February 2012 - openSUSE Security Announce

[security-announce] openSUSE-SU-2012:0236-1: important: kernel: security and bugfix update.
by opensuse-security＠opensuse.org 09 Feb '12

09 Feb '12

openSUSE Security Update: kernel: security and bugfix update. ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0236-1 Rating: important References: #676602 #679059 #681180 #681181 #681184 #681185 #691052 #692498 #699709 #700879 #702037 #707288 #709561 #709764 #710235 #713933 #723999 #726788 #736149 Cross-References: CVE-2011-1080 CVE-2011-1170 CVE-2011-1171 CVE-2011-1172 CVE-2011-1173 CVE-2011-1770 CVE-2011-2203 CVE-2011-2213 CVE-2011-2534 CVE-2011-2699 CVE-2011-2723 CVE-2011-2898 CVE-2011-4081 CVE-2011-4087 CVE-2011-4604 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that solves 15 vulnerabilities and has four fixes is now available. It includes one version update. Description: The openSUSE 11.4 kernel was updated to fix bugs and security issues. Following security issues have been fixed: CVE-2011-4604: If root does read() on a specific socket, it's possible to corrupt (kernel) memory over network, with an ICMP packet, if the B.A.T.M.A.N. mesh protocol is used. CVE-2011-2699: Fernando Gont discovered that the IPv6 stack used predictable fragment identification numbers. A remote attacker could exploit this to exhaust network resources, leading to a denial of service. CVE-2011-1173: A kernel information leak via ip6_tables was fixed. CVE-2011-1172: A kernel information leak via ip6_tables netfilter was fixed. CVE-2011-1171: A kernel information leak via ip_tables was fixed. CVE-2011-1170: A kernel information leak via arp_tables was fixed. CVE-2011-1080: A kernel information leak via netfilter was fixed. CVE-2011-2213: The inet_diag_bc_audit function in net/ipv4/inet_diag.c in the Linux kernel did not properly audit INET_DIAG bytecode, which allowed local users to cause a denial of service (kernel infinite loop) via crafted INET_DIAG_REQ_BYTECODE instructions in a netlink message, as demonstrated by an INET_DIAG_BC_JMP instruction with a zero yes value, a different vulnerability than CVE-2010-3880. CVE-2011-2534: Buffer overflow in the clusterip_proc_write function in net/ipv4/netfilter/ipt_CLUSTERIP.c in the Linux kernel might have allowed local users to cause a denial of service or have unspecified other impact via a crafted write operation, related to string data that lacks a terminating '\0' character. CVE-2011-1770: Integer underflow in the dccp_parse_options function (net/dccp/options.c) in the Linux kernel allowed remote attackers to cause a denial of service via a Datagram Congestion Control Protocol (DCCP) packet with an invalid feature options length, which triggered a buffer over-read. CVE-2011-2723: The skb_gro_header_slow function in include/linux/netdevice.h in the Linux kernel, when Generic Receive Offload (GRO) is enabled, reset certain fields in incorrect situations, which allowed remote attackers to cause a denial of service (system crash) via crafted network traffic. CVE-2011-2898: A kernel information leak in the AF_PACKET protocol was fixed which might have allowed local attackers to read kernel memory. CVE-2011-4087: A local denial of service when using bridged networking via a flood ping was fixed. CVE-2011-2203: A NULL ptr dereference on mounting corrupt hfs filesystems was fixed which could be used by local attackers to crash the kernel. CVE-2011-4081: Using the crypto interface a local user could Oops the kernel by writing to a AF_ALG socket. Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch kernel-5606 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 2.6.37.6]: kernel-debug-2.6.37.6-0.11.1 kernel-debug-base-2.6.37.6-0.11.1 kernel-debug-devel-2.6.37.6-0.11.1 kernel-default-2.6.37.6-0.11.1 kernel-default-base-2.6.37.6-0.11.1 kernel-default-devel-2.6.37.6-0.11.1 kernel-desktop-2.6.37.6-0.11.1 kernel-desktop-base-2.6.37.6-0.11.1 kernel-desktop-devel-2.6.37.6-0.11.1 kernel-ec2-2.6.37.6-0.11.1 kernel-ec2-base-2.6.37.6-0.11.1 kernel-ec2-devel-2.6.37.6-0.11.1 kernel-ec2-extra-2.6.37.6-0.11.1 kernel-syms-2.6.37.6-0.11.1 kernel-trace-2.6.37.6-0.11.1 kernel-trace-base-2.6.37.6-0.11.1 kernel-trace-devel-2.6.37.6-0.11.1 kernel-vanilla-2.6.37.6-0.11.1 kernel-vanilla-base-2.6.37.6-0.11.1 kernel-vanilla-devel-2.6.37.6-0.11.1 kernel-xen-2.6.37.6-0.11.1 kernel-xen-base-2.6.37.6-0.11.1 kernel-xen-devel-2.6.37.6-0.11.1 preload-kmp-default-1.2_k2.6.37.6_0.11-6.7.28 preload-kmp-desktop-1.2_k2.6.37.6_0.11-6.7.28 - openSUSE 11.4 (noarch) [New Version: 2.6.37.6]: kernel-devel-2.6.37.6-0.11.1 kernel-docs-2.6.37.6-0.11.1 kernel-source-2.6.37.6-0.11.1 kernel-source-vanilla-2.6.37.6-0.11.1 - openSUSE 11.4 (i586) [New Version: 2.6.37.6]: kernel-pae-2.6.37.6-0.11.1 kernel-pae-base-2.6.37.6-0.11.1 kernel-pae-devel-2.6.37.6-0.11.1 kernel-vmi-2.6.37.6-0.11.1 kernel-vmi-base-2.6.37.6-0.11.1 kernel-vmi-devel-2.6.37.6-0.11.1 References: http://support.novell.com/security/cve/CVE-2011-1080.html http://support.novell.com/security/cve/CVE-2011-1170.html http://support.novell.com/security/cve/CVE-2011-1171.html http://support.novell.com/security/cve/CVE-2011-1172.html http://support.novell.com/security/cve/CVE-2011-1173.html http://support.novell.com/security/cve/CVE-2011-1770.html http://support.novell.com/security/cve/CVE-2011-2203.html http://support.novell.com/security/cve/CVE-2011-2213.html http://support.novell.com/security/cve/CVE-2011-2534.html http://support.novell.com/security/cve/CVE-2011-2699.html http://support.novell.com/security/cve/CVE-2011-2723.html http://support.novell.com/security/cve/CVE-2011-2898.html http://support.novell.com/security/cve/CVE-2011-4081.html http://support.novell.com/security/cve/CVE-2011-4087.html http://support.novell.com/security/cve/CVE-2011-4604.html https://bugzilla.novell.com/676602 https://bugzilla.novell.com/679059 https://bugzilla.novell.com/681180 https://bugzilla.novell.com/681181 https://bugzilla.novell.com/681184 https://bugzilla.novell.com/681185 https://bugzilla.novell.com/691052 https://bugzilla.novell.com/692498 https://bugzilla.novell.com/699709 https://bugzilla.novell.com/700879 https://bugzilla.novell.com/702037 https://bugzilla.novell.com/707288 https://bugzilla.novell.com/709561 https://bugzilla.novell.com/709764 https://bugzilla.novell.com/710235 https://bugzilla.novell.com/713933 https://bugzilla.novell.com/723999 https://bugzilla.novell.com/726788 https://bugzilla.novell.com/736149 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2012:0234-1: important: MozillaFirefox: Version 10
by opensuse-security＠opensuse.org 09 Feb '12

