April 2012 - openSUSE Security Announce

[security-announce] SUSE-SU-2012:0515-1: critical: Security update for Samba
by opensuse-security＠opensuse.org 17 Apr '12

17 Apr '12

SUSE Security Update: Security update for Samba ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0515-1 Rating: critical References: #732395 #732572 #741854 #743986 #746825 #747934 #751454 #752797 #757080 Affected Products: SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Server 11 SP2 for VMware SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Desktop 11 SP2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: The following issues have been fixed in Samba: * CVE-2012-1182: PIDL based autogenerated code uses client supplied size values which allows attackers to write beyond the allocated array size * CVE-2012-0870: Ensure AndX offsets are increasing strictly monotonically in pre-3.4 versions * CVE-2012-0817: Fix memory leak in parent smbd on connection Also the following non-security bugs have been fixed: * s3-winbindd: Only use SamLogonEx when we can get unencrypted session keys; (bso#8599). * Correctly handle DENY ACEs when privileges apply; (bso#8797). * s3:smb2_server: fix a logic error, we should sign non guest sessions; (bso8749). * Allow vfs_aio_pthread to build as a static module; (bso#8723). * s3:dbwrap_ctdb: return the number of records in db_ctdb_traverse() for persistent dbs; (#bso8527). * s3: segfault in dom_sid_compare(bso#8567). * Honor SeTakeOwnershiPrivilege when client asks for SEC_STD_WRITE_OWNER; (bso#8768). * s3-winbindd: Close netlogon connection if the status returned by the NetrSamLogonEx call is timeout in the pam_auth_crap path; (bso#8771). * s3-winbindd: set the can_do_validation6 also for trusted domain; (bso#8599). * Fix problem when calculating the share security mask, take priviliges into account for the connecting user; (bso#8784). * Fix crash in dcerpc_lsa_lookup_sids_noalloc() with over 1000 groups; (bso#8807); (bnc#751454). * Add SERVERID_UNIQUE_ID_NOT_TO_VERIFY; (bso#8760); (bnc#741854). * s3-printing: fix crash in printer_list_set_printer(); (bso#8762); (bnc#746825). * s3:winbindd fix a return code check; (bso#8406). * s3: Add rmdir operation to streams_depot; (bso#8733). * s3:smbd:smb2: fix an assignment-instead-of-check bug conn_snum_used(); (bso#8738). * s3:auth: fill the sids array of the info3 in wbcAuthUserInfo_to_netr_SamInfo3(); (bso#8739). * Do not map POSIX execute permission to Windows FILE_READ_ATTRIBUTES; (bso#8631); (bnc#732572). * Remove all precompiled idl output to ensure any pidl changes take effect; (bnc#757080). Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11 SP2: zypper in -t patch sdksp2-ldapsmb-6145 - SUSE Linux Enterprise Server 11 SP2 for VMware: zypper in -t patch slessp2-ldapsmb-6145 - SUSE Linux Enterprise Server 11 SP2: zypper in -t patch slessp2-ldapsmb-6145 - SUSE Linux Enterprise Desktop 11 SP2: zypper in -t patch sledsp2-ldapsmb-6145 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11 SP2 (i586 ia64 ppc64 s390x x86_64): libldb-devel-3.6.3-0.22.1 libnetapi-devel-3.6.3-0.22.1 libnetapi0-3.6.3-0.22.1 libsmbclient-devel-3.6.3-0.22.1 libsmbsharemodes-devel-3.6.3-0.22.1 libsmbsharemodes0-3.6.3-0.22.1 libtalloc-devel-3.6.3-0.22.1 libtdb-devel-3.6.3-0.22.1 libtevent-devel-3.6.3-0.22.1 libwbclient-devel-3.6.3-0.22.1 samba-devel-3.6.3-0.22.1 - SUSE Linux Enterprise Server 11 SP2 for VMware (i586 x86_64): ldapsmb-1.34b-12.22.1 libldb1-3.6.3-0.22.1 libsmbclient0-3.6.3-0.22.1 libtalloc2-3.6.3-0.22.1 libtdb1-3.6.3-0.22.1 libtevent0-3.6.3-0.22.1 libwbclient0-3.6.3-0.22.1 samba-3.6.3-0.22.1 samba-client-3.6.3-0.22.1 samba-krb-printing-3.6.3-0.22.1 samba-winbind-3.6.3-0.22.1 - SUSE Linux Enterprise Server 11 SP2 for VMware (x86_64): libsmbclient0-32bit-3.6.3-0.22.1 libtalloc2-32bit-3.6.3-0.22.1 libtdb1-32bit-3.6.3-0.22.1 libwbclient0-32bit-3.6.3-0.22.1 samba-32bit-3.6.3-0.22.1 samba-client-32bit-3.6.3-0.22.1 samba-winbind-32bit-3.6.3-0.22.1 - SUSE Linux Enterprise Server 11 SP2 for VMware (noarch): samba-doc-3.6.3-0.22.1 - SUSE Linux Enterprise Server 11 SP2 (i586 ia64 ppc64 s390x x86_64): ldapsmb-1.34b-12.22.1 libldb1-3.6.3-0.22.1 libsmbclient0-3.6.3-0.22.1 libtalloc2-3.6.3-0.22.1 libtdb1-3.6.3-0.22.1 libtevent0-3.6.3-0.22.1 libwbclient0-3.6.3-0.22.1 samba-3.6.3-0.22.1 samba-client-3.6.3-0.22.1 samba-krb-printing-3.6.3-0.22.1 samba-winbind-3.6.3-0.22.1 - SUSE Linux Enterprise Server 11 SP2 (ppc64 s390x x86_64): libsmbclient0-32bit-3.6.3-0.22.1 libtalloc2-32bit-3.6.3-0.22.1 libtdb1-32bit-3.6.3-0.22.1 libwbclient0-32bit-3.6.3-0.22.1 samba-32bit-3.6.3-0.22.1 samba-client-32bit-3.6.3-0.22.1 samba-winbind-32bit-3.6.3-0.22.1 - SUSE Linux Enterprise Server 11 SP2 (noarch): samba-doc-3.6.3-0.22.1 - SUSE Linux Enterprise Server 11 SP2 (ia64): libsmbclient0-x86-3.6.3-0.22.1 libtalloc2-x86-3.6.3-0.22.1 libtdb1-x86-3.6.3-0.22.1 libwbclient0-x86-3.6.3-0.22.1 samba-client-x86-3.6.3-0.22.1 samba-winbind-x86-3.6.3-0.22.1 samba-x86-3.6.3-0.22.1 - SUSE Linux Enterprise Desktop 11 SP2 (i586 x86_64): libldb1-3.6.3-0.22.1 libsmbclient0-3.6.3-0.22.1 libtalloc2-3.6.3-0.22.1 libtdb1-3.6.3-0.22.1 libtevent0-3.6.3-0.22.1 libwbclient0-3.6.3-0.22.1 samba-3.6.3-0.22.1 samba-client-3.6.3-0.22.1 samba-krb-printing-3.6.3-0.22.1 samba-winbind-3.6.3-0.22.1 - SUSE Linux Enterprise Desktop 11 SP2 (x86_64): libldb1-32bit-3.6.3-0.22.1 libsmbclient0-32bit-3.6.3-0.22.1 libtalloc2-32bit-3.6.3-0.22.1 libtdb1-32bit-3.6.3-0.22.1 libtevent0-32bit-3.6.3-0.22.1 libwbclient0-32bit-3.6.3-0.22.1 samba-32bit-3.6.3-0.22.1 samba-client-32bit-3.6.3-0.22.1 samba-winbind-32bit-3.6.3-0.22.1 - SUSE Linux Enterprise Desktop 11 SP2 (noarch): samba-doc-3.6.3-0.22.1 References: https://bugzilla.novell.com/732395 https://bugzilla.novell.com/732572 https://bugzilla.novell.com/741854 https://bugzilla.novell.com/743986 https://bugzilla.novell.com/746825 https://bugzilla.novell.com/747934 https://bugzilla.novell.com/751454 https://bugzilla.novell.com/752797 https://bugzilla.novell.com/757080 http://download.novell.com/patch/finder/?keywords=fab6ab7c7748d5189f56148ea… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2012:0512-1: important: update for acroread
by opensuse-security＠opensuse.org 16 Apr '12

