October 2011 - openSUSE Security Announce

[security-announce] openSUSE-SU-2011:1076-3: important: seamonkey: Update to Mozilla Seamonkey 2.4.1
by opensuse-security＠opensuse.org 14 Oct '11

14 Oct '11

openSUSE Security Update: seamonkey: Update to Mozilla Seamonkey 2.4.1 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:1076-3 Rating: important References: #720264 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that contains security fixes can now be installed. It includes two new package versions. Description: Mozilla Seamonkey was updated to version 2.4.1, which fixes some regressions found in the 2.4 release. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch MozillaFirefox-5239 seamonkey-5244 - openSUSE 11.3: zypper in -t patch seamonkey-5244 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 2.4.1 and 7.0.1]: MozillaFirefox-7.0.1-0.2.1 MozillaFirefox-branding-upstream-7.0.1-0.2.1 MozillaFirefox-buildsymbols-7.0.1-0.2.1 MozillaFirefox-devel-7.0.1-0.2.1 MozillaFirefox-translations-common-7.0.1-0.2.1 MozillaFirefox-translations-other-7.0.1-0.2.1 seamonkey-2.4.1-0.2.1 seamonkey-dom-inspector-2.4.1-0.2.1 seamonkey-irc-2.4.1-0.2.1 seamonkey-translations-common-2.4.1-0.2.1 seamonkey-translations-other-2.4.1-0.2.1 seamonkey-venkman-2.4.1-0.2.1 - openSUSE 11.3 (i586 x86_64) [New Version: 2.4.1]: seamonkey-2.4.1-0.2.1 seamonkey-dom-inspector-2.4.1-0.2.1 seamonkey-irc-2.4.1-0.2.1 seamonkey-translations-common-2.4.1-0.2.1 seamonkey-translations-other-2.4.1-0.2.1 seamonkey-venkman-2.4.1-0.2.1 References: https://bugzilla.novell.com/720264 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2011:1101-1: important: kernel update for SLE11 SP1
by opensuse-security＠opensuse.org 07 Oct '11

07 Oct '11

SUSE Security Update: kernel update for SLE11 SP1 ______________________________________________________________________________ Announcement ID: SUSE-SU-2011:1101-1 Rating: important References: #588458 #603804 #632870 #642896 #649625 #667386 #669378 #688859 #694670 #699354 #699357 #701443 #701686 #704347 #706557 #707096 #707125 #707737 #708675 #708877 #709412 #711203 #711969 #712456 #712929 #713138 #713430 #714001 #714966 #715235 #715763 #716901 #719117 Cross-References: CVE-2011-2928 CVE-2011-3191 CVE-2011-3353 Affected Products: SLE 11 SERVER Unsupported Extras ______________________________________________________________________________ An update that solves three vulnerabilities and has 30 fixes is now available. Description: The SUSE Linux Enterprise 11 Service Pack 1 kernel was updated to 2.6.32.46 and fixes various bugs and security issues. Following security issues were fixed: CVE-2011-3191: A signedness issue in CIFS could possibly have lead to to memory corruption, if a malicious server could send crafted replies to the host. CVE-2011-3353: In the fuse filesystem, FUSE_NOTIFY_INVAL_ENTRY did not check the length of the write so the message processing could overrun and result in a BUG_ON() in fuse_copy_fill(). This flaw could be used by local users able to mount FUSE filesystems to crash the system. CVE-2011-2928: The befs_follow_link function in fs/befs/linuxvfs.c in the Linux kernel did not validate the length attribute of long symlinks, which allowed local users to cause a denial of service (incorrect pointer dereference and OOPS) by accessing a long symlink on a malformed Be filesystem. Also the following non security bugs were fixed: - Added a missing reset for ioc_reset_in_progress in SoftReset in the mtpsas driver (bnc#711969). - Add support for the Digi/IBM PCIe 2-port Adapter (bnc#708675). - Always enable MSI-X on 5709 (bnc#707737). - sched: fix broken SCHED_RESET_ON_FORK handling (bnc#708877). - sched: Fix rt_rq runtime leakage bug (bnc#707096). - ACPI: allow passing down C1 information if no other C-states exist. - KDB: turn off kdb usb support by default (bnc#694670 bnc#603804). - xfs: Added event tracing support. - xfs: fix xfs_fsblock_t tracing. - igb: extend maximum frame size to receive VLAN tagged frames (bnc#688859). - cfq: Do not allow queue merges for queues that have no process references (bnc#712929). - cfq: break apart merged cfqqs if they stop