09 Feb '12

openSUSE Security Update: MozillaFirefox: Version 10 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0234-1 Rating: important References: #744275 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that contains security fixes can now be installed. It includes 5 new package versions. Description: Mozilla Firefox was updated to version 10 to fix bugs and security issues. MFSA 2012-01: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code. In general these flaws cannot be exploited through email in the Thunderbird and SeaMonkey products because scripting is disabled, but are potentially a risk in browser or browser-like contexts in those products. References CVE-2012-0443: Ben Hawkes, Christian Holler, Honza Bombas, Jason Orendorff, Jesse Ruderman, Jan Odvarko, Peter Van Der Beken, and Bill McCloskey reported memory safety problems that were fixed in Firefox 10. CVE-2012-0442: Jesse Ruderman and Bob Clary reported memory safety problems that were fixed in both Firefox 10 and Firefox 3.6.26. MFSA 2012-02/CVE-2011-3670: For historical reasons Firefox has been generous in its interpretation of web addresses containing square brackets around the host. If this host was not a valid IPv6 literal address, Firefox attempted to interpret the host as a regular domain name. Gregory Fleischer reported that requests made using IPv6 syntax using XMLHttpRequest objects through a proxy may generate errors depending on proxy configuration for IPv6. The resulting error messages from the proxy may disclose sensitive data because Same-Origin Policy (SOP) will allow the XMLHttpRequest object to read these error messages, allowing user privacy to be eroded. Firefox now enforces RFC 3986 IPv6 literal syntax and that may break links written using the non-standard Firefox-only forms that were previously accepted. This was fixed previously for Firefox 7.0, Thunderbird 7.0, and SeaMonkey 2.4 but only fixed in Firefox 3.6.26 and Thunderbird 3.1.18 during 2012. MFSA 2012-03/CVE-2012-0445: Alex Dvorov reported that an attacker could replace a sub-frame in another domain's document by using the name attribute of the sub-frame as a form submission target. This can potentially allow for phishing attacks against users and violates the HTML5 frame navigation policy. Firefox 3.6 and Thunderbird 3.1 are not affected by this vulnerability MFSA 2012-04/CVE-2011-3659: Security researcher regenrecht reported via TippingPoint's Zero Day Initiative that removed child nodes of nsDOMAttribute can be accessed under certain circumstances because of a premature notification of AttributeChildRemoved. This use-after-free of the child nodes could possibly allow for for remote code execution. MFSA 2012-05/CVE-2012-0446: Mozilla security researcher moz_bug_r_a4 reported that frame scripts bypass XPConnect security checks when calling untrusted objects. This allows for cross-site scripting (XSS) attacks through web pages and Firefox extensions. The fix enables the Script Security Manager (SSM) to force security checks on all frame scripts. Firefox 3.6 and Thunderbird 3.1 are not affected by this vulnerability MFSA 2012-06/CVE-2012-0447: Mozilla developer Tim Abraldes reported that when encoding images as image/vnd.microsoft.icon the resulting data was always a fixed size, with uninitialized memory appended as padding beyond the size of the actual image. This is the result of mImageBufferSize in the encoder being initialized with a value different than the size of the source image. There is the possibility of sensitive data from uninitialized memory being appended to a PNG image when converted fron an ICO format image. This sensitive data may then be disclosed in the resulting image. Firefox 3.6 and Thunderbird 3.1 are not affected by this vulnerability MFSA 2012-07/CVE-2012-0444: Security researcher regenrecht reported via TippingPoint's Zero Day Initiative the possibility of memory corruption during the decoding of Ogg Vorbis files. This can cause a crash during decoding and has the potential for remote code execution. MFSA 2012-08/CVE-2012-0449: Security researchers Nicolas Gregoire and Aki Helin independently reported that when processing a malformed embedded XSLT stylesheet, Firefox can crash due to a memory corruption. While there is no evidence that this is directly exploitable, there is a possibility of remote code execution. MFSA 2012-09/CVE-2012-0450: magicant starmen reported that if a user chooses to export their Firefox Sync key the "Firefox Recovery Key.html" file is saved with incorrect permissions, making the file contents potentially readable by other users on Linux and OS X systems. Firefox 3.6 is not affected by this vulnerability. Special Instructions and Notes: Please reboot the system after installing this update.This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch MozillaFirefox-5750 MozillaThunderbird-5751 mozilla-js192-5749 seamonkey-5768 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 1.9.2.26,10.0,2.7 and 3.1.18]: MozillaFirefox-10.0-0.2.1 MozillaFirefox-branding-upstream-10.0-0.2.1 MozillaFirefox-buildsymbols-10.0-0.2.1 MozillaFirefox-devel-10.0-0.2.1 MozillaFirefox-translations-common-10.0-0.2.1 MozillaFirefox-translations-other-10.0-0.2.1 MozillaThunderbird-3.1.18-0.23.1 MozillaThunderbird-buildsymbols-3.1.18-0.23.1 MozillaThunderbird-devel-3.1.18-0.23.1 MozillaThunderbird-translations-common-3.1.18-0.23.1 MozillaThunderbird-translations-other-3.1.18-0.23.1 enigmail-1.1.2+3.1.18-0.23.1 mozilla-js192-1.9.2.26-0.2.1 mozilla-xulrunner192-1.9.2.26-0.2.1 mozilla-xulrunner192-buildsymbols-1.9.2.26-0.2.1 mozilla-xulrunner192-devel-1.9.2.26-0.2.1 mozilla-xulrunner192-gnome-1.9.2.26-0.2.1 mozilla-xulrunner192-translations-common-1.9.2.26-0.2.1 mozilla-xulrunner192-translations-other-1.9.2.26-0.2.1 seamonkey-2.7-0.2.1 seamonkey-dom-inspector-2.7-0.2.1 seamonkey-irc-2.7-0.2.1 seamonkey-translations-common-2.7-0.2.1 seamonkey-translations-other-2.7-0.2.1 seamonkey-venkman-2.7-0.2.1 - openSUSE 11.4 (x86_64) [New Version: 1.9.2.26]: mozilla-js192-32bit-1.9.2.26-0.2.1 mozilla-xulrunner192-32bit-1.9.2.26-0.2.1 mozilla-xulrunner192-gnome-32bit-1.9.2.26-0.2.1 mozilla-xulrunner192-translations-common-32bit-1.9.2.26-0.2.1 mozilla-xulrunner192-translations-other-32bit-1.9.2.26-0.2.1 References: https://bugzilla.novell.com/744275 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2012:0227-1: important: xorg-x11-server
by opensuse-security＠opensuse.org 09 Feb '12

