[security-announce] SUSE-SU-2013:0786-1: important: Security update for Linux kernel

14 May 2013

      SUSE Security Update: Security update for Linux kernel
______________________________________________________________________________

Announcement ID:    SUSE-SU-2013:0786-1
Rating:             important
References:         #578046 #651219 #709266 #709269 #714604 #722398 
                    #730117 #736149 #738210 #744692 #753371 #754583 
                    #754898 #758040 #758243 #761849 #762424 #763494 
                    #767612 #768052 #768470 #773577 #777616 #777746 
                    #779577 #780977 #786150 #786814 #786900 #787821 
                    #788826 #789235 #789311 #789359 #792674 #792793 
                    #793139 #794513 #794529 #794805 #795269 #795957 
                    #795961 #796412 #796418 #797042 #797175 #798921 
                    #799197 #799209 #799270 #799578 #799926 #800280 
                    #800701 #801038 #801178 #801713 #801717 #801720 
                    #801782 #802153 #802353 #802445 #802712 #803056 
                    #803067 #803394 #803674 #803712 #804154 #804220 
                    #804609 #805823 #806138 #806273 #806395 #806404 
                    #806431 #806466 #806469 #806492 #806631 #806825 
                    #806847 #806908 #806976 #806980 #807431 #807517 
                    #807560 #807853 #808166 #808307 #808829 #808966 
                    #808991 #809155 #809166 #809375 #809493 #809748 
                    #812281 #812315 #813963 #816443 #89359 
Cross-References:   CVE-2010-3873 CVE-2011-4131 CVE-2011-4604
                    CVE-2011-4622 CVE-2012-1601 CVE-2012-2119
                    CVE-2012-2137 CVE-2012-4461 CVE-2012-5517
                    CVE-2013-0160 CVE-2013-0216 CVE-2013-0231
                    CVE-2013-0871 CVE-2013-0913 CVE-2013-1767
                    CVE-2013-1774 CVE-2013-1796 CVE-2013-1797
                    CVE-2013-1798 CVE-2013-1848
Affected Products:
                    SUSE Linux Enterprise Real Time 11 SP2
______________________________________________________________________________

   An update that solves 20 vulnerabilities and has 87 fixes
   is now available. It includes one version update.

Description:

   The SUSE Linux Enterprise Server 11 SP2 Realtime kernel has
   been updated to  3.0.74 fixing various bugs and security
   issues.

   This update brings some features:

   * Updated HD-audio drivers for Nvidia/AMD HDMI and
   Haswell audio (FATE#314311 FATE#313695)
   * Lustre enablement patches were added (FATE#314679).
   * SGI UV (Ultraviolet) platform support. (FATE#306952)

   Security issues fixed in this update:

   * CVE-2013-0349: The hidp_setup_hid function in
   net/bluetooth/hidp/core.c in the Linux kernel did not
   properly copy a certain name field, which allowed local
   users to obtain sensitive information from kernel memory by
   setting a long name and making an HIDPCONNADD ioctl call.
   * CVE-2012-2137: Buffer overflow in virt/kvm/irq_comm.c
   in the KVM subsystem in the Linux kernel allowed local
   users to cause a denial of service (crash) and to possibly
   execute arbitrary code via vectors related to Message
   Signaled Interrupts (MSI), irq routing entries, and an
   incorrect check by the setup_routing_entry function before
   invoking the kvm_set_irq function.
   * CVE-2012-6549: The isofs_export_encode_fh function in
   fs/isofs/export.c in the Linux kernel did not initialize a
   certain structure member, which allowed local users to
   obtain sensitive information from kernel heap memory via a
   crafted application.
   * CVE-2012-6548: The udf_encode_fh function in
   fs/udf/namei.c in the Linux kernel did not initialize a
   certain structure member, which allowed local users to
   obtain sensitive information from kernel heap memory via a
   crafted application.
   * CVE-2013-0160: Timing side channel on attacks were
   possible on /dev/ptmx that could allow local attackers to
   predict keypresses like e.g. passwords. This has been fixed
   by not updating accessed/modified time on the pty devices.
   Note that this might break pty idle detection, so it might
   get reverted again.
   * CVE-2013-0216: The Xen netback functionality in the
   Linux kernel allowed guest OS users to cause a denial of
   service (loop) by triggering ring pointer corruption.
   * CVE-2013-0231: The pciback_enable_msi function in the
   PCI backend driver
   (drivers/xen/pciback/conf_space_capability_msi.c) in Xen
   for the Linux allowed guest OS users with PCI device access
   to cause a denial of service via a large number of kernel
   log messages.
   * CVE-2013-0311: The translate_desc function in
   drivers/vhost/vhost.c in the Linux kernel did not properly
   handle cross-region descriptors, which allowed guest OS
   users to obtain host OS privileges by leveraging KVM guest
   OS privileges.
   * CVE-2013-0913: Integer overflow in
   drivers/gpu/drm/i915/i915_gem_execbuffer.c in the i915
   driver in the Direct Rendering Manager (DRM) subsystem in
   the Linux kernel allowed local users to cause a denial of
   service (heap-based buffer overflow) or possibly have
   unspecified other impact via a crafted application that
   triggers many relocation copies, and potentially leads to a
   race condition.
   * CVE-2013-0914: The flush_signal_handlers function in
   kernel/signal.c in the Linux kernel preserved the value of
   the sa_restorer field across an exec operation, which makes
   it easier for local users to bypass the ASLR protection
   mechanism via a crafted application containing a sigaction
   system call.
   * CVE-2013-1767: Use-after-free vulnerability in the
   shmem_remount_fs function in mm/shmem.c in the Linux kernel
   allowed local users to gain privileges or to cause a denial
   of service (system crash) by remounting a tmpfs filesystem
   without specifying a required mpol (aka mempolicy) mount
   option.
   * CVE-2013-1772: The log_prefix function in
   kernel/printk.c in the Linux kernel 3.x did not properly
   remove a prefix string from a syslog header, which allowed
   local users to cause a denial of service (buffer overflow
   and system crash) by leveraging /dev/kmsg write access and
   triggering a call_console_drivers function call.
   * CVE-2013-1774: The chase_port function in
   drivers/usb/serial/io_ti.c in the Linux kernel allowed
   local users to cause a denial of service (NULL pointer
   dereference and system crash) via an attempted /dev/ttyUSB
   read or write operation on a disconnected Edgeport USB
   serial converter.
   * CVE-2013-1792: Race condition in the
   install_user_keyrings function in
   security/keys/process_keys.c in the Linux kernel allowed
   local users to cause a denial of service (NULL pointer
   dereference and system crash) via crafted keyctl system
   calls that trigger keyring operations in simultaneous
   threads.
   * CVE-2013-1796: The kvm_set_msr_common function in
   arch/x86/kvm/x86.c in the Linux kernel did not ensure a
   required time_page alignment during an MSR_KVM_SYSTEM_TIME
   operation, which allowed guest OS users to cause a denial
   of service (buffer overflow and host OS memory corruption)
   or possibly have unspecified other impact via a crafted
   application.
   * CVE-2013-1797: Use-after-free vulnerability in
   arch/x86/kvm/x86.c in the Linux kernel allowed guest OS
   users to cause a denial of service (host OS memory
   corruption) or possibly have unspecified other impact via a
   crafted application that triggers use of a guest physical
   address (GPA) in (1) movable or (2) removable memory during
   an MSR_KVM_SYSTEM_TIME kvm_set_msr_common operation.
   * CVE-2013-1798: The ioapic_read_indirect function in
   virt/kvm/ioapic.c in the Linux kernel did not properly
   handle a certain combination of invalid IOAPIC_REG_SELECT
   and IOAPIC_REG_WINDOW operations, which allows guest OS
   users to obtain sensitive information from host OS memory
   or cause a denial of service (host OS OOPS) via a crafted
   application.
   * CVE-2013-1848: fs/ext3/super.c in the Linux kernel
   used incorrect arguments to functions in certain
   circumstances related to printk input, which allowed local
   users to conduct format-string attacks and possibly gain
   privileges via a crafted application.
   * CVE-2013-1860: Heap-based buffer overflow in the
   wdm_in_callback function in drivers/usb/class/cdc-wdm.c in
   the Linux kernel allowed physically proximate attackers to
   cause a denial of service (system crash) or to possibly
   execute arbitrary code via a crafted cdc-wdm USB device.
   * CVE-2013-2634: net/dcb/dcbnl.c in the Linux kernel
   did not initialize certain structures, which allowed local
   users to obtain sensitive information from kernel stack
   memory via a crafted application.
   * CVE-2013-2635: The rtnl_fill_ifinfo function in
   net/core/rtnetlink.c in the Linux kernel did not initialize
   a certain structure member, which allowed local users to
   obtain sensitive information from kernel stack memory via a
   crafted application.
   * CVE-2013-0268: The msr_open function in
   arch/x86/kernel/msr.c in the Linux kernel allowed local
   users to bypass intended capability restrictions by
   executing a crafted application as root, as demonstrated by
   msr32.c.

