec '15

29 Dec '15

openSUSE Security Update: Security update for bind ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2391-1 Rating: important References: #958861 Cross-References: CVE-2015-8000 Affected Products: openSUSE Evergreen 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for bind fixes the following security issue: - CVE-2015-8000: Fix remote denial of service by misparsing incoming responses (boo#958861). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Evergreen 11.4: zypper in -t patch 2015-969=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Evergreen 11.4 (i586 x86_64): bind-9.9.4P2-72.1 bind-chrootenv-9.9.4P2-72.1 bind-debuginfo-9.9.4P2-72.1 bind-debugsource-9.9.4P2-72.1 bind-devel-9.9.4P2-72.1 bind-libs-9.9.4P2-72.1 bind-libs-debuginfo-9.9.4P2-72.1 bind-lwresd-9.9.4P2-72.1 bind-lwresd-debuginfo-9.9.4P2-72.1 bind-utils-9.9.4P2-72.1 bind-utils-debuginfo-9.9.4P2-72.1 - openSUSE Evergreen 11.4 (x86_64): bind-libs-32bit-9.9.4P2-72.1 bind-libs-debuginfo-32bit-9.9.4P2-72.1 - openSUSE Evergreen 11.4 (noarch): bind-doc-9.9.4P2-72.1 - openSUSE Evergreen 11.4 (ia64): bind-libs-debuginfo-x86-9.9.4P2-72.1 bind-libs-x86-9.9.4P2-72.1 References: https://www.suse.com/security/cve/CVE-2015-8000.html https://bugzilla.suse.com/958861 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:2387-1: important: Security update for grub2
by opensuse-security＠opensuse.org 29 Dec '15

29 Dec '15

SUSE Security Update: Security update for grub2 ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:2387-1 Rating: important References: #774666 #917427 #946148 #952539 #954126 #954519 #955493 #955609 #956631 Cross-References: CVE-2015-8370 Affected Products: SUSE Linux Enterprise Server 12-SP1 SUSE Linux Enterprise Desktop 12-SP1 ______________________________________________________________________________ An update that solves one vulnerability and has 8 fixes is now available. Description: - Fix buffer overflows when reading username and password. (bsc#956631, CVE-2015-8370) - Check MS-DOS header to find PE file header. (bsc#954126) - Use dirname for copying Xen kernel and initrd to esp. (bsc#955493) - Fix reading password by grub2-mkpasswd-pbdk2 without controlling tty. (bsc#954519) - Add luks, gcry_rijndael and gcry_sha1 to signed EFI image to support LUKS partition in default setup. (bsc#917427, bsc#955609) - Expand list of grub.cfg search path in PV Xen guests for systems installed on btrfs snapshots. (bsc#946148, bsc#952539) Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 12-SP1: zypper in -t patch SUSE-SLE-SERVER-12-SP1-2015-1027=1 - SUSE Linux Enterprise Desktop 12-SP1: zypper in -t patch SUSE-SLE-DESKTOP-12-SP1-2015-1027=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Server 12-SP1 (ppc64le s390x x86_64): grub2-2.02~beta2-73.3 grub2-debuginfo-2.02~beta2-73.3 - SUSE Linux Enterprise Server 12-SP1 (ppc64le): grub2-powerpc-ieee1275-2.02~beta2-73.3 - SUSE Linux Enterprise Server 12-SP1 (x86_64): grub2-i386-pc-2.02~beta2-73.3 grub2-x86_64-efi-2.02~beta2-73.3 grub2-x86_64-xen-2.02~beta2-73.3 - SUSE Linux Enterprise Server 12-SP1 (noarch): grub2-snapper-plugin-2.02~beta2-73.3 - SUSE Linux Enterprise Server 12-SP1 (s390x): grub2-debugsource-2.02~beta2-73.3 grub2-s390x-emu-2.02~beta2-73.3 - SUSE Linux Enterprise Desktop 12-SP1 (x86_64): grub2-2.02~beta2-73.3 grub2-debuginfo-2.02~beta2-73.3 grub2-i386-pc-2.02~beta2-73.3 grub2-x86_64-efi-2.02~beta2-73.3 grub2-x86_64-xen-2.02~beta2-73.3 - SUSE Linux Enterprise Desktop 12-SP1 (noarch): grub2-snapper-plugin-2.02~beta2-73.3 References: https://www.suse.com/security/cve/CVE-2015-8370.html https://bugzilla.suse.com/774666 https://bugzilla.suse.com/917427 https://bugzilla.suse.com/946148 https://bugzilla.suse.com/952539 https://bugzilla.suse.com/954126 https://bugzilla.suse.com/954519 https://bugzilla.suse.com/955493 https://bugzilla.suse.com/955609 https://bugzilla.suse.com/956631 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:2386-1: important: Security update for grub2
by opensuse-security＠opensuse.org 29 Dec '15

29 Dec '15

SUSE Security Update: Security update for grub2 ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:2386-1 Rating: important References: #884828 #884830 #946148 #952539 #954592 #956631 Cross-References: CVE-2015-8370 Affected Products: SUSE Linux Enterprise Server for VMWare 11-SP3 SUSE Linux Enterprise Server 11-SP3 SUSE Linux Enterprise Desktop 11-SP3 SUSE Linux Enterprise Debuginfo 11-SP3 ______________________________________________________________________________ An update that solves one vulnerability and has 5 fixes is now available. Description: This update for grub2 provides the following fixes: A security issues with a bufferoverflow when reading username and password was fixed (bsc#956631, CVE-2015-8370) Bugs fixed: - Expand list of grub.cfg search path in PV Xen guests for systems installed on btrfs snapshots. (bsc#946148, bsc#952539) - Add grub.xen config searching path on boot partition. (bsc#884828) - Add linux16 and initrd16 to grub.xen. (bsc#884830) Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server for VMWare 11-SP3: zypper in -t patch slessp3-grub2-12287=1 - SUSE Linux Enterprise Server 11-SP3: zypper in -t patch slessp3-grub2-12287=1 - SUSE Linux Enterprise Desktop 11-SP3: zypper in -t patch sledsp3-grub2-12287=1 - SUSE Linux Enterprise Debuginfo 11-SP3: zypper in -t patch dbgsp3-grub2-12287=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Server for VMWare 11-SP3 (x86_64): grub2-x86_64-efi-2.00-0.49.2 grub2-x86_64-xen-2.00-0.49.2 - SUSE Linux Enterprise Server 11-SP3 (x86_64): grub2-x86_64-efi-2.00-0.49.2 grub2-x86_64-xen-2.00-0.49.2 - SUSE Linux Enterprise Desktop 11-SP3 (x86_64): grub2-x86_64-efi-2.00-0.49.2 grub2-x86_64-xen-2.00-0.49.2 - SUSE Linux Enterprise Debuginfo 11-SP3 (x86_64): grub2-debuginfo-2.00-0.49.2 grub2-debugsource-2.00-0.49.2 References: https://www.suse.com/security/cve/CVE-2015-8370.html https://bugzilla.suse.com/884828 https://bugzilla.suse.com/884830 https://bugzilla.suse.com/946148 https://bugzilla.suse.com/952539 https://bugzilla.suse.com/954592 https://bugzilla.suse.com/956631 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:2385-1: important: Security update for grub2
by opensuse-security＠opensuse.org 29 Dec '15

29 Dec '15

SUSE Security Update: Security update for grub2 ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:2385-1 Rating: important References: #884828 #884830 #946148 #952539 #954592 #956631 Cross-References: CVE-2015-8370 Affected Products: SUSE Linux Enterprise Server 11-SP4 SUSE Linux Enterprise Desktop 11-SP4 SUSE Linux Enterprise Debuginfo 11-SP4 ______________________________________________________________________________ An update that solves one vulnerability and has 5 fixes is now available. Description: This update for grub2 provides the following fixes: A security issues with a bufferoverflow when reading username and password was fixed (bsc#956631, CVE-2015-8370) Also following bugs were fixed: - Fix buffer overflows when reading username and password. (bsc#956631, CVE-2015-8370) - Expand list of grub.cfg search path in PV Xen guests for systems installed on btrfs snapshots. (bsc#946148, bsc#952539) - Add grub.xen config searching path on boot partition. (bsc#884828) - Add linux16 and initrd16 to grub.xen. (bsc#884830) Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 11-SP4: zypper in -t patch slessp4-grub2-12288=1 - SUSE Linux Enterprise Desktop 11-SP4: zypper in -t patch sledsp4-grub2-12288=1 - SUSE Linux Enterprise Debuginfo 11-SP4: zypper in -t patch dbgsp4-grub2-12288=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Server 11-SP4 (x86_64): grub2-x86_64-efi-2.00-0.54.2 grub2-x86_64-xen-2.00-0.54.2 - SUSE Linux Enterprise Desktop 11-SP4 (x86_64): grub2-x86_64-efi-2.00-0.54.2 grub2-x86_64-xen-2.00-0.54.2 - SUSE Linux Enterprise Debuginfo 11-SP4 (x86_64): grub2-debuginfo-2.00-0.54.2 grub2-debugsource-2.00-0.54.2 References: https://www.suse.com/security/cve/CVE-2015-8370.html https://bugzilla.suse.com/884828 https://bugzilla.suse.com/884830 https://bugzilla.suse.com/946148 https://bugzilla.suse.com/952539 https://bugzilla.suse.com/954592 https://bugzilla.suse.com/956631 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2015:2380-1: important: Security update for xulrunner
by opensuse-security＠opensuse.org 28 Dec '15

28 Dec '15

openSUSE Security Update: Security update for xulrunner ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2380-1 Rating: important References: #959277 Cross-References: CVE-2015-7201 CVE-2015-7205 CVE-2015-7210 CVE-2015-7212 CVE-2015-7213 CVE-2015-7214 CVE-2015-7222 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: Xulrunner was updated to 38.5.0 to fix several security issues. The following vulnerabilities were fixed (boo#959277): * CVE-2015-7201: Miscellaneous memory safety hazards * CVE-2015-7210: Use-after-free in WebRTC when datachannel is used after being destroyed * CVE-2015-7212: Integer overflow allocating extremely large textures * CVE-2015-7205: Underflow through code inspection * CVE-2015-7213: Integer overflow in MP4 playback in 64-bit versions * CVE-2015-7222: Integer underflow and buffer overflow processing MP4 metadata in libstagefright * CVE-2015-7214: Cross-site reading attack through data and view-source URIs Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-966=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): xulrunner-38.5.0-7.1 xulrunner-debuginfo-38.5.0-7.1 xulrunner-debugsource-38.5.0-7.1 xulrunner-devel-38.5.0-7.1 - openSUSE Leap 42.1 (x86_64): xulrunner-32bit-38.5.0-7.1 xulrunner-debuginfo-32bit-38.5.0-7.1 References: https://www.suse.com/security/cve/CVE-2015-7201.html https://www.suse.com/security/cve/CVE-2015-7205.html https://www.suse.com/security/cve/CVE-2015-7210.html https://www.suse.com/security/cve/CVE-2015-7212.html https://www.suse.com/security/cve/CVE-2015-7213.html https://www.suse.com/security/cve/CVE-2015-7214.html https://www.suse.com/security/cve/CVE-2015-7222.html https://bugzilla.suse.com/959277 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2015:2375-1: important: Security update for grub2
by opensuse-security＠opensuse.org 27 Dec '15

27 Dec '15

openSUSE Security Update: Security update for grub2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2375-1 Rating: important References: #956631 Cross-References: CVE-2015-8370 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for grub2 fixes the following issue: Changes in grub2: - CVE-2015-8370: Fix for overflow in grub_password_get and grub_user_get functions (bnc#956631) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-957=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-957=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): grub2-2.02~beta2-20.13.1 grub2-branding-upstream-2.02~beta2-20.13.1 grub2-debuginfo-2.02~beta2-20.13.1 grub2-debugsource-2.02~beta2-20.13.1 grub2-i386-pc-2.02~beta2-20.13.1 - openSUSE 13.2 (x86_64): grub2-x86_64-efi-2.02~beta2-20.13.1 grub2-x86_64-xen-2.02~beta2-20.13.1 - openSUSE 13.2 (noarch): grub2-snapper-plugin-2.02~beta2-20.13.1 - openSUSE 13.2 (i586): grub2-i386-efi-2.02~beta2-20.13.1 - openSUSE 13.1 (i586 x86_64): grub2-2.00-39.11.1 grub2-debuginfo-2.00-39.11.1 grub2-debugsource-2.00-39.11.1 grub2-i386-pc-2.00-39.11.1 grub2-i386-pc-debuginfo-2.00-39.11.1 - openSUSE 13.1 (x86_64): grub2-x86_64-efi-2.00-39.11.1 grub2-x86_64-efi-debuginfo-2.00-39.11.1 - openSUSE 13.1 (i586): grub2-i386-efi-2.00-39.11.1 grub2-i386-efi-debuginfo-2.00-39.11.1 References: https://www.suse.com/security/cve/CVE-2015-8370.html https://bugzilla.suse.com/956631 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2015:2365-1: important: Security update for bind
by opensuse-security＠opensuse.org 25 Dec '15

25 Dec '15

openSUSE Security Update: Security update for bind ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2365-1 Rating: important References: #958861 Cross-References: CVE-2015-8000 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for bind fixes the following security issue: - CVE-2015-8000: Fix remote denial of service by misparsing incoming responses (bsc#958861). This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-950=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): bind-9.9.6P1-27.1 bind-chrootenv-9.9.6P1-27.1 bind-debuginfo-9.9.6P1-27.1 bind-debugsource-9.9.6P1-27.1 bind-devel-9.9.6P1-27.1 bind-libs-9.9.6P1-27.1 bind-libs-debuginfo-9.9.6P1-27.1 bind-lwresd-9.9.6P1-27.1 bind-lwresd-debuginfo-9.9.6P1-27.1 bind-utils-9.9.6P1-27.1 bind-utils-debuginfo-9.9.6P1-27.1 - openSUSE Leap 42.1 (x86_64): bind-libs-32bit-9.9.6P1-27.1 bind-libs-debuginfo-32bit-9.9.6P1-27.1 - openSUSE Leap 42.1 (noarch): bind-doc-9.9.6P1-27.1 References: https://www.suse.com/security/cve/CVE-2015-8000.html https://bugzilla.suse.com/958861 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2015:2364-1: important: Security update for bind
by opensuse-security＠opensuse.org 25 Dec '15

25 Dec '15

openSUSE Security Update: Security update for bind ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2364-1 Rating: important References: #958861 Cross-References: CVE-2015-8000 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for bind fixes the following security issue: - CVE-2015-8000: Fix remote denial of service by misparsing incoming responses (boo#958861). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-951=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-951=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): bind-9.9.6P1-2.13.1 bind-chrootenv-9.9.6P1-2.13.1 bind-debuginfo-9.9.6P1-2.13.1 bind-debugsource-9.9.6P1-2.13.1 bind-devel-9.9.6P1-2.13.1 bind-libs-9.9.6P1-2.13.1 bind-libs-debuginfo-9.9.6P1-2.13.1 bind-lwresd-9.9.6P1-2.13.1 bind-lwresd-debuginfo-9.9.6P1-2.13.1 bind-utils-9.9.6P1-2.13.1 bind-utils-debuginfo-9.9.6P1-2.13.1 - openSUSE 13.2 (x86_64): bind-libs-32bit-9.9.6P1-2.13.1 bind-libs-debuginfo-32bit-9.9.6P1-2.13.1 - openSUSE 13.2 (noarch): bind-doc-9.9.6P1-2.13.1 - openSUSE 13.1 (i586 x86_64): bind-9.9.4P2-2.20.1 bind-chrootenv-9.9.4P2-2.20.1 bind-debuginfo-9.9.4P2-2.20.1 bind-debugsource-9.9.4P2-2.20.1 bind-devel-9.9.4P2-2.20.1 bind-libs-9.9.4P2-2.20.1 bind-libs-debuginfo-9.9.4P2-2.20.1 bind-lwresd-9.9.4P2-2.20.1 bind-lwresd-debuginfo-9.9.4P2-2.20.1 bind-utils-9.9.4P2-2.20.1 bind-utils-debuginfo-9.9.4P2-2.20.1 - openSUSE 13.1 (x86_64): bind-libs-32bit-9.9.4P2-2.20.1 bind-libs-debuginfo-32bit-9.9.4P2-2.20.1 - openSUSE 13.1 (noarch): bind-doc-9.9.4P2-2.20.1 References: https://www.suse.com/security/cve/CVE-2015-8000.html https://bugzilla.suse.com/958861 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:2359-1: important: Security update for bind
by opensuse-security＠opensuse.org 25 Dec '15

25 Dec '15

SUSE Security Update: Security update for bind ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:2359-1 Rating: important References: #958861 Cross-References: CVE-2015-8000 Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP1 SUSE Linux Enterprise Server 12-SP1 SUSE Linux Enterprise Desktop 12-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for bind fixes the following security issue: - CVE-2015-8000: Fix remote denial of service by misparsing incoming responses (bsc#958861). Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 12-SP1: zypper in -t patch SUSE-SLE-SDK-12-SP1-2015-1016=1 - SUSE Linux Enterprise Server 12-SP1: zypper in -t patch SUSE-SLE-SERVER-12-SP1-2015-1016=1 - SUSE Linux Enterprise Desktop 12-SP1: zypper in -t patch SUSE-SLE-DESKTOP-12-SP1-2015-1016=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 12-SP1 (ppc64le s390x x86_64): bind-debuginfo-9.9.6P1-32.1 bind-debugsource-9.9.6P1-32.1 bind-devel-9.9.6P1-32.1 - SUSE Linux Enterprise Server 12-SP1 (ppc64le s390x x86_64): bind-9.9.6P1-32.1 bind-chrootenv-9.9.6P1-32.1 bind-debuginfo-9.9.6P1-32.1 bind-debugsource-9.9.6P1-32.1 bind-libs-9.9.6P1-32.1 bind-libs-debuginfo-9.9.6P1-32.1 bind-utils-9.9.6P1-32.1 bind-utils-debuginfo-9.9.6P1-32.1 - SUSE Linux Enterprise Server 12-SP1 (s390x x86_64): bind-libs-32bit-9.9.6P1-32.1 bind-libs-debuginfo-32bit-9.9.6P1-32.1 - SUSE Linux Enterprise Server 12-SP1 (noarch): bind-doc-9.9.6P1-32.1 - SUSE Linux Enterprise Desktop 12-SP1 (x86_64): bind-debuginfo-9.9.6P1-32.1 bind-debugsource-9.9.6P1-32.1 bind-libs-32bit-9.9.6P1-32.1 bind-libs-9.9.6P1-32.1 bind-libs-debuginfo-32bit-9.9.6P1-32.1 bind-libs-debuginfo-9.9.6P1-32.1 bind-utils-9.9.6P1-32.1 bind-utils-debuginfo-9.9.6P1-32.1 References: https://www.suse.com/security/cve/CVE-2015-8000.html https://bugzilla.suse.com/958861 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2015:2356-1: important: Security update for samba, ldb, talloc, tdb, tevent
by opensuse-security＠opensuse.org 24 Dec '15

24 Dec '15

openSUSE Security Update: Security update for samba, ldb, talloc, tdb, tevent ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2356-1 Rating: important References: #939050 #939051 #949022 #951660 #953382 #954658 #958580 #958581 #958582 #958583 #958584 #958585 #958586 Cross-References: CVE-2015-3223 CVE-2015-5252 CVE-2015-5296 CVE-2015-5299 CVE-2015-5330 CVE-2015-7540 CVE-2015-8467 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that solves 7 vulnerabilities and has 6 fixes is now available. Description: This update for ldb, samba, talloc, tdb, tevent fixes the following issues: ldb was updated to 1.1.24. + Fix ldap \00 search expression attack dos; cve-2015-3223; (bso#11325) + Fix remote read memory exploit in ldb; cve-2015-5330; (bso#11599) + Move ldb_(un)pack_data into ldb_module.h for testing + Fix installation of _ldb_text.py + Fix propagation of ldb errors through tdb + Fix bug triggered by having an empty message in database during search + Test improvements + Improved python bindings + Validate_ldb of string(generalized-time) does not accept millisecond format ".000Z"; (bso#9810) + Fix logic in ldb_val_to_time() + Allow to register extended match rules + Fixes for segfaults in pyldb + Documentation fixes + Build system improvements + Fix a typo in the comment, ldb_flags_mod_xxx -> ldb_flag_mod_xxx + Fix check for third_party + Make the successful ldb_transaction_start() message clearer + Ldb-samba: fix a memory leak in ldif_canonicalise_objectcategory() + Ldb-samba: move pyldb-utils dependency to python_samba__ldb + Build: improve detection of srcdir Samba was updated to 4.1.22. + Malicious request can cause samba ldap server to hang, spinning using cpu; CVE-2015-3223; (bso#11325); (boo#958581). + Remote read memory exploit in ldb; cve-2015-5330; (bso#11599); (boo#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (boo#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (boo#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (boo#958583). + Fix microsoft ms15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (boo#958585). + Fix remote dos in samba (ad) ldap server; cve-2015-7540; (bso#9187); (boo#958580). + Ensure attempt to ssh into locked account triggers "Your account is disabled....." to the console; (boo#953382). + Prevent null pointer access in samlogon fallback when security credentials are null; (boo#949022). talloc was updated to 2.1.5; (boo#954658). + Minor build fixes + Point ld_library_path to the just-built libraries while calling make test. + Disable rpath-install and silent-rules while configure. + Update to 2.1.4; (boo#951660). + Test that talloc magic differs between processes. + Increment minor version due to added talloc_test_get_magic. + Provide tests access to talloc_magic. + Test magic protection measures. + Update the samba library distribution key file 'talloc.keyring'; (bso#945116). + Update to 2.1.3; (boo#939051). + Improved python3 bindings + Documentation fixes regarding talloc_reference() and talloc_unlink() tdb was updated to version 1.3.8; (boo#954658). + Fix broken build with --disable-python + Minor build fixes + Disable rpath-install and silent-rules while configure. + Update the samba library distribution key file 'tdb.keyring'; (bso#945116). + Update to version 1.3.7. + First fix deadlock in the interaction between fcntl and mutex locking; (bso#11381) + Improved python3 bindings + Update to version 1.3.6. + Fix runtime detection for robust mutexes in the standalone build; (bso#11326). + Possible fix for the build with robust mutexes on solaris 11; (bso#11319). + Update to version 1.3.5. + Abi change: tdb_chainlock_read_nonblock() has been added, a nonblock variant of tdb_chainlock_read() + Do not build test binaries if it's not a standalone build + Fix cid 1034842 resource leak + Fix cid 1034841 resource leak + Don't let tdb_wrap_open() segfault with name==null + Update to version 1.3.4. + Toos: allow transactions with tdb_mutex_locking + Test: add tdb1-run-mutex-transaction1 test + Allow transactions on on tdb's with tdb_mutex_locking + Update to version 1.3.3. + Test: tdb_clear_if_first | tdb_mutex_locking, o_rdonly is a valid combination + Update to version 1.3.2. + Allow tdb_open_ex() with o_rdonly of tdb_feature_flag_mutex tdbs. + Fix a comment + Fix tdb_runtime_check_for_robust_mutexes() + Improve wording in a comment + Tdb.h needs bool type; obsoletes include_stdbool_bso10625.patch + Tdb_wrap: make mutexes easier to use + Tdb_wrap: only pull in samba-debug + Tdb_wrap: standalone compile without includes.h + Tdb_wrap: tdb_wrap.h doesn't need struct loadparm_context - Update to version 1.3.1. + Tools: fix a compiler warning + Defragment the freelist in tdb_allocate_from_freelist() + Add "freelist_size" sub-command to tdbtool + Use tdb_freelist_merge_adjacent in tdb_freelist_size() + Add tdb_freelist_merge_adjacent() + Add utility function check_merge_ptr_with_left_record() + Simplify tdb_free() using check_merge_with_left_record() + Add utility function check_merge_with_left_record() + Improve comments for tdb_free(). + Factor merge_with_left_record() out of tdb_free() + Fix debug message in tdb_free() + Reduce indentation in tdb_free() for merging left + Increase readability of read_record_on_left() + Factor read_record_on_left() out of tdb_free() + Build: improve detection of srcdir. tevent was update to version 0.9.26; (boo#954658). + New tevent_thread_proxy api + Minor build fixes + Update the samba library distribution key file 'tevent.keyring'; (bso#945116). + Update to 0.9.25. + Fix compile error in solaris ports backend. + Fix access after free in tevent_common_check_signal(); (bso#11308). + Improve pytevent bindings. + Testsuite fixes. + Improve the documentation of the tevent_add_fd() assumtions. it must be talloc_free'ed before closing the fd! (bso##11141); (bso#11316). + Update to 0.9.24. + Ignore unexpected signal events in the same way the epoll backend does. + Update to 0.9.23. + Update the tevent_data.dox tutrial stuff to fix some errors, including white space problems. + Use tevent_req_simple_recv_unix in a few places. + Update to 0.9.22. + Remove unused exit_code in tevent_select.c + Remove unused exit_code in tevent_poll.c + Build: improve detection of srcdir + Lib: tevent: make tevent_sig_increment atomic. + Update flags in tevent pkgconfig file + Utilize doxygen to generate the api documentation and package it. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-945=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-945=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): ldb-debugsource-1.1.24-3.4.1 ldb-tools-1.1.24-3.4.1 ldb-tools-debuginfo-1.1.24-3.4.1 libdcerpc-atsvc-devel-4.1.22-21.1 libdcerpc-atsvc0-4.1.22-21.1 libdcerpc-atsvc0-debuginfo-4.1.22-21.1 libdcerpc-binding0-4.1.22-21.1 libdcerpc-binding0-debuginfo-4.1.22-21.1 libdcerpc-devel-4.1.22-21.1 libdcerpc-samr-devel-4.1.22-21.1 libdcerpc-samr0-4.1.22-21.1 libdcerpc-samr0-debuginfo-4.1.22-21.1 libdcerpc0-4.1.22-21.1 libdcerpc0-debuginfo-4.1.22-21.1 libgensec-devel-4.1.22-21.1 libgensec0-4.1.22-21.1 libgensec0-debuginfo-4.1.22-21.1 libldb-devel-1.1.24-3.4.1 libldb1-1.1.24-3.4.1 libldb1-debuginfo-1.1.24-3.4.1 libndr-devel-4.1.22-21.1 libndr-krb5pac-devel-4.1.22-21.1 libndr-krb5pac0-4.1.22-21.1 libndr-krb5pac0-debuginfo-4.1.22-21.1 libndr-nbt-devel-4.1.22-21.1 libndr-nbt0-4.1.22-21.1 libndr-nbt0-debuginfo-4.1.22-21.1 libndr-standard-devel-4.1.22-21.1 libndr-standard0-4.1.22-21.1 libndr-standard0-debuginfo-4.1.22-21.1 libndr0-4.1.22-21.1 libndr0-debuginfo-4.1.22-21.1 libnetapi-devel-4.1.22-21.1 libnetapi0-4.1.22-21.1 libnetapi0-debuginfo-4.1.22-21.1 libpdb-devel-4.1.22-21.1 libpdb0-4.1.22-21.1 libpdb0-debuginfo-4.1.22-21.1 libregistry-devel-4.1.22-21.1 libregistry0-4.1.22-21.1 libregistry0-debuginfo-4.1.22-21.1 libsamba-credentials-devel-4.1.22-21.1 libsamba-credentials0-4.1.22-21.1 libsamba-credentials0-debuginfo-4.1.22-21.1 libsamba-hostconfig-devel-4.1.22-21.1 libsamba-hostconfig0-4.1.22-21.1 libsamba-hostconfig0-debuginfo-4.1.22-21.1 libsamba-policy-devel-4.1.22-21.1 libsamba-policy0-4.1.22-21.1 libsamba-policy0-debuginfo-4.1.22-21.1 libsamba-util-devel-4.1.22-21.1 libsamba-util0-4.1.22-21.1 libsamba-util0-debuginfo-4.1.22-21.1 libsamdb-devel-4.1.22-21.1 libsamdb0-4.1.22-21.1 libsamdb0-debuginfo-4.1.22-21.1 libsmbclient-devel-4.1.22-21.1 libsmbclient-raw-devel-4.1.22-21.1 libsmbclient-raw0-4.1.22-21.1 libsmbclient-raw0-debuginfo-4.1.22-21.1 libsmbclient0-4.1.22-21.1 libsmbclient0-debuginfo-4.1.22-21.1 libsmbconf-devel-4.1.22-21.1 libsmbconf0-4.1.22-21.1 libsmbconf0-debuginfo-4.1.22-21.1 libsmbldap-devel-4.1.22-21.1 libsmbldap0-4.1.22-21.1 libsmbldap0-debuginfo-4.1.22-21.1 libsmbsharemodes-devel-4.1.22-21.1 libsmbsharemodes0-4.1.22-21.1 libsmbsharemodes0-debuginfo-4.1.22-21.1 libtalloc-devel-2.1.5-2.6.1 libtalloc2-2.1.5-2.6.1 libtalloc2-debuginfo-2.1.5-2.6.1 libtdb-devel-1.3.8-3.1 libtdb1-1.3.8-3.1 libtdb1-debuginfo-1.3.8-3.1 libtevent-devel-0.9.26-3.1 libtevent-util-devel-4.1.22-21.1 libtevent-util0-4.1.22-21.1 libtevent-util0-debuginfo-4.1.22-21.1 libtevent0-0.9.26-3.1 libtevent0-debuginfo-0.9.26-3.1 libwbclient-devel-4.1.22-21.1 libwbclient0-4.1.22-21.1 libwbclient0-debuginfo-4.1.22-21.1 pyldb-1.1.24-3.4.1 pyldb-debuginfo-1.1.24-3.4.1 pyldb-devel-1.1.24-3.4.1 pytalloc-2.1.5-2.6.1 pytalloc-debuginfo-2.1.5-2.6.1 pytalloc-devel-2.1.5-2.6.1 python-tdb-1.3.8-3.1 python-tdb-debuginfo-1.3.8-3.1 python-tevent-0.9.26-3.1 python-tevent-debuginfo-0.9.26-3.1 samba-4.1.22-21.1 samba-client-4.1.22-21.1 samba-client-debuginfo-4.1.22-21.1 samba-core-devel-4.1.22-21.1 samba-debuginfo-4.1.22-21.1 samba-debugsource-4.1.22-21.1 samba-libs-4.1.22-21.1 samba-libs-debuginfo-4.1.22-21.1 samba-pidl-4.1.22-21.1 samba-python-4.1.22-21.1 samba-python-debuginfo-4.1.22-21.1 samba-test-4.1.22-21.1 samba-test-debuginfo-4.1.22-21.1 samba-test-devel-4.1.22-21.1 samba-winbind-4.1.22-21.1 samba-winbind-debuginfo-4.1.22-21.1 talloc-debugsource-2.1.5-2.6.1 tdb-debugsource-1.3.8-3.1 tdb-tools-1.3.8-3.1 tdb-tools-debuginfo-1.3.8-3.1 tevent-debugsource-0.9.26-3.1 - openSUSE 13.2 (x86_64): libdcerpc-atsvc0-32bit-4.1.22-21.1 libdcerpc-atsvc0-debuginfo-32bit-4.1.22-21.1 libdcerpc-binding0-32bit-4.1.22-21.1 libdcerpc-binding0-debuginfo-32bit-4.1.22-21.1 libdcerpc-samr0-32bit-4.1.22-21.1 libdcerpc-samr0-debuginfo-32bit-4.1.22-21.1 libdcerpc0-32bit-4.1.22-21.1 libdcerpc0-debuginfo-32bit-4.1.22-21.1 libgensec0-32bit-4.1.22-21.1 libgensec0-debuginfo-32bit-4.1.22-21.1 libldb1-32bit-1.1.24-3.4.1 libldb1-debuginfo-32bit-1.1.24-3.4.1 libndr-krb5pac0-32bit-4.1.22-21.1 libndr-krb5pac0-debuginfo-32bit-4.1.22-21.1 libndr-nbt0-32bit-4.1.22-21.1 libndr-nbt0-debuginfo-32bit-4.1.22-21.1 libndr-standard0-32bit-4.1.22-21.1 libndr-standard0-debuginfo-32bit-4.1.22-21.1 libndr0-32bit-4.1.22-21.1 libndr0-debuginfo-32bit-4.1.22-21.1 libnetapi0-32bit-4.1.22-21.1 libnetapi0-debuginfo-32bit-4.1.22-21.1 libpdb0-32bit-4.1.22-21.1 libpdb0-debuginfo-32bit-4.1.22-21.1 libregistry0-32bit-4.1.22-21.1 libregistry0-debuginfo-32bit-4.1.22-21.1 libsamba-credentials0-32bit-4.1.22-21.1 libsamba-credentials0-debuginfo-32bit-4.1.22-21.1 libsamba-hostconfig0-32bit-4.1.22-21.1 libsamba-hostconfig0-debuginfo-32bit-4.1.22-21.1 libsamba-policy0-32bit-4.1.22-21.1 libsamba-policy0-debuginfo-32bit-4.1.22-21.1 libsamba-util0-32bit-4.1.22-21.1 libsamba-util0-debuginfo-32bit-4.1.22-21.1 libsamdb0-32bit-4.1.22-21.1 libsamdb0-debuginfo-32bit-4.1.22-21.1 libsmbclient-raw0-32bit-4.1.22-21.1 libsmbclient-raw0-debuginfo-32bit-4.1.22-21.1 libsmbclient0-32bit-4.1.22-21.1 libsmbclient0-debuginfo-32bit-4.1.22-21.1 libsmbconf0-32bit-4.1.22-21.1 libsmbconf0-debuginfo-32bit-4.1.22-21.1 libsmbldap0-32bit-4.1.22-21.1 libsmbldap0-debuginfo-32bit-4.1.22-21.1 libtalloc2-32bit-2.1.5-2.6.1 libtalloc2-debuginfo-32bit-2.1.5-2.6.1 libtdb1-32bit-1.3.8-3.1 libtdb1-debuginfo-32bit-1.3.8-3.1 libtevent-util0-32bit-4.1.22-21.1 libtevent-util0-debuginfo-32bit-4.1.22-21.1 libtevent0-32bit-0.9.26-3.1 libtevent0-debuginfo-32bit-0.9.26-3.1 libwbclient0-32bit-4.1.22-21.1 libwbclient0-debuginfo-32bit-4.1.22-21.1 pyldb-32bit-1.1.24-3.4.1 pyldb-debuginfo-32bit-1.1.24-3.4.1 pytalloc-32bit-2.1.5-2.6.1 pytalloc-debuginfo-32bit-2.1.5-2.6.1 python-tdb-32bit-1.3.8-3.1 python-tdb-debuginfo-32bit-1.3.8-3.1 python-tevent-32bit-0.9.26-3.1 python-tevent-debuginfo-32bit-0.9.26-3.1 samba-32bit-4.1.22-21.1 samba-client-32bit-4.1.22-21.1 samba-client-debuginfo-32bit-4.1.22-21.1 samba-debuginfo-32bit-4.1.22-21.1 samba-libs-32bit-4.1.22-21.1 samba-libs-debuginfo-32bit-4.1.22-21.1 samba-winbind-32bit-4.1.22-21.1 samba-winbind-debuginfo-32bit-4.1.22-21.1 - openSUSE 13.2 (noarch): samba-doc-4.1.22-21.1 - openSUSE 13.1 (i586 x86_64): ldb-debugsource-1.1.24-3.7.1 ldb-tools-1.1.24-3.7.1 ldb-tools-debuginfo-1.1.24-3.7.1 libdcerpc-atsvc-devel-4.1.22-3.46.1 libdcerpc-atsvc0-4.1.22-3.46.1 libdcerpc-atsvc0-debuginfo-4.1.22-3.46.1 libdcerpc-binding0-4.1.22-3.46.1 libdcerpc-binding0-debuginfo-4.1.22-3.46.1 libdcerpc-devel-4.1.22-3.46.1 libdcerpc-samr-devel-4.1.22-3.46.1 libdcerpc-samr0-4.1.22-3.46.1 libdcerpc-samr0-debuginfo-4.1.22-3.46.1 libdcerpc0-4.1.22-3.46.1 libdcerpc0-debuginfo-4.1.22-3.46.1 libgensec-devel-4.1.22-3.46.1 libgensec0-4.1.22-3.46.1 libgensec0-debuginfo-4.1.22-3.46.1 libldb-devel-1.1.24-3.7.1 libldb1-1.1.24-3.7.1 libldb1-debuginfo-1.1.24-3.7.1 libndr-devel-4.1.22-3.46.1 libndr-krb5pac-devel-4.1.22-3.46.1 libndr-krb5pac0-4.1.22-3.46.1 libndr-krb5pac0-debuginfo-4.1.22-3.46.1 libndr-nbt-devel-4.1.22-3.46.1 libndr-nbt0-4.1.22-3.46.1 libndr-nbt0-debuginfo-4.1.22-3.46.1 libndr-standard-devel-4.1.22-3.46.1 libndr-standard0-4.1.22-3.46.1 libndr-standard0-debuginfo-4.1.22-3.46.1 libndr0-4.1.22-3.46.1 libndr0-debuginfo-4.1.22-3.46.1 libnetapi-devel-4.1.22-3.46.1 libnetapi0-4.1.22-3.46.1 libnetapi0-debuginfo-4.1.22-3.46.1 libpdb-devel-4.1.22-3.46.1 libpdb0-4.1.22-3.46.1 libpdb0-debuginfo-4.1.22-3.46.1 libregistry-devel-4.1.22-3.46.1 libregistry0-4.1.22-3.46.1 libregistry0-debuginfo-4.1.22-3.46.1 libsamba-credentials-devel-4.1.22-3.46.1 libsamba-credentials0-4.1.22-3.46.1 libsamba-credentials0-debuginfo-4.1.22-3.46.1 libsamba-hostconfig-devel-4.1.22-3.46.1 libsamba-hostconfig0-4.1.22-3.46.1 libsamba-hostconfig0-debuginfo-4.1.22-3.46.1 libsamba-policy-devel-4.1.22-3.46.1 libsamba-policy0-4.1.22-3.46.1 libsamba-policy0-debuginfo-4.1.22-3.46.1 libsamba-util-devel-4.1.22-3.46.1 libsamba-util0-4.1.22-3.46.1 libsamba-util0-debuginfo-4.1.22-3.46.1 libsamdb-devel-4.1.22-3.46.1 libsamdb0-4.1.22-3.46.1 libsamdb0-debuginfo-4.1.22-3.46.1 libsmbclient-devel-4.1.22-3.46.1 libsmbclient-raw-devel-4.1.22-3.46.1 libsmbclient-raw0-4.1.22-3.46.1 libsmbclient-raw0-debuginfo-4.1.22-3.46.1 libsmbclient0-4.1.22-3.46.1 libsmbclient0-debuginfo-4.1.22-3.46.1 libsmbconf-devel-4.1.22-3.46.1 libsmbconf0-4.1.22-3.46.1 libsmbconf0-debuginfo-4.1.22-3.46.1 libsmbldap-devel-4.1.22-3.46.1 libsmbldap0-4.1.22-3.46.1 libsmbldap0-debuginfo-4.1.22-3.46.1 libsmbsharemodes-devel-4.1.22-3.46.1 libsmbsharemodes0-4.1.22-3.46.1 libsmbsharemodes0-debuginfo-4.1.22-3.46.1 libtalloc-devel-2.1.5-7.10.1 libtalloc2-2.1.5-7.10.1 libtalloc2-debuginfo-2.1.5-7.10.1 libtdb-devel-1.3.8-4.7.1 libtdb1-1.3.8-4.7.1 libtdb1-debuginfo-1.3.8-4.7.1 libtevent-devel-0.9.26-4.7.1 libtevent-util-devel-4.1.22-3.46.1 libtevent-util0-4.1.22-3.46.1 libtevent-util0-debuginfo-4.1.22-3.46.1 libtevent0-0.9.26-4.7.1 libtevent0-debuginfo-0.9.26-4.7.1 libwbclient-devel-4.1.22-3.46.1 libwbclient0-4.1.22-3.46.1 libwbclient0-debuginfo-4.1.22-3.46.1 pyldb-1.1.24-3.7.1 pyldb-debuginfo-1.1.24-3.7.1 pyldb-devel-1.1.24-3.7.1 pytalloc-2.1.5-7.10.1 pytalloc-debuginfo-2.1.5-7.10.1 pytalloc-devel-2.1.5-7.10.1 python-tdb-1.3.8-4.7.1 python-tdb-debuginfo-1.3.8-4.7.1 python-tevent-0.9.26-4.7.1 python-tevent-debuginfo-0.9.26-4.7.1 samba-4.1.22-3.46.1 samba-client-4.1.22-3.46.1 samba-client-debuginfo-4.1.22-3.46.1 samba-core-devel-4.1.22-3.46.1 samba-debuginfo-4.1.22-3.46.1 samba-debugsource-4.1.22-3.46.1 samba-libs-4.1.22-3.46.1 samba-libs-debuginfo-4.1.22-3.46.1 samba-pidl-4.1.22-3.46.1 samba-python-4.1.22-3.46.1 samba-python-debuginfo-4.1.22-3.46.1 samba-test-4.1.22-3.46.1 samba-test-debuginfo-4.1.22-3.46.1 samba-test-devel-4.1.22-3.46.1 samba-winbind-4.1.22-3.46.1 samba-winbind-debuginfo-4.1.22-3.46.1 talloc-debugsource-2.1.5-7.10.1 tdb-debugsource-1.3.8-4.7.1 tdb-tools-1.3.8-4.7.1 tdb-tools-debuginfo-1.3.8-4.7.1 tevent-debugsource-0.9.26-4.7.1 - openSUSE 13.1 (x86_64): libdcerpc-atsvc0-32bit-4.1.22-3.46.1 libdcerpc-atsvc0-debuginfo-32bit-4.1.22-3.46.1 libdcerpc-binding0-32bit-4.1.22-3.46.1 libdcerpc-binding0-debuginfo-32bit-4.1.22-3.46.1 libdcerpc-samr0-32bit-4.1.22-3.46.1 libdcerpc-samr0-debuginfo-32bit-4.1.22-3.46.1 libdcerpc0-32bit-4.1.22-3.46.1 libdcerpc0-debuginfo-32bit-4.1.22-3.46.1 libgensec0-32bit-4.1.22-3.46.1 libgensec0-debuginfo-32bit-4.1.22-3.46.1 libldb1-32bit-1.1.24-3.7.1 libldb1-debuginfo-32bit-1.1.24-3.7.1 libndr-krb5pac0-32bit-4.1.22-3.46.1 libndr-krb5pac0-debuginfo-32bit-4.1.22-3.46.1 libndr-nbt0-32bit-4.1.22-3.46.1 libndr-nbt0-debuginfo-32bit-4.1.22-3.46.1 libndr-standard0-32bit-4.1.22-3.46.1 libndr-standard0-debuginfo-32bit-4.1.22-3.46.1 libndr0-32bit-4.1.22-3.46.1 libndr0-debuginfo-32bit-4.1.22-3.46.1 libnetapi0-32bit-4.1.22-3.46.1 libnetapi0-debuginfo-32bit-4.1.22-3.46.1 libpdb0-32bit-4.1.22-3.46.1 libpdb0-debuginfo-32bit-4.1.22-3.46.1 libregistry0-32bit-4.1.22-3.46.1 libregistry0-debuginfo-32bit-4.1.22-3.46.1 libsamba-credentials0-32bit-4.1.22-3.46.1 libsamba-credentials0-debuginfo-32bit-4.1.22-3.46.1 libsamba-hostconfig0-32bit-4.1.22-3.46.1 libsamba-hostconfig0-debuginfo-32bit-4.1.22-3.46.1 libsamba-policy0-32bit-4.1.22-3.46.1 libsamba-policy0-debuginfo-32bit-4.1.22-3.46.1 libsamba-util0-32bit-4.1.22-3.46.1 libsamba-util0-debuginfo-32bit-4.1.22-3.46.1 libsamdb0-32bit-4.1.22-3.46.1 libsamdb0-debuginfo-32bit-4.1.22-3.46.1 libsmbclient-raw0-32bit-4.1.22-3.46.1 libsmbclient-raw0-debuginfo-32bit-4.1.22-3.46.1 libsmbclient0-32bit-4.1.22-3.46.1 libsmbclient0-debuginfo-32bit-4.1.22-3.46.1 libsmbconf0-32bit-4.1.22-3.46.1 libsmbconf0-debuginfo-32bit-4.1.22-3.46.1 libsmbldap0-32bit-4.1.22-3.46.1 libsmbldap0-debuginfo-32bit-4.1.22-3.46.1 libtalloc2-32bit-2.1.5-7.10.1 libtalloc2-debuginfo-32bit-2.1.5-7.10.1 libtdb1-32bit-1.3.8-4.7.1 libtdb1-debuginfo-32bit-1.3.8-4.7.1 libtevent-util0-32bit-4.1.22-3.46.1 libtevent-util0-debuginfo-32bit-4.1.22-3.46.1 libtevent0-32bit-0.9.26-4.7.1 libtevent0-debuginfo-32bit-0.9.26-4.7.1 libwbclient0-32bit-4.1.22-3.46.1 libwbclient0-debuginfo-32bit-4.1.22-3.46.1 pyldb-32bit-1.1.24-3.7.1 pyldb-debuginfo-32bit-1.1.24-3.7.1 pytalloc-32bit-2.1.5-7.10.1 pytalloc-debuginfo-32bit-2.1.5-7.10.1 python-tdb-32bit-1.3.8-4.7.1 python-tdb-debuginfo-32bit-1.3.8-4.7.1 python-tevent-32bit-0.9.26-4.7.1 python-tevent-debuginfo-32bit-0.9.26-4.7.1 samba-32bit-4.1.22-3.46.1 samba-client-32bit-4.1.22-3.46.1 samba-client-debuginfo-32bit-4.1.22-3.46.1 samba-debuginfo-32bit-4.1.22-3.46.1 samba-libs-32bit-4.1.22-3.46.1 samba-libs-debuginfo-32bit-4.1.22-3.46.1 samba-winbind-32bit-4.1.22-3.46.1 samba-winbind-debuginfo-32bit-4.1.22-3.46.1 - openSUSE 13.1 (noarch): samba-doc-4.1.22-3.46.1 References: https://www.suse.com/security/cve/CVE-2015-3223.html https://www.suse.com/security/cve/CVE-2015-5252.html https://www.suse.com/security/cve/CVE-2015-5296.html https://www.suse.com/security/cve/CVE-2015-5299.html https://www.suse.com/security/cve/CVE-2015-5330.html https://www.suse.com/security/cve/CVE-2015-7540.html https://www.suse.com/security/cve/CVE-2015-8467.html https://bugzilla.suse.com/939050 https://bugzilla.suse.com/939051 https://bugzilla.suse.com/949022 https://bugzilla.suse.com/951660 https://bugzilla.suse.com/953382 https://bugzilla.suse.com/954658 https://bugzilla.suse.com/958580 https://bugzilla.suse.com/958581 https://bugzilla.suse.com/958582 https://bugzilla.suse.com/958583 https://bugzilla.suse.com/958584 https://bugzilla.suse.com/958585 https://bugzilla.suse.com/958586 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2015:2354-1: important: Security update for ldb, samba, talloc, tdb, tevent
by opensuse-security＠opensuse.org 24 Dec '15