09 Feb '12

openSUSE Security Update: xorg-x11-server ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0227-1 Rating: important References: #722944 Cross-References: CVE-2011-4028 CVE-2011-4029 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: The X server had two security issues and one bug that is fixed by this update. CVE-2011-4028: It is possible for a local attacker to deduce if a file exists or not by exploiting the way that Xorg creates its lock files. CVE-2011-4029: It is possible for a non-root local user to set the read permission for all users on any file or directory. Special Instructions and Notes: Please reboot the system after installing this update.This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. This update triggers a restart of the software management stack. More updates will be available for installation after applying this update and restarting the application. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch xorg-x11-Xvnc-5490 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): xorg-x11-Xvnc-7.5_1.8.0-10.15.2 xorg-x11-server-7.5_1.8.0-10.15.2 xorg-x11-server-extra-7.5_1.8.0-10.15.2 xorg-x11-server-sdk-7.5_1.8.0-10.15.2 References: http://support.novell.com/security/cve/CVE-2011-4028.html http://support.novell.com/security/cve/CVE-2011-4029.html https://bugzilla.novell.com/722944 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:0221-1: important: Security update for Mozilla Firefox
by opensuse-security＠opensuse.org 09 Feb '12

09 Feb '12

SUSE Security Update: Security update for Mozilla Firefox ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0221-1 Rating: important References: #744275 Affected Products: SUSE Linux Enterprise Server 10 SP4 SUSE Linux Enterprise Desktop 10 SP4 SLE SDK 10 SP4 ______________________________________________________________________________ An update that contains security fixes can now be installed. It includes two new package versions. Description: Mozilla Firefox was updated to 3.6.26 fixing bugs and security issues. The following security issues have been fixed by this update: * MFSA 2012-01: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code. In general these flaws cannot be exploited through email in the Thunderbird and SeaMonkey products because scripting is disabled, but are potentially a risk in browser or browser-like contexts in those products. References * CVE-2012-0442: Jesse Ruderman and Bob Clary reported memory safety problems that were fixed in both Firefox 10 and Firefox 3.6.26. * MFSA 2012-02/CVE-2011-3670: For historical reasons Firefox has been generous in its interpretation of web addresses containing square brackets around the host. If this host was not a valid IPv6 literal address, Firefox attempted to interpret the host as a regular domain name. Gregory Fleischer reported that requests made using IPv6 syntax using XMLHttpRequest objects through a proxy may generate errors depending on proxy configuration for IPv6. The resulting error messages from the proxy may disclose sensitive data because Same-Origin Policy (SOP) will allow the XMLHttpRequest object to read these error messages, allowing user privacy to be eroded. Firefox now enforces RFC 3986 IPv6 literal syntax and that may break links written using the non-standard Firefox-only forms that were previously accepted. This was fixed previously for Firefox 7.0, Thunderbird 7.0, and SeaMonkey 2.4 but only fixed in Firefox 3.6.26 and Thunderbird 3.1.18 during 2012. * MFSA 2012-04/CVE-2011-3659: Security researcher regenrecht reported via TippingPoint's Zero Day Initiative that removed child nodes of nsDOMAttribute can be accessed under certain circumstances because of a premature notification of AttributeChildRemoved. This use-after-free of the child nodes could possibly allow for for remote code execution. * MFSA 2012-07/CVE-2012-0444: Security researcher regenrecht reported via TippingPoint's Zero Day Initiative the possibility of memory corruption during the decoding of Ogg Vorbis files. This can cause a crash during decoding and has the potential for remote code execution. * MFSA 2012-08/CVE-2012-0449: Security researchers Nicolas Gregoire and Aki Helin independently reported that when processing a malformed embedded XSLT stylesheet, Firefox can crash due to a memory corruption. While there is no evidence that this is directly exploitable, there is a possibility of remote code execution. Indications: Please install this update. Special Instructions and Notes: Please reboot the system after installing this update. Package List: - SUSE Linux Enterprise Server 10 SP4 (i586 ia64 ppc s390x x86_64) [New Version: 1.9.2.26]: mozilla-xulrunner192-1.9.2.26-0.5.1 mozilla-xulrunner192-gnome-1.9.2.26-0.5.1 mozilla-xulrunner192-translations-1.9.2.26-0.5.1 - SUSE Linux Enterprise Server 10 SP4 (i586 ia64 ppc s390x) [New Version: 3.6.26]: MozillaFirefox-3.6.26-0.6.1 MozillaFirefox-translations-3.6.26-0.6.1 - SUSE Linux Enterprise Server 10 SP4 (s390x x86_64) [New Version: 1.9.2.26]: mozilla-xulrunner192-32bit-1.9.2.26-0.5.1 mozilla-xulrunner192-gnome-32bit-1.9.2.26-0.5.1 mozilla-xulrunner192-translations-32bit-1.9.2.26-0.5.1 - SUSE Linux Enterprise Desktop 10 SP4 (i586 x86_64) [New Version: 1.9.2.26]: mozilla-xulrunner192-1.9.2.26-0.5.1 mozilla-xulrunner192-gnome-1.9.2.26-0.5.1 mozilla-xulrunner192-translations-1.9.2.26-0.5.1 - SUSE Linux Enterprise Desktop 10 SP4 (x86_64) [New Version: 1.9.2.26]: mozilla-xulrunner192-32bit-1.9.2.26-0.5.1 mozilla-xulrunner192-gnome-32bit-1.9.2.26-0.5.1 mozilla-xulrunner192-translations-32bit-1.9.2.26-0.5.1 - SUSE Linux Enterprise Desktop 10 SP4 (i586) [New Version: 3.6.26]: MozillaFirefox-3.6.26-0.6.1 MozillaFirefox-translations-3.6.26-0.6.1 - SLE SDK 10 SP4 (i586 ia64 ppc s390x): MozillaFirefox-branding-upstream-3.6.26-0.6.1 References: https://bugzilla.novell.com/744275 http://download.novell.com/patch/finder/?keywords=d1ff5a0e9707cb73c751a65b6… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2012:0208-1: important: tomcat6: Fix multiple weaknesses in HTTP DIGESTS
by opensuse-security＠opensuse.org 09 Feb '12

