December 2015 - openSUSE Security Announce

[security-announce] SUSE-SU-2015:2385-1: important: Security update for grub2
by opensuse-security＠opensuse.org 29 Dec '15

29 Dec '15

SUSE Security Update: Security update for grub2 ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:2385-1 Rating: important References: #884828 #884830 #946148 #952539 #954592 #956631 Cross-References: CVE-2015-8370 Affected Products: SUSE Linux Enterprise Server 11-SP4 SUSE Linux Enterprise Desktop 11-SP4 SUSE Linux Enterprise Debuginfo 11-SP4 ______________________________________________________________________________ An update that solves one vulnerability and has 5 fixes is now available. Description: This update for grub2 provides the following fixes: A security issues with a bufferoverflow when reading username and password was fixed (bsc#956631, CVE-2015-8370) Also following bugs were fixed: - Fix buffer overflows when reading username and password. (bsc#956631, CVE-2015-8370) - Expand list of grub.cfg search path in PV Xen guests for systems installed on btrfs snapshots. (bsc#946148, bsc#952539) - Add grub.xen config searching path on boot partition. (bsc#884828) - Add linux16 and initrd16 to grub.xen. (bsc#884830) Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 11-SP4: zypper in -t patch slessp4-grub2-12288=1 - SUSE Linux Enterprise Desktop 11-SP4: zypper in -t patch sledsp4-grub2-12288=1 - SUSE Linux Enterprise Debuginfo 11-SP4: zypper in -t patch dbgsp4-grub2-12288=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Server 11-SP4 (x86_64): grub2-x86_64-efi-2.00-0.54.2 grub2-x86_64-xen-2.00-0.54.2 - SUSE Linux Enterprise Desktop 11-SP4 (x86_64): grub2-x86_64-efi-2.00-0.54.2 grub2-x86_64-xen-2.00-0.54.2 - SUSE Linux Enterprise Debuginfo 11-SP4 (x86_64): grub2-debuginfo-2.00-0.54.2 grub2-debugsource-2.00-0.54.2 References: https://www.suse.com/security/cve/CVE-2015-8370.html https://bugzilla.suse.com/884828 https://bugzilla.suse.com/884830 https://bugzilla.suse.com/946148 https://bugzilla.suse.com/952539 https://bugzilla.suse.com/954592 https://bugzilla.suse.com/956631 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2015:2380-1: important: Security update for xulrunner
by opensuse-security＠opensuse.org 28 Dec '15

28 Dec '15

openSUSE Security Update: Security update for xulrunner ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2380-1 Rating: important References: #959277 Cross-References: CVE-2015-7201 CVE-2015-7205 CVE-2015-7210 CVE-2015-7212 CVE-2015-7213 CVE-2015-7214 CVE-2015-7222 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: Xulrunner was updated to 38.5.0 to fix several security issues. The following vulnerabilities were fixed (boo#959277): * CVE-2015-7201: Miscellaneous memory safety hazards * CVE-2015-7210: Use-after-free in WebRTC when datachannel is used after being destroyed * CVE-2015-7212: Integer overflow allocating extremely large textures * CVE-2015-7205: Underflow through code inspection * CVE-2015-7213: Integer overflow in MP4 playback in 64-bit versions * CVE-2015-7222: Integer underflow and buffer overflow processing MP4 metadata in libstagefright * CVE-2015-7214: Cross-site reading attack through data and view-source URIs Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-966=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): xulrunner-38.5.0-7.1 xulrunner-debuginfo-38.5.0-7.1 xulrunner-debugsource-38.5.0-7.1 xulrunner-devel-38.5.0-7.1 - openSUSE Leap 42.1 (x86_64): xulrunner-32bit-38.5.0-7.1 xulrunner-debuginfo-32bit-38.5.0-7.1 References: https://www.suse.com/security/cve/CVE-2015-7201.html https://www.suse.com/security/cve/CVE-2015-7205.html https://www.suse.com/security/cve/CVE-2015-7210.html https://www.suse.com/security/cve/CVE-2015-7212.html https://www.suse.com/security/cve/CVE-2015-7213.html https://www.suse.com/security/cve/CVE-2015-7214.html https://www.suse.com/security/cve/CVE-2015-7222.html https://bugzilla.suse.com/959277 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2015:2375-1: important: Security update for grub2
by opensuse-security＠opensuse.org 27 Dec '15