24 Dec '15

openSUSE Security Update: Security update for ldb, samba, talloc, tdb, tevent ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2354-1 Rating: important References: #949022 #951660 #954658 #958581 #958582 #958583 #958584 #958585 #958586 Cross-References: CVE-2015-3223 CVE-2015-5252 CVE-2015-5296 CVE-2015-5299 CVE-2015-5330 CVE-2015-8467 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves 6 vulnerabilities and has three fixes is now available. Description: This update for ldb, samba, talloc, tdb, tevent fixes the following security issues and bugs: The Samba LDB was updated to version 1.1.24: - Fix ldap \00 search expression attack dos; CVE-2015-3223; (bso#11325) - Fix remote read memory exploit in ldb; CVE-2015-5330; (bso#11599) - Move ldb_(un)pack_data into ldb_module.h for testing - Fix installation of _ldb_text.py - Fix propagation of ldb errors through tdb - Fix bug triggered by having an empty message in database during search Samba was updated to fix these issues: - Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). - Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). - Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). - No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). - Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). - Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585). - Changing log level of two entries to from 1 to 3; (bso#9912). - vfs_gpfs: Re-enable share modes; (bso#11243). - wafsamba: Also build libraries with RELRO protection; (bso#11346). - ctdb: Strip trailing spaces from nodes file; (bso#11365). - s3-smbd: Fix old DOS client doing wildcard delete - gives a attribute type of zero; (bso#11452). - nss_wins: Do not run into use after free issues when we access memory allocated on the globals and the global being reinitialized; (bso#11563). - async_req: Fix non-blocking connect(); (bso#11564). - auth: gensec: Fix a memory leak; (bso#11565). - lib: util: Make non-critical message a warning; (bso#11566). - Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). - smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). - ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). - manpage: Correct small typo error; (bso#11584). - s3: smbd: If EA's are turned off on a share don't allow an SMB2 create containing them; (bso#11589). - Backport some valgrind fixes from upstream master; (bso#11597). - s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). - docs: Fix some typos in the idmap config section of man 5 smb.conf; (bso#11619). - Cleanup and enhance the pidl sub package. - s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). - smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). - kerberos: Make sure we only use prompter type when available; (bso#11038). - s3:ctdbd_conn: Make sure we destroy tevent_fd before closing the socket; (bso#11316). - dcerpc.idl: accept invalid dcerpc_bind_nak pdus; (bso#11327). - Fix a deadlock in tdb; (bso#11381). - s3: smbd: Fix mkdir race condition; (bso#11486). - pam_winbind: Fix a segfault if initialization fails; (bso#11502). - s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). - s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). - net: Fix a crash with 'net ads keytab create'; (bso#11528). - s3: smbd: Fix a crash in unix_convert() and a NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). - vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). - vfs_commit: Set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). - Fix bug in smbstatus where the lease info is not printed; (bso#11549). - s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). - Prevent null pointer access in samlogon fallback when security credentials are null; (bnc#949022). - Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038). talloc was updated to version 2.1.5; (bsc#954658) (bsc#951660). - Test that talloc magic differs between processes. - Increment minor version due to added talloc_test_get_magic. - Provide tests access to talloc_magic. - Test magic protection measures. tdb was updated to version 1.3.8; (bsc#954658). - Improved python3 bindings tevent was updated to 0.9.26; (bsc#954658). - New tevent_thread_proxy api - Minor build fixes This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-943=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): ldb-debugsource-1.1.24-7.1 ldb-tools-1.1.24-7.1 ldb-tools-debuginfo-1.1.24-7.1 libdcerpc-atsvc-devel-4.2.4-9.2 libdcerpc-atsvc0-4.2.4-9.2 libdcerpc-atsvc0-debuginfo-4.2.4-9.2 libdcerpc-binding0-4.2.4-9.2 libdcerpc-binding0-debuginfo-4.2.4-9.2 libdcerpc-devel-4.2.4-9.2 libdcerpc-samr-devel-4.2.4-9.2 libdcerpc-samr0-4.2.4-9.2 libdcerpc-samr0-debuginfo-4.2.4-9.2 libdcerpc0-4.2.4-9.2 libdcerpc0-debuginfo-4.2.4-9.2 libgensec-devel-4.2.4-9.2 libgensec0-4.2.4-9.2 libgensec0-debuginfo-4.2.4-9.2 libldb-devel-1.1.24-7.1 libldb1-1.1.24-7.1 libldb1-debuginfo-1.1.24-7.1 libndr-devel-4.2.4-9.2 libndr-krb5pac-devel-4.2.4-9.2 libndr-krb5pac0-4.2.4-9.2 libndr-krb5pac0-debuginfo-4.2.4-9.2 libndr-nbt-devel-4.2.4-9.2 libndr-nbt0-4.2.4-9.2 libndr-nbt0-debuginfo-4.2.4-9.2 libndr-standard-devel-4.2.4-9.2 libndr-standard0-4.2.4-9.2 libndr-standard0-debuginfo-4.2.4-9.2 libndr0-4.2.4-9.2 libndr0-debuginfo-4.2.4-9.2 libnetapi-devel-4.2.4-9.2 libnetapi0-4.2.4-9.2 libnetapi0-debuginfo-4.2.4-9.2 libregistry-devel-4.2.4-9.2 libregistry0-4.2.4-9.2 libregistry0-debuginfo-4.2.4-9.2 libsamba-credentials-devel-4.2.4-9.2 libsamba-credentials0-4.2.4-9.2 libsamba-credentials0-debuginfo-4.2.4-9.2 libsamba-hostconfig-devel-4.2.4-9.2 libsamba-hostconfig0-4.2.4-9.2 libsamba-hostconfig0-debuginfo-4.2.4-9.2 libsamba-passdb-devel-4.2.4-9.2 libsamba-passdb0-4.2.4-9.2 libsamba-passdb0-debuginfo-4.2.4-9.2 libsamba-policy-devel-4.2.4-9.2 libsamba-policy0-4.2.4-9.2 libsamba-policy0-debuginfo-4.2.4-9.2 libsamba-util-devel-4.2.4-9.2 libsamba-util0-4.2.4-9.2 libsamba-util0-debuginfo-4.2.4-9.2 libsamdb-devel-4.2.4-9.2 libsamdb0-4.2.4-9.2 libsamdb0-debuginfo-4.2.4-9.2 libsmbclient-devel-4.2.4-9.2 libsmbclient-raw-devel-4.2.4-9.2 libsmbclient-raw0-4.2.4-9.2 libsmbclient-raw0-debuginfo-4.2.4-9.2 libsmbclient0-4.2.4-9.2 libsmbclient0-debuginfo-4.2.4-9.2 libsmbconf-devel-4.2.4-9.2 libsmbconf0-4.2.4-9.2 libsmbconf0-debuginfo-4.2.4-9.2 libsmbldap-devel-4.2.4-9.2 libsmbldap0-4.2.4-9.2 libsmbldap0-debuginfo-4.2.4-9.2 libtalloc-devel-2.1.5-7.1 libtalloc2-2.1.5-7.1 libtalloc2-debuginfo-2.1.5-7.1 libtdb-devel-1.3.8-7.1 libtdb1-1.3.8-7.1 libtdb1-debuginfo-1.3.8-7.1 libtevent-devel-0.9.26-7.1 libtevent-util-devel-4.2.4-9.2 libtevent-util0-4.2.4-9.2 libtevent-util0-debuginfo-4.2.4-9.2 libtevent0-0.9.26-7.1 libtevent0-debuginfo-0.9.26-7.1 libwbclient-devel-4.2.4-9.2 libwbclient0-4.2.4-9.2 libwbclient0-debuginfo-4.2.4-9.2 pyldb-1.1.24-7.1 pyldb-debuginfo-1.1.24-7.1 pyldb-devel-1.1.24-7.1 pytalloc-2.1.5-7.1 pytalloc-debuginfo-2.1.5-7.1 pytalloc-devel-2.1.5-7.1 python-tdb-1.3.8-7.1 python-tdb-debuginfo-1.3.8-7.1 python-tevent-0.9.26-7.1 python-tevent-debuginfo-0.9.26-7.1 samba-4.2.4-9.2 samba-client-4.2.4-9.2 samba-client-debuginfo-4.2.4-9.2 samba-core-devel-4.2.4-9.2 samba-debuginfo-4.2.4-9.2 samba-debugsource-4.2.4-9.2 samba-libs-4.2.4-9.2 samba-libs-debuginfo-4.2.4-9.2 samba-pidl-4.2.4-9.2 samba-python-4.2.4-9.2 samba-python-debuginfo-4.2.4-9.2 samba-test-4.2.4-9.2 samba-test-debuginfo-4.2.4-9.2 samba-test-devel-4.2.4-9.2 samba-winbind-4.2.4-9.2 samba-winbind-debuginfo-4.2.4-9.2 talloc-debugsource-2.1.5-7.1 tdb-debugsource-1.3.8-7.1 tdb-tools-1.3.8-7.1 tdb-tools-debuginfo-1.3.8-7.1 tevent-debugsource-0.9.26-7.1 - openSUSE Leap 42.1 (x86_64): libdcerpc-atsvc0-32bit-4.2.4-9.2 libdcerpc-atsvc0-debuginfo-32bit-4.2.4-9.2 libdcerpc-binding0-32bit-4.2.4-9.2 libdcerpc-binding0-debuginfo-32bit-4.2.4-9.2 libdcerpc-samr0-32bit-4.2.4-9.2 libdcerpc-samr0-debuginfo-32bit-4.2.4-9.2 libdcerpc0-32bit-4.2.4-9.2 libdcerpc0-debuginfo-32bit-4.2.4-9.2 libgensec0-32bit-4.2.4-9.2 libgensec0-debuginfo-32bit-4.2.4-9.2 libldb1-32bit-1.1.24-7.1 libldb1-debuginfo-32bit-1.1.24-7.1 libndr-krb5pac0-32bit-4.2.4-9.2 libndr-krb5pac0-debuginfo-32bit-4.2.4-9.2 libndr-nbt0-32bit-4.2.4-9.2 libndr-nbt0-debuginfo-32bit-4.2.4-9.2 libndr-standard0-32bit-4.2.4-9.2 libndr-standard0-debuginfo-32bit-4.2.4-9.2 libndr0-32bit-4.2.4-9.2 libndr0-debuginfo-32bit-4.2.4-9.2 libnetapi0-32bit-4.2.4-9.2 libnetapi0-debuginfo-32bit-4.2.4-9.2 libregistry0-32bit-4.2.4-9.2 libregistry0-debuginfo-32bit-4.2.4-9.2 libsamba-credentials0-32bit-4.2.4-9.2 libsamba-credentials0-debuginfo-32bit-4.2.4-9.2 libsamba-hostconfig0-32bit-4.2.4-9.2 libsamba-hostconfig0-debuginfo-32bit-4.2.4-9.2 libsamba-passdb0-32bit-4.2.4-9.2 libsamba-passdb0-debuginfo-32bit-4.2.4-9.2 libsamba-policy0-32bit-4.2.4-9.2 libsamba-policy0-debuginfo-32bit-4.2.4-9.2 libsamba-util0-32bit-4.2.4-9.2 libsamba-util0-debuginfo-32bit-4.2.4-9.2 libsamdb0-32bit-4.2.4-9.2 libsamdb0-debuginfo-32bit-4.2.4-9.2 libsmbclient-raw0-32bit-4.2.4-9.2 libsmbclient-raw0-debuginfo-32bit-4.2.4-9.2 libsmbclient0-32bit-4.2.4-9.2 libsmbclient0-debuginfo-32bit-4.2.4-9.2 libsmbconf0-32bit-4.2.4-9.2 libsmbconf0-debuginfo-32bit-4.2.4-9.2 libsmbldap0-32bit-4.2.4-9.2 libsmbldap0-debuginfo-32bit-4.2.4-9.2 libtalloc2-32bit-2.1.5-7.1 libtalloc2-debuginfo-32bit-2.1.5-7.1 libtdb1-32bit-1.3.8-7.1 libtdb1-debuginfo-32bit-1.3.8-7.1 libtevent-util0-32bit-4.2.4-9.2 libtevent-util0-debuginfo-32bit-4.2.4-9.2 libtevent0-32bit-0.9.26-7.1 libtevent0-debuginfo-32bit-0.9.26-7.1 libwbclient0-32bit-4.2.4-9.2 libwbclient0-debuginfo-32bit-4.2.4-9.2 pyldb-32bit-1.1.24-7.1 pyldb-debuginfo-32bit-1.1.24-7.1 pytalloc-32bit-2.1.5-7.1 pytalloc-debuginfo-32bit-2.1.5-7.1 python-tdb-32bit-1.3.8-7.1 python-tdb-debuginfo-32bit-1.3.8-7.1 python-tevent-32bit-0.9.26-7.1 python-tevent-debuginfo-32bit-0.9.26-7.1 samba-32bit-4.2.4-9.2 samba-client-32bit-4.2.4-9.2 samba-client-debuginfo-32bit-4.2.4-9.2 samba-debuginfo-32bit-4.2.4-9.2 samba-libs-32bit-4.2.4-9.2 samba-libs-debuginfo-32bit-4.2.4-9.2 samba-winbind-32bit-4.2.4-9.2 samba-winbind-debuginfo-32bit-4.2.4-9.2 - openSUSE Leap 42.1 (noarch): samba-doc-4.2.4-9.2 References: https://www.suse.com/security/cve/CVE-2015-3223.html https://www.suse.com/security/cve/CVE-2015-5252.html https://www.suse.com/security/cve/CVE-2015-5296.html https://www.suse.com/security/cve/CVE-2015-5299.html https://www.suse.com/security/cve/CVE-2015-5330.html https://www.suse.com/security/cve/CVE-2015-8467.html https://bugzilla.suse.com/949022 https://bugzilla.suse.com/951660 https://bugzilla.suse.com/954658 https://bugzilla.suse.com/958581 https://bugzilla.suse.com/958582 https://bugzilla.suse.com/958583 https://bugzilla.suse.com/958584 https://bugzilla.suse.com/958585 https://bugzilla.suse.com/958586 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:2350-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 23 Dec '15

23 Dec '15

SUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:2350-1 Rating: important References: #814440 #879378 #879381 #900610 #904348 #904965 #921081 #926709 #926774 #930145 #930770 #930788 #930835 #932805 #935053 #935123 #935757 #937256 #937444 #937969 #937970 #938706 #939207 #939826 #939926 #939955 #940017 #940913 #940946 #941202 #942938 #943786 #944677 #944831 #944837 #944989 #944993 #945691 #945825 #945827 #946078 #946214 #946309 #947957 #948330 #948347 #948521 #949100 #949298 #949502 #949706 #949744 #949936 #949981 #950298 #950750 #950998 #951440 #952084 #952384 #952579 #952976 #953527 #953799 #953980 #954404 #954628 #954950 #954984 #955354 #955673 #956709 Cross-References: CVE-2015-0272 CVE-2015-5157 CVE-2015-5307 CVE-2015-6937 CVE-2015-7509 CVE-2015-7799 CVE-2015-7872 CVE-2015-7990 CVE-2015-8104 CVE-2015-8215 Affected Products: SUSE Linux Enterprise Real Time Extension 11-SP4 SUSE Linux Enterprise Debuginfo 11-SP4 ______________________________________________________________________________ An update that solves 10 vulnerabilities and has 62 fixes is now available. Description: The SUSE Linux Enterprise 11 SP4 Realtime kernel was updated to receive various security and bugfixes. Following security bugs were fixed: - CVE-2015-7509: Mounting a prepared ext2 filesystem as ext4 could lead to a local denial of service (crash) (bsc#956709). - CVE-2015-7799: The slhc_init function in drivers/net/slip/slhc.c in the Linux kernel did not ensure that certain slot numbers are valid, which allowed local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted PPPIOCSMAXCID ioctl call (bnc#949936). - CVE-2015-8104: The KVM subsystem in the Linux kernel allowed guest OS users to cause a denial of service (host OS panic or hang) by triggering many #DB (aka Debug) exceptions, related to svm.c (bnc#954404). - CVE-2015-5307: The KVM subsystem in the Linux kernel allowed guest OS users to cause a denial of service (host OS panic or hang) by triggering many #AC (aka Alignment Check) exceptions, related to svm.c and vmx.c (bnc#953527). - CVE-2015-7990: RDS: Verify the underlying transport exists before creating a connection, preventing possible DoS (bsc#952384). - CVE-2015-5157: arch/x86/entry/entry_64.S in the Linux kernel on the x86_64 platform mishandled IRET faults in processing NMIs that occurred during userspace execution, which might allow local users to gain privileges by triggering an NMI (bnc#937969 937970 938706 939207). - CVE-2015-7872: The key_gc_unused_keys function in security/keys/gc.c in the Linux kernel allowed local users to cause a denial of service (OOPS) via crafted keyctl commands (bnc#951440). - CVE-2015-8215: net/ipv6/addrconf.c in the IPv6 stack in the Linux kernel did not validate attempted changes to the MTU value, which allowed context-dependent attackers to cause a denial of service (packet loss) via a value that is (1) smaller than the minimum compliant value or (2) larger than the MTU of an interface, as demonstrated by a Router Advertisement (RA) message that is not validated by a daemon, a different vulnerability than CVE-2015-0272. NOTE: the scope of CVE-2015-0272 is limited to the NetworkManager product. (bnc#955354). - CVE-2015-6937: The __rds_conn_create function in net/rds/connection.c in the Linux kernel allowed local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by using a socket that was not properly bound (bnc#945825). The following non-security bugs were fixed: - af_xhci: avoid path quiesce of severed path in shutdown() (bnc#946214, LTC#131684). - ahci: Add Device ID for Intel Sunrise Point PCH (bsc#953799). - alsa: hda - Disable 64bit address for Creative HDA controllers (bnc#814440). - blktap: also call blkif_disconnect() when frontend switched to closed (bsc#952976). - blktap: refine mm tracking (bsc#952976). - cachefiles: Avoid deadlocks with fs freezing (bsc#935123). - dm: do not start current request if it would've merged with the previous (bsc#904348). - dm: impose configurable deadline for dm_request_fn's merge heuristic (bsc#904348). - dm-snap: avoid deadock on s->lock when a read is split (bsc#939826). - dm sysfs: introduce ability to add writable attributes (bsc#904348). - drivers: hv: do not do hypercalls when hypercall_page is NULL. - drivers: hv: kvp: move poll_channel() to hyperv_vmbus.h. - drivers: hv: util: move kvp/vss function declarations to hyperv_vmbus.h. - drivers: hv: vmbus: add special crash handler (bnc#930770). - drivers: hv: vmbus: add special kexec handler. - drivers: hv: vmbus: Get rid of some unused definitions. - drivers: hv: vmbus: Implement the protocol for tearing down vmbus state. - drivers: hv: vmbus: kill tasklets on module unload. - drivers: hv: vmbus: prefer "die" notification chain to 'panic'. - drivers: hv: vmbus: remove hv_synic_free_cpu() call from hv_synic_cleanup(). - drivers: hv: vmbus: unregister panic notifier on module unload. - driver: Vmxnet3: Fix ethtool -S to return correct rx queue stats (bsc#950750). - drm/i915: add hotplug activation period to hotplug update mask (bsc#953980). - drm/i915: Avoid race of intel_crt_detect_hotplug() with HPD interrupt, v2 (bsc#942938). - drm/i915: Fix DDC probe for passive adapters (bsc#900610, fdo#85924). - fix lpfc_send_rscn_event allocation size claims bnc#935757 - fs: Avoid deadlocks of fsync_bdev() and fs freezing (bsc#935123). - fs: Fix deadlocks between sync and fs freezing (bsc#935123). - hugetlb: simplify migrate_huge_page() (bnc#947957, VM Functionality). - hwpoison, hugetlb: lock_page/unlock_page does not match for handling a free hugepage (bnc#947957, VM Functionality). - IB/srp: Avoid skipping srp_reset_host() after a transport error (bsc#904965). - IB/srp: Fix a sporadic crash triggered by cable pulling (bsc#904965). - Import SP4-RT GA kabi files - ipr: Fix incorrect trace indexing (bsc#940913). - ipr: Fix invalid array indexing for HRRQ (bsc#940913). - ipv6: fix tunnel error handling (bsc#952579). - ipvs: drop first packet to dead server (bsc#946078). - ipvs: Fix reuse connection if real server is dead (bnc#945827). - kernel: correct uc_sigmask of the compat signal frame (bnc#946214, LTC#130124). - kernel: fix incorrect use of DIAG44 in continue_trylock_relax() (bnc#946214, LTC#132100). - kexec: Fix race between panic() and crash_kexec() called directly (bnc#937444). - keys: Fix race between key destruction and finding a keyring by name (bsc#951440). - ktime: add ktime_after and ktime_before helpe (bsc#904348). - lib/string.c: introduce memchr_inv() (bnc#930788). - lpfc: Fix cq_id masking problem (bsc#944677). - macvlan: Support bonding events bsc#948521 - Make sure XPRT_CONNECTING gets cleared when needed (bsc#946309). - memory-failure: do code refactor of soft_offline_page() (bnc#947957, VM Functionality). - memory-failure: fix an error of mce_bad_pages statistics (bnc#947957, VM Functionality). - memory-failure: use num_poisoned_pages instead of mce_bad_pages (bnc#947957, VM Functionality). - memory-hotplug: update mce_bad_pages when removing the memory (bnc#947957, VM Functionality). - mm: exclude reserved pages from dirtyable memory 32b fix (bnc#940017, bnc#949298). - mm: fix GFP_THISNODE callers and clarify (bsc#954950, VM Functionality). - mm/memory-failure.c: fix wrong num_poisoned_pages in handling memory error on thp (bnc#947957, VM Functionality). - mm/memory-failure.c: recheck PageHuge() after hugetlb page migrate successfully (bnc#947957, VM Functionality). - mm/migrate.c: pair unlock_page() and lock_page() when migrating huge pages (bnc#947957, VM Functionality). - mm: remove GFP_THISNODE (bsc#954950, VM Functionality). - mm: sl[au]b: add knowledge of PFMEMALLOC reserve pages (Swap over NFS (fate#304949)). - Modified -rt patches: 343 of 434, noise elided. - net/core: Add VF link state control policy (bsc#950298). - netfilter: xt_recent: fix namespace destroy path (bsc#879378). - NFSv4: Fix two infinite loops in the mount code (bsc#954628). - panic/x86: Allow cpus to save registers even if they (bnc#940946). - panic/x86: Fix re-entrance problem due to panic on (bnc#937444). - pci: Add dev_flags bit to access VPD through function 0 (bnc#943786). - pci: Add VPD function 0 quirk for Intel Ethernet devices (bnc#943786). - pci: Clear NumVFs when disabling SR-IOV in sriov_init() (bnc#952084). - pci: delay configuration of SRIOV capability (bnc#952084). - pci: Refresh First VF Offset and VF Stride when updating NumVFs (bnc#952084). - pci: set pci sriov page size before reading SRIOV BAR (bnc#952084). - pci: Update NumVFs register when disabling SR-IOV (bnc#952084). - pktgen: clean up ktime_t helpers (bsc#904348). - qla2xxx: do not clear slot in outstanding cmd array (bsc#944993). - qla2xxx: Do not reset adapter if SRB handle is in range (bsc#944993). - qla2xxx: Remove decrement of sp reference count in abort handler (bsc#944993). - qla2xxx: Remove unavailable firmware files (bsc#921081). - qlge: Fix qlge_update_hw_vlan_features to handle if interface is down (bsc#930835). - quota: Fix deadlock with suspend and quotas (bsc#935123). - rcu: Eliminate deadlock between CPU hotplug and expedited grace periods (bsc#949706). - Refresh patches.xen/1282-usbback-limit-copying.patch (bsc#941202). - rtc: cmos: Cancel alarm timer if alarm time is equal to now+1 seconds (bsc#930145). - rtnetlink: Fix VF IFLA policy (bsc#950298). - rtnetlink: fix VF info size (bsc#950298). - s390/dasd: fix disconnected device with valid path mask (bnc#946214, LTC#132707). - s390/dasd: fix invalid PAV assignment after suspend/resume (bnc#946214, LTC#132706). - s390/dasd: fix list_del corruption after lcu changes (bnc#954984, LTC#133077). - s390/pci: handle events for unused functions (bnc#946214, LTC#130628). - s390/pci: improve handling of hotplug event 0x301 (bnc#946214, LTC#130628). - s390/pci: improve state check when processing hotplug events (bnc#946214, LTC#130628). - sched/core: Fix task and run queue sched_info::run_delay inconsistencies (bnc#949100). - scsi: hosts: update to use ida_simple for host_no (bsc#939926) - sg: fix read() error reporting (bsc#926774). - sunrpc: refactor rpcauth_checkverf error returns (bsc#955673). - Update patches.fixes/fanotify-fix-deadlock-during-thread-exit.patch (bsc#935053, bsc#926709). Add bug reference. - usbback: correct copy length for partial transfers (bsc#941202). - usbvision fix overflow of interfaces array (bnc#950998). - usb: xhci: apply XHCI_AVOID_BEI quirk to all Intel xHCI controllers (bnc#944989). - veth: extend device features (bsc#879381). - vfs: Provide function to get superblock and wait for it to thaw (bsc#935123). - vmxnet3: adjust ring sizes when interface is down (bsc#950750). - vmxnet3: fix ethtool ring buffer size setting (bsc#950750). - writeback: Skip writeback for frozen filesystem (bsc#935123). - x86/evtchn: make use of PHYSDEVOP_map_pirq. - x86: mm: drop TLB flush from ptep_set_access_flags (bsc#948330). - x86: mm: only do a local tlb flush in ptep_set_access_flags() (bsc#948330). - x86, pageattr: Prevent overflow in slow_virt_to_phys() for X86_PAE (fate#317533, bnc#937256). - xen: x86, pageattr: Prevent overflow in slow_virt_to_phys() for X86_PAE (fate#317533, bnc#937256). - xfs: add background scanning to clear eofblocks inodes (bnc#930788). - xfs: add EOFBLOCKS inode tagging/untagging (bnc#930788). - xfs: add inode id filtering to eofblocks scan (bnc#930788). - xfs: add minimum file size filtering to eofblocks scan (bnc#930788). - xfs: add XFS_IOC_FREE_EOFBLOCKS ioctl (bnc#930788). - xfs: create function to scan and clear EOFBLOCKS inodes (bnc#930788). - xfs: create helper to check whether to free eofblocks on inode (bnc#930788). - xfs: Fix lost direct IO write in the last block (bsc#949744). - xfs: Fix softlockup in xfs_inode_ag_walk() (bsc#948347). - xfs: introduce a common helper xfs_icluster_size_fsb (bsc#932805). - xfs: make xfs_free_eofblocks() non-static, return EAGAIN on trylock failure (bnc#930788). - xfs: support a tag-based inode_ag_iterator (bnc#930788). - xfs: support multiple inode id filtering in eofblocks scan (bnc#930788). - xfs: use xfs_icluster_size_fsb in xfs_bulkstat (bsc#932805). - xfs: use xfs_icluster_size_fsb in xfs_ialloc_inode_init (bsc#932805). - xfs: use xfs_icluster_size_fsb in xfs_ifree_cluster (bsc#932805). - xfs: use xfs_icluster_size_fsb in xfs_imap (bsc#932805). - xhci: Add spurious wakeup quirk for LynxPoint-LP controllers (bnc#949981). - xhci: Calculate old endpoints correctly on device reset (bnc#944831). - xhci: change xhci 1.0 only restrictions to support xhci 1.1 (bnc#949502). - xhci: fix isoc endpoint dequeue from advancing too far on transaction error (bnc#944837). - xhci: For streams the css flag most be read from the stream-ctx on ep stop (bnc#945691). - xhci: silence TD warning (bnc#939955). - xhci: use uninterruptible sleep for waiting for internal operations (bnc#939955). Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Real Time Extension 11-SP4: zypper in -t patch slertesp4-kernel-rt-20151204-12284=1 - SUSE Linux Enterprise Debuginfo 11-SP4: zypper in -t patch dbgsp4-kernel-rt-20151204-12284=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Real Time Extension 11-SP4 (x86_64): kernel-rt-3.0.101.rt130-48.1 kernel-rt-base-3.0.101.rt130-48.1 kernel-rt-devel-3.0.101.rt130-48.1 kernel-rt_trace-3.0.101.rt130-48.1 kernel-rt_trace-base-3.0.101.rt130-48.1 kernel-rt_trace-devel-3.0.101.rt130-48.1 kernel-source-rt-3.0.101.rt130-48.1 kernel-syms-rt-3.0.101.rt130-48.1 - SUSE Linux Enterprise Debuginfo 11-SP4 (x86_64): kernel-rt-debuginfo-3.0.101.rt130-48.1 kernel-rt-debugsource-3.0.101.rt130-48.1 kernel-rt_debug-debuginfo-3.0.101.rt130-48.1 kernel-rt_debug-debugsource-3.0.101.rt130-48.1 kernel-rt_trace-debuginfo-3.0.101.rt130-48.1 kernel-rt_trace-debugsource-3.0.101.rt130-48.1 References: https://www.suse.com/security/cve/CVE-2015-0272.html https://www.suse.com/security/cve/CVE-2015-5157.html https://www.suse.com/security/cve/CVE-2015-5307.html https://www.suse.com/security/cve/CVE-2015-6937.html https://www.suse.com/security/cve/CVE-2015-7509.html https://www.suse.com/security/cve/CVE-2015-7799.html https://www.suse.com/security/cve/CVE-2015-7872.html https://www.suse.com/security/cve/CVE-2015-7990.html https://www.suse.com/security/cve/CVE-2015-8104.html https://www.suse.com/security/cve/CVE-2015-8215.html https://bugzilla.suse.com/814440 https://bugzilla.suse.com/879378 https://bugzilla.suse.com/879381 https://bugzilla.suse.com/900610 https://bugzilla.suse.com/904348 https://bugzilla.suse.com/904965 https://bugzilla.suse.com/921081 https://bugzilla.suse.com/926709 https://bugzilla.suse.com/926774 https://bugzilla.suse.com/930145 https://bugzilla.suse.com/930770 https://bugzilla.suse.com/930788 https://bugzilla.suse.com/930835 https://bugzilla.suse.com/932805 https://bugzilla.suse.com/935053 https://bugzilla.suse.com/935123 https://bugzilla.suse.com/935757 https://bugzilla.suse.com/937256 https://bugzilla.suse.com/937444 https://bugzilla.suse.com/937969 https://bugzilla.suse.com/937970 https://bugzilla.suse.com/938706 https://bugzilla.suse.com/939207 https://bugzilla.suse.com/939826 https://bugzilla.suse.com/939926 https://bugzilla.suse.com/939955 https://bugzilla.suse.com/940017 https://bugzilla.suse.com/940913 https://bugzilla.suse.com/940946 https://bugzilla.suse.com/941202 https://bugzilla.suse.com/942938 https://bugzilla.suse.com/943786 https://bugzilla.suse.com/944677 https://bugzilla.suse.com/944831 https://bugzilla.suse.com/944837 https://bugzilla.suse.com/944989 https://bugzilla.suse.com/944993 https://bugzilla.suse.com/945691 https://bugzilla.suse.com/945825 https://bugzilla.suse.com/945827 https://bugzilla.suse.com/946078 https://bugzilla.suse.com/946214 https://bugzilla.suse.com/946309 https://bugzilla.suse.com/947957 https://bugzilla.suse.com/948330 https://bugzilla.suse.com/948347 https://bugzilla.suse.com/948521 https://bugzilla.suse.com/949100 https://bugzilla.suse.com/949298 https://bugzilla.suse.com/949502 https://bugzilla.suse.com/949706 https://bugzilla.suse.com/949744 https://bugzilla.suse.com/949936 https://bugzilla.suse.com/949981 https://bugzilla.suse.com/950298 https://bugzilla.suse.com/950750 https://bugzilla.suse.com/950998 https://bugzilla.suse.com/951440 https://bugzilla.suse.com/952084 https://bugzilla.suse.com/952384 https://bugzilla.suse.com/952579 https://bugzilla.suse.com/952976 https://bugzilla.suse.com/953527 https://bugzilla.suse.com/953799 https://bugzilla.suse.com/953980 https://bugzilla.suse.com/954404 https://bugzilla.suse.com/954628 https://bugzilla.suse.com/954950 https://bugzilla.suse.com/954984 https://bugzilla.suse.com/955354 https://bugzilla.suse.com/955673 https://bugzilla.suse.com/956709 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2015:2347-1: important: Security update for Chromium
by opensuse-security＠opensuse.org 23 Dec '15