09 Feb '12

openSUSE Security Update: tomcat6: Fix multiple weaknesses in HTTP DIGESTS ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0208-1 Rating: important References: #742477 Cross-References: CVE-2011-1184 CVE-2011-5062 CVE-2011-5063 CVE-2011-5064 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update fixes a regression in parameter passing (in urldecoding of parameters that contain spaces). In addition, multiple weaknesses in HTTP DIGESTS are fixed (CVE-2011-1184). CVE-2011-5062: The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33 and 7.x before 7.0.12 does not check qop values, which might allow remote attackers to bypass intended integrity-protection requirements via a qop=auth value, a different vulnerability than CVE-2011-1184. CVE-2011-5063: The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not check realm values, which might allow remote attackers to bypass intended access restrictions by leveraging the availability of a protection space with weaker authentication or authorization requirements, a different vulnerability than CVE-2011-1184. CVE-2011-5064: DigestAuthenticator.java in the HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 uses Catalina as the hard-coded server secret (aka private key), which makes it easier for remote attackers to bypass cryptographic protection mechanisms by leveraging knowledge of this string, a different vulnerability than CVE-2011-1184. Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch tomcat6-5765 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (noarch): tomcat6-6.0.32-7.14.1 tomcat6-admin-webapps-6.0.32-7.14.1 tomcat6-docs-webapp-6.0.32-7.14.1 tomcat6-el-1_0-api-6.0.32-7.14.1 tomcat6-javadoc-6.0.32-7.14.1 tomcat6-jsp-2_1-api-6.0.32-7.14.1 tomcat6-lib-6.0.32-7.14.1 tomcat6-servlet-2_5-api-6.0.32-7.14.1 tomcat6-webapps-6.0.32-7.14.1 References: http://support.novell.com/security/cve/CVE-2011-1184.html http://support.novell.com/security/cve/CVE-2011-5062.html http://support.novell.com/security/cve/CVE-2011-5063.html http://support.novell.com/security/cve/CVE-2011-5064.html https://bugzilla.novell.com/742477 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2012:0039-2: important: MozillaFirefox
by opensuse-security＠opensuse.org 09 Feb '12

09 Feb '12

openSUSE Security Update: MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0039-2 Rating: important References: #737533 Cross-References: CVE-2011-3658 CVE-2011-3660 CVE-2011-3661 CVE-2011-3663 CVE-2011-3665 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. It includes two new package versions. Description: Mozilla Firefox Version 9 fixes several security issues: * MFSA 2011-53/CVE-2011-3660: Miscellaneous memory safety hazards * MFSA 2011-54/CVE-2011-3661: Potentially exploitable crash in the YARR regular expression library * MFSA 2011-55/CVE-2011-3658: nsSVGValue out-of-bounds access * MFSA 2011-56/CVE-2011-3663: Key detection without JavaScript via SVG animation * MFSA 2011-58/CVE-2011-3665: Crash scaling <video> to extreme sizes Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch MozillaFirefox-5577 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 1.9.2.25 and 9.0]: MozillaFirefox-9.0-0.2.1 MozillaFirefox-branding-upstream-9.0-0.2.1 MozillaFirefox-buildsymbols-9.0-0.2.1 MozillaFirefox-devel-9.0-0.2.1 MozillaFirefox-translations-common-9.0-0.2.1 MozillaFirefox-translations-other-9.0-0.2.1 mozilla-js192-1.9.2.25-0.2.1 mozilla-xulrunner192-1.9.2.25-0.2.1 mozilla-xulrunner192-buildsymbols-1.9.2.25-0.2.1 mozilla-xulrunner192-devel-1.9.2.25-0.2.1 mozilla-xulrunner192-gnome-1.9.2.25-0.2.1 mozilla-xulrunner192-translations-common-1.9.2.25-0.2.1 mozilla-xulrunner192-translations-other-1.9.2.25-0.2.1 - openSUSE 11.4 (x86_64) [New Version: 1.9.2.25]: mozilla-js192-32bit-1.9.2.25-0.2.1 mozilla-xulrunner192-32bit-1.9.2.25-0.2.1 mozilla-xulrunner192-gnome-32bit-1.9.2.25-0.2.1 mozilla-xulrunner192-translations-common-32bit-1.9.2.25-0.2.1 mozilla-xulrunner192-translations-other-32bit-1.9.2.25-0.2.1 References: http://support.novell.com/security/cve/CVE-2011-3658.html http://support.novell.com/security/cve/CVE-2011-3660.html http://support.novell.com/security/cve/CVE-2011-3661.html http://support.novell.com/security/cve/CVE-2011-3663.html http://support.novell.com/security/cve/CVE-2011-3665.html https://bugzilla.novell.com/737533 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2012:0206-1: important: kernel: security and bugfix update.
by opensuse-security＠opensuse.org 09 Feb '12

