March 2014 - openSUSE Security Announce

[security-announce] SUSE-SU-2014:0459-1: important: Security update for Linux Kernel
by opensuse-security＠opensuse.org 28 Mar '14

28 Mar '14

SUSE Security Update: Security update for Linux Kernel ______________________________________________________________________________ Announcement ID: SUSE-SU-2014:0459-1 Rating: important References: #599263 #827670 #833968 #844513 #846790 #847672 #852488 #852967 #853162 #853166 #853455 #854025 #854445 #855825 #855885 #856848 #857358 #857643 #858604 #859225 #859342 #861093 #862796 #862957 #863178 #863526 #864025 #864058 #864833 #864880 #865342 #865783 #866253 #866428 Cross-References: CVE-2013-4470 CVE-2013-6885 CVE-2013-7263 CVE-2013-7264 CVE-2013-7265 CVE-2014-0069 Affected Products: SUSE Linux Enterprise Server 11 SP3 for VMware SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise High Availability Extension 11 SP3 SUSE Linux Enterprise Desktop 11 SP3 SLE 11 SERVER Unsupported Extras ______________________________________________________________________________ An update that solves 6 vulnerabilities and has 28 fixes is now available. It includes one version update. Description: The SUSE Linux Enterprise 11 Service Pack 3 kernel was updated to fix various bugs and security issues. ------------------------------------------------------------ ------------ WARNING: If you are running KVM with PCI pass-through on a system with one of the following Intel chipsets: 5500 (revision 0x13), 5520 (revision 0x13) or X58 (revisions 0x12, 0x13, 0x22), please make sure to read the following support document before installing this update: https://www.suse.com/support/kb/doc.php?id=7014344 <https://www.suse.com/support/kb/doc.php?id=7014344> . You will have to update your KVM setup to no longer make use of PCI pass-through before rebooting to the updated kernel. ------------------------------------------------------------ ------------ The following security bugs were fixed: * CVE-2013-4470: The Linux kernel before 3.12, when UDP Fragmentation Offload (UFO) is enabled, does not properly initialize certain data structures, which allows local users to cause a denial of service (memory corruption and system crash) or possibly gain privileges via a crafted application that uses the UDP_CORK option in a setsockopt system call and sends both short and long packets, related to the ip_ufo_append_data function in net/ipv4/ip_output.c and the ip6_ufo_append_data function in net/ipv6/ip6_output.c. (bnc#847672) * CVE-2013-6885: The microcode on AMD 16h 00h through 0Fh processors does not properly handle the interaction between locked instructions and write-combined memory types, which allows local users to cause a denial of service (system hang) via a crafted application, aka the errata 793 issue. (bnc#852967) * CVE-2013-7263: The Linux kernel before 3.12.4 updates certain length values before ensuring that associated data structures have been initialized, which allows local users to obtain sensitive information from kernel stack memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call, related to net/ipv4/ping.c, net/ipv4/raw.c, net/ipv4/udp.c, net/ipv6/raw.c, and net/ipv6/udp.c. (bnc#857643) * CVE-2013-7264: The l2tp_ip_recvmsg function in net/l2tp/l2tp_ip.c in the Linux kernel before 3.12.4 updates a certain length value before ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel stack memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call. (bnc#857643) * CVE-2013-7265: The pn_recvmsg function in net/phonet/datagram.c in the Linux kernel before 3.12.4 updates a certain length value before ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel stack memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call. (bnc#857643) * CVE-2014-0069: The cifs_iovec_write function in fs/cifs/file.c in the Linux kernel through 3.13.5 does not properly handle uncached write operations that copy fewer than the requested number of bytes, which allows local users to obtain sensitive information from kernel memory, cause a denial of service (memory corruption and system crash), or possibly gain privileges via a writev system call with a crafted pointer. (bnc#864025) The following non-security bugs were fixed: * kabi: protect symbols modified by bnc#864833 fix (bnc#864833). * mm: mempolicy: fix mbind_range() && vma_adjust() interaction (VM Functionality (bnc#866428)). * mm: merging memory blocks resets mempolicy (VM Functionality (bnc#866428)). * mm/page-writeback.c: do not count anon pages as dirtyable memory (High memory utilisation performance (bnc#859225)). * mm: vmscan: Do not force reclaim file pages until it exceeds anon (High memory utilisation performance (bnc#859225)). * mm: vmscan: fix endless loop in kswapd balancing (High memory utilisation performance (bnc#859225)). * mm: vmscan: Update rotated and scanned when force reclaimed (High memory utilisation performance (bnc#859225)). * mm: exclude memory less nodes from zone_reclaim (bnc#863526). * mm: fix return type for functions nr_free_*_pages kabi fixup (bnc#864058). * mm: fix return type for functions nr_free_*_pages (bnc#864058). * mm: swap: Use swapfiles in priority order (Use swap files in priority order (bnc#862957)). * x86: Save cr2 in NMI in case NMIs take a page fault (follow-up for patches.fixes/x86-Add-workaround-to-NMI-iret-woes.patch). * powerpc: Add VDSO version of getcpu (fate#316816, bnc#854445). * vmscan: change type of vm_total_pages to unsigned long (bnc#864058). * audit: dynamically allocate audit_names when not enough space is in the names array (bnc#857358). * audit: make filetype matching consistent with other filters (bnc#857358). * arch/x86/mm/srat: Skip NUMA_NO_NODE while parsing SLIT (bnc#863178). * hwmon: (coretemp) Fix truncated name of alarm attributes. * privcmd: allow preempting long running user-mode originating hypercalls (bnc#861093). * nohz: Check for nohz active instead of nohz enabled (bnc#846790). * nohz: Fix another inconsistency between CONFIG_NO_HZ=n and nohz=off (bnc#846790). * iommu/vt-d: add quirk for broken interrupt remapping on 55XX chipsets (bnc#844513) * balloon: do not crash in HVM-with-PoD guests. * crypto: s390 - fix des and des3_ede ctr concurrency issue (bnc#862796, LTC#103744). * crypto: s390 - fix des and des3_ede cbc concurrency issue (bnc#862796, LTC#103743). * kernel: oops due to linkage stack instructions (bnc#862796, LTC#103860). * crypto: s390 - fix concurrency issue in aes-ctr mode (bnc#862796, LTC#103742). * dump: Fix dump memory detection (bnc#862796,LTC#103575). * net: change type of virtio_chan->p9_max_pages (bnc#864058). * inet: Avoid potential NULL peer dereference (bnc#864833). * inet: Hide route peer accesses behind helpers (bnc#864833). * inet: Pass inetpeer root into inet_getpeer*() interfaces (bnc#864833). * tcp: syncookies: reduce cookie lifetime to 128 seconds (bnc#833968). * tcp: syncookies: reduce mss table to four values (bnc#833968). * ipv6 routing, NLM_F_* flag support: REPLACE and EXCL flags support, warn about missing CREATE flag (bnc#865783). * ipv6: send router reachability probe if route has an unreachable gateway (bnc#853162). * sctp: Implement quick failover draft from tsvwg (bnc#827670). * ipvs: fix AF assignment in ip_vs_conn_new() (bnc#856848). * NFSD/sunrpc: avoid deadlock on TCP connection due to memory pressure (bnc#853455). * btrfs: bugfix collection * fs/nfsd: change type of max_delegations, nfsd_drc_max_mem and nfsd_drc_mem_used (bnc#864058). * fs/buffer.c: change type of max_buffer_heads to unsigned long (bnc#864058). * ncpfs: fix rmdir returns Device or resource busy (bnc#864880). * fs/fscache: Handle removal of unadded object to the fscache_object_list rb tree (bnc#855885). * scsi_dh_alua: fixup RTPG retry delay miscalculation (bnc#854025). * scsi_dh_alua: Simplify state machine (bnc#854025). * xhci: Fix resume issues on Renesas chips in Samsung laptops (bnc#866253). * bonding: disallow enslaving a bond to itself (bnc#599263). * USB: hub: handle -ETIMEDOUT during enumeration (bnc#855825). * dm-multipath: Do not stall on invalid ioctls (bnc#865342). * scsi_dh_alua: endless STPG retries for a failed LUN (bnc#865342). * net/mlx4_en: Fix pages never dma unmapped on rx (bnc#858604). * dlm: remove get_comm (bnc#827670). * dlm: Avoid LVB truncation (bnc#827670). * dlm: disable nagle for SCTP (bnc#827670). * dlm: retry failed SCTP sends (bnc#827670). * dlm: try other IPs when sctp init assoc fails (bnc#827670). * dlm: clear correct bit during sctp init failure handling (bnc#827670). * dlm: set sctp assoc id during setup (bnc#827670). * dlm: clear correct init bit during sctp setup (bnc#827670). * dlm: fix deadlock between dlm_send and dlm_controld (bnc#827670). * dlm: Fix return value from lockspace_busy() (bnc#827670). * Avoid occasional hang with NFS (bnc#852488). * mpt2sas: Fix unsafe using smp_processor_id() in preemptible (bnc#853166). * lockd: send correct lock when granting a delayed lock (bnc#859342). Security Issues references: * CVE-2013-4470 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4470 > * CVE-2013-6885 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6885 > * CVE-2013-7263 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7263 > * CVE-2013-7264 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7264 > * CVE-2013-7265 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7265 > * CVE-2014-0069 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0069 > Indications: Everyone using the Linux Kernel on x86_64 architecture should update. Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 11 SP3 for VMware: zypper in -t patch slessp3-kernel-9050 slessp3-kernel-9051 - SUSE Linux Enterprise Server 11 SP3: zypper in -t patch slessp3-kernel-9045 slessp3-kernel-9046 slessp3-kernel-9047 slessp3-kernel-9050 slessp3-kernel-9051 - SUSE Linux Enterprise High Availability Extension 11 SP3: zypper in -t patch slehasp3-kernel-9045 slehasp3-kernel-9046 slehasp3-kernel-9047 slehasp3-kernel-9050 slehasp3-kernel-9051 - SUSE Linux Enterprise Desktop 11 SP3: zypper in -t patch sledsp3-kernel-9050 sledsp3-kernel-9051 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Server 11 SP3 for VMware (i586 x86_64) [New Version: 3.0.101]: kernel-default-3.0.101-0.18.1 kernel-default-base-3.0.101-0.18.1 kernel-default-devel-3.0.101-0.18.1 kernel-source-3.0.101-0.18.1 kernel-syms-3.0.101-0.18.1 kernel-trace-3.0.101-0.18.1 kernel-trace-base-3.0.101-0.18.1 kernel-trace-devel-3.0.101-0.18.1 kernel-xen-devel-3.0.101-0.18.1 - SUSE Linux Enterprise Server 11 SP3 for VMware (i586) [New Version: 3.0.101]: kernel-pae-3.0.101-0.18.1 kernel-pae-base-3.0.101-0.18.1 kernel-pae-devel-3.0.101-0.18.1 - SUSE Linux Enterprise Server 11 SP3 (i586 ia64 ppc64 s390x x86_64) [New Version: 3.0.101]: kernel-default-3.0.101-0.18.1 kernel-default-base-3.0.101-0.18.1 kernel-default-devel-3.0.101-0.18.1 kernel-source-3.0.101-0.18.1 kernel-syms-3.0.101-0.18.1 kernel-trace-3.0.101-0.18.1 kernel-trace-base-3.0.101-0.18.1 kernel-trace-devel-3.0.101-0.18.1 - SUSE Linux Enterprise Server 11 SP3 (i586 x86_64) [New Version: 3.0.101]: kernel-ec2-3.0.101-0.18.1 kernel-ec2-base-3.0.101-0.18.1 kernel-ec2-devel-3.0.101-0.18.1 kernel-xen-3.0.101-0.18.1 kernel-xen-base-3.0.101-0.18.1 kernel-xen-devel-3.0.101-0.18.1 xen-kmp-default-4.2.4_02_3.0.101_0.18-0.7.5 - SUSE Linux Enterprise Server 11 SP3 (s390x) [New Version: 3.0.101]: kernel-default-man-3.0.101-0.18.1 - SUSE Linux Enterprise Server 11 SP3 (ppc64) [New Version: 3.0.101]: kernel-ppc64-3.0.101-0.18.1 kernel-ppc64-base-3.0.101-0.18.1 kernel-ppc64-devel-3.0.101-0.18.1 - SUSE Linux Enterprise Server 11 SP3 (i586) [New Version: 3.0.101]: kernel-pae-3.0.101-0.18.1 kernel-pae-base-3.0.101-0.18.1 kernel-pae-devel-3.0.101-0.18.1 xen-kmp-pae-4.2.4_02_3.0.101_0.18-0.7.5 - SUSE Linux Enterprise High Availability Extension 11 SP3 (i586 ia64 ppc64 s390x x86_64): cluster-network-kmp-default-1.4_3.0.101_0.18-2.27.49 cluster-network-kmp-trace-1.4_3.0.101_0.18-2.27.49 gfs2-kmp-default-2_3.0.101_0.18-0.16.55 gfs2-kmp-trace-2_3.0.101_0.18-0.16.55 ocfs2-kmp-default-1.6_3.0.101_0.18-0.20.49 ocfs2-kmp-trace-1.6_3.0.101_0.18-0.20.49 - SUSE Linux Enterprise High Availability Extension 11 SP3 (i586 x86_64): cluster-network-kmp-xen-1.4_3.0.101_0.18-2.27.49 gfs2-kmp-xen-2_3.0.101_0.18-0.16.55 ocfs2-kmp-xen-1.6_3.0.101_0.18-0.20.49 - SUSE Linux Enterprise High Availability Extension 11 SP3 (ppc64): cluster-network-kmp-ppc64-1.4_3.0.101_0.18-2.27.49 gfs2-kmp-ppc64-2_3.0.101_0.18-0.16.55 ocfs2-kmp-ppc64-1.6_3.0.101_0.18-0.20.49 - SUSE Linux Enterprise High Availability Extension 11 SP3 (i586): cluster-network-kmp-pae-1.4_3.0.101_0.18-2.27.49 gfs2-kmp-pae-2_3.0.101_0.18-0.16.55 ocfs2-kmp-pae-1.6_3.0.101_0.18-0.20.49 - SUSE Linux Enterprise Desktop 11 SP3 (i586 x86_64) [New Version: 3.0.101]: kernel-default-3.0.101-0.18.1 kernel-default-base-3.0.101-0.18.1 kernel-default-devel-3.0.101-0.18.1 kernel-default-extra-3.0.101-0.18.1 kernel-source-3.0.101-0.18.1 kernel-syms-3.0.101-0.18.1 kernel-trace-devel-3.0.101-0.18.1 kernel-xen-3.0.101-0.18.1 kernel-xen-base-3.0.101-0.18.1 kernel-xen-devel-3.0.101-0.18.1 kernel-xen-extra-3.0.101-0.18.1 xen-kmp-default-4.2.4_02_3.0.101_0.18-0.7.5 - SUSE Linux Enterprise Desktop 11 SP3 (i586) [New Version: 3.0.101]: kernel-pae-3.0.101-0.18.1 kernel-pae-base-3.0.101-0.18.1 kernel-pae-devel-3.0.101-0.18.1 kernel-pae-extra-3.0.101-0.18.1 xen-kmp-pae-4.2.4_02_3.0.101_0.18-0.7.5 - SLE 11 SERVER Unsupported Extras (i586 ia64 ppc64 s390x x86_64): kernel-default-extra-3.0.101-0.18.1 - SLE 11 SERVER Unsupported Extras (i586 x86_64): kernel-xen-extra-3.0.101-0.18.1 - SLE 11 SERVER Unsupported Extras (ppc64): kernel-ppc64-extra-3.0.101-0.18.1 - SLE 11 SERVER Unsupported Extras (i586): kernel-pae-extra-3.0.101-0.18.1 References: http://support.novell.com/security/cve/CVE-2013-4470.html http://support.novell.com/security/cve/CVE-2013-6885.html http://support.novell.com/security/cve/CVE-2013-7263.html http://support.novell.com/security/cve/CVE-2013-7264.html http://support.novell.com/security/cve/CVE-2013-7265.html http://support.novell.com/security/cve/CVE-2014-0069.html https://bugzilla.novell.com/599263 https://bugzilla.novell.com/827670 https://bugzilla.novell.com/833968 https://bugzilla.novell.com/844513 https://bugzilla.novell.com/846790 https://bugzilla.novell.com/847672 https://bugzilla.novell.com/852488 https://bugzilla.novell.com/852967 https://bugzilla.novell.com/853162 https://bugzilla.novell.com/853166 https://bugzilla.novell.com/853455 https://bugzilla.novell.com/854025 https://bugzilla.novell.com/854445 https://bugzilla.novell.com/855825 https://bugzilla.novell.com/855885 https://bugzilla.novell.com/856848 https://bugzilla.novell.com/857358 https://bugzilla.novell.com/857643 https://bugzilla.novell.com/858604 https://bugzilla.novell.com/859225 https://bugzilla.novell.com/859342 https://bugzilla.novell.com/861093 https://bugzilla.novell.com/862796 https://bugzilla.novell.com/862957 https://bugzilla.novell.com/863178 https://bugzilla.novell.com/863526 https://bugzilla.novell.com/864025 https://bugzilla.novell.com/864058 https://bugzilla.novell.com/864833 https://bugzilla.novell.com/864880 https://bugzilla.novell.com/865342 https://bugzilla.novell.com/865783 https://bugzilla.novell.com/866253 https://bugzilla.novell.com/866428 http://download.suse.com/patch/finder/?keywords=0e36f5897fccb20ea48f7e58e74… http://download.suse.com/patch/finder/?keywords=2bba527d042fa2524206bfe310b… http://download.suse.com/patch/finder/?keywords=486aa2eada02c76d1cac74b15b7… http://download.suse.com/patch/finder/?keywords=50402d33a8c1451b2166727adc1… http://download.suse.com/patch/finder/?keywords=7129036742186e61dc9c40e8d68… http://download.suse.com/patch/finder/?keywords=7186c0ca1717924a99aab4250b1… http://download.suse.com/patch/finder/?keywords=7ab3c7cf9fa1047f360fd862740… http://download.suse.com/patch/finder/?keywords=828b5201cfab14cc87d2e941056… http://download.suse.com/patch/finder/?keywords=aacac5b010d7cf23355177e902b… http://download.suse.com/patch/finder/?keywords=bf8427bba89958884290889fb50… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2014:0452-1: important: Security update for crowbar-barclamp-network
by opensuse-security＠opensuse.org 26 Mar '14