23 Dec '15

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2347-1 Rating: important References: #959458 Cross-References: CVE-2015-6792 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Chromium was updated to 47.0.2525.106 to fix security issues. Vulnerabilities were fixed under the following collective identifier: * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2015-939=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): chromedriver-47.0.2526.106-38.1 chromedriver-debuginfo-47.0.2526.106-38.1 chromium-47.0.2526.106-38.1 chromium-debuginfo-47.0.2526.106-38.1 chromium-debugsource-47.0.2526.106-38.1 chromium-desktop-gnome-47.0.2526.106-38.1 chromium-desktop-kde-47.0.2526.106-38.1 chromium-ffmpegsumo-47.0.2526.106-38.1 chromium-ffmpegsumo-debuginfo-47.0.2526.106-38.1 References: https://www.suse.com/security/cve/CVE-2015-6792.html https://bugzilla.suse.com/959458 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2015:2346-1: important: Security update for Chromium
by opensuse-security＠opensuse.org 23 Dec '15

23 Dec '15

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2346-1 Rating: important References: #959458 Cross-References: CVE-2015-6792 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Chromium was updated to 47.0.2525.106 to fix security issues. Vulnerabilities were fixed under the following collective identifier: * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-939=1 - openSUSE 13.2: zypper in -t patch openSUSE-2015-939=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-939=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): chromedriver-47.0.2526.106-10.1 chromedriver-debuginfo-47.0.2526.106-10.1 chromium-47.0.2526.106-10.1 chromium-debuginfo-47.0.2526.106-10.1 chromium-debugsource-47.0.2526.106-10.1 chromium-desktop-gnome-47.0.2526.106-10.1 chromium-desktop-kde-47.0.2526.106-10.1 chromium-ffmpegsumo-47.0.2526.106-10.1 chromium-ffmpegsumo-debuginfo-47.0.2526.106-10.1 - openSUSE 13.2 (i586 x86_64): chromedriver-47.0.2526.106-64.1 chromedriver-debuginfo-47.0.2526.106-64.1 chromium-47.0.2526.106-64.1 chromium-debuginfo-47.0.2526.106-64.1 chromium-debugsource-47.0.2526.106-64.1 chromium-desktop-gnome-47.0.2526.106-64.1 chromium-desktop-kde-47.0.2526.106-64.1 chromium-ffmpegsumo-47.0.2526.106-64.1 chromium-ffmpegsumo-debuginfo-47.0.2526.106-64.1 - openSUSE 13.1 (i586 x86_64): chromedriver-47.0.2526.106-119.1 chromedriver-debuginfo-47.0.2526.106-119.1 chromium-47.0.2526.106-119.1 chromium-debuginfo-47.0.2526.106-119.1 chromium-debugsource-47.0.2526.106-119.1 chromium-desktop-gnome-47.0.2526.106-119.1 chromium-desktop-kde-47.0.2526.106-119.1 chromium-ffmpegsumo-47.0.2526.106-119.1 chromium-ffmpegsumo-debuginfo-47.0.2526.106-119.1 References: https://www.suse.com/security/cve/CVE-2015-6792.html https://bugzilla.suse.com/959458 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:2341-1: important: Security update for bind
by opensuse-security＠opensuse.org 22 Dec '15

22 Dec '15

SUSE Security Update: Security update for bind ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:2341-1 Rating: important References: #958861 Cross-References: CVE-2015-8000 Affected Products: SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Desktop 12 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update fixes the following security issue: - CVE-2015-8000: Fix remote denial of service by misparsing incoming responses (bsc#958861). Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 12: zypper in -t patch SUSE-SLE-SDK-12-2015-1009=1 - SUSE Linux Enterprise Server 12: zypper in -t patch SUSE-SLE-SERVER-12-2015-1009=1 - SUSE Linux Enterprise Desktop 12: zypper in -t patch SUSE-SLE-DESKTOP-12-2015-1009=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 12 (ppc64le s390x x86_64): bind-debuginfo-9.9.6P1-28.6.1 bind-debugsource-9.9.6P1-28.6.1 bind-devel-9.9.6P1-28.6.1 - SUSE Linux Enterprise Server 12 (ppc64le s390x x86_64): bind-9.9.6P1-28.6.1 bind-chrootenv-9.9.6P1-28.6.1 bind-debuginfo-9.9.6P1-28.6.1 bind-debugsource-9.9.6P1-28.6.1 bind-libs-9.9.6P1-28.6.1 bind-libs-debuginfo-9.9.6P1-28.6.1 bind-utils-9.9.6P1-28.6.1 bind-utils-debuginfo-9.9.6P1-28.6.1 - SUSE Linux Enterprise Server 12 (s390x x86_64): bind-libs-32bit-9.9.6P1-28.6.1 bind-libs-debuginfo-32bit-9.9.6P1-28.6.1 - SUSE Linux Enterprise Server 12 (noarch): bind-doc-9.9.6P1-28.6.1 - SUSE Linux Enterprise Desktop 12 (x86_64): bind-debuginfo-9.9.6P1-28.6.1 bind-debugsource-9.9.6P1-28.6.1 bind-libs-32bit-9.9.6P1-28.6.1 bind-libs-9.9.6P1-28.6.1 bind-libs-debuginfo-32bit-9.9.6P1-28.6.1 bind-libs-debuginfo-9.9.6P1-28.6.1 bind-utils-9.9.6P1-28.6.1 bind-utils-debuginfo-9.9.6P1-28.6.1 References: https://www.suse.com/security/cve/CVE-2015-8000.html https://bugzilla.suse.com/958861 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:2340-1: important: Security update for bind
by opensuse-security＠opensuse.org 22 Dec '15

22 Dec '15

SUSE Security Update: Security update for bind ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:2340-1 Rating: important References: #923281 #958861 Cross-References: CVE-2015-8000 Affected Products: SUSE Linux Enterprise Software Development Kit 11-SP4 SUSE Linux Enterprise Software Development Kit 11-SP3 SUSE Linux Enterprise Server for VMWare 11-SP3 SUSE Linux Enterprise Server 11-SP4 SUSE Linux Enterprise Server 11-SP3 SUSE Linux Enterprise Server 11-SP2-LTSS SUSE Linux Enterprise Desktop 11-SP4 SUSE Linux Enterprise Desktop 11-SP3 SUSE Linux Enterprise Debuginfo 11-SP4 SUSE Linux Enterprise Debuginfo 11-SP3 SUSE Linux Enterprise Debuginfo 11-SP2 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update fixes the following security issue: - CVE-2015-8000: Fix remote denial of service by misparsing incoming responses (bsc#958861). It also fixes a bug: - Fix a regression in caching entries with a TTL of 0 (bsc#923281). Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11-SP4: zypper in -t patch sdksp4-bind-12280=1 - SUSE Linux Enterprise Software Development Kit 11-SP3: zypper in -t patch sdksp3-bind-12280=1 - SUSE Linux Enterprise Server for VMWare 11-SP3: zypper in -t patch slessp3-bind-12280=1 - SUSE Linux Enterprise Server 11-SP4: zypper in -t patch slessp4-bind-12280=1 - SUSE Linux Enterprise Server 11-SP3: zypper in -t patch slessp3-bind-12280=1 - SUSE Linux Enterprise Server 11-SP2-LTSS: zypper in -t patch slessp2-bind-12280=1 - SUSE Linux Enterprise Desktop 11-SP4: zypper in -t patch sledsp4-bind-12280=1 - SUSE Linux Enterprise Desktop 11-SP3: zypper in -t patch sledsp3-bind-12280=1 - SUSE Linux Enterprise Debuginfo 11-SP4: zypper in -t patch dbgsp4-bind-12280=1 - SUSE Linux Enterprise Debuginfo 11-SP3: zypper in -t patch dbgsp3-bind-12280=1 - SUSE Linux Enterprise Debuginfo 11-SP2: zypper in -t patch dbgsp2-bind-12280=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11-SP4 (i586 ia64 ppc64 s390x x86_64): bind-devel-9.9.6P1-0.19.1 - SUSE Linux Enterprise Software Development Kit 11-SP4 (ppc64): bind-devel-32bit-9.9.6P1-0.19.1 - SUSE Linux Enterprise Software Development Kit 11-SP3 (i586 ia64 ppc64 s390x x86_64): bind-devel-9.9.6P1-0.19.1 - SUSE Linux Enterprise Software Development Kit 11-SP3 (ppc64): bind-devel-32bit-9.9.6P1-0.19.1 - SUSE Linux Enterprise Server for VMWare 11-SP3 (i586 x86_64): bind-9.9.6P1-0.19.1 bind-chrootenv-9.9.6P1-0.19.1 bind-doc-9.9.6P1-0.19.1 bind-libs-9.9.6P1-0.19.1 bind-utils-9.9.6P1-0.19.1 - SUSE Linux Enterprise Server for VMWare 11-SP3 (x86_64): bind-libs-32bit-9.9.6P1-0.19.1 - SUSE Linux Enterprise Server 11-SP4 (i586 ia64 ppc64 s390x x86_64): bind-9.9.6P1-0.19.1 bind-chrootenv-9.9.6P1-0.19.1 bind-doc-9.9.6P1-0.19.1 bind-libs-9.9.6P1-0.19.1 bind-utils-9.9.6P1-0.19.1 - SUSE Linux Enterprise Server 11-SP4 (ppc64 s390x x86_64): bind-libs-32bit-9.9.6P1-0.19.1 - SUSE Linux Enterprise Server 11-SP4 (ia64): bind-libs-x86-9.9.6P1-0.19.1 - SUSE Linux Enterprise Server 11-SP3 (i586 ia64 ppc64 s390x x86_64): bind-9.9.6P1-0.19.1 bind-chrootenv-9.9.6P1-0.19.1 bind-doc-9.9.6P1-0.19.1 bind-libs-9.9.6P1-0.19.1 bind-utils-9.9.6P1-0.19.1 - SUSE Linux Enterprise Server 11-SP3 (ppc64 s390x x86_64): bind-libs-32bit-9.9.6P1-0.19.1 - SUSE Linux Enterprise Server 11-SP3 (ia64): bind-libs-x86-9.9.6P1-0.19.1 - SUSE Linux Enterprise Server 11-SP2-LTSS (i586 s390x x86_64): bind-9.9.6P1-0.19.1 bind-chrootenv-9.9.6P1-0.19.1 bind-devel-9.9.6P1-0.19.1 bind-doc-9.9.6P1-0.19.1 bind-libs-9.9.6P1-0.19.1 bind-utils-9.9.6P1-0.19.1 - SUSE Linux Enterprise Server 11-SP2-LTSS (s390x x86_64): bind-libs-32bit-9.9.6P1-0.19.1 - SUSE Linux Enterprise Desktop 11-SP4 (i586 x86_64): bind-libs-9.9.6P1-0.19.1 bind-utils-9.9.6P1-0.19.1 - SUSE Linux Enterprise Desktop 11-SP4 (x86_64): bind-libs-32bit-9.9.6P1-0.19.1 - SUSE Linux Enterprise Desktop 11-SP3 (i586 x86_64): bind-libs-9.9.6P1-0.19.1 bind-utils-9.9.6P1-0.19.1 - SUSE Linux Enterprise Desktop 11-SP3 (x86_64): bind-libs-32bit-9.9.6P1-0.19.1 - SUSE Linux Enterprise Debuginfo 11-SP4 (i586 ia64 ppc64 s390x x86_64): bind-debuginfo-9.9.6P1-0.19.1 bind-debugsource-9.9.6P1-0.19.1 - SUSE Linux Enterprise Debuginfo 11-SP3 (i586 ia64 ppc64 s390x x86_64): bind-debuginfo-9.9.6P1-0.19.1 bind-debugsource-9.9.6P1-0.19.1 - SUSE Linux Enterprise Debuginfo 11-SP2 (i586 s390x x86_64): bind-debuginfo-9.9.6P1-0.19.1 bind-debugsource-9.9.6P1-0.19.1 References: https://www.suse.com/security/cve/CVE-2015-8000.html https://bugzilla.suse.com/923281 https://bugzilla.suse.com/958861 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:2339-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 22 Dec '15

22 Dec '15

SUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:2339-1 Rating: important References: #814440 #879378 #879381 #900610 #904348 #904965 #921081 #926774 #930145 #930770 #930788 #930835 #932805 #935123 #935757 #937256 #937444 #938706 #939826 #939926 #939955 #940017 #940913 #940946 #941202 #942938 #943786 #944296 #944677 #944831 #944837 #944989 #944993 #945691 #945825 #945827 #946078 #946214 #946309 #947957 #948330 #948347 #948521 #949100 #949298 #949502 #949706 #949744 #949936 #949981 #950298 #950750 #950998 #951440 #952084 #952384 #952579 #952976 #953527 #953799 #953980 #954404 #954628 #954950 #954984 #955673 #956709 Cross-References: CVE-2015-0272 CVE-2015-5157 CVE-2015-5307 CVE-2015-6937 CVE-2015-7509 CVE-2015-7799 CVE-2015-7872 CVE-2015-7990 CVE-2015-8104 CVE-2015-8215 Affected Products: SUSE Linux Enterprise Software Development Kit 11-SP4 SUSE Linux Enterprise Server 11-SP4 SUSE Linux Enterprise Server 11-EXTRA SUSE Linux Enterprise Desktop 11-SP4 SUSE Linux Enterprise Debuginfo 11-SP4 ______________________________________________________________________________ An update that solves 10 vulnerabilities and has 57 fixes is now available. Description: The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes. Following security bugs were fixed: - CVE-2015-7509: Mounting ext4 filesystems in no-journal mode could hav lead to a system crash (bsc#956709). - CVE-2015-7799: The slhc_init function in drivers/net/slip/slhc.c in the Linux kernel did not ensure that certain slot numbers are valid, which allowed local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted PPPIOCSMAXCID ioctl call (bnc#949936). - CVE-2015-8104: The KVM subsystem in the Linux kernel allowed guest OS users to cause a denial of service (host OS panic or hang) by triggering many #DB (aka Debug) exceptions, related to svm.c (bnc#954404). - CVE-2015-5307: The KVM subsystem in the Linux kernel allowed guest OS users to cause a denial of service (host OS panic or hang) by triggering many #AC (aka Alignment Check) exceptions, related to svm.c and vmx.c (bnc#953527). - CVE-2015-7990: RDS: There was no verification that an underlying transport exists when creating a connection, causing usage of a NULL pointer (bsc#952384). - CVE-2015-5157: arch/x86/entry/entry_64.S in the Linux kernel on the x86_64 platform mishandled IRET faults in processing NMIs that occurred during userspace execution, which might have allowed local users to gain privileges by triggering an NMI (bnc#938706). - CVE-2015-7872: The key_gc_unused_keys function in security/keys/gc.c in the Linux kernel allowed local users to cause a denial of service (OOPS) via crafted keyctl commands (bnc#951440). - CVE-2015-0272: Missing checks allowed remote attackers to cause a denial of service (IPv6 traffic disruption) via a crafted MTU value in an IPv6 Router Advertisement (RA) message, a different vulnerability than CVE-2015-8215 (bnc#944296). - CVE-2015-6937: The __rds_conn_create function in net/rds/connection.c in the Linux kernel allowed local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by using a socket that was not properly bound (bnc#945825). The following non-security bugs were fixed: - ALSA: hda - Disable 64bit address for Creative HDA controllers (bnc#814440). - Driver: Vmxnet3: Fix ethtool -S to return correct rx queue stats (bsc#950750). - Drivers: hv: do not do hypercalls when hypercall_page is NULL. - Drivers: hv: kvp: move poll_channel() to hyperv_vmbus.h. - Drivers: hv: util: move kvp/vss function declarations to hyperv_vmbus.h. - Drivers: hv: vmbus: Get rid of some unused definitions. - Drivers: hv: vmbus: Implement the protocol for tearing down vmbus state. - Drivers: hv: vmbus: add special crash handler (bnc#930770). - Drivers: hv: vmbus: add special kexec handler. - Drivers: hv: vmbus: kill tasklets on module unload. - Drivers: hv: vmbus: prefer "^A" notification chain to 'panic'. - Drivers: hv: vmbus: remove hv_synic_free_cpu() call from hv_synic_cleanup(). - Drivers: hv: vmbus: unregister panic notifier on module unload. - IB/srp: Avoid skipping srp_reset_host() after a transport error (bsc#904965). - IB/srp: Fix a sporadic crash triggered by cable pulling (bsc#904965). - KEYS: Fix race between key destruction and finding a keyring by name (bsc#951440). - Make sure XPRT_CONNECTING gets cleared when needed (bsc#946309). - NFSv4: Fix two infinite loops in the mount code (bsc#954628). - PCI: Add VPD function 0 quirk for Intel Ethernet devices (bnc#943786). - PCI: Add dev_flags bit to access VPD through function 0 (bnc#943786). - PCI: Clear NumVFs when disabling SR-IOV in sriov_init() (bnc#952084). - PCI: Refresh First VF Offset and VF Stride when updating NumVFs (bnc#952084). - PCI: Update NumVFs register when disabling SR-IOV (bnc#952084). - PCI: delay configuration of SRIOV capability (bnc#952084). - PCI: set pci sriov page size before reading SRIOV BAR (bnc#952084). - SCSI: hosts: update to use ida_simple for host_no (bsc#939926) - SUNRPC refactor rpcauth_checkverf error returns (bsc#955673). - af_iucv: avoid path quiesce of severed path in shutdown() (bnc#946214). - ahci: Add Device ID for Intel Sunrise Point PCH (bsc#953799). - blktap: also call blkif_disconnect() when frontend switched to closed (bsc#952976). - blktap: refine mm tracking (bsc#952976). - cachefiles: Avoid deadlocks with fs freezing (bsc#935123). - dm sysfs: introduce ability to add writable attributes (bsc#904348). - dm-snap: avoid deadock on s->lock when a read is split (bsc#939826). - dm: do not start current request if it would've merged with the previous (bsc#904348). - dm: impose configurable deadline for dm_request_fn's merge heuristic (bsc#904348). - drm/i915: Avoid race of intel_crt_detect_hotplug() with HPD interrupt, v2 (bsc#942938). - drm/i915: Fix DDC probe for passive adapters (bsc#900610, fdo#85924). - drm/i915: add hotplug activation period to hotplug update mask (bsc#953980). - fix lpfc_send_rscn_event allocation size claims bnc#935757 - fs: Avoid deadlocks of fsync_bdev() and fs freezing (bsc#935123). - fs: Fix deadlocks between sync and fs freezing (bsc#935123). - hugetlb: simplify migrate_huge_page() (bnc#947957). - hwpoison, hugetlb: lock_page/unlock_page does not match for handling a free hugepage (bnc#947957,). - ipr: Fix incorrect trace indexing (bsc#940913). - ipr: Fix invalid array indexing for HRRQ (bsc#940913). - ipv6: fix tunnel error handling (bsc#952579). - ipvs: Fix reuse connection if real server is dead (bnc#945827). - ipvs: drop first packet to dead server (bsc#946078). - kernel: correct uc_sigmask of the compat signal frame (bnc#946214). - kernel: fix incorrect use of DIAG44 in continue_trylock_relax() (bnc#946214). - kexec: Fix race between panic() and crash_kexec() called directly (bnc#937444). - ktime: add ktime_after and ktime_before helpe (bsc#904348). - lib/string.c: introduce memchr_inv() (bnc#930788). - lpfc: Fix cq_id masking problem (bsc#944677). - macvlan: Support bonding events bsc#948521 - memory-failure: do code refactor of soft_offline_page() (bnc#947957). - memory-failure: fix an error of mce_bad_pages statistics (bnc#947957). - memory-failure: use num_poisoned_pages instead of mce_bad_pages (bnc#947957). - memory-hotplug: update mce_bad_pages when removing the memory (bnc#947957). - mm/memory-failure.c: fix wrong num_poisoned_pages in handling memory error on thp (bnc#947957). - mm/memory-failure.c: recheck PageHuge() after hugetlb page migrate successfully (bnc#947957). - mm/migrate.c: pair unlock_page() and lock_page() when migrating huge pages (bnc#947957). - mm: exclude reserved pages from dirtyable memory 32b fix (bnc#940017, bnc#949298). - mm: fix GFP_THISNODE callers and clarify (bsc#954950). - mm: remove GFP_THISNODE (bsc#954950). - mm: sl[au]b: add knowledge of PFMEMALLOC reserve pages (Swap over NFS). - net/core: Add VF link state control policy (bsc#950298). - netfilter: xt_recent: fix namespace destroy path (bsc#879378). - panic/x86: Allow cpus to save registers even if they (bnc#940946). - panic/x86: Fix re-entrance problem due to panic on (bnc#937444). - pktgen: clean up ktime_t helpers (bsc#904348). - qla2xxx: Do not reset adapter if SRB handle is in range (bsc#944993). - qla2xxx: Remove decrement of sp reference count in abort handler (bsc#944993). - qla2xxx: Remove unavailable firmware files (bsc#921081). - qla2xxx: do not clear slot in outstanding cmd array (bsc#944993). - qlge: Fix qlge_update_hw_vlan_features to handle if interface is down (bsc#930835). - quota: Fix deadlock with suspend and quotas (bsc#935123). - rcu: Eliminate deadlock between CPU hotplug and expedited grace periods (bsc#949706). - rtc: cmos: Cancel alarm timer if alarm time is equal to now+1 seconds (bsc#930145). - rtnetlink: Fix VF IFLA policy (bsc#950298). - rtnetlink: fix VF info size (bsc#950298). - s390/dasd: fix disconnected device with valid path mask (bnc#946214). - s390/dasd: fix invalid PAV assignment after suspend/resume (bnc#946214). - s390/dasd: fix list_del corruption after lcu changes (bnc#954984). - s390/pci: handle events for unused functions (bnc#946214). - s390/pci: improve handling of hotplug event 0x301 (bnc#946214). - s390/pci: improve state check when processing hotplug events (bnc#946214). - sched/core: Fix task and run queue sched_info::run_delay inconsistencies (bnc#949100). - sg: fix read() error reporting (bsc#926774). - usb: xhci: apply XHCI_AVOID_BEI quirk to all Intel xHCI controllers (bnc#944989). - usbback: correct copy length for partial transfers (bsc#941202). - usbvision fix overflow of interfaces array (bnc#950998). - veth: extend device features (bsc#879381). - vfs: Provide function to get superblock and wait for it to thaw (bsc#935123). - vmxnet3: adjust ring sizes when interface is down (bsc#950750). - vmxnet3: fix ethtool ring buffer size setting (bsc#950750). - writeback: Skip writeback for frozen filesystem (bsc#935123). - x86, pageattr: Prevent overflow in slow_virt_to_phys() for X86_PAE (bnc#937256). - x86/evtchn: make use of PHYSDEVOP_map_pirq. - x86: mm: drop TLB flush from ptep_set_access_flags (bsc#948330). - x86: mm: only do a local tlb flush in ptep_set_access_flags() (bsc#948330). - xen: x86, pageattr: Prevent overflow in slow_virt_to_phys() for X86_PAE (bnc#937256). - xfs: Fix lost direct IO write in the last block (bsc#949744). - xfs: Fix softlockup in xfs_inode_ag_walk() (bsc#948347). - xfs: add EOFBLOCKS inode tagging/untagging (bnc#930788). - xfs: add XFS_IOC_FREE_EOFBLOCKS ioctl (bnc#930788). - xfs: add background scanning to clear eofblocks inodes (bnc#930788). - xfs: add inode id filtering to eofblocks scan (bnc#930788). - xfs: add minimum file size filtering to eofblocks scan (bnc#930788). - xfs: create function to scan and clear EOFBLOCKS inodes (bnc#930788). - xfs: create helper to check whether to free eofblocks on inode (bnc#930788). - xfs: introduce a common helper xfs_icluster_size_fsb (bsc#932805). - xfs: make xfs_free_eofblocks() non-static, return EAGAIN on trylock failure (bnc#930788). - xfs: support a tag-based inode_ag_iterator (bnc#930788). - xfs: support multiple inode id filtering in eofblocks scan (bnc#930788). - xfs: use xfs_icluster_size_fsb in xfs_bulkstat (bsc#932805). - xfs: use xfs_icluster_size_fsb in xfs_ialloc_inode_init (bsc#932805). - xfs: use xfs_icluster_size_fsb in xfs_ifree_cluster (bsc#932805). - xfs: use xfs_icluster_size_fsb in xfs_imap (bsc#932805). - xhci: Add spurious wakeup quirk for LynxPoint-LP controllers (bnc#949981). - xhci: Calculate old endpoints correctly on device reset (bnc#944831). - xhci: For streams the css flag most be read from the stream-ctx on ep stop (bnc#945691). - xhci: change xhci 1.0 only restrictions to support xhci 1.1 (bnc#949502). - xhci: fix isoc endpoint dequeue from advancing too far on transaction error (bnc#944837). - xhci: silence TD warning (bnc#939955). - xhci: use uninterruptible sleep for waiting for internal operations (bnc#939955). Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11-SP4: zypper in -t patch sdksp4-kernel-source-12278=1 - SUSE Linux Enterprise Server 11-SP4: zypper in -t patch slessp4-kernel-source-12278=1 - SUSE Linux Enterprise Server 11-EXTRA: zypper in -t patch slexsp3-kernel-source-12278=1 - SUSE Linux Enterprise Desktop 11-SP4: zypper in -t patch sledsp4-kernel-source-12278=1 - SUSE Linux Enterprise Debuginfo 11-SP4: zypper in -t patch dbgsp4-kernel-source-12278=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11-SP4 (noarch): kernel-docs-3.0.101-68.2 - SUSE Linux Enterprise Server 11-SP4 (i586 ia64 ppc64 s390x x86_64): kernel-default-3.0.101-68.1 kernel-default-base-3.0.101-68.1 kernel-default-devel-3.0.101-68.1 kernel-source-3.0.101-68.1 kernel-syms-3.0.101-68.1 kernel-trace-3.0.101-68.1 kernel-trace-base-3.0.101-68.1 kernel-trace-devel-3.0.101-68.1 - SUSE Linux Enterprise Server 11-SP4 (i586 x86_64): kernel-ec2-3.0.101-68.1 kernel-ec2-base-3.0.101-68.1 kernel-ec2-devel-3.0.101-68.1 kernel-xen-3.0.101-68.1 kernel-xen-base-3.0.101-68.1 kernel-xen-devel-3.0.101-68.1 - SUSE Linux Enterprise Server 11-SP4 (s390x): kernel-default-man-3.0.101-68.1 - SUSE Linux Enterprise Server 11-SP4 (ppc64): kernel-ppc64-3.0.101-68.1 kernel-ppc64-base-3.0.101-68.1 kernel-ppc64-devel-3.0.101-68.1 - SUSE Linux Enterprise Server 11-SP4 (i586): kernel-pae-3.0.101-68.1 kernel-pae-base-3.0.101-68.1 kernel-pae-devel-3.0.101-68.1 - SUSE Linux Enterprise Server 11-EXTRA (i586 ia64 ppc64 s390x x86_64): kernel-default-extra-3.0.101-68.1 - SUSE Linux Enterprise Server 11-EXTRA (i586 x86_64): kernel-xen-extra-3.0.101-68.1 - SUSE Linux Enterprise Server 11-EXTRA (x86_64): kernel-trace-extra-3.0.101-68.1 - SUSE Linux Enterprise Server 11-EXTRA (ppc64): kernel-ppc64-extra-3.0.101-68.1 - SUSE Linux Enterprise Server 11-EXTRA (i586): kernel-pae-extra-3.0.101-68.1 - SUSE Linux Enterprise Desktop 11-SP4 (i586 x86_64): kernel-default-3.0.101-68.1 kernel-default-base-3.0.101-68.1 kernel-default-devel-3.0.101-68.1 kernel-default-extra-3.0.101-68.1 kernel-source-3.0.101-68.1 kernel-syms-3.0.101-68.1 kernel-trace-devel-3.0.101-68.1 kernel-xen-3.0.101-68.1 kernel-xen-base-3.0.101-68.1 kernel-xen-devel-3.0.101-68.1 kernel-xen-extra-3.0.101-68.1 - SUSE Linux Enterprise Desktop 11-SP4 (i586): kernel-pae-3.0.101-68.1 kernel-pae-base-3.0.101-68.1 kernel-pae-devel-3.0.101-68.1 kernel-pae-extra-3.0.101-68.1 - SUSE Linux Enterprise Debuginfo 11-SP4 (i586 ia64 ppc64 s390x x86_64): kernel-default-debuginfo-3.0.101-68.1 kernel-default-debugsource-3.0.101-68.1 kernel-trace-debuginfo-3.0.101-68.1 kernel-trace-debugsource-3.0.101-68.1 - SUSE Linux Enterprise Debuginfo 11-SP4 (i586 ia64 s390x x86_64): kernel-default-devel-debuginfo-3.0.101-68.1 kernel-trace-devel-debuginfo-3.0.101-68.1 - SUSE Linux Enterprise Debuginfo 11-SP4 (i586 x86_64): kernel-ec2-debuginfo-3.0.101-68.1 kernel-ec2-debugsource-3.0.101-68.1 kernel-xen-debuginfo-3.0.101-68.1 kernel-xen-debugsource-3.0.101-68.1 kernel-xen-devel-debuginfo-3.0.101-68.1 - SUSE Linux Enterprise Debuginfo 11-SP4 (ppc64): kernel-ppc64-debuginfo-3.0.101-68.1 kernel-ppc64-debugsource-3.0.101-68.1 - SUSE Linux Enterprise Debuginfo 11-SP4 (i586): kernel-pae-debuginfo-3.0.101-68.1 kernel-pae-debugsource-3.0.101-68.1 kernel-pae-devel-debuginfo-3.0.101-68.1 References: https://www.suse.com/security/cve/CVE-2015-0272.html https://www.suse.com/security/cve/CVE-2015-5157.html https://www.suse.com/security/cve/CVE-2015-5307.html https://www.suse.com/security/cve/CVE-2015-6937.html https://www.suse.com/security/cve/CVE-2015-7509.html https://www.suse.com/security/cve/CVE-2015-7799.html https://www.suse.com/security/cve/CVE-2015-7872.html https://www.suse.com/security/cve/CVE-2015-7990.html https://www.suse.com/security/cve/CVE-2015-8104.html https://www.suse.com/security/cve/CVE-2015-8215.html https://bugzilla.suse.com/814440 https://bugzilla.suse.com/879378 https://bugzilla.suse.com/879381 https://bugzilla.suse.com/900610 https://bugzilla.suse.com/904348 https://bugzilla.suse.com/904965 https://bugzilla.suse.com/921081 https://bugzilla.suse.com/926774 https://bugzilla.suse.com/930145 https://bugzilla.suse.com/930770 https://bugzilla.suse.com/930788 https://bugzilla.suse.com/930835 https://bugzilla.suse.com/932805 https://bugzilla.suse.com/935123 https://bugzilla.suse.com/935757 https://bugzilla.suse.com/937256 https://bugzilla.suse.com/937444 https://bugzilla.suse.com/938706 https://bugzilla.suse.com/939826 https://bugzilla.suse.com/939926 https://bugzilla.suse.com/939955 https://bugzilla.suse.com/940017 https://bugzilla.suse.com/940913 https://bugzilla.suse.com/940946 https://bugzilla.suse.com/941202 https://bugzilla.suse.com/942938 https://bugzilla.suse.com/943786 https://bugzilla.suse.com/944296 https://bugzilla.suse.com/944677 https://bugzilla.suse.com/944831 https://bugzilla.suse.com/944837 https://bugzilla.suse.com/944989 https://bugzilla.suse.com/944993 https://bugzilla.suse.com/945691 https://bugzilla.suse.com/945825 https://bugzilla.suse.com/945827 https://bugzilla.suse.com/946078 https://bugzilla.suse.com/946214 https://bugzilla.suse.com/946309 https://bugzilla.suse.com/947957 https://bugzilla.suse.com/948330 https://bugzilla.suse.com/948347 https://bugzilla.suse.com/948521 https://bugzilla.suse.com/949100 https://bugzilla.suse.com/949298 https://bugzilla.suse.com/949502 https://bugzilla.suse.com/949706 https://bugzilla.suse.com/949744 https://bugzilla.suse.com/949936 https://bugzilla.suse.com/949981 https://bugzilla.suse.com/950298 https://bugzilla.suse.com/950750 https://bugzilla.suse.com/950998 https://bugzilla.suse.com/951440 https://bugzilla.suse.com/952084 https://bugzilla.suse.com/952384 https://bugzilla.suse.com/952579 https://bugzilla.suse.com/952976 https://bugzilla.suse.com/953527 https://bugzilla.suse.com/953799 https://bugzilla.suse.com/953980 https://bugzilla.suse.com/954404 https://bugzilla.suse.com/954628 https://bugzilla.suse.com/954950 https://bugzilla.suse.com/954984 https://bugzilla.suse.com/955673 https://bugzilla.suse.com/956709 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:2183-2: important: Security update for strongswan
by opensuse-security＠opensuse.org 21 Dec '15

21 Dec '15

SUSE Security Update: Security update for strongswan ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:2183-2 Rating: important References: #953817 Cross-References: CVE-2015-8023 Affected Products: SUSE Linux Enterprise Server 12-SP1 SUSE Linux Enterprise Desktop 12-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The strongswan package was updated to fix the following security issue: - CVE-2015-8023: Fixed an authentication bypass vulnerability in the eap-mschapv2 plugin (bsc#953817). Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 12-SP1: zypper in -t patch SUSE-SLE-SERVER-12-SP1-2015-934=1 - SUSE Linux Enterprise Desktop 12-SP1: zypper in -t patch SUSE-SLE-DESKTOP-12-SP1-2015-934=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Server 12-SP1 (ppc64le s390x x86_64): strongswan-5.1.3-22.1 strongswan-debugsource-5.1.3-22.1 strongswan-hmac-5.1.3-22.1 strongswan-ipsec-5.1.3-22.1 strongswan-ipsec-debuginfo-5.1.3-22.1 strongswan-libs0-5.1.3-22.1 strongswan-libs0-debuginfo-5.1.3-22.1 - SUSE Linux Enterprise Server 12-SP1 (noarch): strongswan-doc-5.1.3-22.1 - SUSE Linux Enterprise Desktop 12-SP1 (x86_64): strongswan-5.1.3-22.1 strongswan-debugsource-5.1.3-22.1 strongswan-ipsec-5.1.3-22.1 strongswan-ipsec-debuginfo-5.1.3-22.1 strongswan-libs0-5.1.3-22.1 strongswan-libs0-debuginfo-5.1.3-22.1 - SUSE Linux Enterprise Desktop 12-SP1 (noarch): strongswan-doc-5.1.3-22.1 References: https://www.suse.com/security/cve/CVE-2015-8023.html https://bugzilla.suse.com/953817 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:2337-1: important: Security update for rubygem-passenger
by opensuse-security＠opensuse.org 21 Dec '15

21 Dec '15

SUSE Security Update: Security update for rubygem-passenger ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:2337-1 Rating: important References: #956281 Cross-References: CVE-2015-7519 Affected Products: SUSE Linux Enterprise Module for Containers 12 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for rubygem-passenger fixes the following issues: - CVE-2015-7519: rubygem-passenger was not filtering the environment like apache is doing, allowing injection of environment variables (bsc#956281) Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Module for Containers 12: zypper in -t patch SUSE-SLE-Module-Containers-12-2015-1005=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Module for Containers 12 (x86_64): ruby2.1-rubygem-passenger-5.0.18-6.1 ruby2.1-rubygem-passenger-debuginfo-5.0.18-6.1 rubygem-passenger-5.0.18-6.1 rubygem-passenger-apache2-5.0.18-6.1 rubygem-passenger-apache2-debuginfo-5.0.18-6.1 rubygem-passenger-debuginfo-5.0.18-6.1 rubygem-passenger-debugsource-5.0.18-6.1 References: https://www.suse.com/security/cve/CVE-2015-7519.html https://bugzilla.suse.com/956281 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:2336-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 21 Dec '15