16 Apr '12

openSUSE Security Update: update for acroread ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0512-1 Rating: important References: #756574 Cross-References: CVE-2012-0774 CVE-2012-0775 CVE-2012-0777 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: Acroread update to version 9.5.1 to fix several security issues Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-226 - openSUSE 11.4: zypper in -t patch openSUSE-2012-226 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (noarch): acroread-cmaps-9.4.1-3.10.1 acroread-fonts-ja-9.4.1-3.10.1 acroread-fonts-ko-9.4.1-3.10.1 acroread-fonts-zh_CN-9.4.1-3.10.1 acroread-fonts-zh_TW-9.4.1-3.10.1 - openSUSE 12.1 (i586): acroread-9.5.1-3.10.1 - openSUSE 11.4 (i586): acroread-9.5.1-0.7.1 References: http://support.novell.com/security/cve/CVE-2012-0774.html http://support.novell.com/security/cve/CVE-2012-0775.html http://support.novell.com/security/cve/CVE-2012-0777.html https://bugzilla.novell.com/756574 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2012:0508-1: critical: update for samba
by opensuse-security＠opensuse.org 16 Apr '12

16 Apr '12

openSUSE Security Update: update for samba ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0508-1 Rating: critical References: #752797 Cross-References: CVE-2012-1182 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Samba upgrade to version 3.6.3 fixes the following security issue: - PIDL based autogenerated code allows overwriting beyond of allocated array. Remove attackers could exploit that to execute arbitrary code as root (CVE-2012-1182, bso#8815, bnc#752797) Please see /usr/share/doc/packages/samba/WHATSNEW.txt from the samba-doc package or the package change log (rpm -q --changelog samba) for more details of the version update. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch openSUSE-2012-224 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): ldapsmb-1.34b-112.1 libldb-devel-1.0.2-112.1 libldb1-1.0.2-112.1 libldb1-debuginfo-1.0.2-112.1 libnetapi-devel-3.6.3-112.1 libnetapi0-3.6.3-112.1 libnetapi0-debuginfo-3.6.3-112.1 libsmbclient-devel-3.6.3-112.1 libsmbclient0-3.6.3-112.1 libsmbclient0-debuginfo-3.6.3-112.1 libsmbsharemodes-devel-3.6.3-112.1 libsmbsharemodes0-3.6.3-112.1 libsmbsharemodes0-debuginfo-3.6.3-112.1 libtalloc-devel-2.0.5-112.1 libtalloc2-2.0.5-112.1 libtalloc2-debuginfo-2.0.5-112.1 libtdb-devel-1.2.9-112.1 libtdb1-1.2.9-112.1 libtdb1-debuginfo-1.2.9-112.1 libtevent-devel-0.9.11-112.1 libtevent0-0.9.11-112.1 libtevent0-debuginfo-0.9.11-112.1 libwbclient-devel-3.6.3-112.1 libwbclient0-3.6.3-112.1 libwbclient0-debuginfo-3.6.3-112.1 samba-3.6.3-112.1 samba-client-3.6.3-112.1 samba-client-debuginfo-3.6.3-112.1 samba-debuginfo-3.6.3-112.1 samba-debugsource-3.6.3-112.1 samba-devel-3.6.3-112.1 samba-krb-printing-3.6.3-112.1 samba-krb-printing-debuginfo-3.6.3-112.1 samba-winbind-3.6.3-112.1 samba-winbind-debuginfo-3.6.3-112.1 - openSUSE 11.4 (x86_64): libldb1-32bit-1.0.2-112.1 libldb1-debuginfo-32bit-1.0.2-112.1 libsmbclient0-32bit-3.6.3-112.1 libsmbclient0-debuginfo-32bit-3.6.3-112.1 libtalloc2-32bit-2.0.5-112.1 libtalloc2-debuginfo-32bit-2.0.5-112.1 libtdb1-32bit-1.2.9-112.1 libtdb1-debuginfo-32bit-1.2.9-112.1 libtevent0-32bit-0.9.11-112.1 libtevent0-debuginfo-32bit-0.9.11-112.1 libwbclient0-32bit-3.6.3-112.1 libwbclient0-debuginfo-32bit-3.6.3-112.1 samba-32bit-3.6.3-112.1 samba-client-32bit-3.6.3-112.1 samba-client-debuginfo-32bit-3.6.3-112.1 samba-debuginfo-32bit-3.6.3-112.1 samba-winbind-32bit-3.6.3-112.1 samba-winbind-debuginfo-32bit-3.6.3-112.1 - openSUSE 11.4 (noarch): samba-doc-3.6.3-112.1 - openSUSE 11.4 (ia64): libldb1-debuginfo-x86-1.0.2-112.1 libldb1-x86-1.0.2-112.1 libsmbclient0-debuginfo-x86-3.6.3-112.1 libsmbclient0-x86-3.6.3-112.1 libtalloc2-debuginfo-x86-2.0.5-112.1 libtalloc2-x86-2.0.5-112.1 libtdb1-debuginfo-x86-1.2.9-112.1 libtdb1-x86-1.2.9-112.1 libtevent0-debuginfo-x86-0.9.11-112.1 libtevent0-x86-0.9.11-112.1 libwbclient0-debuginfo-x86-3.6.3-112.1 libwbclient0-x86-3.6.3-112.1 samba-client-debuginfo-x86-3.6.3-112.1 samba-client-x86-3.6.3-112.1 samba-debuginfo-x86-3.6.3-112.1 samba-winbind-debuginfo-x86-3.6.3-112.1 samba-winbind-x86-3.6.3-112.1 samba-x86-3.6.3-112.1 References: http://support.novell.com/security/cve/CVE-2012-1182.html https://bugzilla.novell.com/752797 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2012:0507-1: critical: update for samba
by opensuse-security＠opensuse.org 16 Apr '12