26 Mar '14

SUSE Security Update: Security update for crowbar-barclamp-network ______________________________________________________________________________ Announcement ID: SUSE-SU-2014:0452-1 Rating: important References: #864183 Cross-References: CVE-2014-0592 Affected Products: SUSE Cloud 3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for crowbar-barclamp-network fixes handling of security groups where new instances with floating IPs would not be protected by the firewall and could end up reachable from the outside. Security Issue reference: * CVE-2014-0592 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0592 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Cloud 3: zypper in -t patch sleclo30sp3-crowbar-barclamp-network-8957 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Cloud 3 (noarch): crowbar-barclamp-network-1.7+git.1392820032.ebfa91f-0.7.2 References: http://support.novell.com/security/cve/CVE-2014-0592.html https://bugzilla.novell.com/864183 http://download.suse.com/patch/finder/?keywords=7418b173a70ef35b0ea76128c0d… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2014:0451-1: important: Security update for IBM Java 6
by opensuse-security＠opensuse.org 26 Mar '14

26 Mar '14

SUSE Security Update: Security update for IBM Java 6 ______________________________________________________________________________ Announcement ID: SUSE-SU-2014:0451-1 Rating: important References: #862064 Cross-References: CVE-2013-5878 CVE-2013-5884 CVE-2013-5887 CVE-2013-5888 CVE-2013-5889 CVE-2013-5896 CVE-2013-5898 CVE-2013-5899 CVE-2013-5907 CVE-2013-5910 CVE-2014-0368 CVE-2014-0373 CVE-2014-0375 CVE-2014-0376 CVE-2014-0387 CVE-2014-0403 CVE-2014-0410 CVE-2014-0411 CVE-2014-0415 CVE-2014-0416 CVE-2014-0417 CVE-2014-0422 CVE-2014-0423 CVE-2014-0424 CVE-2014-0428 Affected Products: SUSE Manager 1.7 for SLE 11 SP2 ______________________________________________________________________________ An update that fixes 25 vulnerabilities is now available. Description: IBM Java 6 was updated to version SR15-FP1 which received security and bug fixes. More information at: http://www.ibm.com/developerworks/java/jdk/alerts/#Oracle_Ja nuary_14_2014_CPU <http://www.ibm.com/developerworks/java/jdk/alerts/#Oracle_J anuary_14_2014_CPU> Security Issue references: * CVE-2014-0428 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0428 > * CVE-2014-0422 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0422 > * CVE-2013-5907 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5907 > * CVE-2014-0417 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0417 > * CVE-2014-0373 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0373 > * CVE-2014-0423 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0423 > * CVE-2014-0376 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0376 > * CVE-2014-0376 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0376 > * CVE-2014-0416 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0416 > * CVE-2014-0368 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0368 > * CVE-2014-0411 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0411 > * CVE-2014-0428 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0428 > * CVE-2014-0422 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0422 > * CVE-2013-5907 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5907 > * CVE-2014-0415 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0415 > * CVE-2014-0410 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0410 > * CVE-2013-5889 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5889 > * CVE-2014-0417 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0417 > * CVE-2014-0387 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0387 > * CVE-2014-0424 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0424 > * CVE-2013-5878 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5878 > * CVE-2014-0373 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0373 > * CVE-2014-0375 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0375 > * CVE-2014-0403 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0403 > * CVE-2014-0423 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0423 > * CVE-2014-0376 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0376 > * CVE-2013-5910 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5910 > * CVE-2013-5884 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5884 > * CVE-2013-5896 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5896 > * CVE-2014-0376 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0376 > * CVE-2013-5899 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5899 > * CVE-2014-0416 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0416 > * CVE-2013-5887 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5887 > * CVE-2014-0368 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0368 > * CVE-2013-5888 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5888 > * CVE-2013-5898 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5898 > * CVE-2014-0411 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0411 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Manager 1.7 for SLE 11 SP2: zypper in -t patch sleman17sp2-java-1_6_0-ibm-9026 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Manager 1.7 for SLE 11 SP2 (x86_64): java-1_6_0-ibm-1.6.0_sr15.1-0.6.1 java-1_6_0-ibm-devel-1.6.0_sr15.1-0.6.1 java-1_6_0-ibm-fonts-1.6.0_sr15.1-0.6.1 java-1_6_0-ibm-jdbc-1.6.0_sr15.1-0.6.1 java-1_6_0-ibm-plugin-1.6.0_sr15.1-0.6.1 References: http://support.novell.com/security/cve/CVE-2013-5878.html http://support.novell.com/security/cve/CVE-2013-5884.html http://support.novell.com/security/cve/CVE-2013-5887.html http://support.novell.com/security/cve/CVE-2013-5888.html http://support.novell.com/security/cve/CVE-2013-5889.html http://support.novell.com/security/cve/CVE-2013-5896.html http://support.novell.com/security/cve/CVE-2013-5898.html http://support.novell.com/security/cve/CVE-2013-5899.html http://support.novell.com/security/cve/CVE-2013-5907.html http://support.novell.com/security/cve/CVE-2013-5910.html http://support.novell.com/security/cve/CVE-2014-0368.html http://support.novell.com/security/cve/CVE-2014-0373.html http://support.novell.com/security/cve/CVE-2014-0375.html http://support.novell.com/security/cve/CVE-2014-0376.html http://support.novell.com/security/cve/CVE-2014-0387.html http://support.novell.com/security/cve/CVE-2014-0403.html http://support.novell.com/security/cve/CVE-2014-0410.html http://support.novell.com/security/cve/CVE-2014-0411.html http://support.novell.com/security/cve/CVE-2014-0415.html http://support.novell.com/security/cve/CVE-2014-0416.html http://support.novell.com/security/cve/CVE-2014-0417.html http://support.novell.com/security/cve/CVE-2014-0422.html http://support.novell.com/security/cve/CVE-2014-0423.html http://support.novell.com/security/cve/CVE-2014-0424.html http://support.novell.com/security/cve/CVE-2014-0428.html https://bugzilla.novell.com/862064 http://download.suse.com/patch/finder/?keywords=30eb44893c8b38fb40f812d2cb0… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2014:0449-1: important: lighttpd to 1.4.35
by opensuse-security＠opensuse.org 26 Mar '14

26 Mar '14

openSUSE Security Update: lighttpd to 1.4.35 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0449-1 Rating: important References: #867350 Cross-References: CVE-2014-2323 CVE-2014-2324 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: lighttpd was updated to version 1.4.35, fixing bugs and security issues: CVE-2014-2323: SQL injection vulnerability in mod_mysql_vhost.c in lighttpd allowed remote attackers to execute arbitrary SQL commands via the host name, related to request_check_hostname. CVE-2014-2323: Multiple directory traversal vulnerabilities in (1) mod_evhost and (2) mod_simple_vhost in lighttpd allowed remote attackers to read arbitrary files via a .. (dot dot) in the host name, related to request_check_hostname. More information can be found on the lighttpd advisory page: http://download.lighttpd.net/lighttpd/security/lighttpd_sa_2 014_01.txt Other changes: * [network/ssl] fix build error if TLSEXT is disabled * [mod_fastcgi] fix use after free (only triggered if fastcgi debug is active) * [mod_rrdtool] fix invalid read (string not null terminated) * [mod_dirlisting] fix memory leak if pcre fails * [mod_fastcgi,mod_scgi] fix resource leaks on spawning backends * [mod_magnet] fix memory leak * add comments for switch fall throughs * remove logical dead code * [buffer] fix length check in buffer_is_equal_right_len * fix resource leaks in error cases on config parsing and other initializations * add force_assert() to enforce assertions as simple assert()s are disabled by -DNDEBUG (fixes #2546) * [mod_cml_lua] fix null pointer dereference * force assertion: setting FD_CLOEXEC must work (if available) * [network] check return value of lseek() * fix unchecked return values from stream_open/stat_cache_get_entry * [mod_webdav] fix logic error in handling file creation error * check length of unix domain socket filenames * fix SQL injection / host name validation (thx Jann Horn) for all the changes see /usr/share/doc/packages/lighttpd/NEWS Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-257 - openSUSE 12.3: zypper in -t patch openSUSE-2014-257 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): lighttpd-1.4.35-2.9.1 lighttpd-debuginfo-1.4.35-2.9.1 lighttpd-debugsource-1.4.35-2.9.1 lighttpd-mod_cml-1.4.35-2.9.1 lighttpd-mod_cml-debuginfo-1.4.35-2.9.1 lighttpd-mod_geoip-1.4.35-2.9.1 lighttpd-mod_geoip-debuginfo-1.4.35-2.9.1 lighttpd-mod_magnet-1.4.35-2.9.1 lighttpd-mod_magnet-debuginfo-1.4.35-2.9.1 lighttpd-mod_mysql_vhost-1.4.35-2.9.1 lighttpd-mod_mysql_vhost-debuginfo-1.4.35-2.9.1 lighttpd-mod_rrdtool-1.4.35-2.9.1 lighttpd-mod_rrdtool-debuginfo-1.4.35-2.9.1 lighttpd-mod_trigger_b4_dl-1.4.35-2.9.1 lighttpd-mod_trigger_b4_dl-debuginfo-1.4.35-2.9.1 lighttpd-mod_webdav-1.4.35-2.9.1 lighttpd-mod_webdav-debuginfo-1.4.35-2.9.1 - openSUSE 12.3 (i586 x86_64): lighttpd-1.4.35-6.9.1 lighttpd-debuginfo-1.4.35-6.9.1 lighttpd-debugsource-1.4.35-6.9.1 lighttpd-mod_cml-1.4.35-6.9.1 lighttpd-mod_cml-debuginfo-1.4.35-6.9.1 lighttpd-mod_geoip-1.4.35-6.9.1 lighttpd-mod_geoip-debuginfo-1.4.35-6.9.1 lighttpd-mod_magnet-1.4.35-6.9.1 lighttpd-mod_magnet-debuginfo-1.4.35-6.9.1 lighttpd-mod_mysql_vhost-1.4.35-6.9.1 lighttpd-mod_mysql_vhost-debuginfo-1.4.35-6.9.1 lighttpd-mod_rrdtool-1.4.35-6.9.1 lighttpd-mod_rrdtool-debuginfo-1.4.35-6.9.1 lighttpd-mod_trigger_b4_dl-1.4.35-6.9.1 lighttpd-mod_trigger_b4_dl-debuginfo-1.4.35-6.9.1 lighttpd-mod_webdav-1.4.35-6.9.1 lighttpd-mod_webdav-debuginfo-1.4.35-6.9.1 References: http://support.novell.com/security/cve/CVE-2014-2323.html http://support.novell.com/security/cve/CVE-2014-2324.html https://bugzilla.novell.com/867350 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2014:0448-1: important: MozillaFirefox: Update to version 28.0
by opensuse-security＠opensuse.org 26 Mar '14