   Bugs fixed in this update:

   BTRFS:

   * btrfs: do not try to notify udev about missing
   devices.
   * btrfs: add cancellation points to defrag.
   * btrfs: define BTRFS_MAGIC as a u64 value.
   * btrfs: make sure NODATACOW also gets NODATASUM set.
   * btrfs: enforce min_bytes parameter during extent
   allocation.
   * btrfs: build up error handling for merge_reloc_roots.
   * btrfs: free all recorded tree blocks on error .
   * btrfs: do not BUG_ON in prepare_to_reloc .
   * btrfs: do not BUG_ON on aborted situation .
   * btrfs: handle a bogus chunk tree nicely .
   * btrfs: do not drop path when printing out tree errors
   in scrub .
   * btrfs: make subvol creation/deletion killable in the
   early stages.
   * btrfs: abort unlink trans in missed error case.
   * btrfs: fix reada debug code compilation.
   * btrfs: return error when we specify wrong start to
   defrag.
   * btrfs: do not force pages under writeback to finish
   when aborting.

   USB:

   * USB: move usb_translate_errors to 1/usb (bnc#806908).
   * USB: add EOPNOTSUPP to usb_translate_errors
   (bnc#806908).
   * USB: cdc-wdm: sanitize error returns (bnc#806908).
   * USB: cdc-wdm: cleanup error codes (bnc#806908).
   * USB: cdc-wdm: add helper to preserve kABI
   (bnc#806908).
   * USB: Do not use EHCI port sempahore for USB 3.0 hubs
   (bnc#807560).
   * USB: Prepare for refactoring by adding extra udev
   checks (bnc#807560).
   * USB: Rip out recursive call on warm port reset
   (bnc#807560).
   * USB: Fix connected device switch to Inactive state
   (bnc#807560).
   * USB: modify hub to detect unplugs in all states
   (bnc#807560).
   * USB: io_ti: Fix NULL dereference in chase_port()
   (bnc#806976, CVE-2013-1774).
   * USB: cdc-wdm: fix buffer overflow (bnc#806431).
   * USB: cdc-wdm: cannot use dev_printk when device is
   gone (bnc#806469).
   * USB: cdc-wdm: fix memory leak (bnc#806466).
   * elousb: really long delays for broken devices
   (bnc#795269).
   * xhci: Fix conditional check in bandwidth calculation
   (bnc#795961).
   * xHCI: Fix TD Size calculation on 1.0 hosts
   (bnc#795957).
   * xhci: avoid dead ports, add roothub port polling
   (bnc#799197).
   * USB: Handle warm reset failure on empty port
   (bnc#799926).
   * USB: Ignore port state until reset completes
   (bnc#799926).
   * Allow USB 3.0 ports to be disabled (bnc#799926).
   * USB: Ignore xHCI Reset Device status (bnc#799926).
   * USB: Handle auto-transition from hot to warm reset
   (bnc#799926).

   S/390:

   * ipl: Implement diag308 loop for zfcpdump (bnc#801720,
   LTC#88197).
   * zcore: Add hsa file (bnc#801720, LTC#88198).
   * kernel: support physical memory > 4TB (bnc#801720,
   LTC#88787).
   * mm: Fix crst upgrade of mmap with MAP_FIXED
   (bnc#801720, LTC#88797).
   * Update patches.suse/zcrypt-feed-hwrandom
   (bnc#806825). Allow zcrypt module unload even when the
   thread is blocked writing to a full random pool.
   * dca: check against empty dca_domains list before
   unregister provider fix.
   * s390/kvm: Fix store status for ACRS/FPRS fix.
   * series.conf: disabled
   patches.arch/s390-64-03-kernel-inc-phys-mem.patch due to
   excessive kabi break. (bnc#801720)

   ALSA:

   *
   patches.drivers/alsa-sp3-pre-695-Yet-another-fix-for-broken-
   HSW-HDMI-pin: Refresh. Fix the invalid PCI SSID check
   (bnc#806404)
   * ALSA: hda - Support mute LED on HP AiO buttons
   (bnc#808991).
   * ALSA: hda: Allow multple SPDIF controls per codec
   (bnc#780977).
   * ALSA: hda: Virtualize SPDIF out controls (bnc#780977).
   * ALSA: hda: Separate generic and non-generic
   implementations.
   * ALSA: hda: hdmi_eld_update_pcm_info: update a stream
   in place.
   * ALSA: hda: HDMI: Support codecs with fewer cvts than
   pins.
   * ALSA: hda - Add snd_hda_get_conn_list() helper
   function.
   * ALSA: hda - Add snd_hda_override_conn_list() helper
   function.
   * ALSA: hda - Increase the max number of coverters/pins
   in patch_hdmi.c (bnc#780977).
   * ALSA: hda - Check non-snoop in a single place
   (bnc#801713).
   * ALSA: HDA: Use LPIB Position fix for Intel SCH
   Poulsbo (bnc#801713).
   * ALSA: hda_intel: Add Oaktrail identifiers
   (bnc#801713).
   * ALSA: HDA: Use LPIB position fix for Oaktrail
   (bnc#801713).
   * ALSA: hda - add id for Atom Cedar Trail HDMI codec
   (bnc#801713).
   * ALSA: hda - Fix detection of Creative SoundCore3D
   controllers (bnc#762424).
   * ALSA: hda - add power states information in proc
   (bnc#801713).
   * ALSA: hda - Show D3cold state in proc files
   (bnc#801713).
   * ALSA: hda - check supported power states (bnc#801713).
   * ALSA: hda - reduce msleep time if EPSS power states
   supported (bnc#801713).
   * ALSA: hda - check proper return value (bnc#801713).
   * ALSA: hda - power setting error check (bnc#801713).
   * ALSA: hda - Add DeviceID for Haswell HDA (bnc#801713).
   * ALSA: hda - add Haswell HDMI codec id (bnc#801713).
   * ALSA: hda - Fix driver type of Haswell controller to
   AZX_DRIVER_SCH.
   * ALSA: hda - Add new GPU codec ID to snd-hda
   (bnc#780977).
   * ALSA: HDMI - Fix channel_allocation array wrong order
   (bnc#801713).
   * ALSA: hda - Avoid BDL position workaround when
   no_period_wakeup is set (bnc#801713).
   * ALSA: hda - Allow to pass position_fix=0 explicitly
   (bnc#801713).
   * ALSA: hda - Add another pci id for Haswell board.
   * ALSA: hda - force use of SSYNC bits (bnc#801713).
   * ALSA: hda - use LPIB for delay estimation
   (bnc#801713).
   * ALSA: hda - add PCI identifier for Intel 5
   Series/3400 (bnc#801713).
   * ALSA: hda - Add workaround for conflicting IEC958
   controls (FATE#314311).
   * ALSA: hda - Stop LPIB delay counting on broken
   hardware (FATE#313695).
   * ALSA: hda - Always turn on pins for HDMI/DP
   (FATE#313695).
   * ALSA: hda - bug fix for invalid connection list of
   Haswell HDMI codec pins (FATE#313695).
   * ALSA - HDA: New PCI ID for Haswell ULT (bnc#801713).
   * ALSA: hda - Release assigned pin/cvt at error path of
   hdmi_pcm_open() (bnc#801713).
   * ALSA: hda - Support rereading widgets under the
   function group (bnc#801713).
   * ALSA: hda - Add fixup for Haswell to enable all pin
   and convertor widgets (bnc#801713).
   * ALSA: hda - Yet another fix for broken HSW HDMI pin
   connections (bnc#801713).
   * patches.kabi/alsa-spdif-update-kabi-fixes: Fix kABI
   breakage due to HD-audio HDMI updates (bnc#780977).
   * ALSA: hda - Fix non-snoop page handling (bnc#800701).
   * ALSA: hda - Apply mic-mute LED fixup for new HP
   laptops (bnc#796418).
   *
   patches.drivers/alsa-sp3-pre-695-Yet-another-fix-for-broken-
   HSW-HDMI-pin: Refresh. Fix a superfluous incremental
   leading to the double array size (bnc#808966)

   XEN:

   * pciback: notify hypervisor about devices intended to
   be assigned to guests.
   * patches.xen/xen-clockevents: Update (bnc#803712).
   * patches.xen/xen-ipi-per-cpu-irq: Update (bnc#803712).
   * patches.xen/xen3-patch-2.6.19: Update (bnc#809166).
   * Update Xen patches to 3.0.68.
   * Update Xen patches to 3.0.63.
   * netback: fix netbk_count_requests().
   * x86/mm: Check if PUD is large when validating a
   kerneladdress (bnc#794805).

   OTHER:

   * Revert dmi_scan: fix missing check for _DMI_
   signature in smbios_present().
   * Revert drivers/firmware/dmi_scan.c: fetch dmi version
   from SMBIOS if it exists.
   * Revert drivers/firmware/dmi_scan.c: check dmi version
   when get system uuid.
   * sysfs: Revert sysfs: fix race between readdir and
   lseek (bnc#816443).
   * 8021q: Revert 8021q: fix a potential use-after-free.
   * /dev/urandom returning EOF: trim down revert to not
   change kabi. (bnc#789359).
   * tun: reserves space for network in skb (bnc#803394).
   * Fixed /dev/urandom returning EOF (bnc#789359).
   * mm: Make snapshotting pages for stable writes a
   per-bio operation
   * fs: Only enable stable page writes when necessary
   (bnc#807517).
   *
   patches.drivers/ixgbe-Address-fact-that-RSC-was-not-setting-
   GSO-size.patch: Fix bnc#802712
   * Fix build error without CONFIG_BOOTSPLASH
   * Fix bootsplash breakage due to 3.0.67 stable fix
   (bnc#813963)
   * drivers/base/memory.c: fix memory_dev_init() long
   delay (bnc#804609).
   * mtd: drop physmap_configure (bnc#809375).
   * Bluetooth: btusb: hide more usb_submit_urb errors
   (bnc#812281).
   * o2dlm: fix NULL pointer dereference in
   o2dlm_blocking_ast_wrapper (bnc#806492)
   * qeth: fix qeth_wait_for_threads() deadlock for OSN
   devices (bnc#812315, LTC#90910).
   * Fix NULL pointer dereference in
   o2dlm_blocking_ast_wrapper (bnc#806492)
   * mm: fix ALLOC_WMARK_MASK check (bnc#808166)
   * pciehp: Fix dmi match table definition and missing
   space in printk (bnc#796412).
   * fnic: Fix SGEs limit (bnc#807431).
   * pciehp: Ignore missing surprise bit on some hosts
   (bnc#796412).
   * ipv6: Queue fragments per interface for
   multicast/link-local addresses (bnc#804220).
   * netfilter: send ICMPv6 message on fragment reassembly
   timeout (bnc#773577).
   * netfilter: fix sending ICMPv6 on netfilter reassembly
   timeout (bnc#773577).
   * jbd: clear revoked flag on buffers before a new
   transaction started (bnc#806395).
   * xfrm6: count extension headers into payload length
   (bnc#794513).
   * mm: page_alloc: Avoid marking zones full prematurely
   after zone_reclaim() (Evict inactive pages when
   zone_reclaim is enabled (bnc#808166)).
   * st: Take additional queue ref in st_probe
   (bnc#801038, bnc#788826).
   * drivers: xhci: fix incorrect bit test (bnc#714604).
   * xfrm: remove unused xfrm4_policy_fini() (bnc#801717).
   * xfrm: make gc_thresh configurable in all namespaces
   (bnc#801717).
   * kabi: use net_generic to avoid changes in struct net
   (bnc#801717).
   * xfs: Fix WARN_ON(delalloc) in xfs_vm_releasepage()
   (bnc#806631).
   *
   patches.drivers/alsa-sp2-hda-033-Support-mute-LED-on-HP-AiO-
   buttons: Refresh tags.
   * block: use i_size_write() in bd_set_size()
   (bnc#809748).
   * loopdev: fix a deadlock (bnc#809748).
   * patches.suse/supported-flag: fix mis-reported
   supported status (bnc#809493).
   * patches.suse/supported-flag-enterprise: Refresh.
   * KVM: Convert MSR_KVM_SYSTEM_TIME to use
   gfn_to_hva_cache_init (bnc#806980 CVE-2013-1797).
   * KVM: Fix bounds checking in ioapic indirect register
   read (bnc#806980 CVE-2013-1798).
   * KVM: Fix for buffer overflow in handling of
   MSR_KVM_SYSTEM_TIME (bnc#806980 CVE-2013-1796).
   * KVM: introduce kvm_read_guest_cached (bnc#806980).
   * x86/numa: Add constraints check for nid parameters
   (Cope with negative SRAT distances (bnc#807853)).
   * drm/i915: Periodically sanity check power management
   (bnc#808307).
   * drm/i915: bounds check execbuffer relocation count
   (bnc#808829,CVE-2013-0913).
   * ext3: Fix format string issues (bnc#809155,
   CVE-2013-1848).
   * x86-64: Fix memset() to support sizes of 4Gb and
   above (Properly initialise memmap on large machines
   (bnc#802353)).
   * bdi: allow block devices to say that they require
   stable page writes
   * mm: only enforce stable page writes if the backing
   device requires it
   * block: optionally snapshot page contents to provide
   stable pages during write
   * 9pfs: fix filesystem to wait for stable page writeback
   * ocfs2: wait for page writeback to provide stable pages
   * ubifs: wait for page writeback to provide stable pages
   * Only enable stable page writes when required by
   underlying BDI (bnc#807517).
   * KVM: emulator: drop RPL check from linearize()
   function (bnc#754583).
   * mlx4: Correct calls to to_ib_ah_attr() (bnc#806847).
   * DRM/i915: On G45 enable cursor plane briefly after
   enabling the display plane (bnc #753371) [backported from
   drm-intel-fixes].