16 Apr '12

openSUSE Security Update: update for samba ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0507-1 Rating: critical References: #741854 #746825 #747934 #751454 #752797 Cross-References: CVE-2012-0870 CVE-2012-1182 Affected Products: openSUSE 12.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has three fixes is now available. Description: - Add the ldapsmb sources as else patches against them have no chance to apply. - Samba pre-3.6.4 are affected by a vulnerability that allows remote code exe- cution as the "root" user; PIDL based autogenerated code allows overwriting beyond of allocated array; CVE-2012-1182; (bso#8815); (bnc#752797). - s3-winbindd: Only use SamLogonEx when we can get unencrypted session keys; (bso#8599). - Correctly handle DENY ACEs when privileges apply; (bso#8797). - s3:smb2_server: fix a logic error, we should sign non guest sessions; (bso8749). - Allow vfs_aio_pthread to build as a static module; (bso#8723). - s3:dbwrap_ctdb: return the number of records in db_ctdb_traverse() for persistent dbs; (#bso8527). - s3: segfault in dom_sid_compare(bso#8567). - Honor SeTakeOwnershiPrivilege when client asks for SEC_STD_WRITE_OWNER; (bso#8768). - s3-winbindd: Close netlogon connection if the status returned by the NetrSamLogonEx call is timeout in the pam_auth_crap path; (bso#8771). - s3-winbindd: set the can_do_validation6 also for trusted domain; (bso#8599). - Fix problem when calculating the share security mask, take priviliges into account for the connecting user; (bso#8784). - Fix crash in dcerpc_lsa_lookup_sids_noalloc() with over 1000 groups; (bso#8807); (bnc#751454). - Remove obsoleted Authors lines from spec file for post-11.2 systems. - Make ldapsmb build with Fedora 15 and 16; (bso#8783). - BuildRequire libuuid-devel for post-11.0 and other systems. - Define missing python macros for non SUSE systems. - PreReq to fillup_prereq and insserv_prereq only on SUSE systems. - Always use cifstab instead of smbfstab on non SUSE systems. - Ensure AndX offsets are increasing strictly monotonically in pre-3.4 versions; CVE-2012-0870; (bnc#747934). - Add SERVERID_UNIQUE_ID_NOT_TO_VERIFY; (bso#8760); (bnc#741854). - s3-printing: fix crash in printer_list_set_printer(); (bso#8762); (bnc#746825). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-223 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): ldapsmb-1.34b-34.11.1 libldb-devel-1.0.2-34.11.1 libldb1-1.0.2-34.11.1 libldb1-debuginfo-1.0.2-34.11.1 libnetapi-devel-3.6.3-34.11.1 libnetapi0-3.6.3-34.11.1 libnetapi0-debuginfo-3.6.3-34.11.1 libsmbclient-devel-3.6.3-34.11.1 libsmbclient0-3.6.3-34.11.1 libsmbclient0-debuginfo-3.6.3-34.11.1 libsmbsharemodes-devel-3.6.3-34.11.1 libsmbsharemodes0-3.6.3-34.11.1 libsmbsharemodes0-debuginfo-3.6.3-34.11.1 libtalloc-devel-2.0.5-34.11.1 libtalloc2-2.0.5-34.11.1 libtalloc2-debuginfo-2.0.5-34.11.1 libtdb-devel-1.2.9-34.11.1 libtdb1-1.2.9-34.11.1 libtdb1-debuginfo-1.2.9-34.11.1 libtevent-devel-0.9.11-34.11.1 libtevent0-0.9.11-34.11.1 libtevent0-debuginfo-0.9.11-34.11.1 libwbclient-devel-3.6.3-34.11.1 libwbclient0-3.6.3-34.11.1 libwbclient0-debuginfo-3.6.3-34.11.1 samba-3.6.3-34.11.1 samba-client-3.6.3-34.11.1 samba-client-debuginfo-3.6.3-34.11.1 samba-debuginfo-3.6.3-34.11.1 samba-debugsource-3.6.3-34.11.1 samba-devel-3.6.3-34.11.1 samba-krb-printing-3.6.3-34.11.1 samba-krb-printing-debuginfo-3.6.3-34.11.1 samba-winbind-3.6.3-34.11.1 samba-winbind-debuginfo-3.6.3-34.11.1 - openSUSE 12.1 (x86_64): libldb1-32bit-1.0.2-34.11.1 libldb1-debuginfo-32bit-1.0.2-34.11.1 libsmbclient0-32bit-3.6.3-34.11.1 libsmbclient0-debuginfo-32bit-3.6.3-34.11.1 libtalloc2-32bit-2.0.5-34.11.1 libtalloc2-debuginfo-32bit-2.0.5-34.11.1 libtdb1-32bit-1.2.9-34.11.1 libtdb1-debuginfo-32bit-1.2.9-34.11.1 libtevent0-32bit-0.9.11-34.11.1 libtevent0-debuginfo-32bit-0.9.11-34.11.1 libwbclient0-32bit-3.6.3-34.11.1 libwbclient0-debuginfo-32bit-3.6.3-34.11.1 samba-32bit-3.6.3-34.11.1 samba-client-32bit-3.6.3-34.11.1 samba-client-debuginfo-32bit-3.6.3-34.11.1 samba-debuginfo-32bit-3.6.3-34.11.1 samba-winbind-32bit-3.6.3-34.11.1 samba-winbind-debuginfo-32bit-3.6.3-34.11.1 - openSUSE 12.1 (noarch): samba-doc-3.6.3-34.11.1 - openSUSE 12.1 (ia64): libldb1-debuginfo-x86-1.0.2-34.11.1 libldb1-x86-1.0.2-34.11.1 libsmbclient0-debuginfo-x86-3.6.3-34.11.1 libsmbclient0-x86-3.6.3-34.11.1 libtalloc2-debuginfo-x86-2.0.5-34.11.1 libtalloc2-x86-2.0.5-34.11.1 libtdb1-debuginfo-x86-1.2.9-34.11.1 libtdb1-x86-1.2.9-34.11.1 libtevent0-debuginfo-x86-0.9.11-34.11.1 libtevent0-x86-0.9.11-34.11.1 libwbclient0-debuginfo-x86-3.6.3-34.11.1 libwbclient0-x86-3.6.3-34.11.1 samba-client-debuginfo-x86-3.6.3-34.11.1 samba-client-x86-3.6.3-34.11.1 samba-debuginfo-x86-3.6.3-34.11.1 samba-winbind-debuginfo-x86-3.6.3-34.11.1 samba-winbind-x86-3.6.3-34.11.1 samba-x86-3.6.3-34.11.1 References: http://support.novell.com/security/cve/CVE-2012-0870.html http://support.novell.com/security/cve/CVE-2012-1182.html https://bugzilla.novell.com/741854 https://bugzilla.novell.com/746825 https://bugzilla.novell.com/747934 https://bugzilla.novell.com/751454 https://bugzilla.novell.com/752797 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:0501-2: critical: Security update for Samba
by opensuse-security＠opensuse.org 14 Apr '12

14 Apr '12

SUSE Security Update: Security update for Samba ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0501-2 Rating: critical References: #752797 Cross-References: CVE-2012-1182 Affected Products: SUSE CORE 9 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: A remote code execution flaw in Samba has been fixed: * CVE-2012-1182: PIDL based autogenerated code uses client supplied size values which allows attackers to write beyond the allocated array size Security Issue reference: * CVE-2012-1182 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1182 > Package List: - SUSE CORE 9 (i586 s390 s390x x86_64): libsmbclient-3.0.26a-0.23 libsmbclient-devel-3.0.26a-0.23 samba-3.0.26a-0.23 samba-client-3.0.26a-0.23 samba-doc-3.0.26a-0.23 samba-pdb-3.0.26a-0.23 samba-python-3.0.26a-0.23 samba-vscan-0.3.6b-0.51 samba-winbind-3.0.26a-0.23 - SUSE CORE 9 (x86_64): libsmbclient-32bit-9-201204111235 samba-32bit-9-201204111235 samba-client-32bit-9-201204111235 samba-winbind-32bit-9-201204111235 - SUSE CORE 9 (s390x): libsmbclient-32bit-9-201204111252 samba-32bit-9-201204111252 samba-client-32bit-9-201204111252 samba-winbind-32bit-9-201204111252 References: http://support.novell.com/security/cve/CVE-2012-1182.html https://bugzilla.novell.com/752797 http://download.novell.com/patch/finder/?keywords=a2cf0eaa66df512b4acca53cc… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:0504-1: critical: Security update for Samba
by opensuse-security＠opensuse.org 14 Apr '12