09 Feb '12

openSUSE Security Update: kernel: security and bugfix update. ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0206-1 Rating: important References: #691052 #692498 #698450 #699709 #700879 #702037 #707288 #709764 #710235 #726788 #728661 #735612 #736149 Cross-References: CVE-2011-1576 CVE-2011-1770 CVE-2011-2203 CVE-2011-2213 CVE-2011-2525 CVE-2011-2534 CVE-2011-2699 CVE-2011-2723 CVE-2011-2898 CVE-2011-4081 CVE-2011-4604 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that solves 11 vulnerabilities and has two fixes is now available. It includes one version update. Description: The openSUSE 11.3 kernel was updated to fix various bugs and security issues. Following security issues have been fixed: CVE-2011-4604: If root does read() on a specific socket, it's possible to corrupt (kernel) memory over network, with an ICMP packet, if the B.A.T.M.A.N. mesh protocol is used. CVE-2011-2525: A flaw allowed the tc_fill_qdisc() function in the Linux kernels packet scheduler API implementation to be called on built-in qdisc structures. A local, unprivileged user could have used this flaw to trigger a NULL pointer dereference, resulting in a denial of service. CVE-2011-2699: Fernando Gont discovered that the IPv6 stack used predictable fragment identification numbers. A remote attacker could exploit this to exhaust network resources, leading to a denial of service. CVE-2011-2213: The inet_diag_bc_audit function in net/ipv4/inet_diag.c in the Linux kernel did not properly audit INET_DIAG bytecode, which allowed local users to cause a denial of service (kernel infinite loop) via crafted INET_DIAG_REQ_BYTECODE instructions in a netlink message, as demonstrated by an INET_DIAG_BC_JMP instruction with a zero yes value, a different vulnerability than CVE-2010-3880. CVE-2011-1576: The Generic Receive Offload (GRO) implementation in the Linux kernel allowed remote attackers to cause a denial of service via crafted VLAN packets that are processed by the napi_reuse_skb function, leading to (1) a memory leak or (2) memory corruption, a different vulnerability than CVE-2011-1478. CVE-2011-2534: Buffer overflow in the clusterip_proc_write function in net/ipv4/netfilter/ipt_CLUSTERIP.c in the Linux kernel might have allowed local users to cause a denial of service or have unspecified other impact via a crafted write operation, related to string data that lacks a terminating '\0' character. CVE-2011-1770: Integer underflow in the dccp_parse_options function (net/dccp/options.c) in the Linux kernel allowed remote attackers to cause a denial of service via a Datagram Congestion Control Protocol (DCCP) packet with an invalid feature options length, which triggered a buffer over-read. CVE-2011-2723: The skb_gro_header_slow function in include/linux/netdevice.h in the Linux kernel, when Generic Receive Offload (GRO) is enabled, reset certain fields in incorrect situations, which allowed remote attackers to cause a denial of service (system crash) via crafted network traffic. CVE-2011-2898: A kernel information leak in the AF_PACKET protocol was fixed which might have allowed local attackers to read kernel memory. CVE-2011-2203: A NULL ptr dereference on mounting corrupt hfs filesystems was fixed which could be used by local attackers to crash the kernel. CVE-2011-4081: Using the crypto interface a local user could Oops the kernel by writing to a AF_ALG socket. Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch kernel-5605 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 2.6.34.10]: kernel-debug-2.6.34.10-0.6.1 kernel-debug-base-2.6.34.10-0.6.1 kernel-debug-devel-2.6.34.10-0.6.1 kernel-default-2.6.34.10-0.6.1 kernel-default-base-2.6.34.10-0.6.1 kernel-default-devel-2.6.34.10-0.6.1 kernel-desktop-2.6.34.10-0.6.1 kernel-desktop-base-2.6.34.10-0.6.1 kernel-desktop-devel-2.6.34.10-0.6.1 kernel-ec2-2.6.34.10-0.6.1 kernel-ec2-base-2.6.34.10-0.6.1 kernel-ec2-devel-2.6.34.10-0.6.1 kernel-ec2-extra-2.6.34.10-0.6.1 kernel-syms-2.6.34.10-0.6.1 kernel-trace-2.6.34.10-0.6.1 kernel-trace-base-2.6.34.10-0.6.1 kernel-trace-devel-2.6.34.10-0.6.1 kernel-vanilla-2.6.34.10-0.6.1 kernel-vanilla-base-2.6.34.10-0.6.1 kernel-vanilla-devel-2.6.34.10-0.6.1 kernel-xen-2.6.34.10-0.6.1 kernel-xen-base-2.6.34.10-0.6.1 kernel-xen-devel-2.6.34.10-0.6.1 preload-kmp-default-1.1_k2.6.34.10_0.6-19.1.37 preload-kmp-desktop-1.1_k2.6.34.10_0.6-19.1.37 - openSUSE 11.3 (noarch) [New Version: 2.6.34.10]: kernel-devel-2.6.34.10-0.6.1 kernel-source-2.6.34.10-0.6.1 kernel-source-vanilla-2.6.34.10-0.6.1 - openSUSE 11.3 (i586) [New Version: 2.6.34.10]: kernel-pae-2.6.34.10-0.6.1 kernel-pae-base-2.6.34.10-0.6.1 kernel-pae-devel-2.6.34.10-0.6.1 kernel-vmi-2.6.34.10-0.6.1 kernel-vmi-base-2.6.34.10-0.6.1 kernel-vmi-devel-2.6.34.10-0.6.1 References: http://support.novell.com/security/cve/CVE-2011-1576.html http://support.novell.com/security/cve/CVE-2011-1770.html http://support.novell.com/security/cve/CVE-2011-2203.html http://support.novell.com/security/cve/CVE-2011-2213.html http://support.novell.com/security/cve/CVE-2011-2525.html http://support.novell.com/security/cve/CVE-2011-2534.html http://support.novell.com/security/cve/CVE-2011-2699.html http://support.novell.com/security/cve/CVE-2011-2723.html http://support.novell.com/security/cve/CVE-2011-2898.html http://support.novell.com/security/cve/CVE-2011-4081.html http://support.novell.com/security/cve/CVE-2011-4604.html https://bugzilla.novell.com/691052 https://bugzilla.novell.com/692498 https://bugzilla.novell.com/698450 https://bugzilla.novell.com/699709 https://bugzilla.novell.com/700879 https://bugzilla.novell.com/702037 https://bugzilla.novell.com/707288 https://bugzilla.novell.com/709764 https://bugzilla.novell.com/710235 https://bugzilla.novell.com/726788 https://bugzilla.novell.com/728661 https://bugzilla.novell.com/735612 https://bugzilla.novell.com/736149 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:0198-1: important: Security update for Mozilla XULrunner
by opensuse-security＠opensuse.org 09 Feb '12