   * cxgb4i: Remove the scsi host device when removing
   device (bnc#722398)
   * xprtrdma: The transport should not bug-check when a
   dup reply is received (bnc#763494).
   * tmpfs: fix use-after-free of mempolicy object
   (bnc#806138, CVE-2013-1767).
   * lpfc: Check fc_block_scsi_eh return value correctly
   for lpfc_abort_handler (bnc#803674).
   * md: fix bug in handling of new_data_offset
   (bnc#805823).
   * md: Avoid OOPS when reshaping raid1 to raid0 (Useful
   OOPS fix).
   * md: fix two bugs when attempting to resize RAID0
   array (Useful BUG() fix).
   * md: raid0: fix error return from create_stripe_zones
   (useful bug fix).
   * ext4: add missing kfree() on error return path in
   add_new_gdb().
   * ext4: Free resources in some error path in
   ext4_fill_super.
   * intel_idle: support Haswell (fate#313720).
   * hp_accel: Add a new PnP ID HPQ6007 for new HP laptops
   (bnc#802445).
   * nfs: Ensure NFS does not block on dead server during
   unmount (bnc#794529).
   * block: disable discard request merge temporarily
   (bnc#803067).
   * mm: mmu_notifier: have mmu_notifiers use a global
   SRCU so they may safely schedule
   * mm: mmu_notifier: make the mmu_notifier srcu static
   * mmu_notifier_unregister NULL Pointer deref and
   multiple ->release() callouts
   * Have mmu_notifiers use SRCU so they may safely
   schedule kabi compatability
   *
   patches.fixes/Have-mmu_notifiers-use-SRCU-so-they-may-safely
   -schedule.patch:
   *
   patches.fixes/Have-mmu_notifiers-use-SRCU-so-they-may-safely
   -schedule-build-fix.patch: Delete, replace with upstream
   equivalent and add KABI workaround (bnc#578046, bnc#786814,
   FATE#306952).
   * ipv6: Do not send packet to big messages to self
   (bnc#786150).
   * hpwdt: Unregister NMI events on exit (bnc#777746).
   * x86/mm: Check if PUD is large when validating a
   kernel address (bnc#794805).
   * ata: Fix DVD not dectected at some Haswell platforms
   (bnc#792674).
   * Avoid softlockups in printk (bnc#744692, bnc#789311).
   * Do not pack credentials for dying processes
   (bnc#779577, bnc#803056).
   * xfs: punch new delalloc blocks out of failed writes
   inside EOF (bnc#761849).
   * xfs: xfs_sync_data is redundant (bnc#761849).
   * Add GPIO support for Intel Centerton SOC (bnc#792793).
   * Add Multifunction Device support for Intel Centerton
   SOC (bnc#792793).
   * Add Intel Legacy Block support for Intel Centerton
   SOC (bnc#792793).
   * mm: net: Allow some !SOCK_MEMALLOC traffic through
   even if skb_pfmemalloc (Allow GPFS network traffic despite
   PF_MEMALLOC misuse (bnc#786900)).
   * kernel/resource.c: fix stack overflow in
   __reserve_region_with_split() (bnc#801782).
   * Lustre enablement patches
   * block: add dev_check_rdonly and friends for Lustre
   testing (FATE#314679).
   * dcache: Add DCACHE_LUSTRE_INVALID flag for Lustre to
   handle its own invalidation (FATE#314679).
   * lsm: export security_inode_unlink (FATE#315679).
   * lustre: Add lustre kernel version (FATE#314679).
   * st: fix memory leak with >1MB tape I/O (bnc#798921).
   * cifs: lower default wsize when 1 extensions are not
   used (bnc#799578).
   * ata_generic: Skip is_intel_ider() check when
   ata_generic=1 is set (bnc#777616).
   * quota: autoload the quota_v2 module for QFMT_VFS_V1
   quota format (bnc#802153).
   * xen: properly bound buffer access when parsing
   cpu/availability.
   * netback: shutdown the ring if it contains garbage
   (CVE-2013-0216 XSA-39 bnc#800280).
   * netback: correct netbk_tx_err() to handle wrap around
   (CVE-2013-0216 XSA-39 bnc#800280).
   * pciback: rate limit error message from
   pciback_enable_msi() (CVE-2013-0231 XSA-43 bnc#801178).
   * scsiback/usbback: move cond_resched() invocations to
   proper place.
   * drm/i915: Implement workaround for broken CS tlb on
   i830/845 (bnc #758040).
   * drivers: scsi: storvsc: Initialize the sglist.
   * e1000e: 82571 Fix Tx Data Corruption during Tx hang
   recovery (bnc#790867).
   * KVM: Fix buffer overflow in kvm_set_irq() (bnc#767612
   CVE-2012-2137).
   * mm: compaction: Abort async compaction if locks are
   contended or taking too long.
   * mm: compaction: abort compaction loop if lock is
   contended or run too long.
   * mm: compaction: acquire the zone->lock as late as
   possible.
   * mm: compaction: acquire the zone->lru_lock as late as
   possible.
   * mm: compaction: move fatal signal check out of
   compact_checklock_irqsave. Reduce LRU and zone lock
   contention when compacting memory for THP (bnc#796823).