21 Dec '15

SUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:2336-1 Rating: important References: #959277 Cross-References: CVE-2015-7201 CVE-2015-7202 CVE-2015-7205 CVE-2015-7210 CVE-2015-7212 CVE-2015-7213 CVE-2015-7214 CVE-2015-7222 Affected Products: SUSE Linux Enterprise Server 11-SP2-LTSS SUSE Linux Enterprise Debuginfo 11-SP2 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: MozillaFirefox was updated to version 38.5.0 ESR. It fixes the following security issues: * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202 Miscellaneous memory safety hazards (rv:43.0 / rv:38.5) * MFSA 2015-138/CVE-2015-7210 Use-after-free in WebRTC when datachannel is used after being destroyed * MFSA 2015-139/CVE-2015-7212 Integer overflow allocating extremely large textures * MFSA 2015-145/CVE-2015-7205 Underflow through code inspection * MFSA 2015-146/CVE-2015-7213 Integer overflow in MP4 playback in 64-bit versions * MFSA 2015-147/CVE-2015-7222 Integer underflow and buffer overflow processing MP4 metadata in libstagefright * MFSA 2015-149/CVE-2015-7214 Cross-site reading attack through data and view-source URIs Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 11-SP2-LTSS: zypper in -t patch slessp2-MozillaFirefox-12275=1 - SUSE Linux Enterprise Debuginfo 11-SP2: zypper in -t patch dbgsp2-MozillaFirefox-12275=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Server 11-SP2-LTSS (i586 s390x x86_64): MozillaFirefox-38.5.0esr-28.2 MozillaFirefox-translations-38.5.0esr-28.2 - SUSE Linux Enterprise Debuginfo 11-SP2 (i586 s390x x86_64): MozillaFirefox-debuginfo-38.5.0esr-28.2 MozillaFirefox-debugsource-38.5.0esr-28.2 References: https://www.suse.com/security/cve/CVE-2015-7201.html https://www.suse.com/security/cve/CVE-2015-7202.html https://www.suse.com/security/cve/CVE-2015-7205.html https://www.suse.com/security/cve/CVE-2015-7210.html https://www.suse.com/security/cve/CVE-2015-7212.html https://www.suse.com/security/cve/CVE-2015-7213.html https://www.suse.com/security/cve/CVE-2015-7214.html https://www.suse.com/security/cve/CVE-2015-7222.html https://bugzilla.suse.com/959277 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:2335-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 21 Dec '15

21 Dec '15

SUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:2335-1 Rating: important References: #959277 Cross-References: CVE-2015-7201 CVE-2015-7202 CVE-2015-7205 CVE-2015-7210 CVE-2015-7212 CVE-2015-7213 CVE-2015-7214 CVE-2015-7222 Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP1 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Server 12-SP1 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Desktop 12-SP1 SUSE Linux Enterprise Desktop 12 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: MozillaFirefox was updated to version 38.5.0 ESR to fix the following issues: * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202 Miscellaneous memory safety hazards (rv:43.0 / rv:38.5) * MFSA 2015-138/CVE-2015-7210 A use-after-free in WebRTC when datachannel is used after being destroyed * MFSA 2015-139/CVE-2015-7212 An integer overflow allocating extremely large textures * MFSA 2015-145/CVE-2015-7205 A underflow found through code inspection * MFSA 2015-146/CVE-2015-7213 A integer overflow in MP4 playback in 64-bit versions * MFSA 2015-147/CVE-2015-7222 Integer underflow and buffer overflow processing MP4 metadata in libstagefright * MFSA 2015-149/CVE-2015-7214 Cross-site reading attack through data and view-source URIs Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 12-SP1: zypper in -t patch SUSE-SLE-SDK-12-SP1-2015-1001=1 - SUSE Linux Enterprise Software Development Kit 12: zypper in -t patch SUSE-SLE-SDK-12-2015-1001=1 - SUSE Linux Enterprise Server 12-SP1: zypper in -t patch SUSE-SLE-SERVER-12-SP1-2015-1001=1 - SUSE Linux Enterprise Server 12: zypper in -t patch SUSE-SLE-SERVER-12-2015-1001=1 - SUSE Linux Enterprise Desktop 12-SP1: zypper in -t patch SUSE-SLE-DESKTOP-12-SP1-2015-1001=1 - SUSE Linux Enterprise Desktop 12: zypper in -t patch SUSE-SLE-DESKTOP-12-2015-1001=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 12-SP1 (ppc64le s390x x86_64): MozillaFirefox-debuginfo-38.5.0esr-54.1 MozillaFirefox-debugsource-38.5.0esr-54.1 MozillaFirefox-devel-38.5.0esr-54.1 - SUSE Linux Enterprise Software Development Kit 12 (ppc64le s390x x86_64): MozillaFirefox-debuginfo-38.5.0esr-54.1 MozillaFirefox-debugsource-38.5.0esr-54.1 MozillaFirefox-devel-38.5.0esr-54.1 - SUSE Linux Enterprise Server 12-SP1 (ppc64le s390x x86_64): MozillaFirefox-38.5.0esr-54.1 MozillaFirefox-debuginfo-38.5.0esr-54.1 MozillaFirefox-debugsource-38.5.0esr-54.1 MozillaFirefox-translations-38.5.0esr-54.1 - SUSE Linux Enterprise Server 12 (ppc64le s390x x86_64): MozillaFirefox-38.5.0esr-54.1 MozillaFirefox-debuginfo-38.5.0esr-54.1 MozillaFirefox-debugsource-38.5.0esr-54.1 MozillaFirefox-translations-38.5.0esr-54.1 - SUSE Linux Enterprise Desktop 12-SP1 (x86_64): MozillaFirefox-38.5.0esr-54.1 MozillaFirefox-debuginfo-38.5.0esr-54.1 MozillaFirefox-debugsource-38.5.0esr-54.1 MozillaFirefox-translations-38.5.0esr-54.1 - SUSE Linux Enterprise Desktop 12 (x86_64): MozillaFirefox-38.5.0esr-54.1 MozillaFirefox-debuginfo-38.5.0esr-54.1 MozillaFirefox-debugsource-38.5.0esr-54.1 MozillaFirefox-translations-38.5.0esr-54.1 References: https://www.suse.com/security/cve/CVE-2015-7201.html https://www.suse.com/security/cve/CVE-2015-7202.html https://www.suse.com/security/cve/CVE-2015-7205.html https://www.suse.com/security/cve/CVE-2015-7210.html https://www.suse.com/security/cve/CVE-2015-7212.html https://www.suse.com/security/cve/CVE-2015-7213.html https://www.suse.com/security/cve/CVE-2015-7214.html https://www.suse.com/security/cve/CVE-2015-7222.html https://bugzilla.suse.com/959277 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:2334-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 21 Dec '15

21 Dec '15

SUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:2334-1 Rating: important References: #959277 Cross-References: CVE-2015-7201 CVE-2015-7202 CVE-2015-7205 CVE-2015-7210 CVE-2015-7212 CVE-2015-7213 CVE-2015-7214 CVE-2015-7222 Affected Products: SUSE Linux Enterprise Software Development Kit 11-SP4 SUSE Linux Enterprise Software Development Kit 11-SP3 SUSE Linux Enterprise Server for VMWare 11-SP3 SUSE Linux Enterprise Server 11-SP4 SUSE Linux Enterprise Server 11-SP3 SUSE Linux Enterprise Desktop 11-SP4 SUSE Linux Enterprise Desktop 11-SP3 SUSE Linux Enterprise Debuginfo 11-SP4 SUSE Linux Enterprise Debuginfo 11-SP3 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: MozillaFirefox was updated to version 38.5.0 esr to fix the following issues: Following security issues were fixed: * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202 Miscellaneous memory safety hazards (rv:43.0 / rv:38.5) * MFSA 2015-138/CVE-2015-7210 Use-after-free in WebRTC when datachannel is used after being destroyed * MFSA 2015-139/CVE-2015-7212 Integer overflow allocating extremely large textures * MFSA 2015-145/CVE-2015-7205 Underflow through code inspection * MFSA 2015-146/CVE-2015-7213 Integer overflow in MP4 playback in 64-bit versions * MFSA 2015-147/CVE-2015-7222 Integer underflow and buffer overflow processing MP4 metadata in libstagefright * MFSA 2015-149/CVE-2015-7214 Cross-site reading attack through data and view-source URIs Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11-SP4: zypper in -t patch sdksp4-MozillaFirefox-12276=1 - SUSE Linux Enterprise Software Development Kit 11-SP3: zypper in -t patch sdksp3-MozillaFirefox-12276=1 - SUSE Linux Enterprise Server for VMWare 11-SP3: zypper in -t patch slessp3-MozillaFirefox-12276=1 - SUSE Linux Enterprise Server 11-SP4: zypper in -t patch slessp4-MozillaFirefox-12276=1 - SUSE Linux Enterprise Server 11-SP3: zypper in -t patch slessp3-MozillaFirefox-12276=1 - SUSE Linux Enterprise Desktop 11-SP4: zypper in -t patch sledsp4-MozillaFirefox-12276=1 - SUSE Linux Enterprise Desktop 11-SP3: zypper in -t patch sledsp3-MozillaFirefox-12276=1 - SUSE Linux Enterprise Debuginfo 11-SP4: zypper in -t patch dbgsp4-MozillaFirefox-12276=1 - SUSE Linux Enterprise Debuginfo 11-SP3: zypper in -t patch dbgsp3-MozillaFirefox-12276=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11-SP4 (i586 ia64 ppc64 s390x x86_64): MozillaFirefox-devel-38.5.0esr-28.2 - SUSE Linux Enterprise Software Development Kit 11-SP3 (i586 ia64 ppc64 s390x x86_64): MozillaFirefox-devel-38.5.0esr-28.2 - SUSE Linux Enterprise Server for VMWare 11-SP3 (i586 x86_64): MozillaFirefox-38.5.0esr-28.2 MozillaFirefox-translations-38.5.0esr-28.2 - SUSE Linux Enterprise Server 11-SP4 (i586 ia64 ppc64 s390x x86_64): MozillaFirefox-38.5.0esr-28.2 MozillaFirefox-translations-38.5.0esr-28.2 - SUSE Linux Enterprise Server 11-SP3 (i586 ia64 ppc64 s390x x86_64): MozillaFirefox-38.5.0esr-28.2 MozillaFirefox-translations-38.5.0esr-28.2 - SUSE Linux Enterprise Desktop 11-SP4 (i586 x86_64): MozillaFirefox-38.5.0esr-28.2 MozillaFirefox-translations-38.5.0esr-28.2 - SUSE Linux Enterprise Desktop 11-SP3 (i586 x86_64): MozillaFirefox-38.5.0esr-28.2 MozillaFirefox-translations-38.5.0esr-28.2 - SUSE Linux Enterprise Debuginfo 11-SP4 (i586 ia64 ppc64 s390x x86_64): MozillaFirefox-debuginfo-38.5.0esr-28.2 MozillaFirefox-debugsource-38.5.0esr-28.2 - SUSE Linux Enterprise Debuginfo 11-SP3 (i586 ia64 ppc64 s390x x86_64): MozillaFirefox-debuginfo-38.5.0esr-28.2 MozillaFirefox-debugsource-38.5.0esr-28.2 References: https://www.suse.com/security/cve/CVE-2015-7201.html https://www.suse.com/security/cve/CVE-2015-7202.html https://www.suse.com/security/cve/CVE-2015-7205.html https://www.suse.com/security/cve/CVE-2015-7210.html https://www.suse.com/security/cve/CVE-2015-7212.html https://www.suse.com/security/cve/CVE-2015-7213.html https://www.suse.com/security/cve/CVE-2015-7214.html https://www.suse.com/security/cve/CVE-2015-7222.html https://bugzilla.suse.com/959277 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:2305-1: important: Security update for ldb, samba, talloc, tdb, tevent
by opensuse-security＠opensuse.org 18 Dec '15

18 Dec '15

SUSE Security Update: Security update for ldb, samba, talloc, tdb, tevent ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:2305-1 Rating: important References: #949022 #951660 #954658 #958581 #958582 #958583 #958584 #958585 #958586 Cross-References: CVE-2015-3223 CVE-2015-5252 CVE-2015-5296 CVE-2015-5299 CVE-2015-5330 CVE-2015-8467 Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP1 SUSE Linux Enterprise Server 12-SP1 SUSE Linux Enterprise Desktop 12-SP1 ______________________________________________________________________________ An update that solves 6 vulnerabilities and has three fixes is now available. Description: This update for ldb, samba, talloc, tdb, tevent fixes the following security issues and bugs: The Samba LDB was updated to version 1.1.24: - Fix ldap \00 search expression attack dos; CVE-2015-3223; (bso#11325) - Fix remote read memory exploit in ldb; CVE-2015-5330; (bso#11599) - Move ldb_(un)pack_data into ldb_module.h for testing - Fix installation of _ldb_text.py - Fix propagation of ldb errors through tdb - Fix bug triggered by having an empty message in database during search Samba was updated to fix these issues: - Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). - Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). - Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). - No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). - Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). - Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585). - Changing log level of two entries to from 1 to 3; (bso#9912). - vfs_gpfs: Re-enable share modes; (bso#11243). - wafsamba: Also build libraries with RELRO protection; (bso#11346). - ctdb: Strip trailing spaces from nodes file; (bso#11365). - s3-smbd: Fix old DOS client doing wildcard delete - gives a attribute type of zero; (bso#11452). - nss_wins: Do not run into use after free issues when we access memory allocated on the globals and the global being reinitialized; (bso#11563). - async_req: Fix non-blocking connect(); (bso#11564). - auth: gensec: Fix a memory leak; (bso#11565). - lib: util: Make non-critical message a warning; (bso#11566). - Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). - smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). - ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). - manpage: Correct small typo error; (bso#11584). - s3: smbd: If EA's are turned off on a share don't allow an SMB2 create containing them; (bso#11589). - Backport some valgrind fixes from upstream master; (bso#11597). - s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). - docs: Fix some typos in the idmap config section of man 5 smb.conf; (bso#11619). - Cleanup and enhance the pidl sub package. - s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). - smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). - kerberos: Make sure we only use prompter type when available; (bso#11038). - s3:ctdbd_conn: Make sure we destroy tevent_fd before closing the socket; (bso#11316). - dcerpc.idl: accept invalid dcerpc_bind_nak pdus; (bso#11327). - Fix a deadlock in tdb; (bso#11381). - s3: smbd: Fix mkdir race condition; (bso#11486). - pam_winbind: Fix a segfault if initialization fails; (bso#11502). - s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). - s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). - net: Fix a crash with 'net ads keytab create'; (bso#11528). - s3: smbd: Fix a crash in unix_convert() and a NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). - vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). - vfs_commit: Set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). - Fix bug in smbstatus where the lease info is not printed; (bso#11549). - s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). - Prevent null pointer access in samlogon fallback when security credentials are null; (bnc#949022). - Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038). talloc was updated to version 2.1.5; (bsc#954658) (bsc#951660). - Test that talloc magic differs between processes. - Increment minor version due to added talloc_test_get_magic. - Provide tests access to talloc_magic. - Test magic protection measures. tdb was updated to version 1.3.8; (bsc#954658). - Improved python3 bindings tevent was updated to 0.9.26; (bsc#954658). - New tevent_thread_proxy api - Minor build fixes Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 12-SP1: zypper in -t patch SUSE-SLE-SDK-12-SP1-2015-996=1 - SUSE Linux Enterprise Server 12-SP1: zypper in -t patch SUSE-SLE-SERVER-12-SP1-2015-996=1 - SUSE Linux Enterprise Desktop 12-SP1: zypper in -t patch SUSE-SLE-DESKTOP-12-SP1-2015-996=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 12-SP1 (ppc64le s390x x86_64): ldb-debugsource-1.1.24-4.1 libdcerpc-atsvc-devel-4.2.4-6.1 libdcerpc-atsvc0-4.2.4-6.1 libdcerpc-atsvc0-debuginfo-4.2.4-6.1 libdcerpc-devel-4.2.4-6.1 libdcerpc-samr-devel-4.2.4-6.1 libdcerpc-samr0-4.2.4-6.1 libdcerpc-samr0-debuginfo-4.2.4-6.1 libgensec-devel-4.2.4-6.1 libldb-devel-1.1.24-4.1 libndr-devel-4.2.4-6.1 libndr-krb5pac-devel-4.2.4-6.1 libndr-nbt-devel-4.2.4-6.1 libndr-standard-devel-4.2.4-6.1 libnetapi-devel-4.2.4-6.1 libregistry-devel-4.2.4-6.1 libsamba-credentials-devel-4.2.4-6.1 libsamba-hostconfig-devel-4.2.4-6.1 libsamba-passdb-devel-4.2.4-6.1 libsamba-policy-devel-4.2.4-6.1 libsamba-policy0-4.2.4-6.1 libsamba-policy0-debuginfo-4.2.4-6.1 libsamba-util-devel-4.2.4-6.1 libsamdb-devel-4.2.4-6.1 libsmbclient-devel-4.2.4-6.1 libsmbclient-raw-devel-4.2.4-6.1 libsmbconf-devel-4.2.4-6.1 libsmbldap-devel-4.2.4-6.1 libtalloc-devel-2.1.5-4.1 libtdb-devel-1.3.8-4.1 libtevent-devel-0.9.26-4.1 libtevent-util-devel-4.2.4-6.1 libwbclient-devel-4.2.4-6.1 pyldb-1.1.24-4.1 pyldb-debuginfo-1.1.24-4.1 pyldb-devel-1.1.24-4.1 pytalloc-devel-2.1.5-4.1 samba-core-devel-4.2.4-6.1 samba-debuginfo-4.2.4-6.1 samba-debugsource-4.2.4-6.1 samba-test-devel-4.2.4-6.1 talloc-debugsource-2.1.5-4.1 tdb-debugsource-1.3.8-4.1 tevent-debugsource-0.9.26-4.1 - SUSE Linux Enterprise Server 12-SP1 (ppc64le s390x x86_64): ldb-debugsource-1.1.24-4.1 libdcerpc-binding0-4.2.4-6.1 libdcerpc-binding0-debuginfo-4.2.4-6.1 libdcerpc0-4.2.4-6.1 libdcerpc0-debuginfo-4.2.4-6.1 libgensec0-4.2.4-6.1 libgensec0-debuginfo-4.2.4-6.1 libldb1-1.1.24-4.1 libldb1-debuginfo-1.1.24-4.1 libndr-krb5pac0-4.2.4-6.1 libndr-krb5pac0-debuginfo-4.2.4-6.1 libndr-nbt0-4.2.4-6.1 libndr-nbt0-debuginfo-4.2.4-6.1 libndr-standard0-4.2.4-6.1 libndr-standard0-debuginfo-4.2.4-6.1 libndr0-4.2.4-6.1 libndr0-debuginfo-4.2.4-6.1 libnetapi0-4.2.4-6.1 libnetapi0-debuginfo-4.2.4-6.1 libregistry0-4.2.4-6.1 libregistry0-debuginfo-4.2.4-6.1 libsamba-credentials0-4.2.4-6.1 libsamba-credentials0-debuginfo-4.2.4-6.1 libsamba-hostconfig0-4.2.4-6.1 libsamba-hostconfig0-debuginfo-4.2.4-6.1 libsamba-passdb0-4.2.4-6.1 libsamba-passdb0-debuginfo-4.2.4-6.1 libsamba-util0-4.2.4-6.1 libsamba-util0-debuginfo-4.2.4-6.1 libsamdb0-4.2.4-6.1 libsamdb0-debuginfo-4.2.4-6.1 libsmbclient-raw0-4.2.4-6.1 libsmbclient-raw0-debuginfo-4.2.4-6.1 libsmbclient0-4.2.4-6.1 libsmbclient0-debuginfo-4.2.4-6.1 libsmbconf0-4.2.4-6.1 libsmbconf0-debuginfo-4.2.4-6.1 libsmbldap0-4.2.4-6.1 libsmbldap0-debuginfo-4.2.4-6.1 libtalloc2-2.1.5-4.1 libtalloc2-debuginfo-2.1.5-4.1 libtdb1-1.3.8-4.1 libtdb1-debuginfo-1.3.8-4.1 libtevent-util0-4.2.4-6.1 libtevent-util0-debuginfo-4.2.4-6.1 libtevent0-0.9.26-4.1 libtevent0-debuginfo-0.9.26-4.1 libwbclient0-4.2.4-6.1 libwbclient0-debuginfo-4.2.4-6.1 pytalloc-2.1.5-4.1 pytalloc-debuginfo-2.1.5-4.1 samba-4.2.4-6.1 samba-client-4.2.4-6.1 samba-client-debuginfo-4.2.4-6.1 samba-debuginfo-4.2.4-6.1 samba-debugsource-4.2.4-6.1 samba-libs-4.2.4-6.1 samba-libs-debuginfo-4.2.4-6.1 samba-winbind-4.2.4-6.1 samba-winbind-debuginfo-4.2.4-6.1 talloc-debugsource-2.1.5-4.1 tdb-debugsource-1.3.8-4.1 tdb-tools-1.3.8-4.1 tdb-tools-debuginfo-1.3.8-4.1 tevent-debugsource-0.9.26-4.1 - SUSE Linux Enterprise Server 12-SP1 (s390x x86_64): libdcerpc-binding0-32bit-4.2.4-6.1 libdcerpc-binding0-debuginfo-32bit-4.2.4-6.1 libdcerpc0-32bit-4.2.4-6.1 libdcerpc0-debuginfo-32bit-4.2.4-6.1 libgensec0-32bit-4.2.4-6.1 libgensec0-debuginfo-32bit-4.2.4-6.1 libldb1-32bit-1.1.24-4.1 libldb1-debuginfo-32bit-1.1.24-4.1 libndr-krb5pac0-32bit-4.2.4-6.1 libndr-krb5pac0-debuginfo-32bit-4.2.4-6.1 libndr-nbt0-32bit-4.2.4-6.1 libndr-nbt0-debuginfo-32bit-4.2.4-6.1 libndr-standard0-32bit-4.2.4-6.1 libndr-standard0-debuginfo-32bit-4.2.4-6.1 libndr0-32bit-4.2.4-6.1 libndr0-debuginfo-32bit-4.2.4-6.1 libnetapi0-32bit-4.2.4-6.1 libnetapi0-debuginfo-32bit-4.2.4-6.1 libsamba-credentials0-32bit-4.2.4-6.1 libsamba-credentials0-debuginfo-32bit-4.2.4-6.1 libsamba-hostconfig0-32bit-4.2.4-6.1 libsamba-hostconfig0-debuginfo-32bit-4.2.4-6.1 libsamba-passdb0-32bit-4.2.4-6.1 libsamba-passdb0-debuginfo-32bit-4.2.4-6.1 libsamba-util0-32bit-4.2.4-6.1 libsamba-util0-debuginfo-32bit-4.2.4-6.1 libsamdb0-32bit-4.2.4-6.1 libsamdb0-debuginfo-32bit-4.2.4-6.1 libsmbclient-raw0-32bit-4.2.4-6.1 libsmbclient-raw0-debuginfo-32bit-4.2.4-6.1 libsmbclient0-32bit-4.2.4-6.1 libsmbclient0-debuginfo-32bit-4.2.4-6.1 libsmbconf0-32bit-4.2.4-6.1 libsmbconf0-debuginfo-32bit-4.2.4-6.1 libsmbldap0-32bit-4.2.4-6.1 libsmbldap0-debuginfo-32bit-4.2.4-6.1 libtalloc2-32bit-2.1.5-4.1 libtalloc2-debuginfo-32bit-2.1.5-4.1 libtdb1-32bit-1.3.8-4.1 libtdb1-debuginfo-32bit-1.3.8-4.1 libtevent-util0-32bit-4.2.4-6.1 libtevent-util0-debuginfo-32bit-4.2.4-6.1 libtevent0-32bit-0.9.26-4.1 libtevent0-debuginfo-32bit-0.9.26-4.1 libwbclient0-32bit-4.2.4-6.1 libwbclient0-debuginfo-32bit-4.2.4-6.1 pytalloc-32bit-2.1.5-4.1 pytalloc-debuginfo-32bit-2.1.5-4.1 samba-32bit-4.2.4-6.1 samba-client-32bit-4.2.4-6.1 samba-client-debuginfo-32bit-4.2.4-6.1 samba-debuginfo-32bit-4.2.4-6.1 samba-libs-32bit-4.2.4-6.1 samba-libs-debuginfo-32bit-4.2.4-6.1 samba-winbind-32bit-4.2.4-6.1 samba-winbind-debuginfo-32bit-4.2.4-6.1 - SUSE Linux Enterprise Server 12-SP1 (noarch): samba-doc-4.2.4-6.1 - SUSE Linux Enterprise Desktop 12-SP1 (x86_64): ldb-debugsource-1.1.24-4.1 libdcerpc-binding0-32bit-4.2.4-6.1 libdcerpc-binding0-4.2.4-6.1 libdcerpc-binding0-debuginfo-32bit-4.2.4-6.1 libdcerpc-binding0-debuginfo-4.2.4-6.1 libdcerpc0-32bit-4.2.4-6.1 libdcerpc0-4.2.4-6.1 libdcerpc0-debuginfo-32bit-4.2.4-6.1 libdcerpc0-debuginfo-4.2.4-6.1 libgensec0-32bit-4.2.4-6.1 libgensec0-4.2.4-6.1 libgensec0-debuginfo-32bit-4.2.4-6.1 libgensec0-debuginfo-4.2.4-6.1 libldb1-1.1.24-4.1 libldb1-32bit-1.1.24-4.1 libldb1-debuginfo-1.1.24-4.1 libldb1-debuginfo-32bit-1.1.24-4.1 libndr-krb5pac0-32bit-4.2.4-6.1 libndr-krb5pac0-4.2.4-6.1 libndr-krb5pac0-debuginfo-32bit-4.2.4-6.1 libndr-krb5pac0-debuginfo-4.2.4-6.1 libndr-nbt0-32bit-4.2.4-6.1 libndr-nbt0-4.2.4-6.1 libndr-nbt0-debuginfo-32bit-4.2.4-6.1 libndr-nbt0-debuginfo-4.2.4-6.1 libndr-standard0-32bit-4.2.4-6.1 libndr-standard0-4.2.4-6.1 libndr-standard0-debuginfo-32bit-4.2.4-6.1 libndr-standard0-debuginfo-4.2.4-6.1 libndr0-32bit-4.2.4-6.1 libndr0-4.2.4-6.1 libndr0-debuginfo-32bit-4.2.4-6.1 libndr0-debuginfo-4.2.4-6.1 libnetapi0-32bit-4.2.4-6.1 libnetapi0-4.2.4-6.1 libnetapi0-debuginfo-32bit-4.2.4-6.1 libnetapi0-debuginfo-4.2.4-6.1 libregistry0-4.2.4-6.1 libregistry0-debuginfo-4.2.4-6.1 libsamba-credentials0-32bit-4.2.4-6.1 libsamba-credentials0-4.2.4-6.1 libsamba-credentials0-debuginfo-32bit-4.2.4-6.1 libsamba-credentials0-debuginfo-4.2.4-6.1 libsamba-hostconfig0-32bit-4.2.4-6.1 libsamba-hostconfig0-4.2.4-6.1 libsamba-hostconfig0-debuginfo-32bit-4.2.4-6.1 libsamba-hostconfig0-debuginfo-4.2.4-6.1 libsamba-passdb0-32bit-4.2.4-6.1 libsamba-passdb0-4.2.4-6.1 libsamba-passdb0-debuginfo-32bit-4.2.4-6.1 libsamba-passdb0-debuginfo-4.2.4-6.1 libsamba-util0-32bit-4.2.4-6.1 libsamba-util0-4.2.4-6.1 libsamba-util0-debuginfo-32bit-4.2.4-6.1 libsamba-util0-debuginfo-4.2.4-6.1 libsamdb0-32bit-4.2.4-6.1 libsamdb0-4.2.4-6.1 libsamdb0-debuginfo-32bit-4.2.4-6.1 libsamdb0-debuginfo-4.2.4-6.1 libsmbclient-raw0-32bit-4.2.4-6.1 libsmbclient-raw0-4.2.4-6.1 libsmbclient-raw0-debuginfo-32bit-4.2.4-6.1 libsmbclient-raw0-debuginfo-4.2.4-6.1 libsmbclient0-32bit-4.2.4-6.1 libsmbclient0-4.2.4-6.1 libsmbclient0-debuginfo-32bit-4.2.4-6.1 libsmbclient0-debuginfo-4.2.4-6.1 libsmbconf0-32bit-4.2.4-6.1 libsmbconf0-4.2.4-6.1 libsmbconf0-debuginfo-32bit-4.2.4-6.1 libsmbconf0-debuginfo-4.2.4-6.1 libsmbldap0-32bit-4.2.4-6.1 libsmbldap0-4.2.4-6.1 libsmbldap0-debuginfo-32bit-4.2.4-6.1 libsmbldap0-debuginfo-4.2.4-6.1 libtalloc2-2.1.5-4.1 libtalloc2-32bit-2.1.5-4.1 libtalloc2-debuginfo-2.1.5-4.1 libtalloc2-debuginfo-32bit-2.1.5-4.1 libtdb1-1.3.8-4.1 libtdb1-32bit-1.3.8-4.1 libtdb1-debuginfo-1.3.8-4.1 libtdb1-debuginfo-32bit-1.3.8-4.1 libtevent-util0-32bit-4.2.4-6.1 libtevent-util0-4.2.4-6.1 libtevent-util0-debuginfo-32bit-4.2.4-6.1 libtevent-util0-debuginfo-4.2.4-6.1 libtevent0-0.9.26-4.1 libtevent0-32bit-0.9.26-4.1 libtevent0-debuginfo-0.9.26-4.1 libtevent0-debuginfo-32bit-0.9.26-4.1 libwbclient0-32bit-4.2.4-6.1 libwbclient0-4.2.4-6.1 libwbclient0-debuginfo-32bit-4.2.4-6.1 libwbclient0-debuginfo-4.2.4-6.1 pytalloc-2.1.5-4.1 pytalloc-32bit-2.1.5-4.1 pytalloc-debuginfo-2.1.5-4.1 pytalloc-debuginfo-32bit-2.1.5-4.1 samba-32bit-4.2.4-6.1 samba-4.2.4-6.1 samba-client-32bit-4.2.4-6.1 samba-client-4.2.4-6.1 samba-client-debuginfo-32bit-4.2.4-6.1 samba-client-debuginfo-4.2.4-6.1 samba-debuginfo-32bit-4.2.4-6.1 samba-debuginfo-4.2.4-6.1 samba-debugsource-4.2.4-6.1 samba-libs-32bit-4.2.4-6.1 samba-libs-4.2.4-6.1 samba-libs-debuginfo-32bit-4.2.4-6.1 samba-libs-debuginfo-4.2.4-6.1 samba-winbind-32bit-4.2.4-6.1 samba-winbind-4.2.4-6.1 samba-winbind-debuginfo-32bit-4.2.4-6.1 samba-winbind-debuginfo-4.2.4-6.1 talloc-debugsource-2.1.5-4.1 tdb-debugsource-1.3.8-4.1 tevent-debugsource-0.9.26-4.1 - SUSE Linux Enterprise Desktop 12-SP1 (noarch): samba-doc-4.2.4-6.1 References: https://www.suse.com/security/cve/CVE-2015-3223.html https://www.suse.com/security/cve/CVE-2015-5252.html https://www.suse.com/security/cve/CVE-2015-5296.html https://www.suse.com/security/cve/CVE-2015-5299.html https://www.suse.com/security/cve/CVE-2015-5330.html https://www.suse.com/security/cve/CVE-2015-8467.html https://bugzilla.suse.com/949022 https://bugzilla.suse.com/951660 https://bugzilla.suse.com/954658 https://bugzilla.suse.com/958581 https://bugzilla.suse.com/958582 https://bugzilla.suse.com/958583 https://bugzilla.suse.com/958584 https://bugzilla.suse.com/958585 https://bugzilla.suse.com/958586 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:2304-1: important: Security update for ldb, samba, talloc, tdb, tevent
by opensuse-security＠opensuse.org 18 Dec '15