26 Mar '14

openSUSE Security Update: MozillaFirefox: Update to version 28.0 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0448-1 Rating: important References: #865539 #868603 Cross-References: CVE-2014-1493 CVE-2014-1494 CVE-2014-1497 CVE-2014-1498 CVE-2014-1499 CVE-2014-1500 CVE-2014-1502 CVE-2014-1504 CVE-2014-1505 CVE-2014-1508 CVE-2014-1509 CVE-2014-1510 CVE-2014-1511 CVE-2014-1512 CVE-2014-1513 CVE-2014-1514 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that fixes 16 vulnerabilities is now available. Description: Mozilla Firefox was updated to version 28.0, receiving enhancements, bug and security fixes. Mozilla NSPR was updated to 4.10.4 receiving enhancements, bug and security fixes. Mozilla NSS was updated to 3.15.5 receiving enhancements, bug and security fixes. Changes in MozillaFirefox: - update to Firefox 28.0 (bnc#868603) * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494 Miscellaneous memory safety hazards * MFSA 2014-17/CVE-2014-1497 (bmo#966311) Out of bounds read during WAV file decoding * MFSA 2014-18/CVE-2014-1498 (bmo#935618) crypto.generateCRMFRequest does not validate type of key * MFSA 2014-19/CVE-2014-1499 (bmo#961512) Spoofing attack on WebRTC permission prompt * MFSA 2014-20/CVE-2014-1500 (bmo#956524) onbeforeunload and Javascript navigation DOS * MFSA 2014-22/CVE-2014-1502 (bmo#972622) WebGL content injection from one domain to rendering in another * MFSA 2014-23/CVE-2014-1504 (bmo#911547) Content Security Policy for data: documents not preserved by session restore * MFSA 2014-26/CVE-2014-1508 (bmo#963198) Information disclosure through polygon rendering in MathML * MFSA 2014-27/CVE-2014-1509 (bmo#966021) Memory corruption in Cairo during PDF font rendering * MFSA 2014-28/CVE-2014-1505 (bmo#941887) SVG filters information disclosure through feDisplacementMap * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909) Privilege escalation using WebIDL-implemented APIs * MFSA 2014-30/CVE-2014-1512 (bmo#982957) Use-after-free in TypeObject * MFSA 2014-31/CVE-2014-1513 (bmo#982974) Out-of-bounds read/write through neutering ArrayBuffer objects * MFSA 2014-32/CVE-2014-1514 (bmo#983344) Out-of-bounds write through TypedArrayObject after neutering - requires NSPR 4.10.3 and NSS 3.15.5 - new build dependency (and recommends): * libpulse * JS math correctness issue (bmo#941381) Changes in mozilla-nspr: - update to version 4.10.4 * bmo#767759: Add support for new x32 abi * bmo#844784: Thread data race in PR_EnterMonitor * bmo#939786: data race nsprpub/pr/src/pthreads/ptthread.c:137 _pt_root * bmo#958796: Users of _beginthreadex that set a custom stack size may not be getting the behavior they want * bmo#963033: AArch64 support update for NSPR * bmo#969061: Incorrect end-of-list test when iterating over a PRCList in prcountr.c and prtrace.c * bmo#971152: IPv6 detection on linux depends on availability of /proc/net/if_inet6 - update to version 4.10.3 * bmo#749849: ensure we'll free the thread-specific data key. * bmo#941461: don't compile android with unaligned memory access. * bmo#932398: Add PR_SyncMemMap, a portable version of msync/FlushViewOfFile. * bmo#952621: Fix a thread-unsafe access to lock->owner in PR_Lock. * bmo#957458: Fix several bugs in the lock rank checking code. * bmo#936320: Use an alternative test for IPv6 support on Linux to avoid opening a socket. Changes in mozilla-nss: - update to 3.15.5 * required for Firefox 28 * export FREEBL_LOWHASH to get the correct default headers (bnc#865539) New functionality * Added support for the TLS application layer protocol negotiation (ALPN) extension. Two SSL socket options, SSL_ENABLE_NPN and SSL_ENABLE_ALPN, can be used to control whether NPN or ALPN (or both) should be used for application layer protocol negotiation. * Added the TLS padding extension. The extension type value is 35655, which may change when an official extension type value is assigned by IANA. NSS automatically adds the padding extension to ClientHello when necessary. * Added a new macro CERT_LIST_TAIL, defined in certt.h, for getting the tail of a CERTCertList. Notable Changes * bmo#950129: Improve the OCSP fetching policy when verifying OCSP responses * bmo#949060: Validate the iov input argument (an array of PRIOVec structures) of ssl_WriteV (called via PR_Writev). Applications should still take care when converting struct iov to PRIOVec because the iov_len members of the two structures have different types (size_t vs. int). size_t is unsigned and may be larger than int. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-256 - openSUSE 12.3: zypper in -t patch openSUSE-2014-256 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): MozillaFirefox-28.0-17.1 MozillaFirefox-branding-upstream-28.0-17.1 MozillaFirefox-buildsymbols-28.0-17.1 MozillaFirefox-debuginfo-28.0-17.1 MozillaFirefox-debugsource-28.0-17.1 MozillaFirefox-devel-28.0-17.1 MozillaFirefox-translations-common-28.0-17.1 MozillaFirefox-translations-other-28.0-17.1 libfreebl3-3.15.5-16.1 libfreebl3-debuginfo-3.15.5-16.1 libsoftokn3-3.15.5-16.1 libsoftokn3-debuginfo-3.15.5-16.1 mozilla-nspr-4.10.4-8.1 mozilla-nspr-debuginfo-4.10.4-8.1 mozilla-nspr-debugsource-4.10.4-8.1 mozilla-nspr-devel-4.10.4-8.1 mozilla-nss-3.15.5-16.1 mozilla-nss-certs-3.15.5-16.1 mozilla-nss-certs-debuginfo-3.15.5-16.1 mozilla-nss-debuginfo-3.15.5-16.1 mozilla-nss-debugsource-3.15.5-16.1 mozilla-nss-devel-3.15.5-16.1 mozilla-nss-sysinit-3.15.5-16.1 mozilla-nss-sysinit-debuginfo-3.15.5-16.1 mozilla-nss-tools-3.15.5-16.1 mozilla-nss-tools-debuginfo-3.15.5-16.1 - openSUSE 13.1 (x86_64): libfreebl3-32bit-3.15.5-16.1 libfreebl3-debuginfo-32bit-3.15.5-16.1 libsoftokn3-32bit-3.15.5-16.1 libsoftokn3-debuginfo-32bit-3.15.5-16.1 mozilla-nspr-32bit-4.10.4-8.1 mozilla-nspr-debuginfo-32bit-4.10.4-8.1 mozilla-nss-32bit-3.15.5-16.1 mozilla-nss-certs-32bit-3.15.5-16.1 mozilla-nss-certs-debuginfo-32bit-3.15.5-16.1 mozilla-nss-debuginfo-32bit-3.15.5-16.1 mozilla-nss-sysinit-32bit-3.15.5-16.1 mozilla-nss-sysinit-debuginfo-32bit-3.15.5-16.1 - openSUSE 12.3 (i586 x86_64): MozillaFirefox-28.0-1.56.1 MozillaFirefox-branding-upstream-28.0-1.56.1 MozillaFirefox-buildsymbols-28.0-1.56.1 MozillaFirefox-debuginfo-28.0-1.56.1 MozillaFirefox-debugsource-28.0-1.56.1 MozillaFirefox-devel-28.0-1.56.1 MozillaFirefox-translations-common-28.0-1.56.1 MozillaFirefox-translations-other-28.0-1.56.1 libfreebl3-3.15.5-1.32.1 libfreebl3-debuginfo-3.15.5-1.32.1 libsoftokn3-3.15.5-1.32.1 libsoftokn3-debuginfo-3.15.5-1.32.1 mozilla-nspr-4.10.4-1.26.1 mozilla-nspr-debuginfo-4.10.4-1.26.1 mozilla-nspr-debugsource-4.10.4-1.26.1 mozilla-nspr-devel-4.10.4-1.26.1 mozilla-nss-3.15.5-1.32.1 mozilla-nss-certs-3.15.5-1.32.1 mozilla-nss-certs-debuginfo-3.15.5-1.32.1 mozilla-nss-debuginfo-3.15.5-1.32.1 mozilla-nss-debugsource-3.15.5-1.32.1 mozilla-nss-devel-3.15.5-1.32.1 mozilla-nss-sysinit-3.15.5-1.32.1 mozilla-nss-sysinit-debuginfo-3.15.5-1.32.1 mozilla-nss-tools-3.15.5-1.32.1 mozilla-nss-tools-debuginfo-3.15.5-1.32.1 - openSUSE 12.3 (x86_64): libfreebl3-32bit-3.15.5-1.32.1 libfreebl3-debuginfo-32bit-3.15.5-1.32.1 libsoftokn3-32bit-3.15.5-1.32.1 libsoftokn3-debuginfo-32bit-3.15.5-1.32.1 mozilla-nspr-32bit-4.10.4-1.26.1 mozilla-nspr-debuginfo-32bit-4.10.4-1.26.1 mozilla-nss-32bit-3.15.5-1.32.1 mozilla-nss-certs-32bit-3.15.5-1.32.1 mozilla-nss-certs-debuginfo-32bit-3.15.5-1.32.1 mozilla-nss-debuginfo-32bit-3.15.5-1.32.1 mozilla-nss-sysinit-32bit-3.15.5-1.32.1 mozilla-nss-sysinit-debuginfo-32bit-3.15.5-1.32.1 References: http://support.novell.com/security/cve/CVE-2014-1493.html http://support.novell.com/security/cve/CVE-2014-1494.html http://support.novell.com/security/cve/CVE-2014-1497.html http://support.novell.com/security/cve/CVE-2014-1498.html http://support.novell.com/security/cve/CVE-2014-1499.html http://support.novell.com/security/cve/CVE-2014-1500.html http://support.novell.com/security/cve/CVE-2014-1502.html http://support.novell.com/security/cve/CVE-2014-1504.html http://support.novell.com/security/cve/CVE-2014-1505.html http://support.novell.com/security/cve/CVE-2014-1508.html http://support.novell.com/security/cve/CVE-2014-1509.html http://support.novell.com/security/cve/CVE-2014-1510.html http://support.novell.com/security/cve/CVE-2014-1511.html http://support.novell.com/security/cve/CVE-2014-1512.html http://support.novell.com/security/cve/CVE-2014-1513.html http://support.novell.com/security/cve/CVE-2014-1514.html https://bugzilla.novell.com/865539 https://bugzilla.novell.com/868603 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2014:0446-1: important: Security update for Xen
by opensuse-security＠opensuse.org 25 Mar '14