cooperating (bnc#712929). - cfq: calculate the seek_mean per cfq_queue not per cfq_io_context (bnc#712929). - cfq: change the meaning of the cfqq_coop flag (bnc#712929). - cfq-iosched: get rid of the coop_preempt flag (bnc#712929). - cfq: merge cooperating cfq_queues (bnc#712929). - Fix FDDI and TR config checks in ipv4 arp and LLC (bnc#715235). - writeback: do uninterruptible sleep in balance_dirty_pages() (bnc#699354 bnc#699357). - xfs: fix memory reclaim recursion deadlock on locked inode buffer (bnc#699355 bnc#699354). - xfs: use GFP_NOFS for page cache allocation (bnc#699355 bnc#699354). - virtio-net: init link state correctly (bnc#714966). - cpufreq: pcc-cpufreq: sanity check to prevent a NULL pointer dereference (bnc#709412). - x86: ucode-amd: Do not warn when no ucode is available for a CPU - patches.arch/x86_64-unwind-annotations: Refresh (bnc#588458). - patches.suse/stack-unwind: Refresh (bnc#588458). - splice: direct_splice_actor() should not use pos in sd (bnc#715763). - qdio: 2nd stage retry on SIGA-W busy conditions (bnc#713138,LTC#74402). - TTY: pty, fix pty counting (bnc#711203). - Avoid deadlock in GFP_IO/GFP_FS allocation (bnc#632870). - novfs: fix some DirCache locking issues (bnc#669378). - novfs: fix some kmalloc/kfree issues (bnc#669378). - novfs: fix off-by-one allocation error (bnc#669378). - novfs: unlink directory after unmap (bnc#649625). - novfs: last modification time not reliable (bnc#642896). - x86 / IO APIC: Reset IRR in clear_IO_APIC_pin() (bnc#701686, bnc#667386). - mptfusion : Added check for SILI bit in READ_6 CDB for DATA UNDERRUN ERRATA (bnc #712456). - xfs: serialise unaligned direct IOs (bnc#707125). - NFS: Ensure that we handle NFS4ERR_STALE_STATEID correctly (bnc#701443). - NFSv4: Do not call nfs4_state_mark_reclaim_reboot() from error handlers (bnc#701443). - NFSv4: Fix open recovery (bnc#701443). - NFSv4.1: Do not call nfs4_schedule_state_recovery() unnecessarily (bnc#701443). Special Instructions and Notes: Please reboot the system after installing this update. Package List: - SLE 11 SERVER Unsupported Extras (i586 ia64 ppc64 s390x x86_64): kernel-default-extra-2.6.32.46-0.3.1 - SLE 11 SERVER Unsupported Extras (i586 x86_64): kernel-xen-extra-2.6.32.46-0.3.1 - SLE 11 SERVER Unsupported Extras (ppc64): kernel-ppc64-extra-2.6.32.46-0.3.1 - SLE 11 SERVER Unsupported Extras (i586): kernel-pae-extra-2.6.32.46-0.3.1 References: http://support.novell.com/security/cve/CVE-2011-2928.html http://support.novell.com/security/cve/CVE-2011-3191.html http://support.novell.com/security/cve/CVE-2011-3353.html https://bugzilla.novell.com/588458 https://bugzilla.novell.com/603804 https://bugzilla.novell.com/632870 https://bugzilla.novell.com/642896 https://bugzilla.novell.com/649625 https://bugzilla.novell.com/667386 https://bugzilla.novell.com/669378 https://bugzilla.novell.com/688859 https://bugzilla.novell.com/694670 https://bugzilla.novell.com/699354 https://bugzilla.novell.com/699357 https://bugzilla.novell.com/701443 https://bugzilla.novell.com/701686 https://bugzilla.novell.com/704347 https://bugzilla.novell.com/706557 https://bugzilla.novell.com/707096 https://bugzilla.novell.com/707125 https://bugzilla.novell.com/707737 https://bugzilla.novell.com/708675 https://bugzilla.novell.com/708877 https://bugzilla.novell.com/709412 https://bugzilla.novell.com/711203 https://bugzilla.novell.com/711969 https://bugzilla.novell.com/712456 https://bugzilla.novell.com/712929 https://bugzilla.novell.com/713138 https://bugzilla.novell.com/713430 https://bugzilla.novell.com/714001 https://bugzilla.novell.com/714966 https://bugzilla.novell.com/715235 https://bugzilla.novell.com/715763 https://bugzilla.novell.com/716901 https://bugzilla.novell.com/719117 http://download.novell.com/patch/finder/?keywords=0077a9d97a9220061e5c5383b… http://download.novell.com/patch/finder/?keywords=17c299ec5c72561013e394661… http://download.novell.com/patch/finder/?keywords=ae7e4cdc32d427f458768606f… http://download.novell.com/patch/finder/?keywords=e18fc5d18fa6afec4316bbd22… http://download.novell.com/patch/finder/?keywords=fe7c633311f0a14664b71dab2… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2011:1100-1: important: Security update for Linux kernel