14 Apr '12

SUSE Security Update: Security update for Samba ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0504-1 Rating: critical References: #747906 #752797 Cross-References: CVE-2012-1182 Affected Products: SUSE Linux Enterprise Server 10 SP4 SUSE Linux Enterprise Server 10 SP3 LTSS SUSE Linux Enterprise Desktop 10 SP4 SLE SDK 10 SP4 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: A remote code execution flaw in Samba has been fixed: * CVE-2012-1182: PIDL based autogenerated code uses client supplied size values which allows attackers to write beyond the allocated array size Also the following bug has been fixed: * mount.cifs: Properly update mtab during remount; (bnc#747906). Security Issue reference: * CVE-2012-1182 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1182 > Package List: - SUSE Linux Enterprise Server 10 SP4 (i586 ia64 ppc s390x x86_64): cifs-mount-3.0.36-0.13.20.1 ldapsmb-1.34b-25.13.20.1 libmsrpc-3.0.36-0.13.20.1 libmsrpc-devel-3.0.36-0.13.20.1 libsmbclient-3.0.36-0.13.20.1 libsmbclient-devel-3.0.36-0.13.20.1 samba-3.0.36-0.13.20.1 samba-client-3.0.36-0.13.20.1 samba-krb-printing-3.0.36-0.13.20.1 samba-python-3.0.36-0.13.20.1 samba-vscan-0.3.6b-43.13.20.1 samba-winbind-3.0.36-0.13.20.1 - SUSE Linux Enterprise Server 10 SP4 (s390x x86_64): libsmbclient-32bit-3.0.36-0.13.20.1 samba-32bit-3.0.36-0.13.20.1 samba-client-32bit-3.0.36-0.13.20.1 samba-winbind-32bit-3.0.36-0.13.20.1 - SUSE Linux Enterprise Server 10 SP4 (noarch): samba-doc-3.0.36-0.12.20.1 - SUSE Linux Enterprise Server 10 SP4 (ia64): libsmbclient-x86-3.0.36-0.13.20.1 samba-client-x86-3.0.36-0.13.20.1 samba-winbind-x86-3.0.36-0.13.20.1 samba-x86-3.0.36-0.13.20.1 - SUSE Linux Enterprise Server 10 SP4 (ppc): libsmbclient-64bit-3.0.36-0.13.20.1 samba-64bit-3.0.36-0.13.20.1 samba-client-64bit-3.0.36-0.13.20.1 samba-winbind-64bit-3.0.36-0.13.20.1 - SUSE Linux Enterprise Server 10 SP3 LTSS (i586 s390x x86_64): cifs-mount-3.0.36-0.13.20.1 ldapsmb-1.34b-25.13.20.1 libmsrpc-3.0.36-0.13.20.1 libmsrpc-devel-3.0.36-0.13.20.1 libsmbclient-3.0.36-0.13.20.1 libsmbclient-devel-3.0.36-0.13.20.1 samba-3.0.36-0.13.20.1 samba-client-3.0.36-0.13.20.1 samba-krb-printing-3.0.36-0.13.20.1 samba-python-3.0.36-0.13.20.1 samba-vscan-0.3.6b-43.13.20.1 samba-winbind-3.0.36-0.13.20.1 - SUSE Linux Enterprise Server 10 SP3 LTSS (s390x x86_64): libsmbclient-32bit-3.0.36-0.13.20.1 samba-32bit-3.0.36-0.13.20.1 samba-client-32bit-3.0.36-0.13.20.1 samba-winbind-32bit-3.0.36-0.13.20.1 - SUSE Linux Enterprise Server 10 SP3 LTSS (noarch): samba-doc-3.0.36-0.12.20.1 - SUSE Linux Enterprise Desktop 10 SP4 (i586 x86_64): cifs-mount-3.0.36-0.13.20.1 ldapsmb-1.34b-25.13.20.1 libsmbclient-3.0.36-0.13.20.1 libsmbclient-devel-3.0.36-0.13.20.1 samba-3.0.36-0.13.20.1 samba-client-3.0.36-0.13.20.1 samba-krb-printing-3.0.36-0.13.20.1 samba-vscan-0.3.6b-43.13.20.1 samba-winbind-3.0.36-0.13.20.1 - SUSE Linux Enterprise Desktop 10 SP4 (x86_64): libsmbclient-32bit-3.0.36-0.13.20.1 samba-32bit-3.0.36-0.13.20.1 samba-client-32bit-3.0.36-0.13.20.1 samba-winbind-32bit-3.0.36-0.13.20.1 - SUSE Linux Enterprise Desktop 10 SP4 (noarch): samba-doc-3.0.36-0.12.20.1 - SLE SDK 10 SP4 (i586 ia64 ppc s390x x86_64): libmsrpc-3.0.36-0.13.20.1 libmsrpc-devel-3.0.36-0.13.20.1 libsmbclient-devel-3.0.36-0.13.20.1 libsmbsharemodes-3.0.36-0.13.20.1 libsmbsharemodes-devel-3.0.36-0.13.20.1 samba-python-3.0.36-0.13.20.1 References: http://support.novell.com/security/cve/CVE-2012-1182.html https://bugzilla.novell.com/747906 https://bugzilla.novell.com/752797 http://download.novell.com/patch/finder/?keywords=62cd7ec87ad16e0edc0743bc1… http://download.novell.com/patch/finder/?keywords=ddd29165a82cb06a9503d4d18… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:0502-1: critical: Security update for Samba
by opensuse-security＠opensuse.org 14 Apr '12

14 Apr '12

SUSE Security Update: Security update for Samba ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0502-1 Rating: critical References: #732395 #741854 #743986 #746825 #747934 #751454 #752797 Cross-References: CVE-2012-0817 CVE-2012-0870 CVE-2012-1182 Affected Products: SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Server 11 SP2 for VMware SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Desktop 11 SP2 ______________________________________________________________________________ An update that solves three vulnerabilities and has four fixes is now available. Description: The following issues have been fixed in samba: * CVE-2012-1182: PIDL based autogenerated code uses client supplied size values which allows attackers to write beyond the allocated array size * CVE-2012-0870: Ensure AndX offsets are increasing strictly monotonically in pre-3.4 versions * CVE-2012-0817: Fix memory leak in parent smbd on connection Also the following non-security bugs have been fixed: * s3-winbindd: Only use SamLogonEx when we can get unencrypted session keys; (bso#8599). * Correctly handle DENY ACEs when privileges apply; (bso#8797). * s3:smb2_server: fix a logic error, we should sign non guest sessions; (bso8749). * Allow vfs_aio_pthread to build as a static module; (bso#8723). * s3:dbwrap_ctdb: return the number of records in db_ctdb_traverse() for persistent dbs; (#bso8527). * s3: segfault in dom_sid_compare(bso#8567). * Honor SeTakeOwnershiPrivilege when client asks for SEC_STD_WRITE_OWNER; (bso#8768). * s3-winbindd: Close netlogon connection if the status returned by the NetrSamLogonEx call is timeout in the pam_auth_crap path; (bso#8771). * s3-winbindd: set the can_do_validation6 also for trusted domain; (bso#8599). * Fix problem when calculating the share security mask, take priviliges into account for the connecting user; (bso#8784). * Fix crash in dcerpc_lsa_lookup_sids_noalloc() with over 1000 groups; (bso#8807); (bnc#751454). * Add SERVERID_UNIQUE_ID_NOT_TO_VERIFY; (bso#8760); (bnc#741854). * s3-printing: fix crash in printer_list_set_printer(); (bso#8762); (bnc#746825). * s3:winbindd fix a return code check; (bso#8406). * s3: Add rmdir operation to streams_depot; (bso#8733). * s3:smbd:smb2: fix an assignment-instead-of-check bug conn_snum_used(); (bso#8738). * s3:auth: fill the sids array of the info3 in wbcAuthUserInfo_to_netr_SamInfo3(); (bso#8739). Security Issue references: * CVE-2012-1182 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1182 > * CVE-2012-0870 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0870 > * CVE-2012-0817 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0817 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11 SP2: zypper in -t patch sdksp2-ldapsmb-6120 - SUSE Linux Enterprise Server 11 SP2 for VMware: zypper in -t patch slessp2-ldapsmb-6120 - SUSE Linux Enterprise Server 11 SP2: zypper in -t patch slessp2-ldapsmb-6120 - SUSE Linux Enterprise Desktop 11 SP2: zypper in -t patch sledsp2-ldapsmb-6120 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11 SP2 (i586 ia64 ppc64 s390x x86_64): libldb-devel-3.6.3-0.20.1 libnetapi-devel-3.6.3-0.20.1 libnetapi0-3.6.3-0.20.1 libsmbclient-devel-3.6.3-0.20.1 libsmbsharemodes-devel-3.6.3-0.20.1 libsmbsharemodes0-3.6.3-0.20.1 libtalloc-devel-3.6.3-0.20.1 libtdb-devel-3.6.3-0.20.1 libtevent-devel-3.6.3-0.20.1 libwbclient-devel-3.6.3-0.20.1 samba-devel-3.6.3-0.20.1 - SUSE Linux Enterprise Server 11 SP2 for VMware (i586 x86_64): ldapsmb-1.34b-12.20.1 libldb1-3.6.3-0.20.1 libsmbclient0-3.6.3-0.20.1 libtalloc2-3.6.3-0.20.1 libtdb1-3.6.3-0.20.1 libtevent0-3.6.3-0.20.1 libwbclient0-3.6.3-0.20.1 samba-3.6.3-0.20.1 samba-client-3.6.3-0.20.1 samba-krb-printing-3.6.3-0.20.1 samba-winbind-3.6.3-0.20.1 - SUSE Linux Enterprise Server 11 SP2 for VMware (x86_64): libsmbclient0-32bit-3.6.3-0.20.1 libtalloc2-32bit-3.6.3-0.20.1 libtdb1-32bit-3.6.3-0.20.1 libwbclient0-32bit-3.6.3-0.20.1 samba-32bit-3.6.3-0.20.1 samba-client-32bit-3.6.3-0.20.1 samba-winbind-32bit-3.6.3-0.20.1 - SUSE Linux Enterprise Server 11 SP2 for VMware (noarch): samba-doc-3.6.3-0.20.1 - SUSE Linux Enterprise Server 11 SP2 (i586 ia64 ppc64 s390x x86_64): ldapsmb-1.34b-12.20.1 libldb1-3.6.3-0.20.1 libsmbclient0-3.6.3-0.20.1 libtalloc2-3.6.3-0.20.1 libtdb1-3.6.3-0.20.1 libtevent0-3.6.3-0.20.1 libwbclient0-3.6.3-0.20.1 samba-3.6.3-0.20.1 samba-client-3.6.3-0.20.1 samba-krb-printing-3.6.3-0.20.1 samba-winbind-3.6.3-0.20.1 - SUSE Linux Enterprise Server 11 SP2 (ppc64 s390x x86_64): libsmbclient0-32bit-3.6.3-0.20.1 libtalloc2-32bit-3.6.3-0.20.1 libtdb1-32bit-3.6.3-0.20.1 libwbclient0-32bit-3.6.3-0.20.1 samba-32bit-3.6.3-0.20.1 samba-client-32bit-3.6.3-0.20.1 samba-winbind-32bit-3.6.3-0.20.1 - SUSE Linux Enterprise Server 11 SP2 (noarch): samba-doc-3.6.3-0.20.1 - SUSE Linux Enterprise Server 11 SP2 (ia64): libsmbclient0-x86-3.6.3-0.20.1 libtalloc2-x86-3.6.3-0.20.1 libtdb1-x86-3.6.3-0.20.1 libwbclient0-x86-3.6.3-0.20.1 samba-client-x86-3.6.3-0.20.1 samba-winbind-x86-3.6.3-0.20.1 samba-x86-3.6.3-0.20.1 - SUSE Linux Enterprise Desktop 11 SP2 (i586 x86_64): libldb1-3.6.3-0.20.1 libsmbclient0-3.6.3-0.20.1 libtalloc2-3.6.3-0.20.1 libtdb1-3.6.3-0.20.1 libtevent0-3.6.3-0.20.1 libwbclient0-3.6.3-0.20.1 samba-3.6.3-0.20.1 samba-client-3.6.3-0.20.1 samba-krb-printing-3.6.3-0.20.1 samba-winbind-3.6.3-0.20.1 - SUSE Linux Enterprise Desktop 11 SP2 (x86_64): libldb1-32bit-3.6.3-0.20.1 libsmbclient0-32bit-3.6.3-0.20.1 libtalloc2-32bit-3.6.3-0.20.1 libtdb1-32bit-3.6.3-0.20.1 libtevent0-32bit-3.6.3-0.20.1 libwbclient0-32bit-3.6.3-0.20.1 samba-32bit-3.6.3-0.20.1 samba-client-32bit-3.6.3-0.20.1 samba-winbind-32bit-3.6.3-0.20.1 - SUSE Linux Enterprise Desktop 11 SP2 (noarch): samba-doc-3.6.3-0.20.1 References: http://support.novell.com/security/cve/CVE-2012-0817.html http://support.novell.com/security/cve/CVE-2012-0870.html http://support.novell.com/security/cve/CVE-2012-1182.html https://bugzilla.novell.com/732395 https://bugzilla.novell.com/741854 https://bugzilla.novell.com/743986 https://bugzilla.novell.com/746825 https://bugzilla.novell.com/747934 https://bugzilla.novell.com/751454 https://bugzilla.novell.com/752797 http://download.novell.com/patch/finder/?keywords=1525022a16d67e6a299e19313… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:0501-1: critical: Security update for Samba
by opensuse-security＠opensuse.org 14 Apr '12