09 Feb '12

SUSE Security Update: Security update for Mozilla XULrunner ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0198-1 Rating: important References: #737533 #744275 Affected Products: SUSE Linux Enterprise Software Development Kit 11 SP1 SUSE Linux Enterprise Server 11 SP1 for VMware SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Desktop 11 SP1 ______________________________________________________________________________ An update that contains security fixes can now be installed. It includes one version update. Description: Mozilla XULrunner was updated to 1.9.2.26 security update, fixing security issues and bugs. The following security bugs have been fixed: * MFSA 2012-01: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code. In general these flaws cannot be exploited through email in the Thunderbird and SeaMonkey products because scripting is disabled, but are potentially a risk in browser or browser-like contexts in those products. References * CVE-2012-0442: Jesse Ruderman and Bob Clary reported memory safety problems that were fixed in both Firefox 10 and Firefox 3.6.26. * MFSA 2012-02/CVE-2011-3670: For historical reasons Firefox has been generous in its interpretation of web addresses containing square brackets around the host. If this host was not a valid IPv6 literal address, Firefox attempted to interpret the host as a regular domain name. Gregory Fleischer reported that requests made using IPv6 syntax using XMLHttpRequest objects through a proxy may generate errors depending on proxy configuration for IPv6. The resulting error messages from the proxy may disclose sensitive data because Same-Origin Policy (SOP) will allow the XMLHttpRequest object to read these error messages, allowing user privacy to be eroded. Firefox now enforces RFC 3986 IPv6 literal syntax and that may break links written using the non-standard Firefox-only forms that were previously accepted. This was fixed previously for Firefox 7.0, Thunderbird 7.0, and SeaMonkey 2.4 but only fixed in Firefox 3.6.26 and Thunderbird 3.1.18 during 2012. * MFSA 2012-04/CVE-2011-3659: Security researcher regenrecht reported via TippingPoint's Zero Day Initiative that removed child nodes of nsDOMAttribute can be accessed under certain circumstances because of a premature notification of AttributeChildRemoved. This use-after-free of the child nodes could possibly allow for for remote code execution. * MFSA 2012-07/CVE-2012-0444: Security researcher regenrecht reported via TippingPoint's Zero Day Initiative the possibility of memory corruption during the decoding of Ogg Vorbis files. This can cause a crash during decoding and has the potential for remote code execution. * MFSA 2012-08/CVE-2012-0449: Security researchers Nicolas Gregoire and Aki Helin independently reported that when processing a malformed embedded XSLT stylesheet, Firefox can crash due to a memory corruption. While there is no evidence that this is directly exploitable, there is a possibility of remote code execution. Indications: Please install this update. Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11 SP1: zypper in -t patch sdksp1-mozilla-xulrunner192-5764 - SUSE Linux Enterprise Server 11 SP1 for VMware: zypper in -t patch slessp1-mozilla-xulrunner192-5764 - SUSE Linux Enterprise Server 11 SP1: zypper in -t patch slessp1-mozilla-xulrunner192-5764 - SUSE Linux Enterprise Desktop 11 SP1: zypper in -t patch sledsp1-mozilla-xulrunner192-5764 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11 SP1 (i586 ia64 ppc64 s390x x86_64) [New Version: 1.9.2.26]: mozilla-xulrunner192-devel-1.9.2.26-0.3.1 - SUSE Linux Enterprise Software Development Kit 11 SP1 (ppc64 s390x x86_64) [New Version: 1.9.2.26]: mozilla-xulrunner192-gnome-32bit-1.9.2.26-0.3.1 mozilla-xulrunner192-translations-32bit-1.9.2.26-0.3.1 - SUSE Linux Enterprise Software Development Kit 11 SP1 (ia64) [New Version: 1.9.2.26]: mozilla-xulrunner192-gnome-x86-1.9.2.26-0.3.1 mozilla-xulrunner192-translations-x86-1.9.2.26-0.3.1 - SUSE Linux Enterprise Server 11 SP1 for VMware (i586 x86_64): mozilla-xulrunner192-1.9.2.26-0.3.1 mozilla-xulrunner192-gnome-1.9.2.26-0.3.1 mozilla-xulrunner192-translations-1.9.2.26-0.3.1 - SUSE Linux Enterprise Server 11 SP1 for VMware (x86_64): mozilla-xulrunner192-32bit-1.9.2.26-0.3.1 - SUSE Linux Enterprise Server 11 SP1 (i586 ia64 ppc64 s390x x86_64) [New Version: 1.9.2.26]: mozilla-xulrunner192-1.9.2.26-0.3.1 mozilla-xulrunner192-gnome-1.9.2.26-0.3.1 mozilla-xulrunner192-translations-1.9.2.26-0.3.1 - SUSE Linux Enterprise Server 11 SP1 (ppc64 s390x x86_64) [New Version: 1.9.2.26]: mozilla-xulrunner192-32bit-1.9.2.26-0.3.1 - SUSE Linux Enterprise Server 11 SP1 (ia64) [New Version: 1.9.2.26]: mozilla-xulrunner192-x86-1.9.2.26-0.3.1 - SUSE Linux Enterprise Desktop 11 SP1 (i586 x86_64) [New Version: 1.9.2.26]: mozilla-xulrunner192-1.9.2.26-0.3.1 mozilla-xulrunner192-gnome-1.9.2.26-0.3.1 mozilla-xulrunner192-translations-1.9.2.26-0.3.1 - SUSE Linux Enterprise Desktop 11 SP1 (x86_64) [New Version: 1.9.2.26]: mozilla-xulrunner192-32bit-1.9.2.26-0.3.1 mozilla-xulrunner192-gnome-32bit-1.9.2.26-0.3.1 mozilla-xulrunner192-translations-32bit-1.9.2.26-0.3.1 References: https://bugzilla.novell.com/737533 https://bugzilla.novell.com/744275 http://download.novell.com/patch/finder/?keywords=f3ea71cad4a071175c0025555… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:0155-1: important: Security update for tomcat6
by opensuse-security＠opensuse.org 07 Feb '12

07 Feb '12

SUSE Security Update: Security update for tomcat6 ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0155-1 Rating: important References: #735343 #742477 Cross-References: CVE-2011-1184 CVE-2011-5062 CVE-2011-5063 CVE-2011-5064 Affected Products: SUSE Manager 1.2 for SLE 11 SP1 SUSE Linux Enterprise Server 11 SP1 for VMware SUSE Linux Enterprise Server 11 SP1 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update fixes a regression in parameter passing (in urldecoding of parameters that contain spaces). In addition, multiple weaknesses in HTTP DIGESTS have been fixed (CVE-2011-1184): * CVE-2011-5062: The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33 and 7.x before 7.0.12 does not check qop values, which might allow remote attackers to bypass intended integrity-protection requirements via a qop=auth value, a different vulnerability than CVE-2011-1184. * CVE-2011-5063: The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not check realm values, which might allow remote attackers to bypass intended access restrictions by leveraging the availability of a protection space with weaker authentication or authorization requirements, a different vulnerability than CVE-2011-1184. * CVE-2011-5064: DigestAuthenticator.java in the HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 uses Catalina as the hard-coded server secret (aka private key), which makes it easier for remote attackers to bypass cryptographic protection mechanisms by leveraging knowledge of this string, a different vulnerability than CVE-2011-1184. Security Issue references: * CVE-2011-1184 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1184 > * CVE-2011-5062 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-5062 > * CVE-2011-5063 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-5063 > * CVE-2011-5064 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-5064 > Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Manager 1.2 for SLE 11 SP1: zypper in -t patch sleman12sp1-tomcat6-5759 - SUSE Linux Enterprise Server 11 SP1 for VMware: zypper in -t patch slessp1-tomcat6-5759 - SUSE Linux Enterprise Server 11 SP1: zypper in -t patch slessp1-tomcat6-5759 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Manager 1.2 for SLE 11 SP1 (noarch): tomcat6-6.0.18-20.35.36.1 tomcat6-jsp-2_1-api-6.0.18-20.35.36.1 tomcat6-lib-6.0.18-20.35.36.1 tomcat6-servlet-2_5-api-6.0.18-20.35.36.1 - SUSE Linux Enterprise Server 11 SP1 for VMware (noarch): tomcat6-6.0.18-20.35.36.1 tomcat6-admin-webapps-6.0.18-20.35.36.1 tomcat6-docs-webapp-6.0.18-20.35.36.1 tomcat6-javadoc-6.0.18-20.35.36.1 tomcat6-jsp-2_1-api-6.0.18-20.35.36.1 tomcat6-lib-6.0.18-20.35.36.1 tomcat6-servlet-2_5-api-6.0.18-20.35.36.1 tomcat6-webapps-6.0.18-20.35.36.1 - SUSE Linux Enterprise Server 11 SP1 (noarch): tomcat6-6.0.18-20.35.36.1 tomcat6-admin-webapps-6.0.18-20.35.36.1 tomcat6-docs-webapp-6.0.18-20.35.36.1 tomcat6-javadoc-6.0.18-20.35.36.1 tomcat6-jsp-2_1-api-6.0.18-20.35.36.1 tomcat6-lib-6.0.18-20.35.36.1 tomcat6-servlet-2_5-api-6.0.18-20.35.36.1 tomcat6-webapps-6.0.18-20.35.36.1 References: http://support.novell.com/security/cve/CVE-2011-1184.html http://support.novell.com/security/cve/CVE-2011-5062.html http://support.novell.com/security/cve/CVE-2011-5063.html http://support.novell.com/security/cve/CVE-2011-5064.html https://bugzilla.novell.com/735343 https://bugzilla.novell.com/742477 http://download.novell.com/patch/finder/?keywords=0caaafb09da77d4c28b53eeb1… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2012:0153-2: important: Security update for Linux kernel
by opensuse-security＠opensuse.org 06 Feb '12