25 Mar '14

SUSE Security Update: Security update for Xen ______________________________________________________________________________ Announcement ID: SUSE-SU-2014:0446-1 Rating: important References: #777628 #777890 #779212 #786516 #786517 #786519 #786520 #787163 #789944 #789945 #789948 #789950 #789951 #794316 #797031 #797523 #800275 #805094 #813673 #813675 #813677 #816156 #816159 #816163 #819416 #820917 #820919 #823011 #823608 #826882 #831120 #839596 #839618 #840592 #841766 #842511 #848657 #849667 #849668 #853049 #860163 Cross-References: CVE-2006-1056 CVE-2007-0998 CVE-2012-3497 CVE-2012-4411 CVE-2012-4535 CVE-2012-4537 CVE-2012-4538 CVE-2012-4539 CVE-2012-4544 CVE-2012-5510 CVE-2012-5511 CVE-2012-5513 CVE-2012-5514 CVE-2012-5515 CVE-2012-5634 CVE-2012-6075 CVE-2012-6333 CVE-2013-0153 CVE-2013-0154 CVE-2013-1432 CVE-2013-1442 CVE-2013-1917 CVE-2013-1918 CVE-2013-1919 CVE-2013-1920 CVE-2013-1952 CVE-2013-1964 CVE-2013-2072 CVE-2013-2076 CVE-2013-2077 CVE-2013-2194 CVE-2013-2195 CVE-2013-2196 CVE-2013-2211 CVE-2013-2212 CVE-2013-4329 CVE-2013-4355 CVE-2013-4361 CVE-2013-4368 CVE-2013-4494 CVE-2013-4553 CVE-2013-4554 CVE-2013-6885 CVE-2014-1891 CVE-2014-1892 CVE-2014-1893 CVE-2014-1894 Affected Products: SUSE Linux Enterprise Server 11 SP1 LTSS ______________________________________________________________________________ An update that fixes 47 vulnerabilities is now available. Description: The SUSE Linux Enterprise Server 11 Service Pack 1 LTSS Xen hypervisor and toolset have been updated to fix various security issues and some bugs. The following security issues have been addressed: * XSA-84: CVE-2014-1894: Xen 3.2 (and presumably earlier) exhibit both problems with the overflow issue being present for more than just the suboperations listed above. (bnc#860163) * XSA-84: CVE-2014-1892 CVE-2014-1893: Xen 3.3 through 4.1, while not affected by the above overflow, have a different overflow issue on FLASK_{GET,SET}BOOL and expose unreasonably large memory allocation to aribitrary guests. (bnc#860163) * XSA-84: CVE-2014-1891: The FLASK_{GET,SET}BOOL, FLASK_USER and FLASK_CONTEXT_TO_SID suboperations of the flask hypercall are vulnerable to an integer overflow on the input size. The hypercalls attempt to allocate a buffer which is 1 larger than this size and is therefore vulnerable to integer overflow and an attempt to allocate then access a zero byte buffer. (bnc#860163) * XSA-82: CVE-2013-6885: The microcode on AMD 16h 00h through 0Fh processors does not properly handle the interaction between locked instructions and write-combined memory types, which allows local users to cause a denial of service (system hang) via a crafted application, aka the errata 793 issue. (bnc#853049) * XSA-76: CVE-2013-4554: Xen 3.0.3 through 4.1.x (possibly 4.1.6.1), 4.2.x (possibly 4.2.3), and 4.3.x (possibly 4.3.1) does not properly prevent access to hypercalls, which allows local guest users to gain privileges via a crafted application running in ring 1 or 2. (bnc#849668) * XSA-74: CVE-2013-4553: The XEN_DOMCTL_getmemlist hypercall in Xen 3.4.x through 4.3.x (possibly 4.3.1) does not always obtain the page_alloc_lock and mm_rwlock in the same order, which allows local guest administrators to cause a denial of service (host deadlock). (bnc#849667) * XSA-73: CVE-2013-4494: Xen before 4.1.x, 4.2.x, and 4.3.x does not take the page_alloc_lock and grant_table.lock in the same order, which allows local guest administrators with access to multiple vcpus to cause a denial of service (host deadlock) via unspecified vectors. (bnc#848657) * XSA-67: CVE-2013-4368: The outs instruction emulation in Xen 3.1.x, 4.2.x, 4.3.x, and earlier, when using FS: or GS: segment override, uses an uninitialized variable as a segment base, which allows local 64-bit PV guests to obtain sensitive information (hypervisor stack content) via unspecified vectors related to stale data in a segment register. (bnc#842511) * XSA-66: CVE-2013-4361: The fbld instruction emulation in Xen 3.3.x through 4.3.x does not use the correct variable for the source effective address, which allows local HVM guests to obtain hypervisor stack information by reading the values used by the instruction. (bnc#841766) * XSA-63: CVE-2013-4355: Xen 4.3.x and earlier does not properly handle certain errors, which allows local HVM guests to obtain hypervisor stack memory via a (1) port or (2) memory mapped I/O write or (3) other unspecified operations related to addresses without associated memory. (bnc#840592) * XSA-62: CVE-2013-1442: Xen 4.0 through 4.3.x, when using AVX or LWP capable CPUs, does not properly clear previous data from registers when using an XSAVE or XRSTOR to extend the state components of a saved or restored vCPU after touching other restored extended registers, which allows local guest OSes to obtain sensitive information by reading the registers. (bnc#839596) * XSA-61: CVE-2013-4329: The xenlight library (libxl) in Xen 4.0.x through 4.2.x, when IOMMU is disabled, provides access to a busmastering-capable PCI passthrough device before the IOMMU setup is complete, which allows local HVM guest domains to gain privileges or cause a denial of service via a DMA instruction. (bnc#839618) * XSA-60: CVE-2013-2212: The vmx_set_uc_mode function in Xen 3.3 through 4.3, when disabling chaches, allows local HVM guests with access to memory mapped I/O regions to cause a denial of service (CPU consumption and possibly hypervisor or guest kernel panic) via a crafted GFN range. (bnc#831120) * XSA-58: CVE-2013-1918: Certain page table manipulation operations in Xen 4.1.x, 4.2.x, and earlier are not preemptible, which allows local PV kernels to cause a denial of service via vectors related to "deep page table traversal." (bnc#826882) * XSA-58: CVE-2013-1432: Xen 4.1.x and 4.2.x, when the XSA-45 patch is in place, does not properly maintain references on pages stored for deferred cleanup, which allows local PV guest kernels to cause a denial of service (premature page free and hypervisor crash) or possible gain privileges via unspecified vectors. (bnc#826882) * XSA-57: CVE-2013-2211: The libxenlight (libxl) toolstack library in Xen 4.0.x, 4.1.x, and 4.2.x uses weak permissions for xenstore keys for paravirtualised and emulated serial console devices, which allows local guest administrators to modify the xenstore value via unspecified vectors. (bnc#823608) * XSA-56: CVE-2013-2072: Buffer overflow in the Python bindings for the xc_vcpu_setaffinity call in Xen 4.0.x, 4.1.x, and 4.2.x allows local administrators with permissions to configure VCPU affinity to cause a denial of service (memory corruption and xend toolstack crash) and possibly gain privileges via a crafted cpumap. (bnc#819416) * XSA-55: CVE-2013-2196: Multiple unspecified vulnerabilities in the Elf parser (libelf) in Xen 4.2.x and earlier allow local guest administrators with certain permissions to have an unspecified impact via a crafted kernel, related to "other problems" that are not CVE-2013-2194 or CVE-2013-2195. (bnc#823011) * XSA-55: CVE-2013-2195: The Elf parser (libelf) in Xen 4.2.x and earlier allow local guest administrators with certain permissions to have an unspecified impact via a crafted kernel, related to "pointer dereferences" involving unexpected calculations. (bnc#823011) * XSA-55: CVE-2013-2194: Multiple integer overflows in the Elf parser (libelf) in Xen 4.2.x and earlier allow local guest administrators with certain permissions to have an unspecified impact via a crafted kernel. (bnc#823011) * XSA-53: CVE-2013-2077: Xen 4.0.x, 4.1.x, and 4.2.x does not properly restrict the contents of a XRSTOR, which allows local PV guest users to cause a denial of service (unhandled exception and hypervisor crash) via unspecified vectors. (bnc#820919) * XSA-52: CVE-2013-2076: Xen 4.0.x, 4.1.x, and 4.2.x, when running on AMD64 processors, only save/restore the FOP, FIP, and FDP x87 registers in FXSAVE/FXRSTOR when an exception is pending, which allows one domain to determine portions of the state of floating point instructions of other domains, which can be leveraged to obtain sensitive information such as cryptographic keys, a similar vulnerability to CVE-2006-1056. NOTE: this is the documented behavior of AMD64 processors, but it is inconsistent with Intel processors in a security-relevant fashion that was not addressed by the kernels. (bnc#820917) * XSA-50: CVE-2013-1964: Xen 4.0.x and 4.1.x incorrectly releases a grant reference when releasing a non-v1, non-transitive grant, which allows local guest administrators to cause a denial of service (host crash), obtain sensitive information, or possible have other impacts via unspecified vectors. (bnc#816156) * XSA-49: CVE-2013-1952: Xen 4.x, when using Intel VT-d for a bus mastering capable PCI device, does not properly check the source when accessing a bridge device's interrupt remapping table entries for MSI interrupts, which allows local guest domains to cause a denial of service (interrupt injection) via unspecified vectors. (bnc#816163) * XSA-47: CVE-2013-1920: Xen 4.2.x, 4.1.x, and earlier, when the hypervisor is running "under memory pressure" and the Xen Security Module (XSM) is enabled, uses the wrong ordering of operations when extending the per-domain event channel tracking table, which causes a use-after-free and allows local guest kernels to inject arbitrary events and gain privileges via unspecified vectors. (bnc#813677) * XSA-46: CVE-2013-1919: Xen 4.2.x and 4.1.x does not properly restrict access to IRQs, which allows local stub domain clients to gain access to IRQs and cause a denial of service via vectors related to "passed-through IRQs or PCI devices." (bnc#813675) * XSA-45: CVE-2013-1918: Certain page table manipulation operations in Xen 4.1.x, 4.2.x, and earlier are not preemptible, which allows local PV kernels to cause a denial of service via vectors related to "deep page table traversal." (bnc#816159) * XSA-44: CVE-2013-1917: Xen 3.1 through 4.x, when running 64-bit hosts on Intel CPUs, does not clear the NT flag when using an IRET after a SYSENTER instruction, which allows PV guest users to cause a denial of service (hypervisor crash) by triggering a #GP fault, which is not properly handled by another IRET instruction. (bnc#813673) * XSA-41: CVE-2012-6075: Buffer overflow in the e1000_receive function in the e1000 device driver (hw/e1000.c) in QEMU 1.3.0-rc2 and other versions, when the SBP and LPE flags are disabled, allows remote attackers to cause a denial of service (guest OS crash) and possibly execute arbitrary guest code via a large packet. (bnc#797523) * XSA-37: CVE-2013-0154: The get_page_type function in xen/arch/x86/mm.c in Xen 4.2, when debugging is enabled, allows local PV or HVM guest administrators to cause a denial of service (assertion failure and hypervisor crash) via unspecified vectors related to a hypercall. (bnc#797031) * XSA-36: CVE-2013-0153: The AMD IOMMU support in Xen 4.2.x, 4.1.x, 3.3, and other versions, when using AMD-Vi for PCI passthrough, uses the same interrupt remapping table for the host and all guests, which allows guests to cause a denial of service by injecting an interrupt into other guests. (bnc#800275) * XSA-33: CVE-2012-5634: Xen 4.2.x, 4.1.x, and 4.0, when using Intel VT-d for PCI passthrough, does not properly configure VT-d when supporting a device that is behind a legacy PCI Bridge, which allows local guests to cause a denial of service to other guests by injecting an interrupt. (bnc#794316) * XSA-31: CVE-2012-5515: The (1) XENMEM_decrease_reservation, (2) XENMEM_populate_physmap, and (3) XENMEM_exchange hypercalls in Xen 4.2 and earlier allow local guest administrators to cause a denial of service (long loop and hang) via a crafted extent_order value. (bnc#789950) * XSA-30: CVE-2012-5514: The guest_physmap_mark_populate_on_demand function in Xen 4.2 and earlier does not properly unlock the subject GFNs when checking if they are in use, which allows local guest HVM administrators to cause a denial of service (hang) via unspecified