18 Dec '15

SUSE Security Update: Security update for ldb, samba, talloc, tdb, tevent ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:2304-1 Rating: important References: #295284 #773464 #872912 #901813 #902421 #910378 #912457 #913304 #923374 #931854 #936909 #939051 #947552 #949022 #951660 #953382 #954658 #958581 #958582 #958583 #958584 #958585 #958586 Cross-References: CVE-2015-3223 CVE-2015-5252 CVE-2015-5296 CVE-2015-5299 CVE-2015-5330 CVE-2015-8467 Affected Products: SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Desktop 12 ______________________________________________________________________________ An update that solves 6 vulnerabilities and has 17 fixes is now available. Description: This update for ldb, samba, talloc, tdb, tevent fixes the following security issues: - ldb was updated to version 1.1.24. + Fix ldap \00 search expression attack dos; CVE-2015-3223; (bso#11325) + Fix remote read memory exploit in ldb; CVE-2015-5330; (bso#11599) + Move ldb_(un)pack_data into ldb_module.h for testing + Fix installation of _ldb_text.py + Fix propagation of ldb errors through tdb + Fix bug triggered by having an empty message in database during search - Move the ldb-cmdline library to the ldb-tools package as the packaged binaries depend on it. - Update the samba library distribution key file 'ldb.keyring'; (bso#945116). Samba was updated to fix these issues: - Malicious request can cause samba ldap server to hang, spinning using cpu; CVE-2015-3223; (bso#11325); (bsc#958581). - Remote read memory exploit in ldb; cve-2015-5330; (bso#11599); (bsc#958586). - Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bsc#958582). - No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bsc#958584). - Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bsc#958583). - Fix microsoft ms15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bsc#958585). - Changing log level of two entries to from 1 to 3; (bso#9912). - Vfs_gpfs: re-enable share modes; (bso#11243). - Wafsamba: also build libraries with relro protection; (bso#11346). - Ctdb: strip trailing spaces from nodes file; (bso#11365). - S3-smbd: fix old dos client doing wildcard delete - gives a attribute type of zero; (bso#11452). - Nss_wins: do not run into use after free issues when we access memory allocated on the globals and the global being reinitialized; (bso#11563). - Async_req: fix non-blocking connect(); (bso#11564). - Auth: gensec: fix a memory leak; (bso#11565). - Lib: util: make non-critical message a warning; (bso#11566). - Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bsc#949022). - Smbd: send smb2 oplock breaks unencrypted; (bso#11570). - Ctdb: open the ro tracking db with perms 0600 instead of 0000; (bso#11577). - Manpage: correct small typo error; (bso#11584). - S3: smbd: if ea's are turned off on a share don't allow an smb2 create containing them; (bso#11589). - Backport some valgrind fixes from upstream master; (bso#11597). - S3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). - Docs: fix some typos in the idmap config section of man 5 smb.conf; (bso#11619). - Cleanup and enhance the pidl sub package. - S3: smbd: fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). - Smbd: fix file name buflen and padding in notify repsonse; (bso#10634). - Kerberos: make sure we only use prompter type when available; (bso#11038). - S3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket; (bso#11316). - Dcerpc.idl: accept invalid dcerpc_bind_nak pdus; (bso#11327). - Fix a deadlock in tdb; (bso#11381). - S3: smbd: fix mkdir race condition; (bso#11486). - Pam_winbind: fix a segfault if initialization fails; (bso#11502). - S3: dfs: fix a crash when the dfs targets are disabled; (bso#11509). - S3: smbd: fix opening/creating :stream files on the root share directory; (bso#11522). - Net: fix a crash with 'net ads keytab create'; (bso#11528). - S3: smbd: fix a crash in unix_convert() and a null pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). - Vfs_fruit: return value of ad_pack in vfs_fruit.c; (bso#11543). - Vfs_commit: set the fd on open before calling smb_vfs_fstat; (bso#11547). - Fix bug in smbstatus where the lease info is not printed; (bso#11549). - S3:smbstatus: add stream name to share_entry_forall(); (bso#11550). - Prevent null pointer access in samlogon fallback when security credentials are null; (bsc#949022). - Fix 100% cpu in winbindd when logging in with "user must change password on next logon"; (bso#11038). talloc was updated to version 2.1.5; (bsc#954658) (bsc#951660). + Test that talloc magic differs between processes. + Increment minor version due to added talloc_test_get_magic. + Provide tests access to talloc_magic. + Test magic protection measures. tdb was updated to version 1.3.8; (bsc#954658). + First fix deadlock in the interaction between fcntl and mutex locking; (bso#11381) + Improved python3 bindings + Fix runtime detection for robust mutexes in the standalone build; (bso#11326). + Possible fix for the build with robust mutexes on solaris 11; (bso#11319). + Abi change: tdb_chainlock_read_nonblock() has been added, a nonblock variant of tdb_chainlock_read() + Do not build test binaries if it's not a standalone build + Fix cid 1034842 resource leak + Fix cid 1034841 resource leak + Don't let tdb_wrap_open() segfault with name==null + Toos: allow transactions with tdb_mutex_locking + Test: add tdb1-run-mutex-transaction1 test + Allow transactions on on tdb's with tdb_mutex_locking + Test: tdb_clear_if_first | tdb_mutex_locking, o_rdonly is a valid combination + Allow tdb_open_ex() with o_rdonly of tdb_feature_flag_mutex tdbs. + Fix a comment + Fix tdb_runtime_check_for_robust_mutexes() + Improve wording in a comment + Tdb.h needs bool type; obsoletes include_stdbool_bso10625.patch + Tdb_wrap: make mutexes easier to use + Tdb_wrap: only pull in samba-debug + Tdb_wrap: standalone compile without includes.h + Tdb_wrap: tdb_wrap.h doesn't need struct loadparm_context - Update to version 1.3.1. + Tools: fix a compiler warning + Defragment the freelist in tdb_allocate_from_freelist() + Add "freelist_size" sub-command to tdbtool + Use tdb_freelist_merge_adjacent in tdb_freelist_size() + Add tdb_freelist_merge_adjacent() + Add utility function check_merge_ptr_with_left_record() + Simplify tdb_free() using check_merge_with_left_record() + Add utility function check_merge_with_left_record() + Improve comments for tdb_free(). + Factor merge_with_left_record() out of tdb_free() + Fix debug message in tdb_free() + Reduce indentation in tdb_free() for merging left + Increase readability of read_record_on_left() + Factor read_record_on_left() out of tdb_free() + Build: improve detection of srcdir. tevent was updated to 0.9.26; (bsc#954658). + New tevent_thread_proxy api + Minor build fixes + Fix compile error in solaris ports backend. + Fix access after free in tevent_common_check_signal(); (bso#11308). + Improve pytevent bindings. + Testsuite fixes. + Improve the documentation of the tevent_add_fd() assumtions. it must be talloc_free'ed before closing the fd! (bso##11141); (bso#11316). + Ignore unexpected signal events in the same way the epoll backend does. + Update the tevent_data.dox tutrial stuff to fix some errors, including white space problems. + Use tevent_req_simple_recv_unix in a few places. + Remove unused exit_code in tevent_select.c + Remove unused exit_code in tevent_poll.c + Build: improve detection of srcdir + Lib: tevent: make tevent_sig_increment atomic. + Update flags in tevent pkgconfig file Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 12: zypper in -t patch SUSE-SLE-SDK-12-2015-994=1 - SUSE Linux Enterprise Server 12: zypper in -t patch SUSE-SLE-SERVER-12-2015-994=1 - SUSE Linux Enterprise Desktop 12: zypper in -t patch SUSE-SLE-DESKTOP-12-2015-994=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 12 (ppc64le s390x x86_64): ldb-debugsource-1.1.24-4.3.1 libdcerpc-atsvc-devel-4.1.12-18.3.1 libdcerpc-atsvc0-4.1.12-18.3.1 libdcerpc-atsvc0-debuginfo-4.1.12-18.3.1 libdcerpc-devel-4.1.12-18.3.1 libdcerpc-samr-devel-4.1.12-18.3.1 libdcerpc-samr0-4.1.12-18.3.1 libdcerpc-samr0-debuginfo-4.1.12-18.3.1 libgensec-devel-4.1.12-18.3.1 libldb-devel-1.1.24-4.3.1 libndr-devel-4.1.12-18.3.1 libndr-krb5pac-devel-4.1.12-18.3.1 libndr-nbt-devel-4.1.12-18.3.1 libndr-standard-devel-4.1.12-18.3.1 libnetapi-devel-4.1.12-18.3.1 libpdb-devel-4.1.12-18.3.1 libregistry-devel-4.1.12-18.3.1 libsamba-credentials-devel-4.1.12-18.3.1 libsamba-hostconfig-devel-4.1.12-18.3.1 libsamba-policy-devel-4.1.12-18.3.1 libsamba-policy0-4.1.12-18.3.1 libsamba-policy0-debuginfo-4.1.12-18.3.1 libsamba-util-devel-4.1.12-18.3.1 libsamdb-devel-4.1.12-18.3.1 libsmbclient-devel-4.1.12-18.3.1 libsmbclient-raw-devel-4.1.12-18.3.1 libsmbconf-devel-4.1.12-18.3.1 libsmbldap-devel-4.1.12-18.3.1 libsmbsharemodes-devel-4.1.12-18.3.1 libsmbsharemodes0-4.1.12-18.3.1 libsmbsharemodes0-debuginfo-4.1.12-18.3.1 libtalloc-devel-2.1.5-3.4.1 libtdb-devel-1.3.8-2.3.1 libtevent-devel-0.9.26-3.3.1 libtevent-util-devel-4.1.12-18.3.1 libwbclient-devel-4.1.12-18.3.1 pyldb-1.1.24-4.3.1 pyldb-debuginfo-1.1.24-4.3.1 pyldb-devel-1.1.24-4.3.1 pytalloc-devel-2.1.5-3.4.1 samba-core-devel-4.1.12-18.3.1 samba-debuginfo-4.1.12-18.3.1 samba-debugsource-4.1.12-18.3.1 samba-test-devel-4.1.12-18.3.1 talloc-debugsource-2.1.5-3.4.1 tdb-debugsource-1.3.8-2.3.1 tevent-debugsource-0.9.26-3.3.1 - SUSE Linux Enterprise Server 12 (ppc64le s390x x86_64): ldb-debugsource-1.1.24-4.3.1 libdcerpc-binding0-4.1.12-18.3.1 libdcerpc-binding0-debuginfo-4.1.12-18.3.1 libdcerpc0-4.1.12-18.3.1 libdcerpc0-debuginfo-4.1.12-18.3.1 libgensec0-4.1.12-18.3.1 libgensec0-debuginfo-4.1.12-18.3.1 libldb1-1.1.24-4.3.1 libldb1-debuginfo-1.1.24-4.3.1 libndr-krb5pac0-4.1.12-18.3.1 libndr-krb5pac0-debuginfo-4.1.12-18.3.1 libndr-nbt0-4.1.12-18.3.1 libndr-nbt0-debuginfo-4.1.12-18.3.1 libndr-standard0-4.1.12-18.3.1 libndr-standard0-debuginfo-4.1.12-18.3.1 libndr0-4.1.12-18.3.1 libndr0-debuginfo-4.1.12-18.3.1 libnetapi0-4.1.12-18.3.1 libnetapi0-debuginfo-4.1.12-18.3.1 libpdb0-4.1.12-18.3.1 libpdb0-debuginfo-4.1.12-18.3.1 libregistry0-4.1.12-18.3.1 libregistry0-debuginfo-4.1.12-18.3.1 libsamba-credentials0-4.1.12-18.3.1 libsamba-credentials0-debuginfo-4.1.12-18.3.1 libsamba-hostconfig0-4.1.12-18.3.1 libsamba-hostconfig0-debuginfo-4.1.12-18.3.1 libsamba-util0-4.1.12-18.3.1 libsamba-util0-debuginfo-4.1.12-18.3.1 libsamdb0-4.1.12-18.3.1 libsamdb0-debuginfo-4.1.12-18.3.1 libsmbclient-raw0-4.1.12-18.3.1 libsmbclient-raw0-debuginfo-4.1.12-18.3.1 libsmbclient0-4.1.12-18.3.1 libsmbclient0-debuginfo-4.1.12-18.3.1 libsmbconf0-4.1.12-18.3.1 libsmbconf0-debuginfo-4.1.12-18.3.1 libsmbldap0-4.1.12-18.3.1 libsmbldap0-debuginfo-4.1.12-18.3.1 libtalloc2-2.1.5-3.4.1 libtalloc2-debuginfo-2.1.5-3.4.1 libtdb1-1.3.8-2.3.1 libtdb1-debuginfo-1.3.8-2.3.1 libtevent-util0-4.1.12-18.3.1 libtevent-util0-debuginfo-4.1.12-18.3.1 libtevent0-0.9.26-3.3.1 libtevent0-debuginfo-0.9.26-3.3.1 libwbclient0-4.1.12-18.3.1 libwbclient0-debuginfo-4.1.12-18.3.1 pytalloc-2.1.5-3.4.1 pytalloc-debuginfo-2.1.5-3.4.1 samba-4.1.12-18.3.1 samba-client-4.1.12-18.3.1 samba-client-debuginfo-4.1.12-18.3.1 samba-debuginfo-4.1.12-18.3.1 samba-debugsource-4.1.12-18.3.1 samba-libs-4.1.12-18.3.1 samba-libs-debuginfo-4.1.12-18.3.1 samba-winbind-4.1.12-18.3.1 samba-winbind-debuginfo-4.1.12-18.3.1 talloc-debugsource-2.1.5-3.4.1 tdb-debugsource-1.3.8-2.3.1 tdb-tools-1.3.8-2.3.1 tdb-tools-debuginfo-1.3.8-2.3.1 tevent-debugsource-0.9.26-3.3.1 - SUSE Linux Enterprise Server 12 (s390x x86_64): libdcerpc-binding0-32bit-4.1.12-18.3.1 libdcerpc-binding0-debuginfo-32bit-4.1.12-18.3.1 libdcerpc0-32bit-4.1.12-18.3.1 libdcerpc0-debuginfo-32bit-4.1.12-18.3.1 libgensec0-32bit-4.1.12-18.3.1 libgensec0-debuginfo-32bit-4.1.12-18.3.1 libldb1-32bit-1.1.24-4.3.1 libldb1-debuginfo-32bit-1.1.24-4.3.1 libndr-krb5pac0-32bit-4.1.12-18.3.1 libndr-krb5pac0-debuginfo-32bit-4.1.12-18.3.1 libndr-nbt0-32bit-4.1.12-18.3.1 libndr-nbt0-debuginfo-32bit-4.1.12-18.3.1 libndr-standard0-32bit-4.1.12-18.3.1 libndr-standard0-debuginfo-32bit-4.1.12-18.3.1 libndr0-32bit-4.1.12-18.3.1 libndr0-debuginfo-32bit-4.1.12-18.3.1 libnetapi0-32bit-4.1.12-18.3.1 libnetapi0-debuginfo-32bit-4.1.12-18.3.1 libpdb0-32bit-4.1.12-18.3.1 libpdb0-debuginfo-32bit-4.1.12-18.3.1 libsamba-credentials0-32bit-4.1.12-18.3.1 libsamba-credentials0-debuginfo-32bit-4.1.12-18.3.1 libsamba-hostconfig0-32bit-4.1.12-18.3.1 libsamba-hostconfig0-debuginfo-32bit-4.1.12-18.3.1 libsamba-util0-32bit-4.1.12-18.3.1 libsamba-util0-debuginfo-32bit-4.1.12-18.3.1 libsamdb0-32bit-4.1.12-18.3.1 libsamdb0-debuginfo-32bit-4.1.12-18.3.1 libsmbclient-raw0-32bit-4.1.12-18.3.1 libsmbclient-raw0-debuginfo-32bit-4.1.12-18.3.1 libsmbclient0-32bit-4.1.12-18.3.1 libsmbclient0-debuginfo-32bit-4.1.12-18.3.1 libsmbconf0-32bit-4.1.12-18.3.1 libsmbconf0-debuginfo-32bit-4.1.12-18.3.1 libsmbldap0-32bit-4.1.12-18.3.1 libsmbldap0-debuginfo-32bit-4.1.12-18.3.1 libtalloc2-32bit-2.1.5-3.4.1 libtalloc2-debuginfo-32bit-2.1.5-3.4.1 libtdb1-32bit-1.3.8-2.3.1 libtdb1-debuginfo-32bit-1.3.8-2.3.1 libtevent-util0-32bit-4.1.12-18.3.1 libtevent-util0-debuginfo-32bit-4.1.12-18.3.1 libtevent0-32bit-0.9.26-3.3.1 libtevent0-debuginfo-32bit-0.9.26-3.3.1 libwbclient0-32bit-4.1.12-18.3.1 libwbclient0-debuginfo-32bit-4.1.12-18.3.1 pytalloc-32bit-2.1.5-3.4.1 pytalloc-debuginfo-32bit-2.1.5-3.4.1 samba-32bit-4.1.12-18.3.1 samba-client-32bit-4.1.12-18.3.1 samba-client-debuginfo-32bit-4.1.12-18.3.1 samba-debuginfo-32bit-4.1.12-18.3.1 samba-libs-32bit-4.1.12-18.3.1 samba-libs-debuginfo-32bit-4.1.12-18.3.1 samba-winbind-32bit-4.1.12-18.3.1 samba-winbind-debuginfo-32bit-4.1.12-18.3.1 - SUSE Linux Enterprise Server 12 (noarch): samba-doc-4.1.12-18.3.1 - SUSE Linux Enterprise Desktop 12 (x86_64): ldb-debugsource-1.1.24-4.3.1 libdcerpc-binding0-32bit-4.1.12-18.3.1 libdcerpc-binding0-4.1.12-18.3.1 libdcerpc-binding0-debuginfo-32bit-4.1.12-18.3.1 libdcerpc-binding0-debuginfo-4.1.12-18.3.1 libdcerpc0-32bit-4.1.12-18.3.1 libdcerpc0-4.1.12-18.3.1 libdcerpc0-debuginfo-32bit-4.1.12-18.3.1 libdcerpc0-debuginfo-4.1.12-18.3.1 libgensec0-32bit-4.1.12-18.3.1 libgensec0-4.1.12-18.3.1 libgensec0-debuginfo-32bit-4.1.12-18.3.1 libgensec0-debuginfo-4.1.12-18.3.1 libldb1-1.1.24-4.3.1 libldb1-32bit-1.1.24-4.3.1 libldb1-debuginfo-1.1.24-4.3.1 libldb1-debuginfo-32bit-1.1.24-4.3.1 libndr-krb5pac0-32bit-4.1.12-18.3.1 libndr-krb5pac0-4.1.12-18.3.1 libndr-krb5pac0-debuginfo-32bit-4.1.12-18.3.1 libndr-krb5pac0-debuginfo-4.1.12-18.3.1 libndr-nbt0-32bit-4.1.12-18.3.1 libndr-nbt0-4.1.12-18.3.1 libndr-nbt0-debuginfo-32bit-4.1.12-18.3.1 libndr-nbt0-debuginfo-4.1.12-18.3.1 libndr-standard0-32bit-4.1.12-18.3.1 libndr-standard0-4.1.12-18.3.1 libndr-standard0-debuginfo-32bit-4.1.12-18.3.1 libndr-standard0-debuginfo-4.1.12-18.3.1 libndr0-32bit-4.1.12-18.3.1 libndr0-4.1.12-18.3.1 libndr0-debuginfo-32bit-4.1.12-18.3.1 libndr0-debuginfo-4.1.12-18.3.1 libnetapi0-32bit-4.1.12-18.3.1 libnetapi0-4.1.12-18.3.1 libnetapi0-debuginfo-32bit-4.1.12-18.3.1 libnetapi0-debuginfo-4.1.12-18.3.1 libpdb0-32bit-4.1.12-18.3.1 libpdb0-4.1.12-18.3.1 libpdb0-debuginfo-32bit-4.1.12-18.3.1 libpdb0-debuginfo-4.1.12-18.3.1 libregistry0-4.1.12-18.3.1 libregistry0-debuginfo-4.1.12-18.3.1 libsamba-credentials0-32bit-4.1.12-18.3.1 libsamba-credentials0-4.1.12-18.3.1 libsamba-credentials0-debuginfo-32bit-4.1.12-18.3.1 libsamba-credentials0-debuginfo-4.1.12-18.3.1 libsamba-hostconfig0-32bit-4.1.12-18.3.1 libsamba-hostconfig0-4.1.12-18.3.1 libsamba-hostconfig0-debuginfo-32bit-4.1.12-18.3.1 libsamba-hostconfig0-debuginfo-4.1.12-18.3.1 libsamba-util0-32bit-4.1.12-18.3.1 libsamba-util0-4.1.12-18.3.1 libsamba-util0-debuginfo-32bit-4.1.12-18.3.1 libsamba-util0-debuginfo-4.1.12-18.3.1 libsamdb0-32bit-4.1.12-18.3.1 libsamdb0-4.1.12-18.3.1 libsamdb0-debuginfo-32bit-4.1.12-18.3.1 libsamdb0-debuginfo-4.1.12-18.3.1 libsmbclient-raw0-32bit-4.1.12-18.3.1 libsmbclient-raw0-4.1.12-18.3.1 libsmbclient-raw0-debuginfo-32bit-4.1.12-18.3.1 libsmbclient-raw0-debuginfo-4.1.12-18.3.1 libsmbclient0-32bit-4.1.12-18.3.1 libsmbclient0-4.1.12-18.3.1 libsmbclient0-debuginfo-32bit-4.1.12-18.3.1 libsmbclient0-debuginfo-4.1.12-18.3.1 libsmbconf0-32bit-4.1.12-18.3.1 libsmbconf0-4.1.12-18.3.1 libsmbconf0-debuginfo-32bit-4.1.12-18.3.1 libsmbconf0-debuginfo-4.1.12-18.3.1 libsmbldap0-32bit-4.1.12-18.3.1 libsmbldap0-4.1.12-18.3.1 libsmbldap0-debuginfo-32bit-4.1.12-18.3.1 libsmbldap0-debuginfo-4.1.12-18.3.1 libtalloc2-2.1.5-3.4.1 libtalloc2-32bit-2.1.5-3.4.1 libtalloc2-debuginfo-2.1.5-3.4.1 libtalloc2-debuginfo-32bit-2.1.5-3.4.1 libtdb1-1.3.8-2.3.1 libtdb1-32bit-1.3.8-2.3.1 libtdb1-debuginfo-1.3.8-2.3.1 libtdb1-debuginfo-32bit-1.3.8-2.3.1 libtevent-util0-32bit-4.1.12-18.3.1 libtevent-util0-4.1.12-18.3.1 libtevent-util0-debuginfo-32bit-4.1.12-18.3.1 libtevent-util0-debuginfo-4.1.12-18.3.1 libtevent0-0.9.26-3.3.1 libtevent0-32bit-0.9.26-3.3.1 libtevent0-debuginfo-0.9.26-3.3.1 libtevent0-debuginfo-32bit-0.9.26-3.3.1 libwbclient0-32bit-4.1.12-18.3.1 libwbclient0-4.1.12-18.3.1 libwbclient0-debuginfo-32bit-4.1.12-18.3.1 libwbclient0-debuginfo-4.1.12-18.3.1 pytalloc-2.1.5-3.4.1 pytalloc-32bit-2.1.5-3.4.1 pytalloc-debuginfo-2.1.5-3.4.1 pytalloc-debuginfo-32bit-2.1.5-3.4.1 samba-32bit-4.1.12-18.3.1 samba-4.1.12-18.3.1 samba-client-32bit-4.1.12-18.3.1 samba-client-4.1.12-18.3.1 samba-client-debuginfo-32bit-4.1.12-18.3.1 samba-client-debuginfo-4.1.12-18.3.1 samba-debuginfo-32bit-4.1.12-18.3.1 samba-debuginfo-4.1.12-18.3.1 samba-debugsource-4.1.12-18.3.1 samba-libs-32bit-4.1.12-18.3.1 samba-libs-4.1.12-18.3.1 samba-libs-debuginfo-32bit-4.1.12-18.3.1 samba-libs-debuginfo-4.1.12-18.3.1 samba-winbind-32bit-4.1.12-18.3.1 samba-winbind-4.1.12-18.3.1 samba-winbind-debuginfo-32bit-4.1.12-18.3.1 samba-winbind-debuginfo-4.1.12-18.3.1 talloc-debugsource-2.1.5-3.4.1 tdb-debugsource-1.3.8-2.3.1 tevent-debugsource-0.9.26-3.3.1 - SUSE Linux Enterprise Desktop 12 (noarch): samba-doc-4.1.12-18.3.1 References: https://www.suse.com/security/cve/CVE-2015-3223.html https://www.suse.com/security/cve/CVE-2015-5252.html https://www.suse.com/security/cve/CVE-2015-5296.html https://www.suse.com/security/cve/CVE-2015-5299.html https://www.suse.com/security/cve/CVE-2015-5330.html https://www.suse.com/security/cve/CVE-2015-8467.html https://bugzilla.suse.com/295284 https://bugzilla.suse.com/773464 https://bugzilla.suse.com/872912 https://bugzilla.suse.com/901813 https://bugzilla.suse.com/902421 https://bugzilla.suse.com/910378 https://bugzilla.suse.com/912457 https://bugzilla.suse.com/913304 https://bugzilla.suse.com/923374 https://bugzilla.suse.com/931854 https://bugzilla.suse.com/936909 https://bugzilla.suse.com/939051 https://bugzilla.suse.com/947552 https://bugzilla.suse.com/949022 https://bugzilla.suse.com/951660 https://bugzilla.suse.com/953382 https://bugzilla.suse.com/954658 https://bugzilla.suse.com/958581 https://bugzilla.suse.com/958582 https://bugzilla.suse.com/958583 https://bugzilla.suse.com/958584 https://bugzilla.suse.com/958585 https://bugzilla.suse.com/958586 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:2292-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 17 Dec '15

17 Dec '15

SUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:2292-1 Rating: important References: #758040 #814440 #904348 #921949 #924493 #926238 #933514 #936773 #939826 #939926 #940776 #941113 #941202 #943959 #944296 #947241 #947478 #949100 #949192 #949706 #949744 #949936 #950013 #950580 #950750 #950998 #951110 #951165 #951440 #951638 #951864 #952384 #952666 #953717 #953826 #953830 #953971 #953980 #954635 #954986 #955136 #955148 #955224 #955354 #955422 #955533 #955644 #956047 #956053 #956147 #956284 #956703 #956711 #956717 #956801 #956876 #957395 #957546 #958504 #958510 #958647 Cross-References: CVE-2015-0272 CVE-2015-2925 CVE-2015-5156 CVE-2015-7799 CVE-2015-7872 CVE-2015-7990 CVE-2015-8215 Affected Products: SUSE Linux Enterprise Workstation Extension 12-SP1 SUSE Linux Enterprise Software Development Kit 12-SP1 SUSE Linux Enterprise Server 12-SP1 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Live Patching 12 SUSE Linux Enterprise Desktop 12-SP1 ______________________________________________________________________________ An update that solves 7 vulnerabilities and has 54 fixes is now available. Description: The SUSE Linux Enterprise 12 SP1 kernel was updated to 3.12.51 to receive various security and bugfixes. Following features were added: - hwrng: Add a driver for the hwrng found in power7+ systems (fate#315784). Following security bugs were fixed: - CVE-2015-8215: net/ipv6/addrconf.c in the IPv6 stack in the Linux kernel did not validate attempted changes to the MTU value, which allowed context-dependent attackers to cause a denial of service (packet loss) via a value that is (1) smaller than the minimum compliant value or (2) larger than the MTU of an interface, as demonstrated by a Router Advertisement (RA) message that is not validated by a daemon, a different vulnerability than CVE-2015-0272. (bsc#955354) - CVE-2015-5156: The virtnet_probe function in drivers/net/virtio_net.c in the Linux kernel attempted to support a FRAGLIST feature without proper memory allocation, which allowed guest OS users to cause a denial of service (buffer overflow and memory corruption) via a crafted sequence of fragmented packets (bnc#940776). - CVE-2015-7872: The key_gc_unused_keys function in security/keys/gc.c in the Linux kernel allowed local users to cause a denial of service (OOPS) via crafted keyctl commands (bnc#951440). - CVE-2015-7799: The slhc_init function in drivers/net/slip/slhc.c in the Linux kernel did not ensure that certain slot numbers are valid, which allowed local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted PPPIOCSMAXCID ioctl call (bnc#949936). - CVE-2015-2925: The prepend_path function in fs/dcache.c in the Linux kernel did not properly handle rename actions inside a bind mount, which allowed local users to bypass an intended container protection mechanism by renaming a directory, related to a "double-chroot attack (bnc#926238). - CVE-2015-7990: RDS: Verify the underlying transport exists before creating a connection, preventing possible DoS (bsc#952384). The following non-security bugs were fixed: - af_iucv: avoid path quiesce of severed path in shutdown() (bnc#954986, LTC#131684). - alsa: hda - Disable 64bit address for Creative HDA controllers (bnc#814440). - alsa: hda - Fix noise problems on Thinkpad T440s (boo#958504). - alsa: hda - Fix noise problems on Thinkpad T440s (boo#958504). - apparmor: allow SYS_CAP_RESOURCE to be sufficient to prlimit another task (bsc#921949). - audit: correctly record file names with different path name types (bsc#950013). - audit: create private file name copies when auditing inodes (bsc#950013). - bcache: Add btree_insert_node() (bnc#951638). - bcache: Add explicit keylist arg to btree_insert() (bnc#951638). - bcache: backing device set to clean after finishing detach (bsc#951638). - bcache: backing device set to clean after finishing detach (bsc#951638). - bcache: Clean up keylist code (bnc#951638). - bcache: Convert btree_insert_check_key() to btree_insert_node() (bnc#951638). - bcache: Convert bucket_wait to wait_queue_head_t (bnc#951638). - bcache: Convert try_wait to wait_queue_head_t (bnc#951638). - bcache: Explicitly track btree node's parent (bnc#951638). - bcache: Fix a bug when detaching (bsc#951638). - bcache: Fix a lockdep splat in an error path (bnc#951638). - bcache: Fix a shutdown bug (bsc#951638). - bcache: Fix more early shutdown bugs (bsc#951638). - bcache: Fix sysfs splat on shutdown with flash only devs (bsc#951638). - bcache: Insert multiple keys at a time (bnc#951638). - bcache: kill closure locking usage (bnc#951638). - bcache: Refactor journalling flow control (bnc#951638). - bcache: Refactor request_write() (bnc#951638). - bcache: Use blkdev_issue_discard() (bnc#951638). - btrfs: Adjust commit-transaction condition to avoid NO_SPACE more (bsc#958647). - btrfs: Adjust commit-transaction condition to avoid NO_SPACE more (bsc#958647). - btrfs: cleanup: remove no-used alloc_chunk in btrfs_check_data_free_space() (bsc#958647). - btrfs: cleanup: remove no-used alloc_chunk in btrfs_check_data_free_space() (bsc#958647). - btrfs: fix condition of commit transaction (bsc#958647). - btrfs: fix condition of commit transaction (bsc#958647). - btrfs: fix file corruption and data loss after cloning inline extents (bnc#956053). - btrfs: Fix out-of-space bug (bsc#958647). - btrfs: Fix out-of-space bug (bsc#958647). - btrfs: Fix tail space processing in find_free_dev_extent() (bsc#958647). - btrfs: Fix tail space processing in find_free_dev_extent() (bsc#958647). - btrfs: fix the number of transaction units needed to remove a block group (bsc#958647). - btrfs: fix the number of transaction units needed to remove a block group (bsc#958647). - btrfs: fix truncation of compressed and inlined extents (bnc#956053). - btrfs: Set relative data on clear btrfs_block_group_cache->pinned (bsc#958647). - btrfs: Set relative data on clear btrfs_block_group_cache->pinned (bsc#958647). - btrfs: use global reserve when deleting unused block group after ENOSPC (bsc#958647). - btrfs: use global reserve when deleting unused block group after ENOSPC (bsc#958647). - cache: Fix sysfs splat on shutdown with flash only devs (bsc#951638). - cpu: Defer smpboot kthread unparking until CPU known to scheduler (bsc#936773). - cpusets, isolcpus: exclude isolcpus from load balancing in cpusets (bsc#957395). - cxgb4i: Increased the value of MAX_IMM_TX_PKT_LEN from 128 to 256 bytes (bsc#950580). - dlm: make posix locks interruptible, (bsc#947241). - dmapi: Fix xfs dmapi to not unlock & lock XFS_ILOCK_EXCL (bsc#949744). - dm: do not start current request if it would've merged with the previous (bsc#904348). - dm: impose configurable deadline for dm_request_fn's merge heuristic (bsc#904348). - dm-snap: avoid deadock on s->lock when a read is split (bsc#939826). - dm sysfs: introduce ability to add writable attributes (bsc#904348). - drm: Allocate new master object when client becomes master (bsc#956876, bsc#956801). - drm: Fix KABI of "struct drm_file" (bsc#956876, bsc#956801). - drm/i915: add hotplug activation period to hotplug update mask (bsc#953980). - drm/i915: clean up backlight conditional build (bsc#941113). - drm/i915: debug print on backlight register (bsc#941113). - drm/i915: do full backlight setup at enable time (bsc#941113). - drm/i915: do not save/restore backlight registers in KMS (bsc#941113). - drm/i915: Eliminate lots of WARNs when there's no backlight present (bsc#941113). - drm/i915: fix gen2-gen3 backlight set (bsc#941113,bsc#953971). - drm/i915: Fix gen3 self-refresh watermarks (bsc#953830,bsc#953971). - drm/i915: Fix missing backlight update during panel disablement (bsc#941113). - drm/i915: Fix SRC_COPY width on 830/845g (bsc#758040). - drm/i915: gather backlight information at setup (bsc#941113). - drm/i915: handle backlight through chip specific functions (bsc#941113). - drm/i915: Ignore "digital output" and "not HDMI output" bits for eDP detection (bsc#949192). - drm/i915: make asle notifications update backlight on all connectors (bsc#941113). - drm/i915: make backlight info per-connector (bsc#941113). - drm/i915: move backlight level setting in enable/disable to hooks (bsc#941113). - drm/i915: move opregion asle request handling to a work queue (bsc#953826). - drm/i915: nuke get max backlight functions (bsc#941113). - drm/i915/opregion: fix build error on CONFIG_ACPI=n (bsc#953826). - drm/i915: restore backlight precision when converting from ACPI (bsc#941113). - drm/i915/tv: add ->get_config callback (bsc#953830). - drm/i915: use backlight legacy combination mode also for i915gm/i945gm (bsc#941113). - drm/i915: use the initialized backlight max value instead of reading it (bsc#941113). - drm/i915: vlv does not have pipe field in backlight registers (bsc#941113). - fanotify: fix notification of groups with inode & mount marks (bsc#955533). - Fix remove_and_add_spares removes drive added as spare in slot_store (bsc#956717). - genksyms: Handle string literals with spaces in reference files (bsc#958510). - genksyms: Handle string literals with spaces in reference files (bsc#958510). - hwrng: Add a driver for the hwrng found in power7+ systems (fate#315784). in the non-RT kernel to minimize the differences. - ipv4: Do not increase PMTU with Datagram Too Big message (bsc#955224). - ipv6: distinguish frag queues by device for multicast and link-local packets (bsc#955422). - ixgbe: fix broken PFC with X550 (bsc#951864). - ixgbe: use correct fcoe ddp max check (bsc#951864). - kabi: Fix spurious kabi change in mm/util.c. - kABI: protect struct ahci_host_priv. - kabi: Restore kabi in struct iscsi_tpg_attrib (bsc#954635). - kabi: Restore kabi in struct se_cmd (bsc#954635). - kabi: Restore kabi in struct se_subsystem_api (bsc#954635). - ktime: add ktime_after and ktime_before helper (bsc#904348). - mm: factor commit limit calculation (VM Performance). - mm: get rid of "vmalloc_info" from /proc/meminfo (VM Performance). - mm: hugetlbfs: skip shared VMAs when unmapping private pages to satisfy a fault (Automatic NUMA Balancing (fate#315482)). - mm: remove PG_waiters from PAGE_FLAGS_CHECK_AT_FREE (bnc#943959). - mm: vmscan: never isolate more pages than necessary (VM Performance). - Move ktime_after patch to the networking section - nfsrdma: Fix regression in NFSRDMA server (bsc#951110). - pci: Drop "setting latency timer" messages (bsc#956047). - pci: Update VPD size with correct length (bsc#924493). - perf/x86/intel/uncore: Delete an unnecessary check before pci_dev_put() call (bsc#955136). - perf/x86/intel/uncore: Delete an unnecessary check before pci_dev_put() call (bsc#955136). - perf/x86/intel/uncore: Fix multi-segment problem of perf_event_intel_uncore (bsc#955136). - perf/x86/intel/uncore: Fix multi-segment problem of perf_event_intel_uncore (bsc#955136). - pm, hinernate: use put_page in release_swap_writer (bnc#943959). - rcu: Eliminate deadlock between CPU hotplug and expedited grace periods (bsc#949706). - Re-add copy_page_vector_to_user() - ring-buffer: Always run per-cpu ring buffer resize with schedule_work_on() (bnc#956711). - route: Use ipv4_mtu instead of raw rt_pmtu (bsc#955224). - rpm/constraints.in: Require 14GB worth of disk space on POWER The builds started to fail randomly due to ENOSPC errors. - rpm/kernel-binary.spec.in: Always build zImage for ARM - rpm/kernel-binary.spec.in: Do not explicitly set DEBUG_SECTION_MISMATCH CONFIG_DEBUG_SECTION_MISMATCH is a selectable Kconfig option since 2.6.39 and is enabled in our configs. - rpm/kernel-binary.spec.in: Drop the %build_src_dir macro It is the parent directory of the O= directory. - rpm/kernel-binary.spec.in: really pass down %{?_smp_mflags} - rpm/kernel-binary.spec.in: Use parallel make in all invocations Also, remove the lengthy comment, since we are using a standard rpm macro now. - rpm/kernel-binary.spec.in: Use upstream script to support config.addon - s390/dasd: fix disconnected device with valid path mask (bnc#954986, LTC#132707). - s390/dasd: fix invalid PAV assignment after suspend/resume (bnc#954986, LTC#132706). - s390/dasd: fix list_del corruption after lcu changes (bnc#954986, LTC#133077). - sched: Call select_idle_sibling() when not affine_sd (Scheduler Performance). - sched/core: Fix task and run queue sched_info::run_delay inconsistencies (bnc#949100). - sched, isolcpu: make cpu_isolated_map visible outside scheduler (bsc#957395). - sched/numa: Check all nodes when placing a pseudo-interleaved group (Automatic NUMA Balancing (fate#315482)). - sched/numa: Fix math underflow in task_tick_numa() (Automatic NUMA Balancing (fate#315482)). - sched/numa: Only consider less busy nodes as numa balancing destinations (Automatic NUMA Balancing (fate#315482)). - sched: Put expensive runtime debugging checks under a separate Kconfig entry (Scheduler performance). - scsi: hosts: update to use ida_simple for host_no (bsc#939926) - sunrpc/cache: make cache flushing more reliable (bsc#947478). - sunrpc: Fix oops when trace sunrpc_task events in nfs client (bnc#956703). - supported.conf: Support peak_pci and sja1000: These 2 CAN drivers are supported in the RT kernel for a long time so we can also support them - target/pr: fix core_scsi3_pr_seq_non_holder() caller (bnc#952666). - target: Send UA upon LUN RESET tmr completion (bsc#933514). - target: use "se_dev_entry" when allocating UAs (bsc#933514). - Update config files. (bnc#955644) - Update kabi files with sbc_parse_cdb symbol change (bsc#954635). - usbvision fix overflow of interfaces array (bnc#950998). - vmxnet3: adjust ring sizes when interface is down (bsc#950750). - vmxnet3: Fix ethtool -S to return correct rx queue stats (bsc#950750). - x86/efi: Fix invalid parameter error when getting hibernation key (fate#316350, bsc#956284). - x86/evtchn: make use of PHYSDEVOP_map_pirq. - x86/mm: Add parenthesis for TLB tracepoint size calculation (VM Performance (Reduce IPIs during reclaim)). - x86/mm/hotplug: Modify PGD entry when removing memory (VM Functionality, bnc#955148). - x86/mm/hotplug: Pass sync_global_pgds() a correct argument in remove_pagetable() (VM Functionality, bnc#955148). - x86/tsc: Let high latency PIT fail fast in quick_pit_calibrate() (bsc#953717). - xen: fix boot crash in EC2 settings (bsc#956147). - xen: refresh patches.xen/xen-x86_64-m2p-strict (bsc#956147). - xen: Update Xen patches to 3.12.50. - xfs: always drain dio before extending aio write submission (bsc#949744). - xfs: DIO needs an ioend for writes (bsc#949744). - xfs: DIO write completion size updates race (bsc#949744). - xfs: DIO writes within EOF do not need an ioend (bsc#949744). - xfs: direct IO EOF zeroing needs to drain AIO (bsc#949744). - xfs: do not allocate an ioend for direct I/O completions (bsc#949744). - xfs: factor DIO write mapping from get_blocks (bsc#949744). - xfs: handle DIO overwrite EOF update completion correctly (bsc#949744). - xfs: move DIO mapping size calculation (bsc#949744). - xfs: using generic_file_direct_write() is unnecessary (bsc#949744). - xhci: Add spurious wakeup quirk for LynxPoint-LP controllers (bnc#951165). - xhci: Workaround to get Intel xHCI reset working more reliably (bnc#957546). - zfcp: fix fc_host port_type with NPIV (bnc#954986, LTC#132479). Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Workstation Extension 12-SP1: zypper in -t patch SUSE-SLE-WE-12-SP1-2015-985=1 - SUSE Linux Enterprise Software Development Kit 12-SP1: zypper in -t patch SUSE-SLE-SDK-12-SP1-2015-985=1 - SUSE Linux Enterprise Server 12-SP1: zypper in -t patch SUSE-SLE-SERVER-12-SP1-2015-985=1 - SUSE Linux Enterprise Module for Public Cloud 12: zypper in -t patch SUSE-SLE-Module-Public-Cloud-12-2015-985=1 - SUSE Linux Enterprise Live Patching 12: zypper in -t patch SUSE-SLE-Live-Patching-12-2015-985=1 - SUSE Linux Enterprise Desktop 12-SP1: zypper in -t patch SUSE-SLE-DESKTOP-12-SP1-2015-985=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Workstation Extension 12-SP1 (x86_64): kernel-default-debuginfo-3.12.51-60.20.2 kernel-default-debugsource-3.12.51-60.20.2 kernel-default-extra-3.12.51-60.20.2 kernel-default-extra-debuginfo-3.12.51-60.20.2 - SUSE Linux Enterprise Software Development Kit 12-SP1 (ppc64le s390x x86_64): kernel-obs-build-3.12.51-60.20.1 kernel-obs-build-debugsource-3.12.51-60.20.1 - SUSE Linux Enterprise Software Development Kit 12-SP1 (noarch): kernel-docs-3.12.51-60.20.2 - SUSE Linux Enterprise Server 12-SP1 (ppc64le s390x x86_64): kernel-default-3.12.51-60.20.2 kernel-default-base-3.12.51-60.20.2 kernel-default-base-debuginfo-3.12.51-60.20.2 kernel-default-debuginfo-3.12.51-60.20.2 kernel-default-debugsource-3.12.51-60.20.2 kernel-default-devel-3.12.51-60.20.2 kernel-syms-3.12.51-60.20.2 - SUSE Linux Enterprise Server 12-SP1 (x86_64): kernel-xen-3.12.51-60.20.2 kernel-xen-base-3.12.51-60.20.2 kernel-xen-base-debuginfo-3.12.51-60.20.2 kernel-xen-debuginfo-3.12.51-60.20.2 kernel-xen-debugsource-3.12.51-60.20.2 kernel-xen-devel-3.12.51-60.20.2 - SUSE Linux Enterprise Server 12-SP1 (noarch): kernel-devel-3.12.51-60.20.2 kernel-macros-3.12.51-60.20.2 kernel-source-3.12.51-60.20.2 - SUSE Linux Enterprise Server 12-SP1 (s390x): kernel-default-man-3.12.51-60.20.2 - SUSE Linux Enterprise Module for Public Cloud 12 (x86_64): kernel-ec2-3.12.51-60.20.2 kernel-ec2-debuginfo-3.12.51-60.20.2 kernel-ec2-debugsource-3.12.51-60.20.2 kernel-ec2-devel-3.12.51-60.20.2 kernel-ec2-extra-3.12.51-60.20.2 kernel-ec2-extra-debuginfo-3.12.51-60.20.2 - SUSE Linux Enterprise Live Patching 12 (x86_64): kgraft-patch-3_12_51-60_20-default-1-4.1 kgraft-patch-3_12_51-60_20-xen-1-4.1 - SUSE Linux Enterprise Desktop 12-SP1 (x86_64): kernel-default-3.12.51-60.20.2 kernel-default-debuginfo-3.12.51-60.20.2 kernel-default-debugsource-3.12.51-60.20.2 kernel-default-devel-3.12.51-60.20.2 kernel-default-extra-3.12.51-60.20.2 kernel-default-extra-debuginfo-3.12.51-60.20.2 kernel-syms-3.12.51-60.20.2 kernel-xen-3.12.51-60.20.2 kernel-xen-debuginfo-3.12.51-60.20.2 kernel-xen-debugsource-3.12.51-60.20.2 kernel-xen-devel-3.12.51-60.20.2 - SUSE Linux Enterprise Desktop 12-SP1 (noarch): kernel-devel-3.12.51-60.20.2 kernel-macros-3.12.51-60.20.2 kernel-source-3.12.51-60.20.2 References: https://www.suse.com/security/cve/CVE-2015-0272.html https://www.suse.com/security/cve/CVE-2015-2925.html https://www.suse.com/security/cve/CVE-2015-5156.html https://www.suse.com/security/cve/CVE-2015-7799.html https://www.suse.com/security/cve/CVE-2015-7872.html https://www.suse.com/security/cve/CVE-2015-7990.html https://www.suse.com/security/cve/CVE-2015-8215.html https://bugzilla.suse.com/758040 https://bugzilla.suse.com/814440 https://bugzilla.suse.com/904348 https://bugzilla.suse.com/921949 https://bugzilla.suse.com/924493 https://bugzilla.suse.com/926238 https://bugzilla.suse.com/933514 https://bugzilla.suse.com/936773 https://bugzilla.suse.com/939826 https://bugzilla.suse.com/939926 https://bugzilla.suse.com/940776 https://bugzilla.suse.com/941113 https://bugzilla.suse.com/941202 https://bugzilla.suse.com/943959 https://bugzilla.suse.com/944296 https://bugzilla.suse.com/947241 https://bugzilla.suse.com/947478 https://bugzilla.suse.com/949100 https://bugzilla.suse.com/949192 https://bugzilla.suse.com/949706 https://bugzilla.suse.com/949744 https://bugzilla.suse.com/949936 https://bugzilla.suse.com/950013 https://bugzilla.suse.com/950580 https://bugzilla.suse.com/950750 https://bugzilla.suse.com/950998 https://bugzilla.suse.com/951110 https://bugzilla.suse.com/951165 https://bugzilla.suse.com/951440 https://bugzilla.suse.com/951638 https://bugzilla.suse.com/951864 https://bugzilla.suse.com/952384 https://bugzilla.suse.com/952666 https://bugzilla.suse.com/953717 https://bugzilla.suse.com/953826 https://bugzilla.suse.com/953830 https://bugzilla.suse.com/953971 https://bugzilla.suse.com/953980 https://bugzilla.suse.com/954635 https://bugzilla.suse.com/954986 https://bugzilla.suse.com/955136 https://bugzilla.suse.com/955148 https://bugzilla.suse.com/955224 https://bugzilla.suse.com/955354 https://bugzilla.suse.com/955422 https://bugzilla.suse.com/955533 https://bugzilla.suse.com/955644 https://bugzilla.suse.com/956047 https://bugzilla.suse.com/956053 https://bugzilla.suse.com/956147 https://bugzilla.suse.com/956284 https://bugzilla.suse.com/956703 https://bugzilla.suse.com/956711 https://bugzilla.suse.com/956717 https://bugzilla.suse.com/956801 https://bugzilla.suse.com/956876 https://bugzilla.suse.com/957395 https://bugzilla.suse.com/957546 https://bugzilla.suse.com/958504 https://bugzilla.suse.com/958510 https://bugzilla.suse.com/958647 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2015:2291-1: important: Security update for Chromium
by opensuse-security＠opensuse.org 17 Dec '15