14 Apr '12

SUSE Security Update: Security update for Samba ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0501-1 Rating: critical References: #752797 Cross-References: CVE-2012-1182 Affected Products: SUSE Linux Enterprise Server 10 SP2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. It includes one version update. Description: A remote code execution flaw in Samba has been fixed: * CVE-2012-1182: PIDL based autogenerated code uses client supplied size values which allows attackers to write beyond the allocated array size Security Issue reference: * CVE-2012-1182 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1182 > Package List: - SUSE Linux Enterprise Server 10 SP2 (i586 s390x x86_64) [New Version: 3.0.32]: cifs-mount-3.0.32-0.22.1 libmsrpc-3.0.32-0.22.1 libmsrpc-devel-3.0.32-0.22.1 libsmbclient-3.0.32-0.22.1 libsmbclient-devel-3.0.32-0.22.1 samba-3.0.32-0.22.1 samba-client-3.0.32-0.22.1 samba-krb-printing-3.0.32-0.22.1 samba-python-3.0.32-0.22.1 samba-vscan-0.3.6b-42.85.22.1 samba-winbind-3.0.32-0.22.1 - SUSE Linux Enterprise Server 10 SP2 (s390x x86_64) [New Version: 3.0.32]: libsmbclient-32bit-3.0.32-0.22.1 samba-32bit-3.0.32-0.22.1 samba-client-32bit-3.0.32-0.22.1 samba-winbind-32bit-3.0.32-0.22.1 - SUSE Linux Enterprise Server 10 SP2 (noarch) [New Version: 3.0.32]: samba-doc-3.0.32-0.22.1 References: http://support.novell.com/security/cve/CVE-2012-1182.html https://bugzilla.novell.com/752797 http://download.novell.com/patch/finder/?keywords=5b844721c4336f27fc2fd2291… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:0500-1: critical: Security update for Samba
by opensuse-security＠opensuse.org 14 Apr '12