vectors. (bnc#789948) * XSA-29: CVE-2012-5513: The XENMEM_exchange handler in Xen 4.2 and earlier does not properly check the memory address, which allows local PV guest OS administrators to cause a denial of service (crash) or possibly gain privileges via unspecified vectors that overwrite memory in the hypervisor reserved range. (bnc#789951) * XSA-27: CVE-2012-6333: Multiple HVM control operations in Xen 3.4 through 4.2 allow local HVM guest OS administrators to cause a denial of service (physical CPU consumption) via a large input. (bnc#789944) * XSA-27: CVE-2012-5511: Stack-based buffer overflow in the dirty video RAM tracking functionality in Xen 3.4 through 4.1 allows local HVM guest OS administrators to cause a denial of service (crash) via a large bitmap image. (bnc#789944) * XSA-26: CVE-2012-5510: Xen 4.x, when downgrading the grant table version, does not properly remove the status page from the tracking list when freeing the page, which allows local guest OS administrators to cause a denial of service (hypervisor crash) via unspecified vectors. (bnc#789945) * XSA-25: CVE-2012-4544: The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk (1) before or (2) after decompression, which allows local guest administrators to cause a denial of service (domain 0 memory consumption) via a crafted (a) kernel or (b) ramdisk. (bnc#787163) * XSA-24: CVE-2012-4539: Xen 4.0 through 4.2, when running 32-bit x86 PV guests on 64-bit hypervisors, allows local guest OS administrators to cause a denial of service (infinite loop and hang or crash) via invalid arguments to GNTTABOP_get_status_frames, aka "Grant table hypercall infinite loop DoS vulnerability." (bnc#786520) * XSA-23: CVE-2012-4538: The HVMOP_pagetable_dying hypercall in Xen 4.0, 4.1, and 4.2 does not properly check the pagetable state when running on shadow pagetables, which allows a local HVM guest OS to cause a denial of service (hypervisor crash) via unspecified vectors. (bnc#786519) * XSA-22: CVE-2012-4537: Xen 3.4 through 4.2, and possibly earlier versions, does not properly synchronize the p2m and m2p tables when the set_p2m_entry function fails, which allows local HVM guest OS administrators to cause a denial of service (memory consumption and assertion failure), aka "Memory mapping failure DoS vulnerability." (bnc#786517) * XSA-20: CVE-2012-4535: Xen 3.4 through 4.2, and possibly earlier versions, allows local guest OS administrators to cause a denial of service (Xen infinite loop and physical CPU consumption) by setting a VCPU with an "inappropriate deadline." (bnc#786516) * XSA-19: CVE-2012-4411: The graphical console in Xen 4.0, 4.1 and 4.2 allows local OS guest administrators to obtain sensitive host resource information via the qemu monitor. NOTE: this might be a duplicate of CVE-2007-0998. (bnc#779212) * XSA-15: CVE-2012-3497: (1) TMEMC_SAVE_GET_CLIENT_WEIGHT, (2) TMEMC_SAVE_GET_CLIENT_CAP, (3) TMEMC_SAVE_GET_CLIENT_FLAGS and (4) TMEMC_SAVE_END in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 allow local guest OS users to cause a denial of service (NULL pointer dereference or memory corruption and host crash) or possibly have other unspecified impacts via a NULL client id. (bnc#777890) Also the following non-security bugs have been fixed: * xen hot plug attach/detach fails modified blktap-pv-cdrom.patch. (bnc#805094) * guest "disappears" after live migration Updated block-dmmd script. (bnc#777628) Security Issues references: * CVE-2006-1056 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1056 > * CVE-2007-0998 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0998 > * CVE-2012-3497 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3497 > * CVE-2012-4411 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4411 > * CVE-2012-4535 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4535 > * CVE-2012-4537 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4537 > * CVE-2012-4538 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4538 > * CVE-2012-4539 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4539 > * CVE-2012-4544 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4544 > * CVE-2012-5510 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5510 > * CVE-2012-5511 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5511 > * CVE-2012-5513 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5513 > * CVE-2012-5514 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5514 > * CVE-2012-5515 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5515 > * CVE-2012-5634 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5634 > * CVE-2012-6075 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6075 > * CVE-2012-6333 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6333 > * CVE-2013-0153 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0153 > * CVE-2013-0154 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0154 > * CVE-2013-1432 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1432 > * CVE-2013-1442 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1442 > * CVE-2013-1917 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1917 > * CVE-2013-1918 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1918 > * CVE-2013-1919 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1919 > * CVE-2013-1920 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1920 > * CVE-2013-1952 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1952 > * CVE-2013-1964 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1964 > * CVE-2013-2072 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2072 > * CVE-2013-2076 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2076 > * CVE-2013-2077 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2077 > * CVE-2013-2194 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2194 > * CVE-2013-2195 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2195 > * CVE-2013-2196 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2196 > * CVE-2013-2211 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2211 > * CVE-2013-2212 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2212 > * CVE-2013-4329 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4329 > * CVE-2013-4355 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4355 > * CVE-2013-4361 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4361 > * CVE-2013-4368 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4368 > * CVE-2013-4494 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4494 > * CVE-2013-4553 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4553 > * CVE-2013-4554 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4554 > * CVE-2013-6885 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6885 > * CVE-2014-1891 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1891 > * CVE-2014-1892 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1892 > * CVE-2014-1893 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1893 > * CVE-2014-1894 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1894 > Indications: Everyone using the Xen hypervisor should update. Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 11 SP1 LTSS: zypper in -t patch slessp1-xen-201402-8963 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Server 11 SP1 LTSS (i586 x86_64): xen-4.0.3_21548_16-0.5.1 xen-doc-html-4.0.3_21548_16-0.5.1 xen-doc-pdf-4.0.3_21548_16-0.5.1 xen-kmp-default-4.0.3_21548_16_2.6.32.59_0.9-0.5.1 xen-kmp-trace-4.0.3_21548_16_2.6.32.59_0.9-0.5.1 xen-libs-4.0.3_21548_16-0.5.1 xen-tools-4.0.3_21548_16-0.5.1 xen-tools-domU-4.0.3_21548_16-0.5.1 - SUSE Linux Enterprise Server 11 SP1 LTSS (i586): xen-kmp-pae-4.0.3_21548_16_2.6.32.59_0.9-0.5.1 References: http://support.novell.com/security/cve/CVE-2006-1056.html http://support.novell.com/security/cve/CVE-2007-0998.html http://support.novell.com/security/cve/CVE-2012-3497.html http://support.novell.com/security/cve/CVE-2012-4411.html http://support.novell.com/security/cve/CVE-2012-4535.html http://support.novell.com/security/cve/CVE-2012-4537.html http://support.novell.com/security/cve/CVE-2012-4538.html http://support.novell.com/security/cve/CVE-2012-4539.html http://support.novell.com/security/cve/CVE-2012-4544.html http://support.novell.com/security/cve/CVE-2012-5510.html http://support.novell.com/security/cve/CVE-2012-5511.html http://support.novell.com/security/cve/CVE-2012-5513.html http://support.novell.com/security/cve/CVE-2012-5514.html http://support.novell.com/security/cve/CVE-2012-5515.html http://support.novell.com/security/cve/CVE-2012-5634.html http://support.novell.com/security/cve/CVE-2012-6075.html http://support.novell.com/security/cve/CVE-2012-6333.html http://support.novell.com/security/cve/CVE-2013-0153.html http://support.novell.com/security/cve/CVE-2013-0154.html http://support.novell.com/security/cve/CVE-2013-1432.html http://support.novell.com/security/cve/CVE-2013-1442.html http://support.novell.com/security/cve/CVE-2013-1917.html http://support.novell.com/security/cve/CVE-2013-1918.html http://support.novell.com/security/cve/CVE-2013-1919.html http://support.novell.com/security/cve/CVE-2013-1920.html http://support.novell.com/security/cve/CVE-2013-1952.html http://support.novell.com/security/cve/CVE-2013-1964.html http://support.novell.com/security/cve/CVE-2013-2072.html http://support.novell.com/security/cve/CVE-2013-2076.html http://support.novell.com/security/cve/CVE-2013-2077.html http://support.novell.com/security/cve/CVE-2013-2194.html http://support.novell.com/security/cve/CVE-2013-2195.html http://support.novell.com/security/cve/CVE-2013-2196.html http://support.novell.com/security/cve/CVE-2013-2211.html http://support.novell.com/security/cve/CVE-2013-2212.html http://support.novell.com/security/cve/CVE-2013-4329.html http://support.novell.com/security/cve/CVE-2013-4355.html http://support.novell.com/security/cve/CVE-2013-4361.html http://support.novell.com/security/cve/CVE-2013-4368.html http://support.novell.com/security/cve/CVE-2013-4494.html http://support.novell.com/security/cve/CVE-2013-4553.html http://support.novell.com/security/cve/CVE-2013-4554.html http://support.novell.com/security/cve/CVE-2013-6885.html http://support.novell.com/security/cve/CVE-2014-1891.html http://support.novell.com/security/cve/CVE-2014-1892.html http://support.novell.com/security/cve/CVE-2014-1893.html http://support.novell.com/security/cve/CVE-2014-1894.html https://bugzilla.novell.com/777628 https://bugzilla.novell.com/777890 https://bugzilla.novell.com/779212 https://bugzilla.novell.com/786516 https://bugzilla.novell.com/786517 https://bugzilla.novell.com/786519 https://bugzilla.novell.com/786520 https://bugzilla.novell.com/787163 https://bugzilla.novell.com/789944 https://bugzilla.novell.com/789945 https://bugzilla.novell.com/789948 https://bugzilla.novell.com/789950 https://bugzilla.novell.com/789951 https://bugzilla.novell.com/794316 https://bugzilla.novell.com/797031 https://bugzilla.novell.com/797523 https://bugzilla.novell.com/800275 https://bugzilla.novell.com/805094 https://bugzilla.novell.com/813673 https://bugzilla.novell.com/813675 https://bugzilla.novell.com/813677 https://bugzilla.novell.com/816156 https://bugzilla.novell.com/816159 https://bugzilla.novell.com/816163 https://bugzilla.novell.com/819416 https://bugzilla.novell.com/820917 https://bugzilla.novell.com/820919 https://bugzilla.novell.com/823011 https://bugzilla.novell.com/823608 https://bugzilla.novell.com/826882 https://bugzilla.novell.com/831120 https://bugzilla.novell.com/839596 https://bugzilla.novell.com/839618 https://bugzilla.novell.com/840592 https://bugzilla.novell.com/841766 https://bugzilla.novell.com/842511 https://bugzilla.novell.com/848657 https://bugzilla.novell.com/849667 https://bugzilla.novell.com/849668 https://bugzilla.novell.com/853049 https://bugzilla.novell.com/860163 http://download.suse.com/patch/finder/?keywords=d46197780129fa94fee1eb17081… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2014:0445-1: important: Security update for gnutls
by opensuse-security＠opensuse.org 25 Mar '14

