Mailinglist Archive: opensuse-security-announce (22 mails)

< Previous Next >
[security-announce] SUSE-SU-2012:0765-1: important: Security update for oracle-update
SUSE Security Update: Security update for oracle-update
______________________________________________________________________________

Announcement ID: SUSE-SU-2012:0765-1
Rating: important
References: #736238 #757705 #760074 #760660 #763895 #764049

Cross-References: CVE-2012-1675
Affected Products:
SUSE Manager 1.2 for SLE 11 SP1
______________________________________________________________________________

An update that solves one vulnerability and has 5 fixes is
now available.

Description:


This package wraps the Oracle Server update process for the
Oracle server included in SUSE Manager.

On installation of this package it will pull and install
the Oracle updates and patches, integrated so that SUSE
Manager is correctly stopped, the databases converted and
restarted.

It contains a security helper script that may adjust the
Oracle server listening on all network interfaces to just
listen on localhost (CVE-2012-1675).

To switch to a configuration that will restrict the
listener to localhost only run the following command as
root:

spacewalk-service stop /opt/apps/db-update/smdba-netswitch
localhost spacewalk-service start

In case you want to revert to the previous configuration,
just run:

spacewalk-service stop /opt/apps/db-update/smdba-netswitch
worldwide spacewalk-service start

Security Issue references:

* CVE-2012-1675
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1675
>


Patch Instructions:

To install this SUSE Security Update use YaST online_update.
Alternatively you can run the command listed for your product:

- SUSE Manager 1.2 for SLE 11 SP1:

zypper in -t patch sleman12sp1-oracle-update-6368

To bring your system up-to-date, use "zypper patch".


Package List:

- SUSE Manager 1.2 for SLE 11 SP1 (x86_64):

oracle-update-0.1-0.5.8.1


References:

http://support.novell.com/security/cve/CVE-2012-1675.html
https://bugzilla.novell.com/736238
https://bugzilla.novell.com/757705
https://bugzilla.novell.com/760074
https://bugzilla.novell.com/760660
https://bugzilla.novell.com/763895
https://bugzilla.novell.com/764049

http://download.novell.com/patch/finder/?keywords=a0b8b5031c3d0c502432381a5213b6c2

--
To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse-security-announce+help@xxxxxxxxxxxx

< Previous Next >
This Thread
  • No further messages