14 Apr '12

SUSE Security Update: Security update for Samba ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0500-1 Rating: critical References: #722663 #732572 #742885 #747906 #752797 Cross-References: CVE-2012-1182 Affected Products: SUSE Linux Enterprise Software Development Kit 11 SP1 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP1 for VMware SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server 10 GPLv3 Extras SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP1 ______________________________________________________________________________ An update that solves one vulnerability and has four fixes is now available. Description: A remote code execution flaw in Samba has been fixed: * CVE-2012-1182: PIDL based autogenerated code uses client supplied size values which allows attackers to write beyond the allocated array size Also the following bugs have been fixed: * Samba printer name marshalling problems (bnc#722663) * mount.cifs: properly update mtab during remount (bnc#747906) * s3: compile IDL files in autogen, some configure tests need this. * Fix incorrect types in the full audit VFS module. Add null terminators to audit log enums (bnc#742885) * Do not map POSIX execute permission to Windows FILE_READ_ATTRIBUTES; (bso#8631); (bnc#732572). Security Issue reference: * CVE-2012-1182 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1182 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11 SP1: zypper in -t patch sdksp1-cifs-mount-6124 - SUSE Linux Enterprise Server 11 SP2: zypper in -t patch slessp1-cifs-mount-6124 - SUSE Linux Enterprise Server 11 SP1 for VMware: zypper in -t patch slessp1-cifs-mount-6124 - SUSE Linux Enterprise Server 11 SP1: zypper in -t patch slessp1-cifs-mount-6124 - SUSE Linux Enterprise Desktop 11 SP2: zypper in -t patch sledsp1-cifs-mount-6124 - SUSE Linux Enterprise Desktop 11 SP1: zypper in -t patch sledsp1-cifs-mount-6124 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11 SP1 (i586 ia64 ppc64 s390x x86_64): libnetapi-devel-3.4.3-1.38.1 libnetapi0-3.4.3-1.38.1 libsmbclient-devel-3.4.3-1.38.1 libsmbsharemodes-devel-3.4.3-1.38.1 libsmbsharemodes0-3.4.3-1.38.1 libtalloc-devel-3.4.3-1.38.1 libtdb-devel-3.4.3-1.38.1 libwbclient-devel-3.4.3-1.38.1 samba-devel-3.4.3-1.38.1 - SUSE Linux Enterprise Server 11 SP2 (i586 ia64 ppc64 s390x x86_64): cifs-mount-3.4.3-1.38.1 libtalloc1-3.4.3-1.38.1 - SUSE Linux Enterprise Server 11 SP2 (ppc64 s390x x86_64): libtalloc1-32bit-3.4.3-1.38.1 - SUSE Linux Enterprise Server 11 SP2 (ia64): libtalloc1-x86-3.4.3-1.38.1 - SUSE Linux Enterprise Server 11 SP1 for VMware (i586 x86_64): cifs-mount-3.4.3-1.38.1 ldapsmb-1.34b-11.28.38.1 libsmbclient0-3.4.3-1.38.1 libtalloc1-3.4.3-1.38.1 libtdb1-3.4.3-1.38.1 libwbclient0-3.4.3-1.38.1 samba-3.4.3-1.38.1 samba-client-3.4.3-1.38.1 samba-krb-printing-3.4.3-1.38.1 samba-winbind-3.4.3-1.38.1 - SUSE Linux Enterprise Server 11 SP1 for VMware (x86_64): libsmbclient0-32bit-3.4.3-1.38.1 libtalloc1-32bit-3.4.3-1.38.1 libtdb1-32bit-3.4.3-1.38.1 libwbclient0-32bit-3.4.3-1.38.1 samba-32bit-3.4.3-1.38.1 samba-client-32bit-3.4.3-1.38.1 samba-winbind-32bit-3.4.3-1.38.1 - SUSE Linux Enterprise Server 11 SP1 for VMware (noarch): samba-doc-3.4.3-1.38.1 - SUSE Linux Enterprise Server 11 SP1 (i586 ia64 ppc64 s390x x86_64): cifs-mount-3.4.3-1.38.1 ldapsmb-1.34b-11.28.38.1 libsmbclient0-3.4.3-1.38.1 libtalloc1-3.4.3-1.38.1 libtdb1-3.4.3-1.38.1 libwbclient0-3.4.3-1.38.1 samba-3.4.3-1.38.1 samba-client-3.4.3-1.38.1 samba-krb-printing-3.4.3-1.38.1 samba-winbind-3.4.3-1.38.1 - SUSE Linux Enterprise Server 11 SP1 (ppc64 s390x x86_64): libsmbclient0-32bit-3.4.3-1.38.1 libtalloc1-32bit-3.4.3-1.38.1 libtdb1-32bit-3.4.3-1.38.1 libwbclient0-32bit-3.4.3-1.38.1 samba-32bit-3.4.3-1.38.1 samba-client-32bit-3.4.3-1.38.1 samba-winbind-32bit-3.4.3-1.38.1 - SUSE Linux Enterprise Server 11 SP1 (noarch): samba-doc-3.4.3-1.38.1 - SUSE Linux Enterprise Server 11 SP1 (ia64): libsmbclient0-x86-3.4.3-1.38.1 libtalloc1-x86-3.4.3-1.38.1 libtdb1-x86-3.4.3-1.38.1 libwbclient0-x86-3.4.3-1.38.1 samba-client-x86-3.4.3-1.38.1 samba-winbind-x86-3.4.3-1.38.1 samba-x86-3.4.3-1.38.1 - SUSE Linux Enterprise Server 10 GPLv3 Extras (i586 ia64 ppc s390x x86_64): libnetapi-devel-3.4.3-0.41.1 libnetapi0-3.4.3-0.41.1 libtalloc-devel-3.4.3-0.41.1 libtalloc1-3.4.3-0.41.1 libtdb-devel-3.4.3-0.41.1 libtdb1-3.4.3-0.41.1 libwbclient-devel-3.4.3-0.41.1 libwbclient0-3.4.3-0.41.1 samba-gplv3-3.4.3-0.41.1 samba-gplv3-client-3.4.3-0.41.1 samba-gplv3-krb-printing-3.4.3-0.41.1 samba-gplv3-winbind-3.4.3-0.41.1 - SUSE Linux Enterprise Server 10 GPLv3 Extras (noarch): samba-gplv3-doc-3.4.3-0.41.1 - SUSE Linux Enterprise Desktop 11 SP2 (i586 x86_64): cifs-mount-3.4.3-1.38.1 libtalloc1-3.4.3-1.38.1 - SUSE Linux Enterprise Desktop 11 SP2 (x86_64): libtalloc1-32bit-3.4.3-1.38.1 - SUSE Linux Enterprise Desktop 11 SP1 (i586 x86_64): cifs-mount-3.4.3-1.38.1 libsmbclient0-3.4.3-1.38.1 libtalloc1-3.4.3-1.38.1 libtdb1-3.4.3-1.38.1 libwbclient0-3.4.3-1.38.1 samba-3.4.3-1.38.1 samba-client-3.4.3-1.38.1 samba-krb-printing-3.4.3-1.38.1 samba-winbind-3.4.3-1.38.1 - SUSE Linux Enterprise Desktop 11 SP1 (x86_64): libsmbclient0-32bit-3.4.3-1.38.1 libtalloc1-32bit-3.4.3-1.38.1 libtdb1-32bit-3.4.3-1.38.1 libwbclient0-32bit-3.4.3-1.38.1 samba-32bit-3.4.3-1.38.1 samba-client-32bit-3.4.3-1.38.1 samba-winbind-32bit-3.4.3-1.38.1 - SUSE Linux Enterprise Desktop 11 SP1 (noarch): samba-doc-3.4.3-1.38.1 References: http://support.novell.com/security/cve/CVE-2012-1182.html https://bugzilla.novell.com/722663 https://bugzilla.novell.com/732572 https://bugzilla.novell.com/742885 https://bugzilla.novell.com/747906 https://bugzilla.novell.com/752797 http://download.novell.com/patch/finder/?keywords=3bd8f1f0b7951916141df8d3c… http://download.novell.com/patch/finder/?keywords=a26eb82dd0f2acd52392bd054… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:0496-1: important: Security update for PHP5
by opensuse-security＠opensuse.org 12 Apr '12