06 Feb '12

SUSE Security Update: Security update for Linux kernel ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0153-2 Rating: important References: #651219 #653260 #668872 #671479 #688996 #694945 #697920 #703156 #706973 #707288 #708625 #711378 #716023 #722910 #724734 #725709 #726600 #726788 #728339 #728626 #729854 #730118 #731004 #731770 #732296 #732677 #733146 #733863 #734056 #735216 #735446 #735453 #735635 #736018 #738400 #740535 #740703 #740867 #742270 Cross-References: CVE-2010-3873 CVE-2010-4164 CVE-2011-2494 CVE-2011-2699 CVE-2011-4077 CVE-2011-4081 CVE-2011-4110 CVE-2011-4127 CVE-2011-4132 CVE-2012-0038 Affected Products: SUSE Linux Enterprise Server 11 SP1 for VMware SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise High Availability Extension 11 SP1 SUSE Linux Enterprise Desktop 11 SP1 ______________________________________________________________________________ An update that solves 10 vulnerabilities and has 29 fixes is now available. It includes one version update. Description: The SUSE Linux Enterprise 11 SP1 kernel was updated to 2.6.32.54, fixing lots of bugs and security issues. The following security issues have been fixed: * CVE-2011-4127: A potential hypervisor escape by issuing SG_IO commands to partitiondevices was fixed by restricting access to these commands. * CVE-2011-4110: KEYS: Fix a NULL pointer deref in the user-defined key type, which allowed local attackers to Oops the kernel. * CVE-2011-4081: Avoid potential NULL pointer deref in ghash, which allowed local attackers to Oops the kernel. * CVE-2011-4077: Fixed a memory corruption possibility in xfs readlink, which could be used by local attackers to crash the system or potentially execute code by mounting a prepared xfs filesystem image. * CVE-2012-0038: A overflow in the xfs acl handling was fixed that could be used by local attackers to crash the system or potentially execute code by mounting a prepared xfs filesystem image. * CVE-2011-4132: A flaw in the ext3/ext4 filesystem allowed a local attacker to crash the kernel by getting a prepared ext3/ext4 filesystem mounted. * CVE-2011-2494: Access to the taskstats /proc file was restricted to avoid local attackers gaining knowledge of IO of other users (and so effecting side-channel attacks for e.g. guessing passwords by typing speed). * CVE-2010-3873: When using X.25 communication a malicious sender could corrupt data structures, causing crashes or potential code execution. Please note that X.25 needs to be setup to make this effective, which these days is usually not the case. * CVE-2010-4164: When using X.25 communication a malicious sender could make the machine leak memory, causing crashes. Please note that X.25 needs to be setup to make this effective, which these days is usually not the case. * CVE-2011-2699: A remote denial of service due to a NULL pointer dereference by using IPv6 fragments was fixed. The following non-security issues have been fixed: * elousb: Fixed bug in USB core API usage, code cleanup (bnc#733863). * cifs: overhaul cifs_revalidate and rename to cifs_revalidate_dentry (bnc#735453). * cifs: set server_eof in cifs_fattr_to_inode (bnc#735453). * xfs: Fix missing xfs_iunlock() on error recovery path in xfs_readlink() (bnc#726600). * block: add and use scsi_blk_cmd_ioctl (bnc#738400 CVE-2011-4127). * block: fail SCSI passthrough ioctls on partition devices (bnc#738400 CVE-2011-4127). * dm: do not forward ioctls from logical volumes to the underlying device (bnc#738400 CVE-2011-4127). * Silence some warnings about ioctls on partitions. * netxen: Remove all references to unified firmware file (bnc#708625). * bonding: send out gratuitous arps even with no address configured (bnc#742270). * patches.fixes/ocfs2-serialize_unaligned_aio.patch: ocfs2: serialize unaligned aio (bnc#671479). * patches.fixes/bonding-check-if-clients-MAC-addr-has-changed. patch: Update references (bnc#729854, bnc#731004). * xfs: Fix wait calculations on lock acquisition and use milliseconds instead of jiffies to print the wait time. * ipmi: reduce polling when interrupts are available (bnc#740867). * ipmi: reduce polling (bnc#740867). * Linux 2.6.32.54. * export shrink_dcache_for_umount_subtree. * patches.suse/stack-unwind: Fix more 2.6.29 merge problems plus a glue code problem (bnc#736018). * PM / Sleep: Fix race between CPU hotplug and freezer (bnc#740535). * jbd: Issue cache flush after checkpointing (bnc#731770). * lpfc: make sure job exists when processing BSG (bnc#735635). * Linux 2.6.32.53. * blktap: fix locking (again) (bnc#724734). * xen: Update Xen patches to 2.6.32.52. * Linux 2.6.32.52. * Linux 2.6.32.51. * Linux 2.6.32.50. * reiserfs: Lock buffers unconditionally in reiserfs_write_full_page() (bnc#716023). * writeback: Include all dirty inodes in background writeback (bnc#716023). * reiserfs: Fix quota mount option parsing (bnc#728626). * bonding: check if clients MAC addr has changed (bnc#729854). * rpc client can not deal with ENOSOCK, so translate it into ENOCONN (bnc#733146). * st: modify tape driver to allow writing immediate filemarks (bnc#688996). * xfs: fix for xfssyncd failure to wake (bnc#722910). * ipmi: Fix deadlock in start_next_msg(). * net: bind() fix error return on wrong address family (bnc#735216). * net: ipv4: relax AF_INET check in bind() (bnc#735216). * net/ipv6: check for mistakenly passed in non-AF_INET6 sockaddrs (bnc#735216). * Bluetooth: Fixed Atheros AR3012 Maryann PID/VID supported (bnc#732296). * percpu: fix chunk range calculation (bnc#668872). * x86, UV: Fix kdump reboot (bnc#735446). * dm: Use done_bytes for io_completion (bnc#711378). * Bluetooth: Add Atheros AR3012 Maryann PID/VID supported. (bnc#732296) * Bluetooth: Add Atheros AR3012 one PID/VID supported. (bnc#732296) * fix missing hunk in oplock break patch (bnc#706973). * patches.arch/s390-34-01-pfault-cpu-hotplug.patch: Refresh. Surrounded s390x lowcore change with __GENKSYMS__ (bnc#728339) * patches.xen/xen3-patch-2.6.30: Refresh. * sched, x86: Avoid unnecessary overflow in sched_clock (bnc#725709). * ACPI thermal: Do not invalidate thermal zone if critical trip point is bad. Security Issue references: * CVE-2010-3873 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3873 > * CVE-2010-4164 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4164 > * CVE-2011-2494 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2494 > * CVE-2011-2699 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2699 > * CVE-2011-4077 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4077 > * CVE-2011-4081 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4081 > * CVE-2011-4110 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4110 > * CVE-2011-4127 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4127 > * CVE-2011-4132 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4132 > * CVE-2012-0038 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0038 > Indications: Everyone using the Linux Kernel on x86_64 architecture should update. Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 11 SP1 for VMware: zypper in -t patch slessp1-kernel-5732 - SUSE Linux Enterprise Server 11 SP1: zypper in -t patch slessp1-kernel-5732 - SUSE Linux Enterprise High Availability Extension 11 SP1: zypper in -t patch sleshasp1-kernel-5732 - SUSE Linux Enterprise Desktop 11 SP1: zypper in -t patch sledsp1-kernel-5732 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Server 11 SP1 for VMware (x86_64) [New Version: 2.6.32.54]: btrfs-kmp-default-0_2.6.32.54_0.3-0.3.73 ext4dev-kmp-default-0_2.6.32.54_0.3-7.9.40 ext4dev-kmp-trace-0_2.6.32.54_0.3-7.9.40 hyper-v-kmp-default-0_2.6.32.54_0.3-0.18.3 hyper-v-kmp-trace-0_2.6.32.54_0.3-0.18.3 kernel-default-2.6.32.54-0.3.1 kernel-default-base-2.6.32.54-0.3.1 kernel-default-devel-2.6.32.54-0.3.1 kernel-source-2.6.32.54-0.3.1 kernel-syms-2.6.32.54-0.3.1 kernel-trace-2.6.32.54-0.3.1 kernel-trace-base-2.6.32.54-0.3.1 kernel-trace-devel-2.6.32.54-0.3.1 - SUSE Linux Enterprise Server 11 SP1 (x86_64) [New Version: 2.6.32.54]: btrfs-kmp-default-0_2.6.32.54_0.3-0.3.73 btrfs-kmp-xen-0_2.6.32.54_0.3-0.3.73 ext4dev-kmp-default-0_2.6.32.54_0.3-7.9.40 ext4dev-kmp-trace-0_2.6.32.54_0.3-7.9.40 ext4dev-kmp-xen-0_2.6.32.54_0.3-7.9.40 hyper-v-kmp-default-0_2.6.32.54_0.3-0.18.3 hyper-v-kmp-trace-0_2.6.32.54_0.3-0.18.3 kernel-default-2.6.32.54-0.3.1 kernel-default-base-2.6.32.54-0.3.1 kernel-default-devel-2.6.32.54-0.3.1 kernel-ec2-2.6.32.54-0.3.1 kernel-ec2-base-2.6.32.54-0.3.1 kernel-source-2.6.32.54-0.3.1 kernel-syms-2.6.32.54-0.3.1 kernel-trace-2.6.32.54-0.3.1 kernel-trace-base-2.6.32.54-0.3.1 kernel-trace-devel-2.6.32.54-0.3.1 kernel-xen-2.6.32.54-0.3.1 kernel-xen-base-2.6.32.54-0.3.1 kernel-xen-devel-2.6.32.54-0.3.1 - SUSE Linux Enterprise High Availability Extension 11 SP1 (x86_64): cluster-network-kmp-default-1.4_2.6.32.54_0.3-2.5.25 cluster-network-kmp-trace-1.4_2.6.32.54_0.3-2.5.25 cluster-network-kmp-xen-1.4_2.6.32.54_0.3-2.5.25 gfs2-kmp-default-2_2.6.32.54_0.3-0.2.72 gfs2-kmp-trace-2_2.6.32.54_0.3-0.2.72 gfs2-kmp-xen-2_2.6.32.54_0.3-0.2.72 ocfs2-kmp-default-1.6_2.6.32.54_0.3-0.4.2.25 ocfs2-kmp-trace-1.6_2.6.32.54_0.3-0.4.2.25 ocfs2-kmp-xen-1.6_2.6.32.54_0.3-0.4.2.25 - SUSE Linux Enterprise Desktop 11 SP1 (x86_64) [New Version: 2.6.32.54]: btrfs-kmp-default-0_2.6.32.54_0.3-0.3.73 btrfs-kmp-xen-0_2.6.32.54_0.3-0.3.73 hyper-v-kmp-default-0_2.6.32.54_0.3-0.18.3 kernel-default-2.6.32.54-0.3.1 kernel-default-base-2.6.32.54-0.3.1 kernel-default-devel-2.6.32.54-0.3.1 kernel-default-extra-2.6.32.54-0.3.1 kernel-desktop-devel-2.6.32.54-0.3.1 kernel-source-2.6.32.54-0.3.1 kernel-syms-2.6.32.54-0.3.1 kernel-trace-devel-2.6.32.54-0.3.1 kernel-xen-2.6.32.54-0.3.1 kernel-xen-base-2.6.32.54-0.3.1 kernel-xen-devel-2.6.32.54-0.3.1 kernel-xen-extra-2.6.32.54-0.3.1 References: http://support.novell.com/security/cve/CVE-2010-3873.html http://support.novell.com/security/cve/CVE-2010-4164.html http://support.novell.com/security/cve/CVE-2011-2494.html http://support.novell.com/security/cve/CVE-2011-2699.html http://support.novell.com/security/cve/CVE-2011-4077.html http://support.novell.com/security/cve/CVE-2011-4081.html http://support.novell.com/security/cve/CVE-2011-4110.html http://support.novell.com/security/cve/CVE-2011-4127.html http://support.novell.com/security/cve/CVE-2011-4132.html http://support.novell.com/security/cve/CVE-2012-0038.html https://bugzilla.novell.com/651219 https://bugzilla.novell.com/653260 https://bugzilla.novell.com/668872 https://bugzilla.novell.com/671479 https://bugzilla.novell.com/688996 https://bugzilla.novell.com/694945 https://bugzilla.novell.com/697920 https://bugzilla.novell.com/703156 https://bugzilla.novell.com/706973 https://bugzilla.novell.com/707288 https://bugzilla.novell.com/708625 https://bugzilla.novell.com/711378 https://bugzilla.novell.com/716023 https://bugzilla.novell.com/722910 https://bugzilla.novell.com/724734 https://bugzilla.novell.com/725709 https://bugzilla.novell.com/726600 https://bugzilla.novell.com/726788 https://bugzilla.novell.com/728339 https://bugzilla.novell.com/728626 https://bugzilla.novell.com/729854 https://bugzilla.novell.com/730118 https://bugzilla.novell.com/731004 https://bugzilla.novell.com/731770 https://bugzilla.novell.com/732296 https://bugzilla.novell.com/732677 https://bugzilla.novell.com/733146 https://bugzilla.novell.com/733863 https://bugzilla.novell.com/734056 https://bugzilla.novell.com/735216 https://bugzilla.novell.com/735446 https://bugzilla.novell.com/735453 https://bugzilla.novell.com/735635 https://bugzilla.novell.com/736018 https://bugzilla.novell.com/738400 https://bugzilla.novell.com/740535 https://bugzilla.novell.com/740703 https://bugzilla.novell.com/740867 https://bugzilla.novell.com/742270 http://download.novell.com/patch/finder/?keywords=3b09a8aade4545cf047616287… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0