17 Dec '15

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2291-1 Rating: important References: #957519 #958481 Cross-References: CVE-2015-6764 CVE-2015-6765 CVE-2015-6766 CVE-2015-6767 CVE-2015-6768 CVE-2015-6769 CVE-2015-6770 CVE-2015-6771 CVE-2015-6772 CVE-2015-6773 CVE-2015-6774 CVE-2015-6775 CVE-2015-6776 CVE-2015-6777 CVE-2015-6778 CVE-2015-6779 CVE-2015-6780 CVE-2015-6781 CVE-2015-6782 CVE-2015-6783 CVE-2015-6784 CVE-2015-6785 CVE-2015-6786 CVE-2015-6787 CVE-2015-6788 CVE-2015-6789 CVE-2015-6790 CVE-2015-6791 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes 28 vulnerabilities is now available. Description: Chromium was updated to 47.0.2526.80 to fix security issues and bugs. The following vulnerabilities were fixed: * CVE-2015-6788: Type confusion in extensions * CVE-2015-6789: Use-after-free in Blink * CVE-2015-6790: Escaping issue in saved pages * CVE-2015-6791: Various fixes from internal audits, fuzzing and other initiatives The following vulnerabilities were fixed in 47.0.2526.73: * CVE-2015-6765: Use-after-free in AppCache * CVE-2015-6766: Use-after-free in AppCache * CVE-2015-6767: Use-after-free in AppCache * CVE-2015-6768: Cross-origin bypass in DOM * CVE-2015-6769: Cross-origin bypass in core * CVE-2015-6770: Cross-origin bypass in DOM * CVE-2015-6771: Out of bounds access in v8 * CVE-2015-6772: Cross-origin bypass in DOM * CVE-2015-6764: Out of bounds access in v8 * CVE-2015-6773: Out of bounds access in Skia * CVE-2015-6774: Use-after-free in Extensions * CVE-2015-6775: Type confusion in PDFium * CVE-2015-6776: Out of bounds access in PDFium * CVE-2015-6777: Use-after-free in DOM * CVE-2015-6778: Out of bounds access in PDFium * CVE-2015-6779: Scheme bypass in PDFium * CVE-2015-6780: Use-after-free in Infobars * CVE-2015-6781: Integer overflow in Sfntly * CVE-2015-6782: Content spoofing in Omnibox * CVE-2015-6783: Signature validation issue in Android Crazy Linker. * CVE-2015-6784: Escaping issue in saved pages * CVE-2015-6785: Wildcard matching issue in CSP * CVE-2015-6786: Scheme bypass in CSP * CVE-2015-6787: Various fixes from internal audits, fuzzing and other initiatives. * Multiple vulnerabilities in V8 fixed at the tip of the 4.7 branch (currently 4.7.80.23) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2015-912=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): chromedriver-47.0.2526.80-35.1 chromedriver-debuginfo-47.0.2526.80-35.1 chromium-47.0.2526.80-35.1 chromium-debuginfo-47.0.2526.80-35.1 chromium-debugsource-47.0.2526.80-35.1 chromium-desktop-gnome-47.0.2526.80-35.1 chromium-desktop-kde-47.0.2526.80-35.1 chromium-ffmpegsumo-47.0.2526.80-35.1 chromium-ffmpegsumo-debuginfo-47.0.2526.80-35.1 imlib2-1.4.5-2.1 imlib2-debuginfo-1.4.5-2.1 imlib2-debugsource-1.4.5-2.1 imlib2-devel-1.4.5-2.1 imlib2-filters-1.4.5-2.1 imlib2-filters-debuginfo-1.4.5-2.1 imlib2-loaders-1.4.5-2.1 imlib2-loaders-debuginfo-1.4.5-2.1 libImlib2-1-1.4.5-2.1 libImlib2-1-debuginfo-1.4.5-2.1 References: https://www.suse.com/security/cve/CVE-2015-6764.html https://www.suse.com/security/cve/CVE-2015-6765.html https://www.suse.com/security/cve/CVE-2015-6766.html https://www.suse.com/security/cve/CVE-2015-6767.html https://www.suse.com/security/cve/CVE-2015-6768.html https://www.suse.com/security/cve/CVE-2015-6769.html https://www.suse.com/security/cve/CVE-2015-6770.html https://www.suse.com/security/cve/CVE-2015-6771.html https://www.suse.com/security/cve/CVE-2015-6772.html https://www.suse.com/security/cve/CVE-2015-6773.html https://www.suse.com/security/cve/CVE-2015-6774.html https://www.suse.com/security/cve/CVE-2015-6775.html https://www.suse.com/security/cve/CVE-2015-6776.html https://www.suse.com/security/cve/CVE-2015-6777.html https://www.suse.com/security/cve/CVE-2015-6778.html https://www.suse.com/security/cve/CVE-2015-6779.html https://www.suse.com/security/cve/CVE-2015-6780.html https://www.suse.com/security/cve/CVE-2015-6781.html https://www.suse.com/security/cve/CVE-2015-6782.html https://www.suse.com/security/cve/CVE-2015-6783.html https://www.suse.com/security/cve/CVE-2015-6784.html https://www.suse.com/security/cve/CVE-2015-6785.html https://www.suse.com/security/cve/CVE-2015-6786.html https://www.suse.com/security/cve/CVE-2015-6787.html https://www.suse.com/security/cve/CVE-2015-6788.html https://www.suse.com/security/cve/CVE-2015-6789.html https://www.suse.com/security/cve/CVE-2015-6790.html https://www.suse.com/security/cve/CVE-2015-6791.html https://bugzilla.suse.com/957519 https://bugzilla.suse.com/958481 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2015:2290-1: important: Security update for Chromium
by opensuse-security＠opensuse.org 17 Dec '15

17 Dec '15

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2290-1 Rating: important References: #957519 #958481 Cross-References: CVE-2015-6764 CVE-2015-6765 CVE-2015-6766 CVE-2015-6767 CVE-2015-6768 CVE-2015-6769 CVE-2015-6770 CVE-2015-6771 CVE-2015-6772 CVE-2015-6773 CVE-2015-6774 CVE-2015-6775 CVE-2015-6776 CVE-2015-6777 CVE-2015-6778 CVE-2015-6779 CVE-2015-6780 CVE-2015-6781 CVE-2015-6782 CVE-2015-6783 CVE-2015-6784 CVE-2015-6785 CVE-2015-6786 CVE-2015-6787 CVE-2015-6788 CVE-2015-6789 CVE-2015-6790 CVE-2015-6791 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes 28 vulnerabilities is now available. Description: Chromium was updated to 47.0.2526.80 to fix security issues and bugs. The following vulnerabilities were fixed: * CVE-2015-6788: Type confusion in extensions * CVE-2015-6789: Use-after-free in Blink * CVE-2015-6790: Escaping issue in saved pages * CVE-2015-6791: Various fixes from internal audits, fuzzing and other initiatives The following vulnerabilities were fixed in 47.0.2526.73: * CVE-2015-6765: Use-after-free in AppCache * CVE-2015-6766: Use-after-free in AppCache * CVE-2015-6767: Use-after-free in AppCache * CVE-2015-6768: Cross-origin bypass in DOM * CVE-2015-6769: Cross-origin bypass in core * CVE-2015-6770: Cross-origin bypass in DOM * CVE-2015-6771: Out of bounds access in v8 * CVE-2015-6772: Cross-origin bypass in DOM * CVE-2015-6764: Out of bounds access in v8 * CVE-2015-6773: Out of bounds access in Skia * CVE-2015-6774: Use-after-free in Extensions * CVE-2015-6775: Type confusion in PDFium * CVE-2015-6776: Out of bounds access in PDFium * CVE-2015-6777: Use-after-free in DOM * CVE-2015-6778: Out of bounds access in PDFium * CVE-2015-6779: Scheme bypass in PDFium * CVE-2015-6780: Use-after-free in Infobars * CVE-2015-6781: Integer overflow in Sfntly * CVE-2015-6782: Content spoofing in Omnibox * CVE-2015-6783: Signature validation issue in Android Crazy Linker. * CVE-2015-6784: Escaping issue in saved pages * CVE-2015-6785: Wildcard matching issue in CSP * CVE-2015-6786: Scheme bypass in CSP * CVE-2015-6787: Various fixes from internal audits, fuzzing and other initiatives. * Multiple vulnerabilities in V8 fixed at the tip of the 4.7 branch (currently 4.7.80.23) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-912=1 - openSUSE 13.2: zypper in -t patch openSUSE-2015-912=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-912=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): chromedriver-47.0.2526.80-7.1 chromedriver-debuginfo-47.0.2526.80-7.1 chromium-47.0.2526.80-7.1 chromium-debuginfo-47.0.2526.80-7.1 chromium-debugsource-47.0.2526.80-7.1 chromium-desktop-gnome-47.0.2526.80-7.1 chromium-desktop-kde-47.0.2526.80-7.1 chromium-ffmpegsumo-47.0.2526.80-7.1 chromium-ffmpegsumo-debuginfo-47.0.2526.80-7.1 - openSUSE 13.2 (i586 x86_64): chromedriver-47.0.2526.80-61.1 chromedriver-debuginfo-47.0.2526.80-61.1 chromium-47.0.2526.80-61.1 chromium-debuginfo-47.0.2526.80-61.1 chromium-debugsource-47.0.2526.80-61.1 chromium-desktop-gnome-47.0.2526.80-61.1 chromium-desktop-kde-47.0.2526.80-61.1 chromium-ffmpegsumo-47.0.2526.80-61.1 chromium-ffmpegsumo-debuginfo-47.0.2526.80-61.1 - openSUSE 13.1 (i586 x86_64): chromedriver-47.0.2526.80-116.1 chromedriver-debuginfo-47.0.2526.80-116.1 chromium-47.0.2526.80-116.1 chromium-debuginfo-47.0.2526.80-116.1 chromium-debugsource-47.0.2526.80-116.1 chromium-desktop-gnome-47.0.2526.80-116.1 chromium-desktop-kde-47.0.2526.80-116.1 chromium-ffmpegsumo-47.0.2526.80-116.1 chromium-ffmpegsumo-debuginfo-47.0.2526.80-116.1 References: https://www.suse.com/security/cve/CVE-2015-6764.html https://www.suse.com/security/cve/CVE-2015-6765.html https://www.suse.com/security/cve/CVE-2015-6766.html https://www.suse.com/security/cve/CVE-2015-6767.html https://www.suse.com/security/cve/CVE-2015-6768.html https://www.suse.com/security/cve/CVE-2015-6769.html https://www.suse.com/security/cve/CVE-2015-6770.html https://www.suse.com/security/cve/CVE-2015-6771.html https://www.suse.com/security/cve/CVE-2015-6772.html https://www.suse.com/security/cve/CVE-2015-6773.html https://www.suse.com/security/cve/CVE-2015-6774.html https://www.suse.com/security/cve/CVE-2015-6775.html https://www.suse.com/security/cve/CVE-2015-6776.html https://www.suse.com/security/cve/CVE-2015-6777.html https://www.suse.com/security/cve/CVE-2015-6778.html https://www.suse.com/security/cve/CVE-2015-6779.html https://www.suse.com/security/cve/CVE-2015-6780.html https://www.suse.com/security/cve/CVE-2015-6781.html https://www.suse.com/security/cve/CVE-2015-6782.html https://www.suse.com/security/cve/CVE-2015-6783.html https://www.suse.com/security/cve/CVE-2015-6784.html https://www.suse.com/security/cve/CVE-2015-6785.html https://www.suse.com/security/cve/CVE-2015-6786.html https://www.suse.com/security/cve/CVE-2015-6787.html https://www.suse.com/security/cve/CVE-2015-6788.html https://www.suse.com/security/cve/CVE-2015-6789.html https://www.suse.com/security/cve/CVE-2015-6790.html https://www.suse.com/security/cve/CVE-2015-6791.html https://bugzilla.suse.com/957519 https://bugzilla.suse.com/958481 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:2168-2: important: Security update for java-1_7_1-ibm
by opensuse-security＠opensuse.org 14 Dec '15

14 Dec '15

SUSE Security Update: Security update for java-1_7_1-ibm ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:2168-2 Rating: important References: #941939 #955131 Cross-References: CVE-2015-0204 CVE-2015-0458 CVE-2015-0459 CVE-2015-0469 CVE-2015-0477 CVE-2015-0478 CVE-2015-0480 CVE-2015-0488 CVE-2015-0491 CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-2015-4871 CVE-2015-4872 CVE-2015-4882 CVE-2015-4883 CVE-2015-4893 CVE-2015-4902 CVE-2015-4903 CVE-2015-4911 CVE-2015-5006 Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP1 SUSE Linux Enterprise Server 12-SP1 ______________________________________________________________________________ An update that fixes 29 vulnerabilities is now available. Description: The java-1_7_1-ibm package was updated to versioin 7.1-3.20 to fix several security and non security issues: - bnc#955131: Version update to 7.1-3.20: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-2015-4871 CVE-2015-4872 CVE-2015-4882 CVE-2015-4883 CVE-2015-4893 CVE-2015-4902 CVE-2015-4903 CVE-2015-4911 CVE-2015-5006 - Add backcompat symlinks for sdkdir - bnc#941939: Fix to provide %{name} instead of %{sdklnk} only in _jvmprivdir Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 12-SP1: zypper in -t patch SUSE-SLE-SDK-12-SP1-2015-920=1 - SUSE Linux Enterprise Server 12-SP1: zypper in -t patch SUSE-SLE-SERVER-12-SP1-2015-920=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 12-SP1 (ppc64le s390x x86_64): java-1_7_1-ibm-devel-1.7.1_sr3.20-18.1 - SUSE Linux Enterprise Server 12-SP1 (ppc64le s390x x86_64): java-1_7_1-ibm-1.7.1_sr3.20-18.1 java-1_7_1-ibm-jdbc-1.7.1_sr3.20-18.1 - SUSE Linux Enterprise Server 12-SP1 (x86_64): java-1_7_1-ibm-alsa-1.7.1_sr3.20-18.1 java-1_7_1-ibm-plugin-1.7.1_sr3.20-18.1 References: https://www.suse.com/security/cve/CVE-2015-0204.html https://www.suse.com/security/cve/CVE-2015-0458.html https://www.suse.com/security/cve/CVE-2015-0459.html https://www.suse.com/security/cve/CVE-2015-0469.html https://www.suse.com/security/cve/CVE-2015-0477.html https://www.suse.com/security/cve/CVE-2015-0478.html https://www.suse.com/security/cve/CVE-2015-0480.html https://www.suse.com/security/cve/CVE-2015-0488.html https://www.suse.com/security/cve/CVE-2015-0491.html https://www.suse.com/security/cve/CVE-2015-4734.html https://www.suse.com/security/cve/CVE-2015-4803.html https://www.suse.com/security/cve/CVE-2015-4805.html https://www.suse.com/security/cve/CVE-2015-4806.html https://www.suse.com/security/cve/CVE-2015-4810.html https://www.suse.com/security/cve/CVE-2015-4835.html https://www.suse.com/security/cve/CVE-2015-4840.html https://www.suse.com/security/cve/CVE-2015-4842.html https://www.suse.com/security/cve/CVE-2015-4843.html https://www.suse.com/security/cve/CVE-2015-4844.html https://www.suse.com/security/cve/CVE-2015-4860.html https://www.suse.com/security/cve/CVE-2015-4871.html https://www.suse.com/security/cve/CVE-2015-4872.html https://www.suse.com/security/cve/CVE-2015-4882.html https://www.suse.com/security/cve/CVE-2015-4883.html https://www.suse.com/security/cve/CVE-2015-4893.html https://www.suse.com/security/cve/CVE-2015-4902.html https://www.suse.com/security/cve/CVE-2015-4903.html https://www.suse.com/security/cve/CVE-2015-4911.html https://www.suse.com/security/cve/CVE-2015-5006.html https://bugzilla.suse.com/941939 https://bugzilla.suse.com/955131 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:2268-1: important: Security update for java-1_8_0-ibm
by opensuse-security＠opensuse.org 14 Dec '15

14 Dec '15

SUSE Security Update: Security update for java-1_8_0-ibm ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:2268-1 Rating: important References: #941939 #955131 Cross-References: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-2015-4871 CVE-2015-4872 CVE-2015-4882 CVE-2015-4883 CVE-2015-4893 CVE-2015-4902 CVE-2015-4903 CVE-2015-4911 CVE-2015-5006 Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP1 SUSE Linux Enterprise Server 12-SP1 ______________________________________________________________________________ An update that fixes 20 vulnerabilities is now available. Description: This update for java-1_8_0-ibm fixes the following issues: - Version update to 8.0-2.0 (bsc#955131): CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-2015-4871 CVE-2015-4872 CVE-2015-4882 CVE-2015-4883 CVE-2015-4893 CVE-2015-4902 CVE-2015-4903 CVE-2015-4911 CVE-2015-5006 - Add backcompat symlinks for sdkdir. - Provide %{name} instead of %{sdklnk} only in _jvmprivdir. (bsc#941939) Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 12-SP1: zypper in -t patch SUSE-SLE-SDK-12-SP1-2015-965=1 - SUSE Linux Enterprise Server 12-SP1: zypper in -t patch SUSE-SLE-SERVER-12-SP1-2015-965=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 12-SP1 (ppc64le s390x x86_64): java-1_8_0-ibm-devel-1.8.0_sr2.0-4.1 - SUSE Linux Enterprise Server 12-SP1 (ppc64le s390x x86_64): java-1_8_0-ibm-1.8.0_sr2.0-4.1 - SUSE Linux Enterprise Server 12-SP1 (x86_64): java-1_8_0-ibm-alsa-1.8.0_sr2.0-4.1 java-1_8_0-ibm-plugin-1.8.0_sr2.0-4.1 References: https://www.suse.com/security/cve/CVE-2015-4734.html https://www.suse.com/security/cve/CVE-2015-4803.html https://www.suse.com/security/cve/CVE-2015-4805.html https://www.suse.com/security/cve/CVE-2015-4806.html https://www.suse.com/security/cve/CVE-2015-4810.html https://www.suse.com/security/cve/CVE-2015-4835.html https://www.suse.com/security/cve/CVE-2015-4840.html https://www.suse.com/security/cve/CVE-2015-4842.html https://www.suse.com/security/cve/CVE-2015-4843.html https://www.suse.com/security/cve/CVE-2015-4844.html https://www.suse.com/security/cve/CVE-2015-4860.html https://www.suse.com/security/cve/CVE-2015-4871.html https://www.suse.com/security/cve/CVE-2015-4872.html https://www.suse.com/security/cve/CVE-2015-4882.html https://www.suse.com/security/cve/CVE-2015-4883.html https://www.suse.com/security/cve/CVE-2015-4893.html https://www.suse.com/security/cve/CVE-2015-4902.html https://www.suse.com/security/cve/CVE-2015-4903.html https://www.suse.com/security/cve/CVE-2015-4911.html https://www.suse.com/security/cve/CVE-2015-5006.html https://bugzilla.suse.com/941939 https://bugzilla.suse.com/955131 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2015:2257-1: important: Security update for mbedtls
by opensuse-security＠opensuse.org 13 Dec '15

13 Dec '15

openSUSE Security Update: Security update for mbedtls ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2257-1 Rating: important References: #949380 Cross-References: CVE-2015-5291 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for mbedtls fixes the following security and non-security issues: - Update to 1.3.15 * Fix potential double free if ssl_set_psk() is called more than once and some allocation fails. Cannot be forced remotely. Found by Guido Vranken, Intelworks. * Fix potential heap corruption on windows when x509_crt_parse_path() is passed a path longer than 2GB. Cannot be triggered remotely. Found by Guido Vranken, Intelworks. * Fix potential buffer overflow in some asn1_write_xxx() functions. Cannot be triggered remotely unless you create X.509 certificates based on untrusted input or write keys of untrusted origin. Found by Guido Vranken, Intelworks. * The x509 max_pathlen constraint was not enforced on intermediate certificates. Found by Nicholas Wilson, fix and tests provided by Janos Follath. #280 and #319 * Self-signed certificates were not excluded from pathlen counting, resulting in some valid X.509 being incorrectly rejected. Found and fix provided by Janos Follath. #319 * Fix bug causing some handshakes to fail due to some non-fatal alerts not begin properly ignored. Found by mancha and Kasom Koht-arsa, #308 * Fix build error with configurations where ecdhe-psk is the only key exchange. Found and fix provided by Chris Hammond. #270 * Fix failures in mpi on sparc(64) due to use of bad assembly code. Found by Kurt Danielson. #292 * Fix typo in name of the extkeyusage oid. found by inestlerode, #314 * Fix bug in asn.1 encoding of booleans that caused generated ca certificates to be rejected by some applications, including OS X Keychain. Found and fixed by Jonathan Leroy, Inikup. * Fix "destination buffer is too small" error in cert_write program. Found and fixed by Jonathan Leroy, Inikup. - Update to 1.3.14 * Added fix for CVE-2015-5291 (boo#949380) to prevent heap corruption due to buffer overflow of the hostname or session ticket. Found by Guido Vranken, Intelworks. * Fix stack buffer overflow in pkcs12 decryption (used by mbedtls_pk_parse_key(file)() when the password is > 129 bytes. Found by Guido Vranken, Intelworks. Not triggerable remotely. * Fix potential buffer overflow in mbedtls_mpi_read_string(). Found by Guido Vranken, Intelworks. Not exploitable remotely in the context of TLS, but might be in other uses. On 32 bit machines, requires reading a string of close to or larger than 1GB to exploit; on 64 bit machines, would require reading a string of close to or larger than 2^62 bytes. * Fix potential random memory allocation in mbedtls_pem_read_buffer() on crafted PEM input data. Found and fix provided by Guido Vranken, Intelworks. Not triggerable remotely in TLS. Triggerable remotely if you accept PEM data from an untrusted source. * Fix potential double-free if ssl_set_psk() is called repeatedly on the same ssl_context object and some memory allocations fail. Found by Guido Vranken, Intelworks. Can not be forced remotely. * Fix possible heap buffer overflow in base64_encode() when the input buffer is 512MB or larger on 32-bit platforms. Found by Guido Vranken, Intelworks. Found by Guido Vranken. Not trigerrable remotely in TLS. * Fix potential heap buffer overflow in servers that perform client authentication against a crafted CA cert. Cannot be triggered remotely unless you allow third parties to pick trust CAs for client auth. Found by Guido Vranken, Intelworks. * Fix compile error in net.c with musl libc. found and patch provided by zhasha (#278). * Fix macroization of 'inline' keywork when building as c++. (#279) * Added checking of hostname length in ssl_set_hostname() to ensure domain names are compliant with RFC 1035. - Changes for 1.3.13 * Fix possible client-side null pointer dereference (read) when the client tries to continue the handshake after it failed (a misuse of the API). (Found and patch provided by Fabian Foerg, Gotham Digital Science using afl-fuzz.) * Add countermeasure against lenstra's rsa-crt attack for pkcs#1 v1.5 signatures. (Found by Florian Weimer, Red Hat.) https://securityblog.redhat.com/2015/09/02/factoring-rsa-keys-with-tls-perf ect-forward-secrecy/ * Setting ssl_min_dhm_bytes in config.h had no effect (overriden in ssl.h) (found by Fabio Solari) (#256) * Fix bug in mbedtls_rsa_public() and mbedtls_rsa_private() that could result trying to unlock an unlocked mutex on invalid input (found by Fredrik Axelsson) (#257) * Fix -wshadow warnings (found by hnrkp) (#240) * Fix unused function warning when using mbedtls_mdx_alt or MBEDTLS_SHAxxx_ALT (found by Henrik) (#239) * Fix memory corruption in pkey programs (found by yankuncheng) (#210) * Fix memory corruption on client with overlong psk identity, around SSL_MAX_CONTENT_LEN or higher - not triggerrable remotely (found by Aleksandrs Saveljevs) (#238) * Fix off-by-one error in parsing supported point format extension that caused some handshakes to fail. * When verifying a certificate chain, if an intermediate certificate is trusted, no later cert is checked. (suggested by hannes-landeholm) (#220). - Changes for 1.3.12 * Increase the minimum size of diffie-hellman parameters accepted by the client to 1024 bits, to protect against Logjam attack. * Increase the size of default diffie-hellman parameters on the server to 2048 bits. This can be changed with ssl_set_dh_params(). * Fix thread-safety issue in ssl debug module (found by edwin van vliet). * Some example programs were not built using make, not included in visual Studio projects (found by Kristian Bendiksen). * Fix build error with cmake and pre-4.5 versions of gcc (found by hugo Leisink). * Fix missing -static-ligcc when building shared libraries for windows with make. * Fix compile error with armcc5 --gnu. * Add ssl_min_dhm_bytes configuration parameter in config.h to choose the minimum size of Diffie-Hellman parameters accepted by the client. * The pem parser now accepts a trailing space at end of lines (#226). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-898=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libmbedtls9-1.3.15-6.1 libmbedtls9-debuginfo-1.3.15-6.1 mbedtls-debugsource-1.3.15-6.1 mbedtls-devel-1.3.15-6.1 - openSUSE Leap 42.1 (x86_64): libmbedtls9-32bit-1.3.15-6.1 libmbedtls9-debuginfo-32bit-1.3.15-6.1 References: https://www.suse.com/security/cve/CVE-2015-5291.html https://bugzilla.suse.com/949380 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:2247-1: important: Security update for flash-player
by opensuse-security＠opensuse.org 10 Dec '15

10 Dec '15

SUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:2247-1 Rating: important References: #958324 Cross-References: CVE-2015-8045 CVE-2015-8047 CVE-2015-8048 CVE-2015-8049 CVE-2015-8050 CVE-2015-8055 CVE-2015-8056 CVE-2015-8057 CVE-2015-8058 CVE-2015-8059 CVE-2015-8060 CVE-2015-8061 CVE-2015-8062 CVE-2015-8063 CVE-2015-8064 CVE-2015-8065 CVE-2015-8066 CVE-2015-8067 CVE-2015-8068 CVE-2015-8069 CVE-2015-8070 CVE-2015-8071 CVE-2015-8401 CVE-2015-8402 CVE-2015-8403 CVE-2015-8404 CVE-2015-8405 CVE-2015-8406 CVE-2015-8407 CVE-2015-8408 CVE-2015-8409 CVE-2015-8410 CVE-2015-8411 CVE-2015-8412 CVE-2015-8413 CVE-2015-8414 CVE-2015-8415 CVE-2015-8416 CVE-2015-8417 CVE-2015-8418 CVE-2015-8419 CVE-2015-8420 CVE-2015-8421 CVE-2015-8422 CVE-2015-8423 CVE-2015-8424 CVE-2015-8425 CVE-2015-8426 CVE-2015-8427 CVE-2015-8428 CVE-2015-8429 CVE-2015-8430 CVE-2015-8431 CVE-2015-8432 CVE-2015-8433 CVE-2015-8434 CVE-2015-8435 CVE-2015-8436 CVE-2015-8437 CVE-2015-8438 CVE-2015-8439 CVE-2015-8440 CVE-2015-8441 CVE-2015-8442 CVE-2015-8443 CVE-2015-8444 CVE-2015-8445 CVE-2015-8446 CVE-2015-8447 CVE-2015-8448 CVE-2015-8449 CVE-2015-8450 CVE-2015-8451 CVE-2015-8452 CVE-2015-8453 CVE-2015-8454 CVE-2015-8455 Affected Products: SUSE Linux Enterprise Workstation Extension 12-SP1 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Desktop 12-SP1 SUSE Linux Enterprise Desktop 12 ______________________________________________________________________________ An update that fixes 77 vulnerabilities is now available. Description: This update for flash-player to version 11.2.202.554 fixes the following security issues in Adobe security advisory APSB15-32. * These updates resolve heap buffer overflow vulnerabilities that could lead to code execution (CVE-2015-8438, CVE-2015-8446). * These updates resolve memory corruption vulnerabilities that could lead to code execution (CVE-2015-8444, CVE-2015-8443, CVE-2015-8417, CVE-2015-8416, CVE-2015-8451, CVE-2015-8047, CVE-2015-8455, CVE-2015-8045, CVE-2015-8418, CVE-2015-8060, CVE-2015-8419, CVE-2015-8408). * These updates resolve security bypass vulnerabilities (CVE-2015-8453, CVE-2015-8440, CVE-2015-8409). * These updates resolve a stack overflow vulnerability that could lead to code execution (CVE-2015-8407). * These updates resolve a type confusion vulnerability that could lead to code execution (CVE-2015-8439). * These updates resolve an integer overflow vulnerability that could lead to code execution (CVE-2015-8445). * These updates resolve a buffer overflow vulnerability that could lead to code execution (CVE-2015-8415) * These updates resolve use-after-free vulnerabilities that could lead to code execution (CVE-2015-8050, CVE-2015-8049, CVE-2015-8437, CVE-2015-8450, CVE-2015-8449, CVE-2015-8448, CVE-2015-8436, CVE-2015-8452, CVE-2015-8048, CVE-2015-8413, CVE-2015-8412, CVE-2015-8410, CVE-2015-8411, CVE-2015-8424, CVE-2015-8422, CVE-2015-8420, CVE-2015-8421, CVE-2015-8423, CVE-2015-8425, CVE-2015-8433, CVE-2015-8432, CVE-2015-8431, CVE-2015-8426, CVE-2015-8430, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8434, CVE-2015-8435, CVE-2015-8414, CVE-2015-8454, CVE-2015-8059, CVE-2015-8058, CVE-2015-8055, CVE-2015-8057, CVE-2015-8056, CVE-2015-8061, CVE-2015-8067, CVE-2015-8066, CVE-2015-8062, CVE-2015-8068, CVE-2015-8064, CVE-2015-8065, CVE-2015-8063, CVE-2015-8405, CVE-2015-8404, CVE-2015-8402, CVE-2015-8403, CVE-2015-8071, CVE-2015-8401, CVE-2015-8406, CVE-2015-8069, CVE-2015-8070, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447). Please also see https://helpx.adobe.com/security/products/flash-player/apsb15-32.html Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Workstation Extension 12-SP1: zypper in -t patch SUSE-SLE-WE-12-SP1-2015-959=1 - SUSE Linux Enterprise Workstation Extension 12: zypper in -t patch SUSE-SLE-WE-12-2015-959=1 - SUSE Linux Enterprise Desktop 12-SP1: zypper in -t patch SUSE-SLE-DESKTOP-12-SP1-2015-959=1 - SUSE Linux Enterprise Desktop 12: zypper in -t patch SUSE-SLE-DESKTOP-12-2015-959=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Workstation Extension 12-SP1 (x86_64): flash-player-11.2.202.554-114.1 flash-player-gnome-11.2.202.554-114.1 - SUSE Linux Enterprise Workstation Extension 12 (x86_64): flash-player-11.2.202.554-114.1 flash-player-gnome-11.2.202.554-114.1 - SUSE Linux Enterprise Desktop 12-SP1 (x86_64): flash-player-11.2.202.554-114.1 flash-player-gnome-11.2.202.554-114.1 - SUSE Linux Enterprise Desktop 12 (x86_64): flash-player-11.2.202.554-114.1 flash-player-gnome-11.2.202.554-114.1 References: https://www.suse.com/security/cve/CVE-2015-8045.html https://www.suse.com/security/cve/CVE-2015-8047.html https://www.suse.com/security/cve/CVE-2015-8048.html https://www.suse.com/security/cve/CVE-2015-8049.html https://www.suse.com/security/cve/CVE-2015-8050.html https://www.suse.com/security/cve/CVE-2015-8055.html https://www.suse.com/security/cve/CVE-2015-8056.html https://www.suse.com/security/cve/CVE-2015-8057.html https://www.suse.com/security/cve/CVE-2015-8058.html https://www.suse.com/security/cve/CVE-2015-8059.html https://www.suse.com/security/cve/CVE-2015-8060.html https://www.suse.com/security/cve/CVE-2015-8061.html https://www.suse.com/security/cve/CVE-2015-8062.html https://www.suse.com/security/cve/CVE-2015-8063.html https://www.suse.com/security/cve/CVE-2015-8064.html https://www.suse.com/security/cve/CVE-2015-8065.html https://www.suse.com/security/cve/CVE-2015-8066.html https://www.suse.com/security/cve/CVE-2015-8067.html https://www.suse.com/security/cve/CVE-2015-8068.html https://www.suse.com/security/cve/CVE-2015-8069.html https://www.suse.com/security/cve/CVE-2015-8070.html https://www.suse.com/security/cve/CVE-2015-8071.html https://www.suse.com/security/cve/CVE-2015-8401.html https://www.suse.com/security/cve/CVE-2015-8402.html https://www.suse.com/security/cve/CVE-2015-8403.html https://www.suse.com/security/cve/CVE-2015-8404.html https://www.suse.com/security/cve/CVE-2015-8405.html https://www.suse.com/security/cve/CVE-2015-8406.html https://www.suse.com/security/cve/CVE-2015-8407.html https://www.suse.com/security/cve/CVE-2015-8408.html https://www.suse.com/security/cve/CVE-2015-8409.html https://www.suse.com/security/cve/CVE-2015-8410.html https://www.suse.com/security/cve/CVE-2015-8411.html https://www.suse.com/security/cve/CVE-2015-8412.html https://www.suse.com/security/cve/CVE-2015-8413.html https://www.suse.com/security/cve/CVE-2015-8414.html https://www.suse.com/security/cve/CVE-2015-8415.html https://www.suse.com/security/cve/CVE-2015-8416.html https://www.suse.com/security/cve/CVE-2015-8417.html https://www.suse.com/security/cve/CVE-2015-8418.html https://www.suse.com/security/cve/CVE-2015-8419.html https://www.suse.com/security/cve/CVE-2015-8420.html https://www.suse.com/security/cve/CVE-2015-8421.html https://www.suse.com/security/cve/CVE-2015-8422.html https://www.suse.com/security/cve/CVE-2015-8423.html https://www.suse.com/security/cve/CVE-2015-8424.html https://www.suse.com/security/cve/CVE-2015-8425.html https://www.suse.com/security/cve/CVE-2015-8426.html https://www.suse.com/security/cve/CVE-2015-8427.html https://www.suse.com/security/cve/CVE-2015-8428.html https://www.suse.com/security/cve/CVE-2015-8429.html https://www.suse.com/security/cve/CVE-2015-8430.html https://www.suse.com/security/cve/CVE-2015-8431.html https://www.suse.com/security/cve/CVE-2015-8432.html https://www.suse.com/security/cve/CVE-2015-8433.html https://www.suse.com/security/cve/CVE-2015-8434.html https://www.suse.com/security/cve/CVE-2015-8435.html https://www.suse.com/security/cve/CVE-2015-8436.html https://www.suse.com/security/cve/CVE-2015-8437.html https://www.suse.com/security/cve/CVE-2015-8438.html https://www.suse.com/security/cve/CVE-2015-8439.html https://www.suse.com/security/cve/CVE-2015-8440.html https://www.suse.com/security/cve/CVE-2015-8441.html https://www.suse.com/security/cve/CVE-2015-8442.html https://www.suse.com/security/cve/CVE-2015-8443.html https://www.suse.com/security/cve/CVE-2015-8444.html https://www.suse.com/security/cve/CVE-2015-8445.html https://www.suse.com/security/cve/CVE-2015-8446.html https://www.suse.com/security/cve/CVE-2015-8447.html https://www.suse.com/security/cve/CVE-2015-8448.html https://www.suse.com/security/cve/CVE-2015-8449.html https://www.suse.com/security/cve/CVE-2015-8450.html https://www.suse.com/security/cve/CVE-2015-8451.html https://www.suse.com/security/cve/CVE-2015-8452.html https://www.suse.com/security/cve/CVE-2015-8453.html https://www.suse.com/security/cve/CVE-2015-8454.html https://www.suse.com/security/cve/CVE-2015-8455.html https://bugzilla.suse.com/958324 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2015:2246-1: important: Security update to MariaDB 5.5.46
by opensuse-security＠opensuse.org 10 Dec '15