by opensuse-security＠opensuse.org 07 Oct '11

07 Oct '11

SUSE Security Update: Security update for Linux kernel ______________________________________________________________________________ Announcement ID: SUSE-SU-2011:1100-1 Rating: important References: #588458 #603804 #632870 #642896 #649625 #650309 #667386 #669378 #688859 #694670 #699354 #699355 #699357 #701443 #701686 #704347 #706557 #707096 #707125 #707737 #708675 #708877 #709412 #711203 #711969 #712456 #712929 #713138 #713430 #714001 #714966 #715235 #715763 #716901 #719117 #719450 Cross-References: CVE-2011-2928 CVE-2011-3191 CVE-2011-3353 Affected Products: SUSE Linux Enterprise Server 11 SP1 for VMware SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise High Availability Extension 11 SP1 SUSE Linux Enterprise Desktop 11 SP1 ______________________________________________________________________________ An update that solves three vulnerabilities and has 33 fixes is now available. It includes one version update. Description: The SUSE Linux Enterprise 11 Service Pack 1 kernel was updated to 2.6.32.46 and fixes various bugs and security issues. Following security issues were fixed: CVE-2011-3191: A signedness issue in CIFS could possibly have lead to to memory corruption, if a malicious server could send crafted replies to the host. CVE-2011-3353: In the fuse filesystem, FUSE_NOTIFY_INVAL_ENTRY did not check the length of the write so the message processing could overrun and result in a BUG_ON() in fuse_copy_fill(). This flaw could be used by local users able to mount FUSE filesystems to crash the system. CVE-2011-2928: The befs_follow_link function in fs/befs/linuxvfs.c in the Linux kernel did not validate the length attribute of long symlinks, which allowed local users to cause a denial of service (incorrect pointer dereference and OOPS) by accessing a long symlink on a malformed Be filesystem. Also the following non security bugs were fixed: - CONFIG_CGROUP_MEM_RES_CTLR_SWAP enabled - CONFIG_CGROUP_MEM_RES_CTLR_SWAP_ENABLED disabled by default. Swap accounting can be turned on by swapaccount=1 kernel command line parameter (bnc#719450) - Make swap accounting default behavior configurable (bnc#719450, bnc#650309, fate#310471). * Added a missing reset for ioc_reset_in_progress in SoftReset in the mtpsas driver (bnc#711969). * Add support for the Digi/IBM PCIe 2-port Adapter (bnc#708675). * Always enable MSI-X on 5709 (bnc#707737). * sched: fix broken SCHED_RESET_ON_FORK handling (bnc#708877). * sched: Fix rt_rq runtime leakage bug (bnc#707096). * ACPI: allow passing down C1 information if no other C-states exist. * KDB: turn off kdb usb support by default (bnc#694670 bnc#603804). * xfs: Added event tracing support. * xfs: fix xfs_fsblock_t tracing. * igb: extend maximum frame size to receive VLAN tagged frames (bnc#688859). * cfq: Do not allow queue merges for queues that have no process references (bnc#712929). * cfq: break apart merged cfqqs if they stop cooperating (bnc#712929). * cfq: calculate the seek_mean per cfq_queue not per cfq_io_context (bnc#712929). * cfq: change the meaning of the cfqq_coop flag (bnc#712929). * cfq-iosched: get rid of the coop_preempt flag (bnc#712929). * cfq: merge cooperating cfq_queues (bnc#712929). * Fix FDDI and TR config checks in ipv4 arp and LLC (bnc#715235). * writeback: do uninterruptible sleep in balance_dirty_pages() (bnc#699354 bnc#699357). * xfs: fix memory reclaim recursion deadlock on locked inode buffer (bnc#699355 bnc#699354). * xfs: use GFP_NOFS for page cache allocation (bnc#699355 bnc#699354). * virtio-net: init link state correctly (bnc#714966). * cpufreq: pcc-cpufreq: sanity check to prevent a NULL pointer dereference (bnc#709412). * x86: ucode-amd: Do not warn when no ucode is available for a CPU * patches.arch/x86_64-unwind-annotations: Refresh (bnc#588458). * patches.suse/stack-unwind: Refresh (bnc#588458). * splice: direct_splice_actor() should not use pos in sd (bnc#715763). * qdio: 2nd stage retry on SIGA-W busy conditions (bnc#713138,LTC#74402). * TTY: pty, fix pty counting (bnc#711203). * Avoid deadlock in GFP_IO/GFP_FS allocation (bnc#632870). * novfs: fix some DirCache locking issues (bnc#669378). * novfs: fix some kmalloc/kfree issues (bnc#669378). * novfs: fix off-by-one allocation error (bnc#669378). * novfs: unlink directory after unmap (bnc#649625). * novfs: last modification time not reliable (bnc#642896). * x86 / IO APIC: Reset IRR in clear_IO_APIC_pin() (bnc#701686, bnc#667386). * mptfusion : Added check for SILI bit in READ_6 CDB for DATA UNDERRUN ERRATA (bnc #712456). * xfs: serialise unaligned direct IOs (bnc#707125). * NFS: Ensure that we handle NFS4ERR_STALE_STATEID correctly (bnc#701443). * NFSv4: Do not call nfs4_state_mark_reclaim_reboot() from error handlers (bnc#701443). * NFSv4: Fix open recovery (bnc#701443). * NFSv4.1: Do not call nfs4_schedule_state_recovery() unnecessarily (bnc#701443). Security Issues: * CVE-2011-3191 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3191 > * CVE-2011-3353 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3353 > * CVE-2011-2928 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2928 > Indications: Everyone using the Linux Kernel on x86_64 architecture should update. Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 11 SP1 for VMware: zypper in -t patch slessp1-kernel-5219 slessp1-kernel-5223 - SUSE Linux Enterprise Server 11 SP1: zypper in -t patch slessp1-kernel-5219 slessp1-kernel-5220 slessp1-kernel-5221 slessp1-kernel-5222 slessp1-kernel-5223 - SUSE Linux Enterprise High Availability Extension 11 SP1: zypper in -t patch sleshasp1-kernel-5219 sleshasp1-kernel-5220 sleshasp1-kernel-5221 sleshasp1-kernel-5222 sleshasp1-kernel-5223 - SUSE Linux Enterprise Desktop 11 SP1: zypper in -t patch sledsp1-kernel-5219 sledsp1-kernel-5223 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Server 11 SP1 for VMware (i586 x86_64) [New Version: 2.6.32.46]: btrfs-kmp-default-0_2.6.32.46_0.3-0.3.57 ext4dev-kmp-default-0_2.6.32.46_0.3-7.9.24 hyper-v-kmp-default-0_2.6.32.46_0.3-0.14.11 kernel-default-2.6.32.46-0.3.1 kernel-default-base-2.6.32.46-0.3.1 kernel-default-devel-2.6.32.46-0.3.1 kernel-source-2.6.32.46-0.3.1 kernel-syms-2.6.32.46-0.3.1 kernel-trace-2.6.32.46-0.3.1 kernel-trace-base-2.6.32.46-0.3.1 kernel-trace-devel-2.6.32.46-0.3.1 - SUSE Linux Enterprise Server 11 SP1 for VMware (i586) [New Version: 2.6.32.46]: btrfs-kmp-pae-0_2.6.32.46_0.3-0.3.57 ext4dev-kmp-pae-0_2.6.32.46_0.3-7.9.24 hyper-v-kmp-pae-0_2.6.32.46_0.3-0.14.11 kernel-pae-2.6.32.46-0.3.1 kernel-pae-base-2.6.32.46-0.3.1 kernel-pae-devel-2.6.32.46-0.3.1 - SUSE Linux Enterprise Server 11 SP1 (i586 ia64 ppc64 s390x x86_64) [New Version: 2.6.32.46]: btrfs-kmp-default-0_2.6.32.46_0.3-0.3.57 ext4dev-kmp-default-0_2.6.32.46_0.3-7.9.24 kernel-default-2.6.32.46-0.3.1 kernel-default-base-2.6.32.46-0.3.1 kernel-default-devel-2.6.32.46-0.3.1 kernel-source-2.6.32.46-0.3.1 kernel-syms-2.6.32.46-0.3.1 kernel-trace-2.6.32.46-0.3.1 kernel-trace-base-2.6.32.46-0.3.1 kernel-trace-devel-2.6.32.46-0.3.1 - SUSE Linux Enterprise Server 11 SP1 (i586 x86_64) [New Version: 2.6.32.46]: btrfs-kmp-xen-0_2.6.32.46_0.3-0.3.57 ext4dev-kmp-xen-0_2.6.32.46_0.3-7.9.24 hyper-v-kmp-default-0_2.6.32.46_0.3-0.14.11 kernel-ec2-2.6.32.46-0.3.1 kernel-ec2-base-2.6.32.46-0.3.1 kernel-xen-2.6.32.46-0.3.1 kernel-xen-base-2.6.32.46-0.3.1 kernel-xen-devel-2.6.32.46-0.3.1 - SUSE Linux Enterprise Server 11 SP1 (s390x) [New Version: 2.6.32.46]: kernel-default-man-2.6.32.46-0.3.1 - SUSE Linux Enterprise Server 11 SP1 (ppc64) [New Version: 2.6.32.46]: ext4dev-kmp-ppc64-0_2.6.32.46_0.3-7.9.24 kernel-ppc64-2.6.32.46-0.3.1 kernel-ppc64-base-2.6.32.46-0.3.1 kernel-ppc64-devel-2.6.32.46-0.3.1 - SUSE Linux Enterprise Server 11 SP1 (i586) [New Version: 2.6.32.46]: btrfs-kmp-pae-0_2.6.32.46_0.3-0.3.57 ext4dev-kmp-pae-0_2.6.32.46_0.3-7.9.24 hyper-v-kmp-pae-0_2.6.32.46_0.3-0.14.11 kernel-pae-2.6.32.46-0.3.1 kernel-pae-base-2.6.32.46-0.3.1 kernel-pae-devel-2.6.32.46-0.3.1 - SUSE Linux Enterprise High Availability Extension 11 SP1 (i586 ia64 ppc64 s390x x86_64): cluster-network-kmp-default-1.4_2.6.32.46_0.3-2.5.9 gfs2-kmp-default-2_2.6.32.46_0.3-0.2.56 ocfs2-kmp-default-1.6_2.6.32.46_0.3-0.4.2.9 - SUSE Linux Enterprise High Availability Extension 11 SP1 (i586 x86_64): cluster-network-kmp-xen-1.4_2.6.32.46_0.3-2.5.9 gfs2-kmp-xen-2_2.6.32.46_0.3-0.2.56 ocfs2-kmp-xen-1.6_2.6.32.46_0.3-0.4.2.9 - SUSE Linux Enterprise High Availability Extension 11 SP1 (ppc64): cluster-network-kmp-ppc64-1.4_2.6.32.46_0.3-2.5.9 gfs2-kmp-ppc64-2_2.6.32.46_0.3-0.2.56 ocfs2-kmp-ppc64-1.6_2.6.32.46_0.3-0.4.2.9 - SUSE Linux Enterprise High Availability Extension 11 SP1 (i586): cluster-network-kmp-pae-1.4_2.6.32.46_0.3-2.5.9 gfs2-kmp-pae-2_2.6.32.46_0.3-0.2.56 ocfs2-kmp-pae-1.6_2.6.32.46_0.3-0.4.2.9 - SUSE Linux Enterprise Desktop 11 SP1 (i586 x86_64) [New Version: 2.6.32.46]: btrfs-kmp-default-0_2.6.32.46_0.3-0.3.57 btrfs-kmp-xen-0_2.6.32.46_0.3-0.3.57 hyper-v-kmp-default-0_2.6.32.46_0.3-0.14.11 kernel-default-2.6.32.46-0.3.1 kernel-default-base-2.6.32.46-0.3.1 kernel-default-devel-2.6.32.46-0.3.1 kernel-default-extra-2.6.32.46-0.3.1 kernel-desktop-devel-2.6.32.46-0.3.1 kernel-source-2.6.32.46-0.3.1 kernel-syms-2.6.32.46-0.3.1 kernel-xen-2.6.32.46-0.3.1 kernel-xen-base-2.6.32.46-0.3.1 kernel-xen-devel-2.6.32.46-0.3.1 kernel-xen-extra-2.6.32.46-0.3.1 - SUSE Linux Enterprise Desktop 11 SP1 (i586) [New Version: 2.6.32.46]: btrfs-kmp-pae-0_2.6.32.46_0.3-0.3.57 hyper-v-kmp-pae-0_2.6.32.46_0.3-0.14.11 kernel-pae-2.6.32.46-0.3.1 kernel-pae-base-2.6.32.46-0.3.1 kernel-pae-devel-2.6.32.46-0.3.1 kernel-pae-extra-2.6.32.46-0.3.1 References: http://support.novell.com/security/cve/CVE-2011-2928.html http://support.novell.com/security/cve/CVE-2011-3191.html http://support.novell.com/security/cve/CVE-2011-3353.html https://bugzilla.novell.com/588458 https://bugzilla.novell.com/603804 https://bugzilla.novell.com/632870 https://bugzilla.novell.com/642896 https://bugzilla.novell.com/649625 https://bugzilla.novell.com/650309 https://bugzilla.novell.com/667386 https://bugzilla.novell.com/669378 https://bugzilla.novell.com/688859 https://bugzilla.novell.com/694670 https://bugzilla.novell.com/699354 https://bugzilla.novell.com/699355 https://bugzilla.novell.com/699357 https://bugzilla.novell.com/701443 https://bugzilla.novell.com/701686 https://bugzilla.novell.com/704347 https://bugzilla.novell.com/706557 https://bugzilla.novell.com/707096 https://bugzilla.novell.com/707125 https://bugzilla.novell.com/707737 https://bugzilla.novell.com/708675 https://bugzilla.novell.com/708877 https://bugzilla.novell.com/709412 https://bugzilla.novell.com/711203 https://bugzilla.novell.com/711969 https://bugzilla.novell.com/712456 https://bugzilla.novell.com/712929 https://bugzilla.novell.com/713138 https://bugzilla.novell.com/713430 https://bugzilla.novell.com/714001 https://bugzilla.novell.com/714966 https://bugzilla.novell.com/715235 https://bugzilla.novell.com/715763 https://bugzilla.novell.com/716901 https://bugzilla.novell.com/719117 https://bugzilla.novell.com/719450 http://download.novell.com/patch/finder/?keywords=20cb09e23614f5f5085f698cc… http://download.novell.com/patch/finder/?keywords=56d0712d83970cf6fe7492bf3… http://download.novell.com/patch/finder/?keywords=94fa14c210d027059a56ea1e3… http://download.novell.com/patch/finder/?keywords=959314df0926c9887f7057c56… http://download.novell.com/patch/finder/?keywords=9a7f6196af0af6d69bc4d0f12… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2011:1096-1: important: Security update for Mozilla Firefox
by opensuse-security＠opensuse.org 05 Oct '11

05 Oct '11

SUSE Security Update: Security update for Mozilla Firefox ______________________________________________________________________________ Announcement ID: SUSE-SU-2011:1096-1 Rating: important References: #720264 Affected Products: SUSE Linux Enterprise Software Development Kit 11 SP1 SUSE Linux Enterprise Server 11 SP1 for VMware SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server 10 SP4 SUSE Linux Enterprise Server 10 SP3 SUSE Linux Enterprise Desktop 11 SP1 SUSE Linux Enterprise Desktop 10 SP4 SLE SDK 10 SP4 SLE SDK 10 SP3 ______________________________________________________________________________ An update that contains security fixes can now be installed. It includes two new package versions. Description: Mozilla Firefox was updated to version 3.6.23, fixing various bugs and security issues. * MFSA 2011-36: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code. In general these flaws cannot be exploited through email in the Thunderbird and SeaMonkey products because scripting is disabled,, but are potentially a risk in browser or browser-like contexts in those products. * Benjamin Smedberg, Bob Clary, and Jesse Ruderman reported memory safety problems that affected Firefox 3.6 and Firefox 6. (CVE-2011-2995) * Josh Aas reported a potential crash in the plugin API that affected Firefox 3.6 only. (CVE-2011-2996) * MFSA 2011-37: Mark Kaplan reported a potentially exploitable crash due to integer underflow when using a large JavaScript RegExp expression. We would also like to thank Mark for contributing the fix for this problem. (no CVE yet) * MFSA 2011-38: Mozilla developer Boris Zbarsky reported that a frame named "location" could shadow the window.location object unless a script in a page grabbed a reference to the true object before the frame was created. Because some plugins use the value of window.location to determine the page origin this could fool the plugin into granting the plugin content access to another site or the local file system in violation of the Same Origin Policy. This flaw allows circumvention of the fix added for MFSA 2010-10. (CVE-2011-2999) * MFSA 2011-39: Ian Graham of Citrix Online reported that when multiple Location headers were present in a redirect response Mozilla behavior differed from other browsers: Mozilla would use the second Location header while Chrome and Internet Explorer would use the first. Two copies of this header with different values could be a symptom of a CRLF injection attack against a vulnerable server. Most commonly it is the Location header itself that is vulnerable to the response splitting and therefore the copy preferred by Mozilla is more likely to be the malicious one. It is possible, however, that the first copy was the injected one depending on the nature of the server vulnerability. The Mozilla browser engine has been changed to treat two copies of this header with different values as an error condition. The same has been done with the headers Content-Length and Content-Disposition. (CVE-2011-3000) * MFSA 2011-40: Mariusz Mlynski reported that if you could convince a user to hold down the Enter key--as part of a game or test, perhaps--a malicious page could pop up a download dialog where the held key would then activate the default Open action. For some file types this would be merely annoying (the equivalent of a pop-up) but other file types have powerful scripting capabilities. And this would provide an avenue for an attacker to exploit a vulnerability in applications not normally exposed to potentially hostile internet content. Holding enter allows arbitrary code execution due to Download Manager (CVE-2011-2372) Indications: Please install this update. Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11 SP1: zypper in -t patch sdksp1-MozillaFirefox-5224 - SUSE Linux Enterprise Server 11 SP1 for VMware: zypper in -t patch slessp1-MozillaFirefox-5224 - SUSE Linux Enterprise Server 11 SP1: zypper in -t patch slessp1-MozillaFirefox-5224 - SUSE Linux Enterprise Desktop 11 SP1: zypper in -t patch sledsp1-MozillaFirefox-5224 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11 SP1 (i586 ia64 ppc64 s390x x86_64) [New Version: 1.9.2.23]: mozilla-xulrunner192-devel-1.9.2.23-1.2.1 - SUSE Linux Enterprise Software Development Kit 11 SP1 (ppc64 s390x x86_64) [New Version: 1.9.2.23]: mozilla-xulrunner192-gnome-32bit-1.9.2.23-1.2.1 mozilla-xulrunner192-translations-32bit-1.9.2.23-1.2.1 - SUSE Linux Enterprise Software Development Kit 11 SP1 (ia64) [New Version: 1.9.2.23]: mozilla-xulrunner192-gnome-x86-1.9.2.23-1.2.1 mozilla-xulrunner192-translations-x86-1.9.2.23-1.2.1 - SUSE Linux Enterprise Server 11 SP1 for VMware (i586 x86_64) [New Version: 3.6.23]: MozillaFirefox-3.6.23-0.3.1 MozillaFirefox-translations-3.6.23-0.3.1 mozilla-xulrunner192-1.9.2.23-1.2.1 mozilla-xulrunner192-gnome-1.9.2.23-1.2.1 mozilla-xulrunner192-translations-1.9.2.23-1.2.1 - SUSE Linux Enterprise Server 11 SP1 for VMware (x86_64): mozilla-xulrunner192-32bit-1.9.2.23-1.2.1 - SUSE Linux Enterprise Server 11 SP1 (i586 ia64 ppc64 s390x x86_64) [New Version: 1.9.2.23 and 3.6.23]: MozillaFirefox-3.6.23-0.3.1 MozillaFirefox-translations-3.6.23-0.3.1 mozilla-xulrunner192-1.9.2.23-1.2.1 mozilla-xulrunner192-gnome-1.9.2.23-1.2.1 mozilla-xulrunner192-translations-1.9.2.23-1.2.1 - SUSE Linux Enterprise Server 11 SP1 (ppc64 s390x x86_64) [New Version: 1.9.2.23]: mozilla-xulrunner192-32bit-1.9.2.23-1.2.1 - SUSE Linux Enterprise Server 11 SP1 (ia64) [New Version: 1.9.2.23]: mozilla-xulrunner192-x86-1.9.2.23-1.2.1 - SUSE Linux Enterprise Server 10 SP4 (i586 ia64 ppc s390x x86_64) [New Version: 1.9.2.23]: mozilla-xulrunner192-1.9.2.23-1.6.1 mozilla-xulrunner192-gnome-1.9.2.23-1.6.1 mozilla-xulrunner192-translations-1.9.2.23-1.6.1 - SUSE Linux Enterprise Server 10 SP4 (i586 ia64 ppc s390x) [New Version: 3.6.23]: MozillaFirefox-3.6.23-0.5.1 MozillaFirefox-translations-3.6.23-0.5.1 - SUSE Linux Enterprise Server 10 SP4 (s390x x86_64) [New Version: 1.9.2.23]: mozilla-xulrunner192-32bit-1.9.2.23-1.6.1 mozilla-xulrunner192-gnome-32bit-1.9.2.23-1.6.1 mozilla-xulrunner192-translations-32bit-1.9.2.23-1.6.1 - SUSE Linux Enterprise Server 10 SP3 (i586 ia64 ppc s390x x86_64) [New Version: 1.9.2.23]: mozilla-xulrunner192-1.9.2.23-1.6.1 mozilla-xulrunner192-gnome-1.9.2.23-1.6.1 mozilla-xulrunner192-translations-1.9.2.23-1.6.1 - SUSE Linux Enterprise Server 10 SP3 (i586 ia64 ppc s390x) [New Version: 3.6.23]: MozillaFirefox-3.6.23-0.5.1 MozillaFirefox-translations-3.6.23-0.5.1 - SUSE Linux Enterprise Server 10 SP3 (s390x x86_64) [New Version: 1.9.2.23]: mozilla-xulrunner192-32bit-1.9.2.23-1.6.1 mozilla-xulrunner192-gnome-32bit-1.9.2.23-1.6.1 mozilla-xulrunner192-translations-32bit-1.9.2.23-1.6.1 - SUSE Linux Enterprise Desktop 11 SP1 (i586 x86_64) [New Version: 1.9.2.23 and 3.6.23]: MozillaFirefox-3.6.23-0.3.1 MozillaFirefox-translations-3.6.23-0.3.1 mozilla-xulrunner192-1.9.2.23-1.2.1 mozilla-xulrunner192-gnome-1.9.2.23-1.2.1 mozilla-xulrunner192-translations-1.9.2.23-1.2.1 - SUSE Linux Enterprise Desktop 11 SP1 (x86_64) [New Version: 1.9.2.23]: mozilla-xulrunner192-32bit-1.9.2.23-1.2.1 mozilla-xulrunner192-gnome-32bit-1.9.2.23-1.2.1 mozilla-xulrunner192-translations-32bit-1.9.2.23-1.2.1 - SUSE Linux Enterprise Desktop 10 SP4 (i586 x86_64) [New Version: 1.9.2.23]: mozilla-xulrunner192-1.9.2.23-1.6.1 mozilla-xulrunner192-gnome-1.9.2.23-1.6.1 mozilla-xulrunner192-translations-1.9.2.23-1.6.1 - SUSE Linux Enterprise Desktop 10 SP4 (x86_64) [New Version: 1.9.2.23]: mozilla-xulrunner192-32bit-1.9.2.23-1.6.1 mozilla-xulrunner192-gnome-32bit-1.9.2.23-1.6.1 mozilla-xulrunner192-translations-32bit-1.9.2.23-1.6.1 - SUSE Linux Enterprise Desktop 10 SP4 (i586) [New Version: 3.6.23]: MozillaFirefox-3.6.23-0.5.1 MozillaFirefox-translations-3.6.23-0.5.1 - SLE SDK 10 SP4 (i586 ia64 ppc s390x): MozillaFirefox-branding-upstream-3.6.23-0.5.1 - SLE SDK 10 SP3 (i586 ia64 ppc s390x) [New Version: 3.6.23]: MozillaFirefox-branding-upstream-3.6.23-0.5.1 References: https://bugzilla.novell.com/720264 http://download.novell.com/patch/finder/?keywords=10c4cb33ededc2c321d18a148… http://download.novell.com/patch/finder/?keywords=46722e64fe17eadd1ef21115e… http://download.novell.com/patch/finder/?keywords=8026ac2197f43942ee30e9d32… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2011:1076-2: important: MozillaThunderbird: Update to Mozilla Thunderbird 3.1.14
by opensuse-security＠opensuse.org 04 Oct '11

04 Oct '11