25 Mar '14

SUSE Security Update: Security update for gnutls ______________________________________________________________________________ Announcement ID: SUSE-SU-2014:0445-1 Rating: important References: #835760 #865804 #865993 Cross-References: CVE-2009-5138 CVE-2014-0092 Affected Products: SUSE Manager 1.7 for SLE 11 SP2 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: The GNUTLS library received a critical security fix and other updates: * CVE-2014-0092: The X.509 certificate verification had incorrect error handling, which could lead to broken certificates marked as being valid. * CVE-2009-5138: A verification problem in handling V1 certificates could also lead to V1 certificates incorrectly being handled. Additionally, a memory leak in PSK authentication was fixed. (bnc#835760) Security Issues references: * CVE-2014-0092 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0092 > * CVE-2009-5138 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5138 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Manager 1.7 for SLE 11 SP2: zypper in -t patch sleman17sp2-gnutls-9028 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Manager 1.7 for SLE 11 SP2 (x86_64): gnutls-2.4.1-24.39.49.1 libgnutls-extra26-2.4.1-24.39.49.1 libgnutls26-2.4.1-24.39.49.1 libgnutls26-32bit-2.4.1-24.39.49.1 References: http://support.novell.com/security/cve/CVE-2009-5138.html http://support.novell.com/security/cve/CVE-2014-0092.html https://bugzilla.novell.com/835760 https://bugzilla.novell.com/865804 https://bugzilla.novell.com/865993 http://download.suse.com/patch/finder/?keywords=3b773e3f5ab3d47e4e64a79e947… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2014:0444-1: important: Security update for openssl-certs
by opensuse-security＠opensuse.org 25 Mar '14