12 Apr '12

SUSE Security Update: Security update for PHP5 ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0496-1 Rating: important References: #699711 #709549 #713652 #728671 #733590 #735613 #736169 #738221 #741520 #741859 #742273 #742806 #743308 #744966 #746661 #749111 Cross-References: CVE-2011-1072 CVE-2011-1466 CVE-2011-2202 CVE-2011-3182 CVE-2011-4153 CVE-2011-4566 CVE-2011-4885 CVE-2012-0057 CVE-2012-0781 CVE-2012-0788 CVE-2012-0789 CVE-2012-0807 CVE-2012-0830 CVE-2012-0831 Affected Products: SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP1 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP1 for VMware SUSE Linux Enterprise Server 11 SP1 ______________________________________________________________________________ An update that solves 14 vulnerabilities and has two fixes is now available. It includes one version update. Description: This update of php5 fixes multiple security flaws: * CVE-2011-2202: A php5 upload filename injection was fixed. * CVE-2011-4566: A integer overflow in the EXIF extension was fixed that could be used by attackers to crash the interpreter or potentially read memory * CVE-2011-3182: Multiple NULL pointer dereferences were fixed that could lead to crashes * CVE-2011-1466: An integer overflow in the PHP calendar extension was fixed that could have led to crashes. * CVE-2011-1072: A symlink vulnerability in the PEAR installer could be exploited by local attackers to inject code. * CVE-2011-4153: missing checks of return values could allow remote attackers to cause a denial of service (NULL pointer dereference) * CVE-2011-4885: denial of service via hash collisions * CVE-2012-0057: specially crafted XSLT stylesheets could allow remote attackers to create arbitrary files with arbitrary content * CVE-2012-0781: remote attackers can cause a denial of service via specially crafted input to an application that attempts to perform Tidy::diagnose operations * CVE-2012-0788: applications that use a PDO driver were prone to denial of service flaws which could be exploited remotely * CVE-2012-0789: memory leak in the timezone functionality could allow remote attackers to cause a denial of service (memory consumption) * CVE-2012-0807: a stack based buffer overflow in the php5 Suhosin extension could allow remote attackers to execute arbitrary code via a long string that is used in a Set-Cookie HTTP header * CVE-2012-0830: this fixes an incorrect fix for CVE-2011-4885 which could allow remote attackers to execute arbitrary code via a request containing a large number of variables * CVE-2012-0831: temporary changes to the magic_quotes_gpc directive during the importing of environment variables is not properly performed which makes it easier for remote attackers to conduct SQL injections Also the following bugs have been fixed: * allow uploading files bigger than 2GB for 64bit systems [bnc#709549] * amend README.SUSE to discourage using apache module with apache2-worker [bnc#728671] Security Issue references: * CVE-2011-2202 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2202 > * CVE-2011-4153 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4153 > * CVE-2011-4885 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4885 > * CVE-2012-0057 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0057 > * CVE-2012-0781 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0781 > * CVE-2012-0788 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0788 > * CVE-2012-0789 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0789 > * CVE-2012-0807 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0807 > * CVE-2012-0830 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0830 > * CVE-2012-0831 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0831 > * CVE-2011-4566 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4566 > * CVE-2011-3182 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3182 > * CVE-2011-1466 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1466 > * CVE-2011-1072 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1072 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11 SP2: zypper in -t patch sdksp1-apache2-mod_php5-5964 - SUSE Linux Enterprise Software Development Kit 11 SP1: zypper in -t patch sdksp1-apache2-mod_php5-5964 - SUSE Linux Enterprise Server 11 SP2: zypper in -t patch slessp1-apache2-mod_php5-5964 - SUSE Linux Enterprise Server 11 SP1 for VMware: zypper in -t patch slessp1-apache2-mod_php5-5964 - SUSE Linux Enterprise Server 11 SP1: zypper in -t patch slessp1-apache2-mod_php5-5964 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11 SP2 (i586 ia64 ppc64 s390x x86_64) [New Version: 5.2.14]: php5-devel-5.2.14-0.7.30.34.1 php5-imap-5.2.14-0.7.30.34.1 php5-ncurses-5.2.14-0.7.30.34.1 php5-posix-5.2.14-0.7.30.34.1 php5-readline-5.2.14-0.7.30.34.1 php5-sockets-5.2.14-0.7.30.34.1 php5-sqlite-5.2.14-0.7.30.34.1 php5-tidy-5.2.14-0.7.30.34.1 - SUSE Linux Enterprise Software Development Kit 11 SP2 (i586 x86_64) [New Version: 5.2.14]: apache2-mod_php5-5.2.14-0.7.30.34.1 php5-5.2.14-0.7.30.34.1 php5-bcmath-5.2.14-0.7.30.34.1 php5-bz2-5.2.14-0.7.30.34.1 php5-calendar-5.2.14-0.7.30.34.1 php5-ctype-5.2.14-0.7.30.34.1 php5-curl-5.2.14-0.7.30.34.1 php5-dba-5.2.14-0.7.30.34.1 php5-dbase-5.2.14-0.7.30.34.1 php5-dom-5.2.14-0.7.30.34.1 php5-exif-5.2.14-0.7.30.34.1 php5-fastcgi-5.2.14-0.7.30.34.1 php5-ftp-5.2.14-0.7.30.34.1 php5-gd-5.2.14-0.7.30.34.1 php5-gettext-5.2.14-0.7.30.34.1 php5-gmp-5.2.14-0.7.30.34.1 php5-hash-5.2.14-0.7.30.34.1 php5-iconv-5.2.14-0.7.30.34.1 php5-json-5.2.14-0.7.30.34.1 php5-ldap-5.2.14-0.7.30.34.1 php5-mbstring-5.2.14-0.7.30.34.1 php5-mcrypt-5.2.14-0.7.30.34.1 php5-mysql-5.2.14-0.7.30.34.1 php5-odbc-5.2.14-0.7.30.34.1 php5-openssl-5.2.14-0.7.30.34.1 php5-pcntl-5.2.14-0.7.30.34.1 php5-pdo-5.2.14-0.7.30.34.1 php5-pear-5.2.14-0.7.30.34.1 php5-pgsql-5.2.14-0.7.30.34.1 php5-pspell-5.2.14-0.7.30.34.1 php5-shmop-5.2.14-0.7.30.34.1 php5-snmp-5.2.14-0.7.30.34.1 php5-soap-5.2.14-0.7.30.34.1 php5-suhosin-5.2.14-0.7.30.34.1 php5-sysvmsg-5.2.14-0.7.30.34.1 php5-sysvsem-5.2.14-0.7.30.34.1 php5-sysvshm-5.2.14-0.7.30.34.1 php5-tokenizer-5.2.14-0.7.30.34.1 php5-wddx-5.2.14-0.7.30.34.1 php5-xmlreader-5.2.14-0.7.30.34.1 php5-xmlrpc-5.2.14-0.7.30.34.1 php5-xmlwriter-5.2.14-0.7.30.34.1 php5-xsl-5.2.14-0.7.30.34.1 php5-zip-5.2.14-0.7.30.34.1 php5-zlib-5.2.14-0.7.30.34.1 - SUSE Linux Enterprise Software Development Kit 11 SP1 (i586 ia64 ppc64 s390x x86_64) [New Version: 5.2.14]: php5-devel-5.2.14-0.7.30.34.1 php5-imap-5.2.14-0.7.30.34.1 php5-ncurses-5.2.14-0.7.30.34.1 php5-posix-5.2.14-0.7.30.34.1 php5-readline-5.2.14-0.7.30.34.1 php5-sockets-5.2.14-0.7.30.34.1 php5-sqlite-5.2.14-0.7.30.34.1 php5-tidy-5.2.14-0.7.30.34.1 - SUSE Linux Enterprise Software Development Kit 11 SP1 (i586 x86_64) [New Version: 5.2.14]: apache2-mod_php5-5.2.14-0.7.30.34.1 php5-5.2.14-0.7.30.34.1 php5-bcmath-5.2.14-0.7.30.34.1 php5-bz2-5.2.14-0.7.30.34.1 php5-calendar-5.2.14-0.7.30.34.1 php5-ctype-5.2.14-0.7.30.34.1 php5-curl-5.2.14-0.7.30.34.1 