   Security Issue references:

   * CVE-2012-6548
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6548
...
* CVE-2012-6549
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6549
...
* CVE-2012-2137
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2137
...
* CVE-2013-0160
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0160
...
* CVE-2013-0216
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0216
...
* CVE-2013-0231
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0231
...
* CVE-2013-0913
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0913
...
* CVE-2013-0914
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0914
...
* CVE-2013-1767
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1767
...
* CVE-2013-1774
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1774
...
* CVE-2013-1796
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1796
...
* CVE-2013-1797
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1797
...
* CVE-2013-1798
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1798
...
* CVE-2013-1848
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1848
...
* CVE-2013-1860
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1860
...
* CVE-2013-2634
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2634
...
* CVE-2013-2635
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2635
...
* CVE-2013-1792
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1792
...
* CVE-2013-0311
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0311
...
* CVE-2013-1772
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1772
...
* CVE-2013-0268
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0268
...
* CVE-2013-0349
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0349
...
Indications:

   Everyone using the Real Time Linux Kernel on x86_64 architecture should update.

Special Instructions and Notes:

   Please reboot the system after installing this update.

Patch Instructions:

   To install this SUSE Security Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   - SUSE Linux Enterprise Real Time 11 SP2:

      zypper in -t patch slertesp2-kernel-7695

   To bring your system up-to-date, use "zypper patch".

Package List:

   - SUSE Linux Enterprise Real Time 11 SP2 (x86_64) [New Version: 3.0.74.rt98]:

      cluster-network-kmp-rt-1.4_3.0.74_rt98_0.6.2-2.18.37
      cluster-network-kmp-rt_trace-1.4_3.0.74_rt98_0.6.2-2.18.37
      drbd-kmp-rt-8.4.2_3.0.74_rt98_0.6.2-0.6.6.28
      drbd-kmp-rt_trace-8.4.2_3.0.74_rt98_0.6.2-0.6.6.28
      iscsitarget-kmp-rt-1.4.20_3.0.74_rt98_0.6.2-0.23.34
      iscsitarget-kmp-rt_trace-1.4.20_3.0.74_rt98_0.6.2-0.23.34
      kernel-rt-3.0.74.rt98-0.6.2.1
      kernel-rt-base-3.0.74.rt98-0.6.2.1
      kernel-rt-devel-3.0.74.rt98-0.6.2.1
      kernel-rt_trace-3.0.74.rt98-0.6.2.1
      kernel-rt_trace-base-3.0.74.rt98-0.6.2.1
      kernel-rt_trace-devel-3.0.74.rt98-0.6.2.1
      kernel-source-rt-3.0.74.rt98-0.6.2.1
      kernel-syms-rt-3.0.74.rt98-0.6.2.1
      lttng-modules-kmp-rt-2.0.4_3.0.74_rt98_0.6.2-0.7.30
      lttng-modules-kmp-rt_trace-2.0.4_3.0.74_rt98_0.6.2-0.7.30
      ocfs2-kmp-rt-1.6_3.0.74_rt98_0.6.2-0.11.36
      ocfs2-kmp-rt_trace-1.6_3.0.74_rt98_0.6.2-0.11.36
      ofed-kmp-rt-1.5.2_3.0.74_rt98_0.6.2-0.28.28.8
      ofed-kmp-rt_trace-1.5.2_3.0.74_rt98_0.6.2-0.28.28.8

References:

   http://support.novell.com/security/cve/CVE-2010-3873.html
   http://support.novell.com/security/cve/CVE-2011-4131.html
   http://support.novell.com/security/cve/CVE-2011-4604.html
   http://support.novell.com/security/cve/CVE-2011-4622.html
   http://support.novell.com/security/cve/CVE-2012-1601.html
   http://support.novell.com/security/cve/CVE-2012-2119.html
   http://support.novell.com/security/cve/CVE-2012-2137.html
   http://support.novell.com/security/cve/CVE-2012-4461.html
   http://support.novell.com/security/cve/CVE-2012-5517.html
   http://support.novell.com/security/cve/CVE-2013-0160.html
   http://support.novell.com/security/cve/CVE-2013-0216.html
   http://support.novell.com/security/cve/CVE-2013-0231.html
   http://support.novell.com/security/cve/CVE-2013-0871.html
   http://support.novell.com/security/cve/CVE-2013-0913.html
   http://support.novell.com/security/cve/CVE-2013-1767.html
   http://support.novell.com/security/cve/CVE-2013-1774.html
   http://support.novell.com/security/cve/CVE-2013-1796.html
   http://support.novell.com/security/cve/CVE-2013-1797.html
   http://support.novell.com/security/cve/CVE-2013-1798.html
   http://support.novell.com/security/cve/CVE-2013-1848.html
   https://bugzilla.novell.com/578046
   https://bugzilla.novell.com/651219
   https://bugzilla.novell.com/709266
   https://bugzilla.novell.com/709269
   https://bugzilla.novell.com/714604
   https://bugzilla.novell.com/722398
   https://bugzilla.novell.com/730117
   https://bugzilla.novell.com/736149
   https://bugzilla.novell.com/738210
   https://bugzilla.novell.com/744692
   https://bugzilla.novell.com/753371
   https://bugzilla.novell.com/754583
   https://bugzilla.novell.com/754898
   https://bugzilla.novell.com/758040
   https://bugzilla.novell.com/758243
   https://bugzilla.novell.com/761849
   https://bugzilla.novell.com/762424
   https://bugzilla.novell.com/763494
   https://bugzilla.novell.com/767612
   https://bugzilla.novell.com/768052
   https://bugzilla.novell.com/768470
   https://bugzilla.novell.com/773577
   https://bugzilla.novell.com/777616
   https://bugzilla.novell.com/777746
   https://bugzilla.novell.com/779577
   https://bugzilla.novell.com/780977
   https://bugzilla.novell.com/786150
   https://bugzilla.novell.com/786814
   https://bugzilla.novell.com/786900
   https://bugzilla.novell.com/787821
   https://bugzilla.novell.com/788826
   https://bugzilla.novell.com/789235
   https://bugzilla.novell.com/789311
   https://bugzilla.novell.com/789359
   https://bugzilla.novell.com/792674
   https://bugzilla.novell.com/792793
   https://bugzilla.novell.com/793139
   https://bugzilla.novell.com/794513
   https://bugzilla.novell.com/794529
   https://bugzilla.novell.com/794805
   https://bugzilla.novell.com/795269
   https://bugzilla.novell.com/795957
   https://bugzilla.novell.com/795961
   https://bugzilla.novell.com/796412
   https://bugzilla.novell.com/796418
   https://bugzilla.novell.com/797042
   https://bugzilla.novell.com/797175
   https://bugzilla.novell.com/798921
   https://bugzilla.novell.com/799197
   https://bugzilla.novell.com/799209
   https://bugzilla.novell.com/799270
   https://bugzilla.novell.com/799578
   https://bugzilla.novell.com/799926
   https://bugzilla.novell.com/800280
   https://bugzilla.novell.com/800701
   https://bugzilla.novell.com/801038
   https://bugzilla.novell.com/801178
   https://bugzilla.novell.com/801713
   https://bugzilla.novell.com/801717
   https://bugzilla.novell.com/801720
   https://bugzilla.novell.com/801782
   https://bugzilla.novell.com/802153
   https://bugzilla.novell.com/802353
   https://bugzilla.novell.com/802445
   https://bugzilla.novell.com/802712
   https://bugzilla.novell.com/803056
   https://bugzilla.novell.com/803067
   https://bugzilla.novell.com/803394
   https://bugzilla.novell.com/803674
   https://bugzilla.novell.com/803712
   https://bugzilla.novell.com/804154
   https://bugzilla.novell.com/804220
   https://bugzilla.novell.com/804609
   https://bugzilla.novell.com/805823
   https://bugzilla.novell.com/806138
   https://bugzilla.novell.com/806273
   https://bugzilla.novell.com/806395
   https://bugzilla.novell.com/806404
   https://bugzilla.novell.com/806431
   https://bugzilla.novell.com/806466
   https://bugzilla.novell.com/806469
   https://bugzilla.novell.com/806492
   https://bugzilla.novell.com/806631
   https://bugzilla.novell.com/806825
   https://bugzilla.novell.com/806847
   https://bugzilla.novell.com/806908
   https://bugzilla.novell.com/806976
   https://bugzilla.novell.com/806980
   https://bugzilla.novell.com/807431
   https://bugzilla.novell.com/807517
   https://bugzilla.novell.com/807560
   https://bugzilla.novell.com/807853
   https://bugzilla.novell.com/808166
   https://bugzilla.novell.com/808307
   https://bugzilla.novell.com/808829
   https://bugzilla.novell.com/808966
   https://bugzilla.novell.com/808991
   https://bugzilla.novell.com/809155
   https://bugzilla.novell.com/809166
   https://bugzilla.novell.com/809375
   https://bugzilla.novell.com/809493
   https://bugzilla.novell.com/809748
   https://bugzilla.novell.com/812281
   https://bugzilla.novell.com/812315
   https://bugzilla.novell.com/813963
   https://bugzilla.novell.com/816443
   https://bugzilla.novell.com/89359
   http://download.novell.com/patch/finder/?keywords=d2f8c0b58837ded577fa1f4a7a...

-- 
To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@opensuse.org
For additional commands, e-mail: opensuse-security-announce+help@opensuse.org

[security-announce] SUSE-SU-2013:0786-1: important: Security update for Linux kernel

opensuse-security＠opensuse.org