10 Dec '15

openSUSE Security Update: Security update to MariaDB 5.5.46 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2246-1 Rating: important References: Cross-References: CVE-2015-4792 CVE-2015-4802 CVE-2015-4807 CVE-2015-4815 CVE-2015-4826 CVE-2015-4830 CVE-2015-4836 CVE-2015-4858 CVE-2015-4861 CVE-2015-4870 CVE-2015-4913 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes 11 vulnerabilities is now available. Description: MariaDB was updated to 5.5.46 to fix security issues and bugs. The following vulnerabilities were fixed in the upstream release: CVE-2015-4802, CVE-2015-4807, CVE-2015-4815, CVE-2015-4826, CVE-2015-4830, CVE-2015-4836, CVE-2015-4858, CVE-2015-4861, CVE-2015-4870, CVE-2015-4913, CVE-2015-4792 A list of upstream changes and release notes can be found here: https://mariadb.com/kb/en/mariadb/mariadb-5546-release-notes/ https://mariadb.com/kb/en/mariadb/mariadb-5546-changelog/ Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-890=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): libmysqlclient-devel-5.5.46-13.1 libmysqlclient18-5.5.46-13.1 libmysqlclient18-debuginfo-5.5.46-13.1 libmysqlclient_r18-5.5.46-13.1 libmysqld-devel-5.5.46-13.1 libmysqld18-5.5.46-13.1 libmysqld18-debuginfo-5.5.46-13.1 mariadb-5.5.46-13.1 mariadb-bench-5.5.46-13.1 mariadb-bench-debuginfo-5.5.46-13.1 mariadb-client-5.5.46-13.1 mariadb-client-debuginfo-5.5.46-13.1 mariadb-debuginfo-5.5.46-13.1 mariadb-debugsource-5.5.46-13.1 mariadb-errormessages-5.5.46-13.1 mariadb-test-5.5.46-13.1 mariadb-test-debuginfo-5.5.46-13.1 mariadb-tools-5.5.46-13.1 mariadb-tools-debuginfo-5.5.46-13.1 - openSUSE 13.1 (x86_64): libmysqlclient18-32bit-5.5.46-13.1 libmysqlclient18-debuginfo-32bit-5.5.46-13.1 libmysqlclient_r18-32bit-5.5.46-13.1 References: https://www.suse.com/security/cve/CVE-2015-4792.html https://www.suse.com/security/cve/CVE-2015-4802.html https://www.suse.com/security/cve/CVE-2015-4807.html https://www.suse.com/security/cve/CVE-2015-4815.html https://www.suse.com/security/cve/CVE-2015-4826.html https://www.suse.com/security/cve/CVE-2015-4830.html https://www.suse.com/security/cve/CVE-2015-4836.html https://www.suse.com/security/cve/CVE-2015-4858.html https://www.suse.com/security/cve/CVE-2015-4861.html https://www.suse.com/security/cve/CVE-2015-4870.html https://www.suse.com/security/cve/CVE-2015-4913.html -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2015:2244-1: important: Security update to MariaDB 10.0.22
by opensuse-security＠opensuse.org 10 Dec '15

10 Dec '15

openSUSE Security Update: Security update to MariaDB 10.0.22 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2244-1 Rating: important References: #937787 Cross-References: CVE-2015-4792 CVE-2015-4802 CVE-2015-4807 CVE-2015-4815 CVE-2015-4826 CVE-2015-4830 CVE-2015-4836 CVE-2015-4858 CVE-2015-4861 CVE-2015-4870 CVE-2015-4913 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes 11 vulnerabilities is now available. Description: MariaDB was updated to 10.0.22 to fix security issues and bugs. The following vulnerabilities were fixed in the upstream release: CVE-2015-4802, CVE-2015-4807, CVE-2015-4815, CVE-2015-4826, CVE-2015-4830, CVE-2015-4836, CVE-2015-4858, CVE-2015-4861, CVE-2015-4870, CVE-2015-4913, CVE-2015-4792 A list of upstream changes and release notes can be found here: * https://kb.askmonty.org/en/mariadb-10022-release-notes/ * https://kb.askmonty.org/en/mariadb-10022-changelog/ The following build problems were fixed: * bsc#937787: fix main.bootstrap test (change default charset to utf8 in test result) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-884=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libmysqlclient-devel-10.0.22-2.18.1 libmysqlclient18-10.0.22-2.18.1 libmysqlclient18-debuginfo-10.0.22-2.18.1 libmysqlclient_r18-10.0.22-2.18.1 libmysqld-devel-10.0.22-2.18.1 libmysqld18-10.0.22-2.18.1 libmysqld18-debuginfo-10.0.22-2.18.1 mariadb-10.0.22-2.18.1 mariadb-bench-10.0.22-2.18.1 mariadb-bench-debuginfo-10.0.22-2.18.1 mariadb-client-10.0.22-2.18.1 mariadb-client-debuginfo-10.0.22-2.18.1 mariadb-debuginfo-10.0.22-2.18.1 mariadb-debugsource-10.0.22-2.18.1 mariadb-errormessages-10.0.22-2.18.1 mariadb-test-10.0.22-2.18.1 mariadb-test-debuginfo-10.0.22-2.18.1 mariadb-tools-10.0.22-2.18.1 mariadb-tools-debuginfo-10.0.22-2.18.1 - openSUSE 13.2 (x86_64): libmysqlclient18-32bit-10.0.22-2.18.1 libmysqlclient18-debuginfo-32bit-10.0.22-2.18.1 libmysqlclient_r18-32bit-10.0.22-2.18.1 References: https://www.suse.com/security/cve/CVE-2015-4792.html https://www.suse.com/security/cve/CVE-2015-4802.html https://www.suse.com/security/cve/CVE-2015-4807.html https://www.suse.com/security/cve/CVE-2015-4815.html https://www.suse.com/security/cve/CVE-2015-4826.html https://www.suse.com/security/cve/CVE-2015-4830.html https://www.suse.com/security/cve/CVE-2015-4836.html https://www.suse.com/security/cve/CVE-2015-4858.html https://www.suse.com/security/cve/CVE-2015-4861.html https://www.suse.com/security/cve/CVE-2015-4870.html https://www.suse.com/security/cve/CVE-2015-4913.html https://bugzilla.suse.com/937787 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2015:2243-1: important: Security update to MySQL 5.6.27
by opensuse-security＠opensuse.org 10 Dec '15

10 Dec '15

openSUSE Security Update: Security update to MySQL 5.6.27 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2243-1 Rating: important References: #924663 #928962 #951391 Cross-References: CVE-2015-0286 CVE-2015-0288 CVE-2015-1789 CVE-2015-1793 CVE-2015-3152 CVE-2015-4730 CVE-2015-4766 CVE-2015-4792 CVE-2015-4800 CVE-2015-4802 CVE-2015-4815 CVE-2015-4816 CVE-2015-4819 CVE-2015-4826 CVE-2015-4830 CVE-2015-4833 CVE-2015-4836 CVE-2015-4858 CVE-2015-4861 CVE-2015-4862 CVE-2015-4864 CVE-2015-4866 CVE-2015-4870 CVE-2015-4879 CVE-2015-4890 CVE-2015-4895 CVE-2015-4904 CVE-2015-4905 CVE-2015-4910 CVE-2015-4913 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes 30 vulnerabilities is now available. Description: MySQL was updated to 5.6.27 to fix security issues and bugs. The following vulnerabilities were fixed as part of the upstream release [boo#951391]: CVE-2015-1793, CVE-2015-0286, CVE-2015-0288, CVE-2015-1789, CVE-2015-4730, CVE-2015-4766, CVE-2015-4792, CVE-2015-4800, CVE-2015-4802, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819, CVE-2015-4826, CVE-2015-4830, CVE-2015-4833, CVE-2015-4836, CVE-2015-4858, CVE-2015-4861, CVE-2015-4862, CVE-2015-4864, CVE-2015-4866, CVE-2015-4870, CVE-2015-4879, CVE-2015-4890, CVE-2015-4895, CVE-2015-4904, CVE-2015-4905, CVE-2015-4910, CVE-2015-4913 Details on these and other changes can be found at: http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-27.html The following security relevant changes are included additionally: * CVE-2015-3152: MySQL lacked SSL enforcement. Using --ssl-verify-server-cert and --ssl[-*] implies that the ssl connection is required. The mysql client will now print an error if ssl is required, but the server can not handle a ssl connection [boo#924663], [boo#928962] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-889=1 - openSUSE 13.2: zypper in -t patch openSUSE-2015-889=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-889=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libmysql56client18-5.6.27-8.1 libmysql56client18-debuginfo-5.6.27-8.1 libmysql56client_r18-5.6.27-8.1 mysql-community-server-5.6.27-8.1 mysql-community-server-bench-5.6.27-8.1 mysql-community-server-bench-debuginfo-5.6.27-8.1 mysql-community-server-client-5.6.27-8.1 mysql-community-server-client-debuginfo-5.6.27-8.1 mysql-community-server-debuginfo-5.6.27-8.1 mysql-community-server-debugsource-5.6.27-8.1 mysql-community-server-errormessages-5.6.27-8.1 mysql-community-server-test-5.6.27-8.1 mysql-community-server-test-debuginfo-5.6.27-8.1 mysql-community-server-tools-5.6.27-8.1 mysql-community-server-tools-debuginfo-5.6.27-8.1 - openSUSE Leap 42.1 (x86_64): libmysql56client18-32bit-5.6.27-8.1 libmysql56client18-debuginfo-32bit-5.6.27-8.1 libmysql56client_r18-32bit-5.6.27-8.1 - openSUSE 13.2 (i586 x86_64): libmysql56client18-5.6.27-2.12.1 libmysql56client18-debuginfo-5.6.27-2.12.1 libmysql56client_r18-5.6.27-2.12.1 mysql-community-server-5.6.27-2.12.1 mysql-community-server-bench-5.6.27-2.12.1 mysql-community-server-bench-debuginfo-5.6.27-2.12.1 mysql-community-server-client-5.6.27-2.12.1 mysql-community-server-client-debuginfo-5.6.27-2.12.1 mysql-community-server-debuginfo-5.6.27-2.12.1 mysql-community-server-debugsource-5.6.27-2.12.1 mysql-community-server-errormessages-5.6.27-2.12.1 mysql-community-server-test-5.6.27-2.12.1 mysql-community-server-test-debuginfo-5.6.27-2.12.1 mysql-community-server-tools-5.6.27-2.12.1 mysql-community-server-tools-debuginfo-5.6.27-2.12.1 - openSUSE 13.2 (x86_64): libmysql56client18-32bit-5.6.27-2.12.1 libmysql56client18-debuginfo-32bit-5.6.27-2.12.1 libmysql56client_r18-32bit-5.6.27-2.12.1 - openSUSE 13.1 (i586 x86_64): libmysql56client18-5.6.27-7.13.1 libmysql56client18-debuginfo-5.6.27-7.13.1 libmysql56client_r18-5.6.27-7.13.1 mysql-community-server-5.6.27-7.13.1 mysql-community-server-bench-5.6.27-7.13.1 mysql-community-server-bench-debuginfo-5.6.27-7.13.1 mysql-community-server-client-5.6.27-7.13.1 mysql-community-server-client-debuginfo-5.6.27-7.13.1 mysql-community-server-debuginfo-5.6.27-7.13.1 mysql-community-server-debugsource-5.6.27-7.13.1 mysql-community-server-errormessages-5.6.27-7.13.1 mysql-community-server-test-5.6.27-7.13.1 mysql-community-server-test-debuginfo-5.6.27-7.13.1 mysql-community-server-tools-5.6.27-7.13.1 mysql-community-server-tools-debuginfo-5.6.27-7.13.1 - openSUSE 13.1 (x86_64): libmysql56client18-32bit-5.6.27-7.13.1 libmysql56client18-debuginfo-32bit-5.6.27-7.13.1 libmysql56client_r18-32bit-5.6.27-7.13.1 References: https://www.suse.com/security/cve/CVE-2015-0286.html https://www.suse.com/security/cve/CVE-2015-0288.html https://www.suse.com/security/cve/CVE-2015-1789.html https://www.suse.com/security/cve/CVE-2015-1793.html https://www.suse.com/security/cve/CVE-2015-3152.html https://www.suse.com/security/cve/CVE-2015-4730.html https://www.suse.com/security/cve/CVE-2015-4766.html https://www.suse.com/security/cve/CVE-2015-4792.html https://www.suse.com/security/cve/CVE-2015-4800.html https://www.suse.com/security/cve/CVE-2015-4802.html https://www.suse.com/security/cve/CVE-2015-4815.html https://www.suse.com/security/cve/CVE-2015-4816.html https://www.suse.com/security/cve/CVE-2015-4819.html https://www.suse.com/security/cve/CVE-2015-4826.html https://www.suse.com/security/cve/CVE-2015-4830.html https://www.suse.com/security/cve/CVE-2015-4833.html https://www.suse.com/security/cve/CVE-2015-4836.html https://www.suse.com/security/cve/CVE-2015-4858.html https://www.suse.com/security/cve/CVE-2015-4861.html https://www.suse.com/security/cve/CVE-2015-4862.html https://www.suse.com/security/cve/CVE-2015-4864.html https://www.suse.com/security/cve/CVE-2015-4866.html https://www.suse.com/security/cve/CVE-2015-4870.html https://www.suse.com/security/cve/CVE-2015-4879.html https://www.suse.com/security/cve/CVE-2015-4890.html https://www.suse.com/security/cve/CVE-2015-4895.html https://www.suse.com/security/cve/CVE-2015-4904.html https://www.suse.com/security/cve/CVE-2015-4905.html https://www.suse.com/security/cve/CVE-2015-4910.html https://www.suse.com/security/cve/CVE-2015-4913.html https://bugzilla.suse.com/924663 https://bugzilla.suse.com/928962 https://bugzilla.suse.com/951391 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2015:2239-1: important: Security update for flash-player
by opensuse-security＠opensuse.org 10 Dec '15

10 Dec '15

openSUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2239-1 Rating: important References: #958324 Cross-References: CVE-2015-8045 CVE-2015-8047 CVE-2015-8048 CVE-2015-8049 CVE-2015-8050 CVE-2015-8055 CVE-2015-8056 CVE-2015-8057 CVE-2015-8058 CVE-2015-8059 CVE-2015-8060 CVE-2015-8061 CVE-2015-8062 CVE-2015-8063 CVE-2015-8064 CVE-2015-8065 CVE-2015-8066 CVE-2015-8067 CVE-2015-8068 CVE-2015-8069 CVE-2015-8070 CVE-2015-8071 CVE-2015-8401 CVE-2015-8402 CVE-2015-8403 CVE-2015-8404 CVE-2015-8405 CVE-2015-8406 CVE-2015-8407 CVE-2015-8408 CVE-2015-8409 CVE-2015-8410 CVE-2015-8411 CVE-2015-8412 CVE-2015-8413 CVE-2015-8414 CVE-2015-8415 CVE-2015-8416 CVE-2015-8417 CVE-2015-8418 CVE-2015-8419 CVE-2015-8420 CVE-2015-8421 CVE-2015-8422 CVE-2015-8423 CVE-2015-8424 CVE-2015-8425 CVE-2015-8426 CVE-2015-8427 CVE-2015-8428 CVE-2015-8429 CVE-2015-8430 CVE-2015-8431 CVE-2015-8432 CVE-2015-8433 CVE-2015-8434 CVE-2015-8435 CVE-2015-8436 CVE-2015-8437 CVE-2015-8438 CVE-2015-8439 CVE-2015-8440 CVE-2015-8441 CVE-2015-8442 CVE-2015-8443 CVE-2015-8444 CVE-2015-8445 CVE-2015-8446 CVE-2015-8447 CVE-2015-8448 CVE-2015-8449 CVE-2015-8450 CVE-2015-8451 CVE-2015-8452 CVE-2015-8453 CVE-2015-8454 CVE-2015-8455 Affected Products: openSUSE 13.2 NonFree openSUSE 13.1 NonFree ______________________________________________________________________________ An update that fixes 77 vulnerabilities is now available. Description: This update for flash-player to version 11.2.202.554 fixes the following security issues in Adobe security advisory APSB15-32. * These updates resolve heap buffer overflow vulnerabilities that could lead to code execution (CVE-2015-8438, CVE-2015-8446). * These updates resolve memory corruption vulnerabilities that could lead to code execution (CVE-2015-8444, CVE-2015-8443, CVE-2015-8417, CVE-2015-8416, CVE-2015-8451, CVE-2015-8047, CVE-2015-8455, CVE-2015-8045, CVE-2015-8418, CVE-2015-8060, CVE-2015-8419, CVE-2015-8408). * These updates resolve security bypass vulnerabilities (CVE-2015-8453, CVE-2015-8440, CVE-2015-8409). * These updates resolve a stack overflow vulnerability that could lead to code execution (CVE-2015-8407). * These updates resolve a type confusion vulnerability that could lead to code execution (CVE-2015-8439). * These updates resolve an integer overflow vulnerability that could lead to code execution (CVE-2015-8445). * These updates resolve a buffer overflow vulnerability that could lead to code execution (CVE-2015-8415) * These updates resolve use-after-free vulnerabilities that could lead to code execution (CVE-2015-8050, CVE-2015-8049, CVE-2015-8437, CVE-2015-8450, CVE-2015-8449, CVE-2015-8448, CVE-2015-8436, CVE-2015-8452, CVE-2015-8048, CVE-2015-8413, CVE-2015-8412, CVE-2015-8410, CVE-2015-8411, CVE-2015-8424, CVE-2015-8422, CVE-2015-8420, CVE-2015-8421, CVE-2015-8423, CVE-2015-8425, CVE-2015-8433, CVE-2015-8432, CVE-2015-8431, CVE-2015-8426, CVE-2015-8430, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8434, CVE-2015-8435, CVE-2015-8414, CVE-2015-8454, CVE-2015-8059, CVE-2015-8058, CVE-2015-8055, CVE-2015-8057, CVE-2015-8056, CVE-2015-8061, CVE-2015-8067, CVE-2015-8066, CVE-2015-8062, CVE-2015-8068, CVE-2015-8064, CVE-2015-8065, CVE-2015-8063, CVE-2015-8405, CVE-2015-8404, CVE-2015-8402, CVE-2015-8403, CVE-2015-8071, CVE-2015-8401, CVE-2015-8406, CVE-2015-8069, CVE-2015-8070, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447). Please also see https://helpx.adobe.com/security/products/flash-player/apsb15-32.html Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2 NonFree: zypper in -t patch openSUSE-2015-882=1 - openSUSE 13.1 NonFree: zypper in -t patch openSUSE-2015-882=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 NonFree (i586 x86_64): flash-player-11.2.202.554-2.82.1 flash-player-gnome-11.2.202.554-2.82.1 flash-player-kde4-11.2.202.554-2.82.1 - openSUSE 13.1 NonFree (i586 x86_64): flash-player-11.2.202.554-147.1 flash-player-gnome-11.2.202.554-147.1 flash-player-kde4-11.2.202.554-147.1 References: https://www.suse.com/security/cve/CVE-2015-8045.html https://www.suse.com/security/cve/CVE-2015-8047.html https://www.suse.com/security/cve/CVE-2015-8048.html https://www.suse.com/security/cve/CVE-2015-8049.html https://www.suse.com/security/cve/CVE-2015-8050.html https://www.suse.com/security/cve/CVE-2015-8055.html https://www.suse.com/security/cve/CVE-2015-8056.html https://www.suse.com/security/cve/CVE-2015-8057.html https://www.suse.com/security/cve/CVE-2015-8058.html https://www.suse.com/security/cve/CVE-2015-8059.html https://www.suse.com/security/cve/CVE-2015-8060.html https://www.suse.com/security/cve/CVE-2015-8061.html https://www.suse.com/security/cve/CVE-2015-8062.html https://www.suse.com/security/cve/CVE-2015-8063.html https://www.suse.com/security/cve/CVE-2015-8064.html https://www.suse.com/security/cve/CVE-2015-8065.html https://www.suse.com/security/cve/CVE-2015-8066.html https://www.suse.com/security/cve/CVE-2015-8067.html https://www.suse.com/security/cve/CVE-2015-8068.html https://www.suse.com/security/cve/CVE-2015-8069.html https://www.suse.com/security/cve/CVE-2015-8070.html https://www.suse.com/security/cve/CVE-2015-8071.html https://www.suse.com/security/cve/CVE-2015-8401.html https://www.suse.com/security/cve/CVE-2015-8402.html https://www.suse.com/security/cve/CVE-2015-8403.html https://www.suse.com/security/cve/CVE-2015-8404.html https://www.suse.com/security/cve/CVE-2015-8405.html https://www.suse.com/security/cve/CVE-2015-8406.html https://www.suse.com/security/cve/CVE-2015-8407.html https://www.suse.com/security/cve/CVE-2015-8408.html https://www.suse.com/security/cve/CVE-2015-8409.html https://www.suse.com/security/cve/CVE-2015-8410.html https://www.suse.com/security/cve/CVE-2015-8411.html https://www.suse.com/security/cve/CVE-2015-8412.html https://www.suse.com/security/cve/CVE-2015-8413.html https://www.suse.com/security/cve/CVE-2015-8414.html https://www.suse.com/security/cve/CVE-2015-8415.html https://www.suse.com/security/cve/CVE-2015-8416.html https://www.suse.com/security/cve/CVE-2015-8417.html https://www.suse.com/security/cve/CVE-2015-8418.html https://www.suse.com/security/cve/CVE-2015-8419.html https://www.suse.com/security/cve/CVE-2015-8420.html https://www.suse.com/security/cve/CVE-2015-8421.html https://www.suse.com/security/cve/CVE-2015-8422.html https://www.suse.com/security/cve/CVE-2015-8423.html https://www.suse.com/security/cve/CVE-2015-8424.html https://www.suse.com/security/cve/CVE-2015-8425.html https://www.suse.com/security/cve/CVE-2015-8426.html https://www.suse.com/security/cve/CVE-2015-8427.html https://www.suse.com/security/cve/CVE-2015-8428.html https://www.suse.com/security/cve/CVE-2015-8429.html https://www.suse.com/security/cve/CVE-2015-8430.html https://www.suse.com/security/cve/CVE-2015-8431.html https://www.suse.com/security/cve/CVE-2015-8432.html https://www.suse.com/security/cve/CVE-2015-8433.html https://www.suse.com/security/cve/CVE-2015-8434.html https://www.suse.com/security/cve/CVE-2015-8435.html https://www.suse.com/security/cve/CVE-2015-8436.html https://www.suse.com/security/cve/CVE-2015-8437.html https://www.suse.com/security/cve/CVE-2015-8438.html https://www.suse.com/security/cve/CVE-2015-8439.html https://www.suse.com/security/cve/CVE-2015-8440.html https://www.suse.com/security/cve/CVE-2015-8441.html https://www.suse.com/security/cve/CVE-2015-8442.html https://www.suse.com/security/cve/CVE-2015-8443.html https://www.suse.com/security/cve/CVE-2015-8444.html https://www.suse.com/security/cve/CVE-2015-8445.html https://www.suse.com/security/cve/CVE-2015-8446.html https://www.suse.com/security/cve/CVE-2015-8447.html https://www.suse.com/security/cve/CVE-2015-8448.html https://www.suse.com/security/cve/CVE-2015-8449.html https://www.suse.com/security/cve/CVE-2015-8450.html https://www.suse.com/security/cve/CVE-2015-8451.html https://www.suse.com/security/cve/CVE-2015-8452.html https://www.suse.com/security/cve/CVE-2015-8453.html https://www.suse.com/security/cve/CVE-2015-8454.html https://www.suse.com/security/cve/CVE-2015-8455.html https://bugzilla.suse.com/958324 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:2236-1: important: Security update for flash-player
by opensuse-security＠opensuse.org 09 Dec '15

09 Dec '15

SUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:2236-1 Rating: important References: #958324 Cross-References: CVE-2015-8045 CVE-2015-8047 CVE-2015-8048 CVE-2015-8049 CVE-2015-8050 CVE-2015-8055 CVE-2015-8056 CVE-2015-8057 CVE-2015-8058 CVE-2015-8059 CVE-2015-8060 CVE-2015-8061 CVE-2015-8062 CVE-2015-8063 CVE-2015-8064 CVE-2015-8065 CVE-2015-8066 CVE-2015-8067 CVE-2015-8068 CVE-2015-8069 CVE-2015-8070 CVE-2015-8071 CVE-2015-8401 CVE-2015-8402 CVE-2015-8403 CVE-2015-8404 CVE-2015-8405 CVE-2015-8406 CVE-2015-8407 CVE-2015-8408 CVE-2015-8409 CVE-2015-8410 CVE-2015-8411 CVE-2015-8412 CVE-2015-8413 CVE-2015-8414 CVE-2015-8415 CVE-2015-8416 CVE-2015-8417 CVE-2015-8418 CVE-2015-8419 CVE-2015-8420 CVE-2015-8421 CVE-2015-8422 CVE-2015-8423 CVE-2015-8424 CVE-2015-8425 CVE-2015-8426 CVE-2015-8427 CVE-2015-8428 CVE-2015-8429 CVE-2015-8430 CVE-2015-8431 CVE-2015-8432 CVE-2015-8433 CVE-2015-8434 CVE-2015-8435 CVE-2015-8436 CVE-2015-8437 CVE-2015-8438 CVE-2015-8439 CVE-2015-8440 CVE-2015-8441 CVE-2015-8442 CVE-2015-8443 CVE-2015-8444 CVE-2015-8445 CVE-2015-8446 CVE-2015-8447 CVE-2015-8448 CVE-2015-8449 CVE-2015-8450 CVE-2015-8451 CVE-2015-8452 CVE-2015-8453 CVE-2015-8454 CVE-2015-8455 Affected Products: SUSE Linux Enterprise Desktop 11-SP4 SUSE Linux Enterprise Desktop 11-SP3 ______________________________________________________________________________ An update that fixes 77 vulnerabilities is now available. Description: This update for flash-player to version 11.2.202.554 fixes the following security issues in Adobe security advisory APSB15-32. * These updates resolve heap buffer overflow vulnerabilities that could lead to code execution (CVE-2015-8438, CVE-2015-8446). * These updates resolve memory corruption vulnerabilities that could lead to code execution (CVE-2015-8444, CVE-2015-8443, CVE-2015-8417, CVE-2015-8416, CVE-2015-8451, CVE-2015-8047, CVE-2015-8455, CVE-2015-8045, CVE-2015-8418, CVE-2015-8060, CVE-2015-8419, CVE-2015-8408). * These updates resolve security bypass vulnerabilities (CVE-2015-8453, CVE-2015-8440, CVE-2015-8409). * These updates resolve a stack overflow vulnerability that could lead to code execution (CVE-2015-8407). * These updates resolve a type confusion vulnerability that could lead to code execution (CVE-2015-8439). * These updates resolve an integer overflow vulnerability that could lead to code execution (CVE-2015-8445). * These updates resolve a buffer overflow vulnerability that could lead to code execution (CVE-2015-8415) * These updates resolve use-after-free vulnerabilities that could lead to code execution (CVE-2015-8050, CVE-2015-8049, CVE-2015-8437, CVE-2015-8450, CVE-2015-8449, CVE-2015-8448, CVE-2015-8436, CVE-2015-8452, CVE-2015-8048, CVE-2015-8413, CVE-2015-8412, CVE-2015-8410, CVE-2015-8411, CVE-2015-8424, CVE-2015-8422, CVE-2015-8420, CVE-2015-8421, CVE-2015-8423, CVE-2015-8425, CVE-2015-8433, CVE-2015-8432, CVE-2015-8431, CVE-2015-8426, CVE-2015-8430, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8434, CVE-2015-8435, CVE-2015-8414, CVE-2015-8454, CVE-2015-8059, CVE-2015-8058, CVE-2015-8055, CVE-2015-8057, CVE-2015-8056, CVE-2015-8061, CVE-2015-8067, CVE-2015-8066, CVE-2015-8062, CVE-2015-8068, CVE-2015-8064, CVE-2015-8065, CVE-2015-8063, CVE-2015-8405, CVE-2015-8404, CVE-2015-8402, CVE-2015-8403, CVE-2015-8071, CVE-2015-8401, CVE-2015-8406, CVE-2015-8069, CVE-2015-8070, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447). Please also see https://helpx.adobe.com/security/products/flash-player/apsb15-32.html Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Desktop 11-SP4: zypper in -t patch sledsp4-flash-player-12254=1 - SUSE Linux Enterprise Desktop 11-SP3: zypper in -t patch sledsp3-flash-player-12254=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Desktop 11-SP4 (i586 x86_64): flash-player-11.2.202.554-0.29.1 flash-player-gnome-11.2.202.554-0.29.1 flash-player-kde4-11.2.202.554-0.29.1 - SUSE Linux Enterprise Desktop 11-SP3 (i586 x86_64): flash-player-11.2.202.554-0.29.1 flash-player-gnome-11.2.202.554-0.29.1 flash-player-kde4-11.2.202.554-0.29.1 References: https://www.suse.com/security/cve/CVE-2015-8045.html https://www.suse.com/security/cve/CVE-2015-8047.html https://www.suse.com/security/cve/CVE-2015-8048.html https://www.suse.com/security/cve/CVE-2015-8049.html https://www.suse.com/security/cve/CVE-2015-8050.html https://www.suse.com/security/cve/CVE-2015-8055.html https://www.suse.com/security/cve/CVE-2015-8056.html https://www.suse.com/security/cve/CVE-2015-8057.html https://www.suse.com/security/cve/CVE-2015-8058.html https://www.suse.com/security/cve/CVE-2015-8059.html https://www.suse.com/security/cve/CVE-2015-8060.html https://www.suse.com/security/cve/CVE-2015-8061.html https://www.suse.com/security/cve/CVE-2015-8062.html https://www.suse.com/security/cve/CVE-2015-8063.html https://www.suse.com/security/cve/CVE-2015-8064.html https://www.suse.com/security/cve/CVE-2015-8065.html https://www.suse.com/security/cve/CVE-2015-8066.html https://www.suse.com/security/cve/CVE-2015-8067.html https://www.suse.com/security/cve/CVE-2015-8068.html https://www.suse.com/security/cve/CVE-2015-8069.html https://www.suse.com/security/cve/CVE-2015-8070.html https://www.suse.com/security/cve/CVE-2015-8071.html https://www.suse.com/security/cve/CVE-2015-8401.html https://www.suse.com/security/cve/CVE-2015-8402.html https://www.suse.com/security/cve/CVE-2015-8403.html https://www.suse.com/security/cve/CVE-2015-8404.html https://www.suse.com/security/cve/CVE-2015-8405.html https://www.suse.com/security/cve/CVE-2015-8406.html https://www.suse.com/security/cve/CVE-2015-8407.html https://www.suse.com/security/cve/CVE-2015-8408.html https://www.suse.com/security/cve/CVE-2015-8409.html https://www.suse.com/security/cve/CVE-2015-8410.html https://www.suse.com/security/cve/CVE-2015-8411.html https://www.suse.com/security/cve/CVE-2015-8412.html https://www.suse.com/security/cve/CVE-2015-8413.html https://www.suse.com/security/cve/CVE-2015-8414.html https://www.suse.com/security/cve/CVE-2015-8415.html https://www.suse.com/security/cve/CVE-2015-8416.html https://www.suse.com/security/cve/CVE-2015-8417.html https://www.suse.com/security/cve/CVE-2015-8418.html https://www.suse.com/security/cve/CVE-2015-8419.html https://www.suse.com/security/cve/CVE-2015-8420.html https://www.suse.com/security/cve/CVE-2015-8421.html https://www.suse.com/security/cve/CVE-2015-8422.html https://www.suse.com/security/cve/CVE-2015-8423.html https://www.suse.com/security/cve/CVE-2015-8424.html https://www.suse.com/security/cve/CVE-2015-8425.html https://www.suse.com/security/cve/CVE-2015-8426.html https://www.suse.com/security/cve/CVE-2015-8427.html https://www.suse.com/security/cve/CVE-2015-8428.html https://www.suse.com/security/cve/CVE-2015-8429.html https://www.suse.com/security/cve/CVE-2015-8430.html https://www.suse.com/security/cve/CVE-2015-8431.html https://www.suse.com/security/cve/CVE-2015-8432.html https://www.suse.com/security/cve/CVE-2015-8433.html https://www.suse.com/security/cve/CVE-2015-8434.html https://www.suse.com/security/cve/CVE-2015-8435.html https://www.suse.com/security/cve/CVE-2015-8436.html https://www.suse.com/security/cve/CVE-2015-8437.html https://www.suse.com/security/cve/CVE-2015-8438.html https://www.suse.com/security/cve/CVE-2015-8439.html https://www.suse.com/security/cve/CVE-2015-8440.html https://www.suse.com/security/cve/CVE-2015-8441.html https://www.suse.com/security/cve/CVE-2015-8442.html https://www.suse.com/security/cve/CVE-2015-8443.html https://www.suse.com/security/cve/CVE-2015-8444.html https://www.suse.com/security/cve/CVE-2015-8445.html https://www.suse.com/security/cve/CVE-2015-8446.html https://www.suse.com/security/cve/CVE-2015-8447.html https://www.suse.com/security/cve/CVE-2015-8448.html https://www.suse.com/security/cve/CVE-2015-8449.html https://www.suse.com/security/cve/CVE-2015-8450.html https://www.suse.com/security/cve/CVE-2015-8451.html https://www.suse.com/security/cve/CVE-2015-8452.html https://www.suse.com/security/cve/CVE-2015-8453.html https://www.suse.com/security/cve/CVE-2015-8454.html https://www.suse.com/security/cve/CVE-2015-8455.html https://bugzilla.suse.com/958324 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:2216-1: important: Security update for java-1_7_0-ibm
by opensuse-security＠opensuse.org 07 Dec '15

07 Dec '15

SUSE Security Update: Security update for java-1_7_0-ibm ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:2216-1 Rating: important References: #941939 #955131 Cross-References: CVE-2015-0204 CVE-2015-0458 CVE-2015-0459 CVE-2015-0469 CVE-2015-0477 CVE-2015-0478 CVE-2015-0480 CVE-2015-0488 CVE-2015-0491 CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-2015-4871 CVE-2015-4872 CVE-2015-4882 CVE-2015-4883 CVE-2015-4893 CVE-2015-4902 CVE-2015-4903 CVE-2015-4911 CVE-2015-5006 Affected Products: SUSE Linux Enterprise Software Development Kit 11-SP3 SUSE Linux Enterprise Server for VMWare 11-SP3 SUSE Linux Enterprise Server 11-SP3 SUSE Linux Enterprise Server 11-SP2-LTSS ______________________________________________________________________________ An update that fixes 29 vulnerabilities is now available. Description: The java-1_7_0-ibm package was updated to version 7.0-9.20 to fix several security and non security issues: - bnc#955131: Version update to 7.0-9.20: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-2015-4871 CVE-2015-4872 CVE-2015-4882 CVE-2015-4883 CVE-2015-4893 CVE-2015-4902 CVE-2015-4903 CVE-2015-4911 CVE-2015-5006 - Add backcompat symlinks for sdkdir - bnc#941939: Fix to provide %{name} instead of %{sdklnk} only in _jvmprivdir Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11-SP3: zypper in -t patch sdksp3-java-1_7_0-ibm-12251=1 - SUSE Linux Enterprise Server for VMWare 11-SP3: zypper in -t patch slessp3-java-1_7_0-ibm-12251=1 - SUSE Linux Enterprise Server 11-SP3: zypper in -t patch slessp3-java-1_7_0-ibm-12251=1 - SUSE Linux Enterprise Server 11-SP2-LTSS: zypper in -t patch slessp2-java-1_7_0-ibm-12251=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11-SP3 (i586 ppc64 s390x x86_64): java-1_7_0-ibm-devel-1.7.0_sr9.20-42.1 - SUSE Linux Enterprise Server for VMWare 11-SP3 (i586 x86_64): java-1_7_0-ibm-1.7.0_sr9.20-42.1 java-1_7_0-ibm-alsa-1.7.0_sr9.20-42.1 java-1_7_0-ibm-jdbc-1.7.0_sr9.20-42.1 java-1_7_0-ibm-plugin-1.7.0_sr9.20-42.1 - SUSE Linux Enterprise Server 11-SP3 (i586 ppc64 s390x x86_64): java-1_7_0-ibm-1.7.0_sr9.20-42.1 java-1_7_0-ibm-jdbc-1.7.0_sr9.20-42.1 - SUSE Linux Enterprise Server 11-SP3 (i586 x86_64): java-1_7_0-ibm-alsa-1.7.0_sr9.20-42.1 java-1_7_0-ibm-plugin-1.7.0_sr9.20-42.1 - SUSE Linux Enterprise Server 11-SP2-LTSS (i586 s390x x86_64): java-1_7_0-ibm-1.7.0_sr9.20-42.1 java-1_7_0-ibm-devel-1.7.0_sr9.20-42.1 java-1_7_0-ibm-jdbc-1.7.0_sr9.20-42.1 - SUSE Linux Enterprise Server 11-SP2-LTSS (i586 x86_64): java-1_7_0-ibm-alsa-1.7.0_sr9.20-42.1 java-1_7_0-ibm-plugin-1.7.0_sr9.20-42.1 References: https://www.suse.com/security/cve/CVE-2015-0204.html https://www.suse.com/security/cve/CVE-2015-0458.html https://www.suse.com/security/cve/CVE-2015-0459.html https://www.suse.com/security/cve/CVE-2015-0469.html https://www.suse.com/security/cve/CVE-2015-0477.html https://www.suse.com/security/cve/CVE-2015-0478.html https://www.suse.com/security/cve/CVE-2015-0480.html https://www.suse.com/security/cve/CVE-2015-0488.html https://www.suse.com/security/cve/CVE-2015-0491.html https://www.suse.com/security/cve/CVE-2015-4734.html https://www.suse.com/security/cve/CVE-2015-4803.html https://www.suse.com/security/cve/CVE-2015-4805.html https://www.suse.com/security/cve/CVE-2015-4806.html https://www.suse.com/security/cve/CVE-2015-4810.html https://www.suse.com/security/cve/CVE-2015-4835.html https://www.suse.com/security/cve/CVE-2015-4840.html https://www.suse.com/security/cve/CVE-2015-4842.html https://www.suse.com/security/cve/CVE-2015-4843.html https://www.suse.com/security/cve/CVE-2015-4844.html https://www.suse.com/security/cve/CVE-2015-4860.html https://www.suse.com/security/cve/CVE-2015-4871.html https://www.suse.com/security/cve/CVE-2015-4872.html https://www.suse.com/security/cve/CVE-2015-4882.html https://www.suse.com/security/cve/CVE-2015-4883.html https://www.suse.com/security/cve/CVE-2015-4893.html https://www.suse.com/security/cve/CVE-2015-4902.html https://www.suse.com/security/cve/CVE-2015-4903.html https://www.suse.com/security/cve/CVE-2015-4911.html https://www.suse.com/security/cve/CVE-2015-5006.html https://bugzilla.suse.com/941939 https://bugzilla.suse.com/955131 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:2194-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 04 Dec '15