25 Mar '14

SUSE Security Update: Security update for openssl-certs ______________________________________________________________________________ Announcement ID: SUSE-SU-2014:0444-1 Rating: important References: #860581 #865080 Affected Products: SUSE Manager 1.7 for SLE 11 SP2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: The openssl-certs package was updated to match the certificates contained in the Mozilla NSS 3.15.4 release. Following changes were done to the list of root CAs: * Added: ACCVRAIZ1.pem (Spain) (all trusts) * Added: SG_TRUST_SERVICES_RACINE.pem (Singapore) (email signing only) * Added: TWCA_Global_Root_CA.pem (Taiwanese) (all trusts) * Removed: Wells_Fargo_Root_CA.pem. Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Manager 1.7 for SLE 11 SP2: zypper in -t patch sleman17sp2-openssl-certs-9027 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Manager 1.7 for SLE 11 SP2 (noarch): openssl-certs-1.96-0.4.1 References: https://bugzilla.novell.com/860581 https://bugzilla.novell.com/865080 http://download.suse.com/patch/finder/?keywords=0fc080682c8b3aec82c1b6479ab… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2014:0433-1: important: perl-HTTP-Body: update to 1.19 release with security fixes
by opensuse-security＠opensuse.org 25 Mar '14

25 Mar '14

openSUSE Security Update: perl-HTTP-Body: update to 1.19 release with security fixes ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0433-1 Rating: important References: #844951 Cross-References: CVE-2013-4407 Affected Products: openSUSE 13.1 openSUSE 12.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: perl-HTTP-Body was updated to 1.19 and also received a security fix for a potential remote code injection when upload files. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-247 - openSUSE 12.3: zypper in -t patch openSUSE-2014-247 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (noarch): perl-HTTP-Body-1.19-2.4.1 - openSUSE 12.3 (noarch): perl-HTTP-Body-1.19-4.4.1 References: http://support.novell.com/security/cve/CVE-2013-4407.html https://bugzilla.novell.com/844951 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2014:0419-1: important: Mozilla updates 2014/03
by opensuse-security＠opensuse.org 21 Mar '14

21 Mar '14

openSUSE Security Update: Mozilla updates 2014/03 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:0419-1 Rating: important References: #861847 #862831 #865539 #868603 Cross-References: CVE-2014-1477 CVE-2014-1478 CVE-2014-1479 CVE-2014-1480 CVE-2014-1481 CVE-2014-1482 CVE-2014-1483 CVE-2014-1485 CVE-2014-1486 CVE-2014-1487 CVE-2014-1488 CVE-2014-1490 CVE-2014-1491 CVE-2014-1493 CVE-2014-1494 CVE-2014-1497 CVE-2014-1498 CVE-2014-1499 CVE-2014-1500 CVE-2014-1502 CVE-2014-1504 CVE-2014-1505 CVE-2014-1508 CVE-2014-1509 CVE-2014-1510 CVE-2014-1511 CVE-2014-1512 CVE-2014-1513 CVE-2014-1514 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes 29 vulnerabilities is now available. Description: This patch contains a collection of security relevant updates for Mozilla applications. Update Firefox to 24.4.0 (bnc#868603) Update Thunderbird to 24.4.0 Update NSPR to 4.10.4 Update NSS to 3.15.5 * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494 Miscellaneous memory safety hazards * MFSA 2014-17/CVE-2014-1497 (bmo#966311) Out of bounds read during WAV file decoding * MFSA 2014-26/CVE-2014-1508 (bmo#963198) Information disclosure through polygon rendering in MathML * MFSA 2014-27/CVE-2014-1509 (bmo#966021) Memory corruption in Cairo during PDF font rendering * MFSA 2014-28/CVE-2014-1505 (bmo#941887) SVG filters information disclosure through feDisplacementMap * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909) Privilege escalation using WebIDL-implemented APIs * MFSA 2014-30/CVE-2014-1512 (bmo#982957) Use-after-free in TypeObject * MFSA 2014-31/CVE-2014-1513 (bmo#982974) Out-of-bounds read/write through neutering ArrayBuffer objects * MFSA 2014-32/CVE-2014-1514 (bmo#983344) Out-of-bounds write through TypedArrayObject after neutering Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2014-37 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): MozillaFirefox-24.4.0-107.3 MozillaFirefox-branding-upstream-24.4.0-107.3 MozillaFirefox-buildsymbols-24.4.0-107.3 MozillaFirefox-debuginfo-24.4.0-107.3 MozillaFirefox-debugsource-24.4.0-107.3 MozillaFirefox-devel-24.4.0-107.3 MozillaFirefox-translations-common-24.4.0-107.3 MozillaFirefox-translations-other-24.4.0-107.3 MozillaThunderbird-24.4.0-89.2 MozillaThunderbird-buildsymbols-24.4.0-89.2 MozillaThunderbird-debuginfo-24.4.0-89.2 MozillaThunderbird-debugsource-24.4.0-89.2 MozillaThunderbird-devel-24.4.0-89.2 MozillaThunderbird-translations-common-24.4.0-89.2 MozillaThunderbird-translations-other-24.4.0-89.2 enigmail-1.6.0+24.4.0-89.2 libfreebl3-3.15.5-82.1 libfreebl3-debuginfo-3.15.5-82.1 libsoftokn3-3.15.5-82.1 libsoftokn3-debuginfo-3.15.5-82.1 mozilla-nspr-4.10.4-40.1 mozilla-nspr-debuginfo-4.10.4-40.1 mozilla-nspr-debugsource-4.10.4-40.1 mozilla-nspr-devel-4.10.4-40.1 mozilla-nss-3.15.5-82.1 mozilla-nss-certs-3.15.5-82.1 mozilla-nss-certs-debuginfo-3.15.5-82.1 mozilla-nss-debuginfo-3.15.5-82.1 mozilla-nss-debugsource-3.15.5-82.1 mozilla-nss-devel-3.15.5-82.1 mozilla-nss-sysinit-3.15.5-82.1 mozilla-nss-sysinit-debuginfo-3.15.5-82.1 mozilla-nss-tools-3.15.5-82.1 mozilla-nss-tools-debuginfo-3.15.5-82.1 - openSUSE 11.4 (x86_64): libfreebl3-32bit-3.15.5-82.1 libfreebl3-debuginfo-32bit-3.15.5-82.1 libsoftokn3-32bit-3.15.5-82.1 libsoftokn3-debuginfo-32bit-3.15.5-82.1 mozilla-nspr-32bit-4.10.4-40.1 mozilla-nspr-debuginfo-32bit-4.10.4-40.1 mozilla-nss-32bit-3.15.5-82.1 mozilla-nss-certs-32bit-3.15.5-82.1 mozilla-nss-certs-debuginfo-32bit-3.15.5-82.1 mozilla-nss-debuginfo-32bit-3.15.5-82.1 mozilla-nss-sysinit-32bit-3.15.5-82.1 mozilla-nss-sysinit-debuginfo-32bit-3.15.5-82.1 - openSUSE 11.4 (ia64): libfreebl3-debuginfo-x86-3.15.5-82.1 libfreebl3-x86-3.15.5-82.1 libsoftokn3-debuginfo-x86-3.15.5-82.1 libsoftokn3-x86-3.15.5-82.1 mozilla-nspr-debuginfo-x86-4.10.4-40.1 mozilla-nspr-x86-4.10.4-40.1 mozilla-nss-certs-debuginfo-x86-3.15.5-82.1 mozilla-nss-certs-x86-3.15.5-82.1 mozilla-nss-debuginfo-x86-3.15.5-82.1 mozilla-nss-sysinit-debuginfo-x86-3.15.5-82.1 mozilla-nss-sysinit-x86-3.15.5-82.1 mozilla-nss-x86-3.15.5-82.1 References: http://support.novell.com/security/cve/CVE-2014-1477.html http://support.novell.com/security/cve/CVE-2014-1478.html http://support.novell.com/security/cve/CVE-2014-1479.html http://support.novell.com/security/cve/CVE-2014-1480.html http://support.novell.com/security/cve/CVE-2014-1481.html http://support.novell.com/security/cve/CVE-2014-1482.html http://support.novell.com/security/cve/CVE-2014-1483.html http://support.novell.com/security/cve/CVE-2014-1485.html http://support.novell.com/security/cve/CVE-2014-1486.html http://support.novell.com/security/cve/CVE-2014-1487.html http://support.novell.com/security/cve/CVE-2014-1488.html http://support.novell.com/security/cve/CVE-2014-1490.html http://support.novell.com/security/cve/CVE-2014-1491.html http://support.novell.com/security/cve/CVE-2014-1493.html http://support.novell.com/security/cve/CVE-2014-1494.html http://support.novell.com/security/cve/CVE-2014-1497.html http://support.novell.com/security/cve/CVE-2014-1498.html http://support.novell.com/security/cve/CVE-2014-1499.html http://support.novell.com/security/cve/CVE-2014-1500.html http://support.novell.com/security/cve/CVE-2014-1502.html http://support.novell.com/security/cve/CVE-2014-1504.html http://support.novell.com/security/cve/CVE-2014-1505.html http://support.novell.com/security/cve/CVE-2014-1508.html http://support.novell.com/security/cve/CVE-2014-1509.html http://support.novell.com/security/cve/CVE-2014-1510.html http://support.novell.com/security/cve/CVE-2014-1511.html http://support.novell.com/security/cve/CVE-2014-1512.html http://support.novell.com/security/cve/CVE-2014-1513.html http://support.novell.com/security/cve/CVE-2014-1514.html https://bugzilla.novell.com/861847 https://bugzilla.novell.com/862831 https://bugzilla.novell.com/865539 https://bugzilla.novell.com/868603 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0