openSUSE Security Update: MozillaThunderbird: Update to Mozilla Thunderbird 3.1.14 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:1076-2 Rating: important References: #720264 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that contains security fixes can now be installed. It includes two new package versions. Description: Mozilla Thunderbird was updated to version 3.1.14, fixing various bugs and security issues. MFSA 2011-36: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code. In general these flaws cannot be exploited through email in the Thunderbird and SeaMonkey products because scripting is disabled, but are potentially a risk in browser or browser-like contexts in those products. Benjamin Smedberg, Bob Clary, and Jesse Ruderman reported memory safety problems that affected Firefox 3.6 and Firefox 6. (CVE-2011-2995) Bob Clary, Andrew McCreight, Andreas Gal, Gary Kwong, Igor Bukanov, Jason Orendorff, Jesse Ruderman, and Marcia Knous reported memory safety problems that affected Firefox 6, fixed in Firefox 7. (CVE-2011-2997) MFSA 2011-38: Mozilla developer Boris Zbarsky reported that a frame named "location" could shadow the window.location object unless a script in a page grabbed a reference to the true object before the frame was created. Because some plugins use the value of window.location to determine the page origin this could fool the plugin into granting the plugin content access to another site or the local file system in violation of the Same Origin Policy. This flaw allows circumvention of the fix added for MFSA 2010-10. (CVE-2011-2999) MFSA 2011-39: Ian Graham of Citrix Online reported that when multiple Location headers were present in a redirect response Mozilla behavior differed from other browsers: Mozilla would use the second Location header while Chrome and Internet Explorer would use the first. Two copies of this header with different values could be a symptom of a CRLF injection attack against a vulnerable server. Most commonly it is the Location header itself that is vulnerable to the response splitting and therefore the copy preferred by Mozilla is more likely to be the malicious one. It is possible, however, that the first copy was the injected one depending on the nature of the server vulnerability. The Mozilla browser engine has been changed to treat two copies of this header with different values as an error condition. The same has been done with the headers Content-Length and Content-Disposition. (CVE-2011-3000) MFSA 2011-40: Mariusz Mlynski reported that if you could convince a user to hold down the Enter key--as part of a game or test, perhaps--a malicious page could pop up a download dialog where the held key would then activate the default Open action. For some file types this would be merely annoying (the equivalent of a pop-up) but other file types have powerful scripting capabilities. And this would provide an avenue for an attacker to exploit a vulnerability in applications not normally exposed to potentially hostile internet content. Mariusz also reported a similar flaw with manual plugin installation using the PLUGINSPAGE attribute. It was possible to create an internal error that suppressed a confirmation dialog, such that holding enter would lead to the installation of an arbitrary add-on. (This variant did not affect Firefox 3.6) Holding enter allows arbitrary code execution due to Download Manager (CVE-2011-2372) Holding enter allows arbitrary extension installation (CVE-2011-3001) MFSA 2011-42: Security researcher Aki Helin reported a potentially exploitable crash in the YARR regular expression library used by JavaScript. (CVE-2011-3232) MFSA 2011-44: sczimmer reported that Firefox crashed when loading a particular .ogg file. This was due to a use-after-free condition and could potentially be exploited to install malware. (CVE-2011-3005) This vulnerability does not affect Firefox 3.6 or earlier. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch MozillaThunderbird-5204 - openSUSE 11.3: zypper in -t patch MozillaThunderbird-5204 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 3.1.15]: MozillaThunderbird-3.1.15-0.17.1 MozillaThunderbird-buildsymbols-3.1.15-0.17.1 MozillaThunderbird-devel-3.1.15-0.17.1 MozillaThunderbird-translations-common-3.1.15-0.17.1 MozillaThunderbird-translations-other-3.1.15-0.17.1 enigmail-1.1.2+3.1.15-0.17.1 - openSUSE 11.3 (i586 x86_64) [New Version: 3.1.15]: MozillaThunderbird-3.1.15-0.21.1 MozillaThunderbird-devel-3.1.15-0.21.1 MozillaThunderbird-translations-common-3.1.15-0.21.1 MozillaThunderbird-translations-other-3.1.15-0.21.1 enigmail-1.1.2+3.1.15-0.21.1 References: https://bugzilla.novell.com/720264 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0