04 Dec '15

SUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:2194-1 Rating: important References: #814440 #867595 #904348 #921949 #924493 #930145 #933514 #935961 #936076 #936773 #939826 #939926 #940853 #941202 #941867 #942938 #944749 #945626 #946078 #947241 #947321 #947478 #948521 #948685 #948831 #949100 #949463 #949504 #949706 #949744 #950013 #950750 #950862 #950998 #951110 #951165 #951199 #951440 #951546 #952666 #952758 #953796 #953980 #954635 #955148 #955224 #955422 #955533 #955644 #956047 #956053 #956703 #956711 Cross-References: CVE-2015-0272 CVE-2015-2925 CVE-2015-5283 CVE-2015-5307 CVE-2015-7799 CVE-2015-7872 CVE-2015-7990 CVE-2015-8104 Affected Products: SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Live Patching 12 SUSE Linux Enterprise Desktop 12 ______________________________________________________________________________ An update that solves 8 vulnerabilities and has 45 fixes is now available. Description: The SUSE Linux Enterprise 12 kernel was updated to 3.12.51 to receive various security and bugfixes. Following security bugs were fixed: - CVE-2015-7799: The slhc_init function in drivers/net/slip/slhc.c in the Linux kernel did not ensure that certain slot numbers were valid, which allowed local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted PPPIOCSMAXCID ioctl call (bnc#949936). - CVE-2015-5283: The sctp_init function in net/sctp/protocol.c in the Linux kernel had an incorrect sequence of protocol-initialization steps, which allowed local users to cause a denial of service (panic or memory corruption) by creating SCTP sockets before all of the steps have finished (bnc#947155). - CVE-2015-2925: The prepend_path function in fs/dcache.c in the Linux kernel did not properly handle rename actions inside a bind mount, which allowed local users to bypass an intended container protection mechanism by renaming a directory, related to a "double-chroot attack (bnc#926238). - CVE-2015-8104: The KVM subsystem in the Linux kernel allowed guest OS users to cause a denial of service (host OS panic or hang) by triggering many #DB (aka Debug) exceptions, related to svm.c (bnc#954404). - CVE-2015-5307: The KVM subsystem in the Linux kernel allowed guest OS users to cause a denial of service (host OS panic or hang) by triggering many #AC (aka Alignment Check) exceptions, related to svm.c and vmx.c (bnc#953527). - CVE-2015-7990: RDS: There was no verification that an underlying transport exists when creating a connection, causing usage of a NULL pointer (bsc#952384). - CVE-2015-7872: The key_gc_unused_keys function in security/keys/gc.c in the Linux kernel allowed local users to cause a denial of service (OOPS) via crafted keyctl commands (bnc#951440). - CVE-2015-0272: Missing checks allowed remote attackers to cause a denial of service (IPv6 traffic disruption) via a crafted MTU value in an IPv6 Router Advertisement (RA) message, a different vulnerability than CVE-2015-8215 (bnc#944296). The following non-security bugs were fixed: - ALSA: hda - Disable 64bit address for Creative HDA controllers (bnc#814440). - Add PCI IDs of Intel Sunrise Point-H SATA Controller S232/236 (bsc#953796). - Btrfs: fix file corruption and data loss after cloning inline extents (bnc#956053). - Btrfs: fix truncation of compressed and inlined extents (bnc#956053). - Disable some ppc64le netfilter modules to restore the kabi (bsc#951546) - Fix regression in NFSRDMA server (bsc#951110). - KEYS: Fix race between key destruction and finding a keyring by name (bsc#951440). - KVM: x86: call irq notifiers with directed EOI (bsc#950862). - NVMe: Add shutdown timeout as module parameter (bnc#936076). - NVMe: Mismatched host/device page size support (bsc#935961). - PCI: Drop "setting latency timer" messages (bsc#956047). - SCSI: Fix hard lockup in scsi_remove_target() (bsc#944749). - SCSI: hosts: update to use ida_simple for host_no (bsc#939926) - SUNRPC: Fix oops when trace sunrpc_task events in nfs client (bnc#956703). - Sync ppc64le netfilter config options with other archs (bnc#951546) - Update kabi files with sbc_parse_cdb symbol change (bsc#954635). - apparmor: allow SYS_CAP_RESOURCE to be sufficient to prlimit another task (bsc#921949). - apparmor: temporary work around for bug while unloading policy (boo#941867). - audit: correctly record file names with different path name types (bsc#950013). - audit: create private file name copies when auditing inodes (bsc#950013). - cpu: Defer smpboot kthread unparking until CPU known to scheduler (bsc#936773). - dlm: make posix locks interruptible, (bsc#947241). - dm sysfs: introduce ability to add writable attributes (bsc#904348). - dm-snap: avoid deadock on s->lock when a read is split (bsc#939826). - dm: do not start current request if it would've merged with the previous (bsc#904348). - dm: impose configurable deadline for dm_request_fn's merge heuristic (bsc#904348). - dmapi: Fix xfs dmapi to not unlock and lock XFS_ILOCK_EXCL (bsc#949744). - drm/i915: Avoid race of intel_crt_detect_hotplug() with HPD interrupt, v2 (bsc#942938). - drm/i915: add hotplug activation period to hotplug update mask (bsc#953980). - fanotify: fix notification of groups with inode and mount marks (bsc#955533). - genirq: Make sure irq descriptors really exist when __irq_alloc_descs returns (bsc#945626). - hv: vss: run only on supported host versions (bnc#949504). - ipv4: Do not increase PMTU with Datagram Too Big message (bsc#955224). - ipv6: Check RTF_LOCAL on rt->rt6i_flags instead of rt->dst.flags (bsc#947321). - ipv6: Consider RTF_CACHE when searching the fib6 tree (bsc#947321). - ipv6: Extend the route lookups to low priority metrics (bsc#947321). - ipv6: Stop /128 route from disappearing after pmtu update (bsc#947321). - ipv6: Stop rt6_info from using inet_peer's metrics (bsc#947321). - ipv6: distinguish frag queues by device for multicast and link-local packets (bsc#955422). - ipvs: drop first packet to dead server (bsc#946078). - kABI: protect struct ahci_host_priv. - kABI: protect struct rt6_info changes from bsc#947321 changes (bsc#947321). - kabi: Hide rt6_* types from genksyms on ppc64le (bsc#951546). - kabi: Restore kabi in struct iscsi_tpg_attrib (bsc#954635). - kabi: Restore kabi in struct se_cmd (bsc#954635). - kabi: Restore kabi in struct se_subsystem_api (bsc#954635). - kabi: protect skb_copy_and_csum_datagram_iovec() signature (bsc#951199). - kgr: fix migration of kthreads to the new universe. - kgr: wake up kthreads periodically. - ktime: add ktime_after and ktime_before helper (bsc#904348). - macvlan: Support bonding events (bsc#948521). - net: add length argument to skb_copy_and_csum_datagram_iovec (bsc#951199). - net: handle null iovec pointer in skb_copy_and_csum_datagram_iovec() (bsc#951199). - pci: Update VPD size with correct length (bsc#924493). - rcu: Eliminate deadlock between CPU hotplug and expedited grace periods (bsc#949706). - ring-buffer: Always run per-cpu ring buffer resize with schedule_work_on() (bnc#956711). - route: Use ipv4_mtu instead of raw rt_pmtu (bsc#955224). - rtc: cmos: Cancel alarm timer if alarm time is equal to now+1 seconds (bsc#930145). - rtc: cmos: Revert "rtc-cmos: Add an alarm disable quirk" (bsc#930145). - sched/core: Fix task and run queue sched_info::run_delay inconsistencies (bnc#949100). - sunrpc/cache: make cache flushing more reliable (bsc#947478). - supported.conf: Add missing dependencies of supported modules hwmon_vid needed by nct6775 hwmon_vid needed by w83627ehf reed_solomon needed by ramoops - supported.conf: Fix dependencies on ppc64le of_mdio needed by mdio-gpio - target/pr: fix core_scsi3_pr_seq_non_holder() caller (bnc#952666). - target/rbd: fix COMPARE AND WRITE page vector leak (bnc#948831). - target/rbd: fix PR info memory leaks (bnc#948831). - target: Send UA upon LUN RESET tmr completion (bsc#933514). - target: use "^A" when allocating UAs (bsc#933514). - usbvision fix overflow of interfaces array (bnc#950998). - vmxnet3: Fix ethtool -S to return correct rx queue stats (bsc#950750). - vmxnet3: adjust ring sizes when interface is down (bsc#950750). - x86/efi: Fix boot crash by mapping EFI memmap entries bottom-up at runtime, instead of top-down (bsc#940853). - x86/evtchn: make use of PHYSDEVOP_map_pirq. - x86/mm/hotplug: Modify PGD entry when removing memory (VM Functionality, bnc#955148). - x86/mm/hotplug: Pass sync_global_pgds() a correct argument in remove_pagetable() (VM Functionality, bnc#955148). - xfs: DIO needs an ioend for writes (bsc#949744). - xfs: DIO write completion size updates race (bsc#949744). - xfs: DIO writes within EOF do not need an ioend (bsc#949744). - xfs: always drain dio before extending aio write submission (bsc#949744). - xfs: direct IO EOF zeroing needs to drain AIO (bsc#949744). - xfs: do not allocate an ioend for direct I/O completions (bsc#949744). - xfs: factor DIO write mapping from get_blocks (bsc#949744). - xfs: handle DIO overwrite EOF update completion correctly (bsc#949744). - xfs: move DIO mapping size calculation (bsc#949744). - xfs: using generic_file_direct_write() is unnecessary (bsc#949744). - xhci: Add spurious wakeup quirk for LynxPoint-LP controllers (bnc#951165). - xhci: change xhci 1.0 only restrictions to support xhci 1.1 (bnc#949463). Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Workstation Extension 12: zypper in -t patch SUSE-SLE-WE-12-2015-945=1 - SUSE Linux Enterprise Software Development Kit 12: zypper in -t patch SUSE-SLE-SDK-12-2015-945=1 - SUSE Linux Enterprise Server 12: zypper in -t patch SUSE-SLE-SERVER-12-2015-945=1 - SUSE Linux Enterprise Module for Public Cloud 12: zypper in -t patch SUSE-SLE-Module-Public-Cloud-12-2015-945=1 - SUSE Linux Enterprise Live Patching 12: zypper in -t patch SUSE-SLE-Live-Patching-12-2015-945=1 - SUSE Linux Enterprise Desktop 12: zypper in -t patch SUSE-SLE-DESKTOP-12-2015-945=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Workstation Extension 12 (x86_64): kernel-default-debuginfo-3.12.51-52.31.1 kernel-default-debugsource-3.12.51-52.31.1 kernel-default-extra-3.12.51-52.31.1 kernel-default-extra-debuginfo-3.12.51-52.31.1 - SUSE Linux Enterprise Software Development Kit 12 (ppc64le s390x x86_64): kernel-obs-build-3.12.51-52.31.1 kernel-obs-build-debugsource-3.12.51-52.31.1 - SUSE Linux Enterprise Software Development Kit 12 (noarch): kernel-docs-3.12.51-52.31.5 - SUSE Linux Enterprise Server 12 (ppc64le s390x x86_64): kernel-default-3.12.51-52.31.1 kernel-default-base-3.12.51-52.31.1 kernel-default-base-debuginfo-3.12.51-52.31.1 kernel-default-debuginfo-3.12.51-52.31.1 kernel-default-debugsource-3.12.51-52.31.1 kernel-default-devel-3.12.51-52.31.1 kernel-syms-3.12.51-52.31.1 - SUSE Linux Enterprise Server 12 (x86_64): kernel-xen-3.12.51-52.31.1 kernel-xen-base-3.12.51-52.31.1 kernel-xen-base-debuginfo-3.12.51-52.31.1 kernel-xen-debuginfo-3.12.51-52.31.1 kernel-xen-debugsource-3.12.51-52.31.1 kernel-xen-devel-3.12.51-52.31.1 - SUSE Linux Enterprise Server 12 (noarch): kernel-devel-3.12.51-52.31.1 kernel-macros-3.12.51-52.31.1 kernel-source-3.12.51-52.31.1 - SUSE Linux Enterprise Server 12 (s390x): kernel-default-man-3.12.51-52.31.1 - SUSE Linux Enterprise Module for Public Cloud 12 (x86_64): kernel-ec2-3.12.51-52.31.1 kernel-ec2-debuginfo-3.12.51-52.31.1 kernel-ec2-debugsource-3.12.51-52.31.1 kernel-ec2-devel-3.12.51-52.31.1 kernel-ec2-extra-3.12.51-52.31.1 kernel-ec2-extra-debuginfo-3.12.51-52.31.1 - SUSE Linux Enterprise Live Patching 12 (x86_64): kgraft-patch-3_12_51-52_31-default-1-2.2 kgraft-patch-3_12_51-52_31-xen-1-2.2 - SUSE Linux Enterprise Desktop 12 (x86_64): kernel-default-3.12.51-52.31.1 kernel-default-debuginfo-3.12.51-52.31.1 kernel-default-debugsource-3.12.51-52.31.1 kernel-default-devel-3.12.51-52.31.1 kernel-default-extra-3.12.51-52.31.1 kernel-default-extra-debuginfo-3.12.51-52.31.1 kernel-syms-3.12.51-52.31.1 kernel-xen-3.12.51-52.31.1 kernel-xen-debuginfo-3.12.51-52.31.1 kernel-xen-debugsource-3.12.51-52.31.1 kernel-xen-devel-3.12.51-52.31.1 - SUSE Linux Enterprise Desktop 12 (noarch): kernel-devel-3.12.51-52.31.1 kernel-macros-3.12.51-52.31.1 kernel-source-3.12.51-52.31.1 References: https://www.suse.com/security/cve/CVE-2015-0272.html https://www.suse.com/security/cve/CVE-2015-2925.html https://www.suse.com/security/cve/CVE-2015-5283.html https://www.suse.com/security/cve/CVE-2015-5307.html https://www.suse.com/security/cve/CVE-2015-7799.html https://www.suse.com/security/cve/CVE-2015-7872.html https://www.suse.com/security/cve/CVE-2015-7990.html https://www.suse.com/security/cve/CVE-2015-8104.html https://bugzilla.suse.com/814440 https://bugzilla.suse.com/867595 https://bugzilla.suse.com/904348 https://bugzilla.suse.com/921949 https://bugzilla.suse.com/924493 https://bugzilla.suse.com/930145 https://bugzilla.suse.com/933514 https://bugzilla.suse.com/935961 https://bugzilla.suse.com/936076 https://bugzilla.suse.com/936773 https://bugzilla.suse.com/939826 https://bugzilla.suse.com/939926 https://bugzilla.suse.com/940853 https://bugzilla.suse.com/941202 https://bugzilla.suse.com/941867 https://bugzilla.suse.com/942938 https://bugzilla.suse.com/944749 https://bugzilla.suse.com/945626 https://bugzilla.suse.com/946078 https://bugzilla.suse.com/947241 https://bugzilla.suse.com/947321 https://bugzilla.suse.com/947478 https://bugzilla.suse.com/948521 https://bugzilla.suse.com/948685 https://bugzilla.suse.com/948831 https://bugzilla.suse.com/949100 https://bugzilla.suse.com/949463 https://bugzilla.suse.com/949504 https://bugzilla.suse.com/949706 https://bugzilla.suse.com/949744 https://bugzilla.suse.com/950013 https://bugzilla.suse.com/950750 https://bugzilla.suse.com/950862 https://bugzilla.suse.com/950998 https://bugzilla.suse.com/951110 https://bugzilla.suse.com/951165 https://bugzilla.suse.com/951199 https://bugzilla.suse.com/951440 https://bugzilla.suse.com/951546 https://bugzilla.suse.com/952666 https://bugzilla.suse.com/952758 https://bugzilla.suse.com/953796 https://bugzilla.suse.com/953980 https://bugzilla.suse.com/954635 https://bugzilla.suse.com/955148 https://bugzilla.suse.com/955224 https://bugzilla.suse.com/955422 https://bugzilla.suse.com/955533 https://bugzilla.suse.com/955644 https://bugzilla.suse.com/956047 https://bugzilla.suse.com/956053 https://bugzilla.suse.com/956703 https://bugzilla.suse.com/956711 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:2192-1: important: Security update for java-1_6_0-ibm
by opensuse-security＠opensuse.org 03 Dec '15

03 Dec '15

SUSE Security Update: Security update for java-1_6_0-ibm ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:2192-1 Rating: important References: #941939 #955131 Cross-References: CVE-2015-0204 CVE-2015-0458 CVE-2015-0459 CVE-2015-0469 CVE-2015-0477 CVE-2015-0478 CVE-2015-0480 CVE-2015-0488 CVE-2015-0491 CVE-2015-2625 CVE-2015-2808 CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-2015-4871 CVE-2015-4872 CVE-2015-4882 CVE-2015-4883 CVE-2015-4893 CVE-2015-4902 CVE-2015-4903 CVE-2015-4911 CVE-2015-5006 Affected Products: SUSE Linux Enterprise Module for Legacy Software 12 ______________________________________________________________________________ An update that fixes 31 vulnerabilities is now available. Description: This update for java-1_6_0-ibm fixes the following issues: - Version update to 6.0-16.15 bsc#955131: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-2015-4871 CVE-2015-4872 CVE-2015-4882 CVE-2015-4883 CVE-2015-4893 CVE-2015-4902 CVE-2015-4903 CVE-2015-4911 CVE-2015-5006 CVE-2015-2808 CVE-2015-2625 CVE-2015-0491 CVE-2015-0459 CVE-2015-0469 CVE-2015-0458 CVE-2015-0480 CVE-2015-0488 CVE-2015-0478 CVE-2015-0477 CVE-2015-0204 - Add backcompat symlinks for sdkdir - Fix baselibs.conf policy symlinking - Fix bsc#941939 to provide %{name} instead of %{sdklnk} only in _jvmprivdir Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Module for Legacy Software 12: zypper in -t patch SUSE-SLE-Module-Legacy-12-2015-943=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Module for Legacy Software 12 (s390x x86_64): java-1_6_0-ibm-1.6.0_sr16.15-27.1 java-1_6_0-ibm-fonts-1.6.0_sr16.15-27.1 java-1_6_0-ibm-jdbc-1.6.0_sr16.15-27.1 - SUSE Linux Enterprise Module for Legacy Software 12 (x86_64): java-1_6_0-ibm-plugin-1.6.0_sr16.15-27.1 References: https://www.suse.com/security/cve/CVE-2015-0204.html https://www.suse.com/security/cve/CVE-2015-0458.html https://www.suse.com/security/cve/CVE-2015-0459.html https://www.suse.com/security/cve/CVE-2015-0469.html https://www.suse.com/security/cve/CVE-2015-0477.html https://www.suse.com/security/cve/CVE-2015-0478.html https://www.suse.com/security/cve/CVE-2015-0480.html https://www.suse.com/security/cve/CVE-2015-0488.html https://www.suse.com/security/cve/CVE-2015-0491.html https://www.suse.com/security/cve/CVE-2015-2625.html https://www.suse.com/security/cve/CVE-2015-2808.html https://www.suse.com/security/cve/CVE-2015-4734.html https://www.suse.com/security/cve/CVE-2015-4803.html https://www.suse.com/security/cve/CVE-2015-4805.html https://www.suse.com/security/cve/CVE-2015-4806.html https://www.suse.com/security/cve/CVE-2015-4810.html https://www.suse.com/security/cve/CVE-2015-4835.html https://www.suse.com/security/cve/CVE-2015-4840.html https://www.suse.com/security/cve/CVE-2015-4842.html https://www.suse.com/security/cve/CVE-2015-4843.html https://www.suse.com/security/cve/CVE-2015-4844.html https://www.suse.com/security/cve/CVE-2015-4860.html https://www.suse.com/security/cve/CVE-2015-4871.html https://www.suse.com/security/cve/CVE-2015-4872.html https://www.suse.com/security/cve/CVE-2015-4882.html https://www.suse.com/security/cve/CVE-2015-4883.html https://www.suse.com/security/cve/CVE-2015-4893.html https://www.suse.com/security/cve/CVE-2015-4902.html https://www.suse.com/security/cve/CVE-2015-4903.html https://www.suse.com/security/cve/CVE-2015-4911.html https://www.suse.com/security/cve/CVE-2015-5006.html https://bugzilla.suse.com/941939 https://bugzilla.suse.com/955131 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:2182-1: important: Security update for java-1_7_1-ibm
by opensuse-security＠opensuse.org 03 Dec '15

03 Dec '15

SUSE Security Update: Security update for java-1_7_1-ibm ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:2182-1 Rating: important References: #941939 #955131 Cross-References: CVE-2015-0204 CVE-2015-0458 CVE-2015-0459 CVE-2015-0469 CVE-2015-0477 CVE-2015-0478 CVE-2015-0480 CVE-2015-0488 CVE-2015-0491 CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-2015-4871 CVE-2015-4872 CVE-2015-4882 CVE-2015-4883 CVE-2015-4893 CVE-2015-4902 CVE-2015-4903 CVE-2015-4911 CVE-2015-5006 Affected Products: SUSE Linux Enterprise Software Development Kit 11-SP4 SUSE Linux Enterprise Server 11-SP4 ______________________________________________________________________________ An update that fixes 29 vulnerabilities is now available. Description: The java-1_7_1-ibm package was updated to version 7.1-3.20 to fix several security and non security issues: - bnc#955131: Version update to 7.1-3.20: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-2015-4871 CVE-2015-4872 CVE-2015-4882 CVE-2015-4883 CVE-2015-4893 CVE-2015-4902 CVE-2015-4903 CVE-2015-4911 CVE-2015-5006 - Add backcompat symlinks for sdkdir - bnc#941939: Fix to provide %{name} instead of %{sdklnk} only in _jvmprivdir Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11-SP4: zypper in -t patch sdksp4-java-1_7_1-ibm-12245=1 - SUSE Linux Enterprise Server 11-SP4: zypper in -t patch slessp4-java-1_7_1-ibm-12245=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11-SP4 (i586 ppc64 s390x x86_64): java-1_7_1-ibm-devel-1.7.1_sr3.20-6.1 - SUSE Linux Enterprise Server 11-SP4 (i586 ppc64 s390x x86_64): java-1_7_1-ibm-1.7.1_sr3.20-6.1 java-1_7_1-ibm-jdbc-1.7.1_sr3.20-6.1 - SUSE Linux Enterprise Server 11-SP4 (i586 x86_64): java-1_7_1-ibm-alsa-1.7.1_sr3.20-6.1 java-1_7_1-ibm-plugin-1.7.1_sr3.20-6.1 References: https://www.suse.com/security/cve/CVE-2015-0204.html https://www.suse.com/security/cve/CVE-2015-0458.html https://www.suse.com/security/cve/CVE-2015-0459.html https://www.suse.com/security/cve/CVE-2015-0469.html https://www.suse.com/security/cve/CVE-2015-0477.html https://www.suse.com/security/cve/CVE-2015-0478.html https://www.suse.com/security/cve/CVE-2015-0480.html https://www.suse.com/security/cve/CVE-2015-0488.html https://www.suse.com/security/cve/CVE-2015-0491.html https://www.suse.com/security/cve/CVE-2015-4734.html https://www.suse.com/security/cve/CVE-2015-4803.html https://www.suse.com/security/cve/CVE-2015-4805.html https://www.suse.com/security/cve/CVE-2015-4806.html https://www.suse.com/security/cve/CVE-2015-4810.html https://www.suse.com/security/cve/CVE-2015-4835.html https://www.suse.com/security/cve/CVE-2015-4840.html https://www.suse.com/security/cve/CVE-2015-4842.html https://www.suse.com/security/cve/CVE-2015-4843.html https://www.suse.com/security/cve/CVE-2015-4844.html https://www.suse.com/security/cve/CVE-2015-4860.html https://www.suse.com/security/cve/CVE-2015-4871.html https://www.suse.com/security/cve/CVE-2015-4872.html https://www.suse.com/security/cve/CVE-2015-4882.html https://www.suse.com/security/cve/CVE-2015-4883.html https://www.suse.com/security/cve/CVE-2015-4893.html https://www.suse.com/security/cve/CVE-2015-4902.html https://www.suse.com/security/cve/CVE-2015-4903.html https://www.suse.com/security/cve/CVE-2015-4911.html https://www.suse.com/security/cve/CVE-2015-5006.html https://bugzilla.suse.com/941939 https://bugzilla.suse.com/955131 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:2174-1: important: Security update for dhcpcd
by opensuse-security＠opensuse.org 02 Dec '15

02 Dec '15

SUSE Security Update: Security update for dhcpcd ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:2174-1 Rating: important References: #955762 Affected Products: SUSE Linux Enterprise Server for VMWare 11-SP3 SUSE Linux Enterprise Server 11-SP4 SUSE Linux Enterprise Server 11-SP3 SUSE Linux Enterprise Server 11-SP2-LTSS SUSE Linux Enterprise Desktop 11-SP4 SUSE Linux Enterprise Desktop 11-SP3 SUSE Linux Enterprise Debuginfo 11-SP4 SUSE Linux Enterprise Debuginfo 11-SP3 SUSE Linux Enterprise Debuginfo 11-SP2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: dhcpcd was updated to fix one security issue. This security issue was fixed: - A missing length check in decode_search could have caused DOS (bsc#955762). Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server for VMWare 11-SP3: zypper in -t patch slessp3-dhcpcd-12241=1 - SUSE Linux Enterprise Server 11-SP4: zypper in -t patch slessp4-dhcpcd-12241=1 - SUSE Linux Enterprise Server 11-SP3: zypper in -t patch slessp3-dhcpcd-12241=1 - SUSE Linux Enterprise Server 11-SP2-LTSS: zypper in -t patch slessp2-dhcpcd-12241=1 - SUSE Linux Enterprise Desktop 11-SP4: zypper in -t patch sledsp4-dhcpcd-12241=1 - SUSE Linux Enterprise Desktop 11-SP3: zypper in -t patch sledsp3-dhcpcd-12241=1 - SUSE Linux Enterprise Debuginfo 11-SP4: zypper in -t patch dbgsp4-dhcpcd-12241=1 - SUSE Linux Enterprise Debuginfo 11-SP3: zypper in -t patch dbgsp3-dhcpcd-12241=1 - SUSE Linux Enterprise Debuginfo 11-SP2: zypper in -t patch dbgsp2-dhcpcd-12241=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Server for VMWare 11-SP3 (i586 x86_64): dhcpcd-3.2.3-44.32.2 - SUSE Linux Enterprise Server 11-SP4 (i586 ia64 ppc64 s390x x86_64): dhcpcd-3.2.3-44.32.2 - SUSE Linux Enterprise Server 11-SP3 (i586 ia64 ppc64 s390x x86_64): dhcpcd-3.2.3-44.32.2 - SUSE Linux Enterprise Server 11-SP2-LTSS (i586 s390x x86_64): dhcpcd-3.2.3-44.32.2 - SUSE Linux Enterprise Desktop 11-SP4 (i586 x86_64): dhcpcd-3.2.3-44.32.2 - SUSE Linux Enterprise Desktop 11-SP3 (i586 x86_64): dhcpcd-3.2.3-44.32.2 - SUSE Linux Enterprise Debuginfo 11-SP4 (i586 ia64 ppc64 s390x x86_64): dhcpcd-debuginfo-3.2.3-44.32.2 dhcpcd-debugsource-3.2.3-44.32.2 - SUSE Linux Enterprise Debuginfo 11-SP3 (i586 ia64 ppc64 s390x x86_64): dhcpcd-debuginfo-3.2.3-44.32.2 dhcpcd-debugsource-3.2.3-44.32.2 - SUSE Linux Enterprise Debuginfo 11-SP2 (i586 s390x x86_64): dhcpcd-debuginfo-3.2.3-44.32.2 dhcpcd-debugsource-3.2.3-44.32.2 References: https://bugzilla.suse.com/955762 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:2168-1: important: Security update for java-1_7_1-ibm
by opensuse-security＠opensuse.org 02 Dec '15

02 Dec '15

SUSE Security Update: Security update for java-1_7_1-ibm ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:2168-1 Rating: important References: #941939 #955131 Cross-References: CVE-2015-0204 CVE-2015-0458 CVE-2015-0459 CVE-2015-0469 CVE-2015-0477 CVE-2015-0478 CVE-2015-0480 CVE-2015-0488 CVE-2015-0491 CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-2015-4871 CVE-2015-4872 CVE-2015-4882 CVE-2015-4883 CVE-2015-4893 CVE-2015-4902 CVE-2015-4903 CVE-2015-4911 CVE-2015-5006 Affected Products: SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Server 12 ______________________________________________________________________________ An update that fixes 29 vulnerabilities is now available. Description: The java-1_7_1-ibm package was updated to versioin 7.1-3.20 to fix several security and non security issues: - bnc#955131: Version update to 7.1-3.20: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-2015-4871 CVE-2015-4872 CVE-2015-4882 CVE-2015-4883 CVE-2015-4893 CVE-2015-4902 CVE-2015-4903 CVE-2015-4911 CVE-2015-5006 - Add backcompat symlinks for sdkdir - bnc#941939: Fix to provide %{name} instead of %{sdklnk} only in _jvmprivdir Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 12: zypper in -t patch SUSE-SLE-SDK-12-2015-920=1 - SUSE Linux Enterprise Server 12: zypper in -t patch SUSE-SLE-SERVER-12-2015-920=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 12 (ppc64le s390x x86_64): java-1_7_1-ibm-devel-1.7.1_sr3.20-17.1 - SUSE Linux Enterprise Server 12 (ppc64le s390x x86_64): java-1_7_1-ibm-1.7.1_sr3.20-17.1 java-1_7_1-ibm-jdbc-1.7.1_sr3.20-17.1 - SUSE Linux Enterprise Server 12 (x86_64): java-1_7_1-ibm-alsa-1.7.1_sr3.20-17.1 java-1_7_1-ibm-plugin-1.7.1_sr3.20-17.1 References: https://www.suse.com/security/cve/CVE-2015-0204.html https://www.suse.com/security/cve/CVE-2015-0458.html https://www.suse.com/security/cve/CVE-2015-0459.html https://www.suse.com/security/cve/CVE-2015-0469.html https://www.suse.com/security/cve/CVE-2015-0477.html https://www.suse.com/security/cve/CVE-2015-0478.html https://www.suse.com/security/cve/CVE-2015-0480.html https://www.suse.com/security/cve/CVE-2015-0488.html https://www.suse.com/security/cve/CVE-2015-0491.html https://www.suse.com/security/cve/CVE-2015-4734.html https://www.suse.com/security/cve/CVE-2015-4803.html https://www.suse.com/security/cve/CVE-2015-4805.html https://www.suse.com/security/cve/CVE-2015-4806.html https://www.suse.com/security/cve/CVE-2015-4810.html https://www.suse.com/security/cve/CVE-2015-4835.html https://www.suse.com/security/cve/CVE-2015-4840.html https://www.suse.com/security/cve/CVE-2015-4842.html https://www.suse.com/security/cve/CVE-2015-4843.html https://www.suse.com/security/cve/CVE-2015-4844.html https://www.suse.com/security/cve/CVE-2015-4860.html https://www.suse.com/security/cve/CVE-2015-4871.html https://www.suse.com/security/cve/CVE-2015-4872.html https://www.suse.com/security/cve/CVE-2015-4882.html https://www.suse.com/security/cve/CVE-2015-4883.html https://www.suse.com/security/cve/CVE-2015-4893.html https://www.suse.com/security/cve/CVE-2015-4902.html https://www.suse.com/security/cve/CVE-2015-4903.html https://www.suse.com/security/cve/CVE-2015-4911.html https://www.suse.com/security/cve/CVE-2015-5006.html https://bugzilla.suse.com/941939 https://bugzilla.suse.com/955131 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:2166-1: important: Security update for java-1_6_0-ibm
by opensuse-security＠opensuse.org 02 Dec '15

02 Dec '15

SUSE Security Update: Security update for java-1_6_0-ibm ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:2166-1 Rating: important References: #955131 Cross-References: CVE-2015-0204 CVE-2015-0458 CVE-2015-0459 CVE-2015-0469 CVE-2015-0477 CVE-2015-0478 CVE-2015-0480 CVE-2015-0488 CVE-2015-0491 CVE-2015-2625 CVE-2015-2808 CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-2015-4871 CVE-2015-4872 CVE-2015-4882 CVE-2015-4883 CVE-2015-4893 CVE-2015-4902 CVE-2015-4903 CVE-2015-4911 CVE-2015-5006 Affected Products: SUSE Linux Enterprise Software Development Kit 11-SP3 SUSE Linux Enterprise Server for VMWare 11-SP3 SUSE Linux Enterprise Server 11-SP3 SUSE Linux Enterprise Server 11-SP2-LTSS ______________________________________________________________________________ An update that fixes 31 vulnerabilities is now available. Description: This update for java-1_6_0-ibm fixes the following issues: - Version update to 6.0-16.15 bsc#955131: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-2015-4871 CVE-2015-4872 CVE-2015-4882 CVE-2015-4883 CVE-2015-4893 CVE-2015-4902 CVE-2015-4903 CVE-2015-4911 CVE-2015-5006 CVE-2015-2808 CVE-2015-2625 CVE-2015-0491 CVE-2015-0459 CVE-2015-0469 CVE-2015-0458 CVE-2015-0480 CVE-2015-0488 CVE-2015-0478 CVE-2015-0477 CVE-2015-0204 Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11-SP3: zypper in -t patch sdksp3-java-1_6_0-ibm-1538=1 - SUSE Linux Enterprise Server for VMWare 11-SP3: zypper in -t patch slessp3-java-1_6_0-ibm-1538=1 - SUSE Linux Enterprise Server 11-SP3: zypper in -t patch slessp3-java-1_6_0-ibm-1538=1 - SUSE Linux Enterprise Server 11-SP2-LTSS: zypper in -t patch slessp2-java-1_6_0-ibm-1538=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11-SP3 (i586 ppc64 s390x x86_64): java-1_6_0-ibm-devel-1.6.0_sr16.15-46.1 - SUSE Linux Enterprise Software Development Kit 11-SP3 (i586 x86_64): java-1_6_0-ibm-1.6.0_sr16.15-46.1 java-1_6_0-ibm-fonts-1.6.0_sr16.15-46.1 - SUSE Linux Enterprise Server for VMWare 11-SP3 (i586 x86_64): java-1_6_0-ibm-1.6.0_sr16.15-46.1 java-1_6_0-ibm-fonts-1.6.0_sr16.15-46.1 java-1_6_0-ibm-jdbc-1.6.0_sr16.15-46.1 java-1_6_0-ibm-plugin-1.6.0_sr16.15-46.1 - SUSE Linux Enterprise Server for VMWare 11-SP3 (i586): java-1_6_0-ibm-alsa-1.6.0_sr16.15-46.1 - SUSE Linux Enterprise Server 11-SP3 (i586 ppc64 s390x x86_64): java-1_6_0-ibm-1.6.0_sr16.15-46.1 java-1_6_0-ibm-fonts-1.6.0_sr16.15-46.1 java-1_6_0-ibm-jdbc-1.6.0_sr16.15-46.1 - SUSE Linux Enterprise Server 11-SP3 (i586 x86_64): java-1_6_0-ibm-plugin-1.6.0_sr16.15-46.1 - SUSE Linux Enterprise Server 11-SP3 (i586): java-1_6_0-ibm-alsa-1.6.0_sr16.15-46.1 - SUSE Linux Enterprise Server 11-SP2-LTSS (i586 s390x x86_64): java-1_6_0-ibm-1.6.0_sr16.15-46.1 java-1_6_0-ibm-devel-1.6.0_sr16.15-46.1 java-1_6_0-ibm-fonts-1.6.0_sr16.15-46.1 java-1_6_0-ibm-jdbc-1.6.0_sr16.15-46.1 - SUSE Linux Enterprise Server 11-SP2-LTSS (i586 x86_64): java-1_6_0-ibm-plugin-1.6.0_sr16.15-46.1 - SUSE Linux Enterprise Server 11-SP2-LTSS (i586): java-1_6_0-ibm-alsa-1.6.0_sr16.15-46.1 References: https://www.suse.com/security/cve/CVE-2015-0204.html https://www.suse.com/security/cve/CVE-2015-0458.html https://www.suse.com/security/cve/CVE-2015-0459.html https://www.suse.com/security/cve/CVE-2015-0469.html https://www.suse.com/security/cve/CVE-2015-0477.html https://www.suse.com/security/cve/CVE-2015-0478.html https://www.suse.com/security/cve/CVE-2015-0480.html https://www.suse.com/security/cve/CVE-2015-0488.html https://www.suse.com/security/cve/CVE-2015-0491.html https://www.suse.com/security/cve/CVE-2015-2625.html https://www.suse.com/security/cve/CVE-2015-2808.html https://www.suse.com/security/cve/CVE-2015-4734.html https://www.suse.com/security/cve/CVE-2015-4803.html https://www.suse.com/security/cve/CVE-2015-4805.html https://www.suse.com/security/cve/CVE-2015-4806.html https://www.suse.com/security/cve/CVE-2015-4810.html https://www.suse.com/security/cve/CVE-2015-4835.html https://www.suse.com/security/cve/CVE-2015-4840.html https://www.suse.com/security/cve/CVE-2015-4842.html https://www.suse.com/security/cve/CVE-2015-4843.html https://www.suse.com/security/cve/CVE-2015-4844.html https://www.suse.com/security/cve/CVE-2015-4860.html https://www.suse.com/security/cve/CVE-2015-4871.html https://www.suse.com/security/cve/CVE-2015-4872.html https://www.suse.com/security/cve/CVE-2015-4882.html https://www.suse.com/security/cve/CVE-2015-4883.html https://www.suse.com/security/cve/CVE-2015-4893.html https://www.suse.com/security/cve/CVE-2015-4902.html https://www.suse.com/security/cve/CVE-2015-4903.html https://www.suse.com/security/cve/CVE-2015-4911.html https://www.suse.com/security/cve/CVE-2015-5006.html https://bugzilla.suse.com/955131 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0