php5-dba-5.2.14-0.7.30.34.1 php5-dbase-5.2.14-0.7.30.34.1 php5-dom-5.2.14-0.7.30.34.1 php5-exif-5.2.14-0.7.30.34.1 php5-fastcgi-5.2.14-0.7.30.34.1 php5-ftp-5.2.14-0.7.30.34.1 php5-gd-5.2.14-0.7.30.34.1 php5-gettext-5.2.14-0.7.30.34.1 php5-gmp-5.2.14-0.7.30.34.1 php5-hash-5.2.14-0.7.30.34.1 php5-iconv-5.2.14-0.7.30.34.1 php5-json-5.2.14-0.7.30.34.1 php5-ldap-5.2.14-0.7.30.34.1 php5-mbstring-5.2.14-0.7.30.34.1 php5-mcrypt-5.2.14-0.7.30.34.1 php5-mysql-5.2.14-0.7.30.34.1 php5-odbc-5.2.14-0.7.30.34.1 php5-openssl-5.2.14-0.7.30.34.1 php5-pcntl-5.2.14-0.7.30.34.1 php5-pdo-5.2.14-0.7.30.34.1 php5-pear-5.2.14-0.7.30.34.1 php5-pgsql-5.2.14-0.7.30.34.1 php5-pspell-5.2.14-0.7.30.34.1 php5-shmop-5.2.14-0.7.30.34.1 php5-snmp-5.2.14-0.7.30.34.1 php5-soap-5.2.14-0.7.30.34.1 php5-suhosin-5.2.14-0.7.30.34.1 php5-sysvmsg-5.2.14-0.7.30.34.1 php5-sysvsem-5.2.14-0.7.30.34.1 php5-sysvshm-5.2.14-0.7.30.34.1 php5-tokenizer-5.2.14-0.7.30.34.1 php5-wddx-5.2.14-0.7.30.34.1 php5-xmlreader-5.2.14-0.7.30.34.1 php5-xmlrpc-5.2.14-0.7.30.34.1 php5-xmlwriter-5.2.14-0.7.30.34.1 php5-xsl-5.2.14-0.7.30.34.1 php5-zip-5.2.14-0.7.30.34.1 php5-zlib-5.2.14-0.7.30.34.1 - SUSE Linux Enterprise Server 11 SP2 (i586 ia64 ppc64 s390x x86_64) [New Version: 5.2.14]: apache2-mod_php5-5.2.14-0.7.30.34.1 php5-5.2.14-0.7.30.34.1 php5-bcmath-5.2.14-0.7.30.34.1 php5-bz2-5.2.14-0.7.30.34.1 php5-calendar-5.2.14-0.7.30.34.1 php5-ctype-5.2.14-0.7.30.34.1 php5-curl-5.2.14-0.7.30.34.1 php5-dba-5.2.14-0.7.30.34.1 php5-dbase-5.2.14-0.7.30.34.1 php5-dom-5.2.14-0.7.30.34.1 php5-exif-5.2.14-0.7.30.34.1 php5-fastcgi-5.2.14-0.7.30.34.1 php5-ftp-5.2.14-0.7.30.34.1 php5-gd-5.2.14-0.7.30.34.1 php5-gettext-5.2.14-0.7.30.34.1 php5-gmp-5.2.14-0.7.30.34.1 php5-hash-5.2.14-0.7.30.34.1 php5-iconv-5.2.14-0.7.30.34.1 php5-json-5.2.14-0.7.30.34.1 php5-ldap-5.2.14-0.7.30.34.1 php5-mbstring-5.2.14-0.7.30.34.1 php5-mcrypt-5.2.14-0.7.30.34.1 php5-mysql-5.2.14-0.7.30.34.1 php5-odbc-5.2.14-0.7.30.34.1 php5-openssl-5.2.14-0.7.30.34.1 php5-pcntl-5.2.14-0.7.30.34.1 php5-pdo-5.2.14-0.7.30.34.1 php5-pear-5.2.14-0.7.30.34.1 php5-pgsql-5.2.14-0.7.30.34.1 php5-pspell-5.2.14-0.7.30.34.1 php5-shmop-5.2.14-0.7.30.34.1 php5-snmp-5.2.14-0.7.30.34.1 php5-soap-5.2.14-0.7.30.34.1 php5-suhosin-5.2.14-0.7.30.34.1 php5-sysvmsg-5.2.14-0.7.30.34.1 php5-sysvsem-5.2.14-0.7.30.34.1 php5-sysvshm-5.2.14-0.7.30.34.1 php5-tokenizer-5.2.14-0.7.30.34.1 php5-wddx-5.2.14-0.7.30.34.1 php5-xmlreader-5.2.14-0.7.30.34.1 php5-xmlrpc-5.2.14-0.7.30.34.1 php5-xmlwriter-5.2.14-0.7.30.34.1 php5-xsl-5.2.14-0.7.30.34.1 php5-zip-5.2.14-0.7.30.34.1 php5-zlib-5.2.14-0.7.30.34.1 - SUSE Linux Enterprise Server 11 SP1 for VMware (i586 x86_64) [New Version: 5.2.14]: apache2-mod_php5-5.2.14-0.7.30.34.1 php5-5.2.14-0.7.30.34.1 php5-bcmath-5.2.14-0.7.30.34.1 php5-bz2-5.2.14-0.7.30.34.1 php5-calendar-5.2.14-0.7.30.34.1 php5-ctype-5.2.14-0.7.30.34.1 php5-curl-5.2.14-0.7.30.34.1 php5-dba-5.2.14-0.7.30.34.1 php5-dbase-5.2.14-0.7.30.34.1 php5-dom-5.2.14-0.7.30.34.1 php5-exif-5.2.14-0.7.30.34.1 php5-fastcgi-5.2.14-0.7.30.34.1 php5-ftp-5.2.14-0.7.30.34.1 php5-gd-5.2.14-0.7.30.34.1 php5-gettext-5.2.14-0.7.30.34.1 php5-gmp-5.2.14-0.7.30.34.1 php5-hash-5.2.14-0.7.30.34.1 php5-iconv-5.2.14-0.7.30.34.1 php5-json-5.2.14-0.7.30.34.1 php5-ldap-5.2.14-0.7.30.34.1 php5-mbstring-5.2.14-0.7.30.34.1 php5-mcrypt-5.2.14-0.7.30.34.1 php5-mysql-5.2.14-0.7.30.34.1 php5-odbc-5.2.14-0.7.30.34.1 php5-openssl-5.2.14-0.7.30.34.1 php5-pcntl-5.2.14-0.7.30.34.1 php5-pdo-5.2.14-0.7.30.34.1 php5-pear-5.2.14-0.7.30.34.1 php5-pgsql-5.2.14-0.7.30.34.1 php5-pspell-5.2.14-0.7.30.34.1 php5-shmop-5.2.14-0.7.30.34.1 php5-snmp-5.2.14-0.7.30.34.1 php5-soap-5.2.14-0.7.30.34.1 php5-suhosin-5.2.14-0.7.30.34.1 php5-sysvmsg-5.2.14-0.7.30.34.1 php5-sysvsem-5.2.14-0.7.30.34.1 php5-sysvshm-5.2.14-0.7.30.34.1 php5-tokenizer-5.2.14-0.7.30.34.1 php5-wddx-5.2.14-0.7.30.34.1 php5-xmlreader-5.2.14-0.7.30.34.1 php5-xmlrpc-5.2.14-0.7.30.34.1 php5-xmlwriter-5.2.14-0.7.30.34.1 php5-xsl-5.2.14-0.7.30.34.1 php5-zip-5.2.14-0.7.30.34.1 php5-zlib-5.2.14-0.7.30.34.1 - SUSE Linux Enterprise Server 11 SP1 (i586 ia64 ppc64 s390x x86_64) [New Version: 5.2.14]: apache2-mod_php5-5.2.14-0.7.30.34.1 php5-5.2.14-0.7.30.34.1 php5-bcmath-5.2.14-0.7.30.34.1 php5-bz2-5.2.14-0.7.30.34.1 php5-calendar-5.2.14-0.7.30.34.1 php5-ctype-5.2.14-0.7.30.34.1 php5-curl-5.2.14-0.7.30.34.1 php5-dba-5.2.14-0.7.30.34.1 php5-dbase-5.2.14-0.7.30.34.1 php5-dom-5.2.14-0.7.30.34.1 php5-exif-5.2.14-0.7.30.34.1 php5-fastcgi-5.2.14-0.7.30.34.1 php5-ftp-5.2.14-0.7.30.34.1 php5-gd-5.2.14-0.7.30.34.1 php5-gettext-5.2.14-0.7.30.34.1 php5-gmp-5.2.14-0.7.30.34.1 php5-hash-5.2.14-0.7.30.34.1 php5-iconv-5.2.14-0.7.30.34.1 php5-json-5.2.14-0.7.30.34.1 php5-ldap-5.2.14-0.7.30.34.1 php5-mbstring-5.2.14-0.7.30.34.1 php5-mcrypt-5.2.14-0.7.30.34.1 php5-mysql-5.2.14-0.7.30.34.1 php5-odbc-5.2.14-0.7.30.34.1 php5-openssl-5.2.14-0.7.30.34.1 php5-pcntl-5.2.14-0.7.30.34.1 php5-pdo-5.2.14-0.7.30.34.1 php5-pear-5.2.14-0.7.30.34.1 php5-pgsql-5.2.14-0.7.30.34.1 php5-pspell-5.2.14-0.7.30.34.1 php5-shmop-5.2.14-0.7.30.34.1 php5-snmp-5.2.14-0.7.30.34.1 php5-soap-5.2.14-0.7.30.34.1 php5-suhosin-5.2.14-0.7.30.34.1 php5-sysvmsg-5.2.14-0.7.30.34.1 php5-sysvsem-5.2.14-0.7.30.34.1 php5-sysvshm-5.2.14-0.7.30.34.1 php5-tokenizer-5.2.14-0.7.30.34.1 php5-wddx-5.2.14-0.7.30.34.1 php5-xmlreader-5.2.14-0.7.30.34.1 php5-xmlrpc-5.2.14-0.7.30.34.1 php5-xmlwriter-5.2.14-0.7.30.34.1 php5-xsl-5.2.14-0.7.30.34.1 php5-zip-5.2.14-0.7.30.34.1 php5-zlib-5.2.14-0.7.30.34.1 References: http://support.novell.com/security/cve/CVE-2011-1072.html http://support.novell.com/security/cve/CVE-2011-1466.html http://support.novell.com/security/cve/CVE-2011-2202.html http://support.novell.com/security/cve/CVE-2011-3182.html http://support.novell.com/security/cve/CVE-2011-4153.html http://support.novell.com/security/cve/CVE-2011-4566.html http://support.novell.com/security/cve/CVE-2011-4885.html http://support.novell.com/security/cve/CVE-2012-0057.html http://support.novell.com/security/cve/CVE-2012-0781.html http://support.novell.com/security/cve/CVE-2012-0788.html http://support.novell.com/security/cve/CVE-2012-0789.html http://support.novell.com/security/cve/CVE-2012-0807.html http://support.novell.com/security/cve/CVE-2012-0830.html http://support.novell.com/security/cve/CVE-2012-0831.html https://bugzilla.novell.com/699711 https://bugzilla.novell.com/709549 https://bugzilla.novell.com/713652 https://bugzilla.novell.com/728671 https://bugzilla.novell.com/733590 https://bugzilla.novell.com/735613 https://bugzilla.novell.com/736169 https://bugzilla.novell.com/738221 https://bugzilla.novell.com/741520 https://bugzilla.novell.com/741859 https://bugzilla.novell.com/742273 https://bugzilla.novell.com/742806 https://bugzilla.novell.com/743308 https://bugzilla.novell.com/744966 https://bugzilla.novell.com/746661 https://bugzilla.novell.com/749111 http://download.novell.com/patch/finder/?keywords=778ae960c062031cb692b8c0c… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0