27 Dec '15

openSUSE Security Update: Security update for grub2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2375-1 Rating: important References: #956631 Cross-References: CVE-2015-8370 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for grub2 fixes the following issue: Changes in grub2: - CVE-2015-8370: Fix for overflow in grub_password_get and grub_user_get functions (bnc#956631) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-957=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-957=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): grub2-2.02~beta2-20.13.1 grub2-branding-upstream-2.02~beta2-20.13.1 grub2-debuginfo-2.02~beta2-20.13.1 grub2-debugsource-2.02~beta2-20.13.1 grub2-i386-pc-2.02~beta2-20.13.1 - openSUSE 13.2 (x86_64): grub2-x86_64-efi-2.02~beta2-20.13.1 grub2-x86_64-xen-2.02~beta2-20.13.1 - openSUSE 13.2 (noarch): grub2-snapper-plugin-2.02~beta2-20.13.1 - openSUSE 13.2 (i586): grub2-i386-efi-2.02~beta2-20.13.1 - openSUSE 13.1 (i586 x86_64): grub2-2.00-39.11.1 grub2-debuginfo-2.00-39.11.1 grub2-debugsource-2.00-39.11.1 grub2-i386-pc-2.00-39.11.1 grub2-i386-pc-debuginfo-2.00-39.11.1 - openSUSE 13.1 (x86_64): grub2-x86_64-efi-2.00-39.11.1 grub2-x86_64-efi-debuginfo-2.00-39.11.1 - openSUSE 13.1 (i586): grub2-i386-efi-2.00-39.11.1 grub2-i386-efi-debuginfo-2.00-39.11.1 References: https://www.suse.com/security/cve/CVE-2015-8370.html https://bugzilla.suse.com/956631 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2015:2365-1: important: Security update for bind
by opensuse-security＠opensuse.org 25 Dec '15

25 Dec '15

openSUSE Security Update: Security update for bind ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2365-1 Rating: important References: #958861 Cross-References: CVE-2015-8000 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for bind fixes the following security issue: - CVE-2015-8000: Fix remote denial of service by misparsing incoming responses (bsc#958861). This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-950=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): bind-9.9.6P1-27.1 bind-chrootenv-9.9.6P1-27.1 bind-debuginfo-9.9.6P1-27.1 bind-debugsource-9.9.6P1-27.1 bind-devel-9.9.6P1-27.1 bind-libs-9.9.6P1-27.1 bind-libs-debuginfo-9.9.6P1-27.1 bind-lwresd-9.9.6P1-27.1 bind-lwresd-debuginfo-9.9.6P1-27.1 bind-utils-9.9.6P1-27.1 bind-utils-debuginfo-9.9.6P1-27.1 - openSUSE Leap 42.1 (x86_64): bind-libs-32bit-9.9.6P1-27.1 bind-libs-debuginfo-32bit-9.9.6P1-27.1 - openSUSE Leap 42.1 (noarch): bind-doc-9.9.6P1-27.1 References: https://www.suse.com/security/cve/CVE-2015-8000.html https://bugzilla.suse.com/958861 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2015:2364-1: important: Security update for bind
by opensuse-security＠opensuse.org 25 Dec '15

25 Dec '15

openSUSE Security Update: Security update for bind ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2364-1 Rating: important References: #958861 Cross-References: CVE-2015-8000 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for bind fixes the following security issue: - CVE-2015-8000: Fix remote denial of service by misparsing incoming responses (boo#958861). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-951=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-951=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): bind-9.9.6P1-2.13.1 bind-chrootenv-9.9.6P1-2.13.1 bind-debuginfo-9.9.6P1-2.13.1 bind-debugsource-9.9.6P1-2.13.1 bind-devel-9.9.6P1-2.13.1 bind-libs-9.9.6P1-2.13.1 bind-libs-debuginfo-9.9.6P1-2.13.1 bind-lwresd-9.9.6P1-2.13.1 bind-lwresd-debuginfo-9.9.6P1-2.13.1 bind-utils-9.9.6P1-2.13.1 bind-utils-debuginfo-9.9.6P1-2.13.1 - openSUSE 13.2 (x86_64): bind-libs-32bit-9.9.6P1-2.13.1 bind-libs-debuginfo-32bit-9.9.6P1-2.13.1 - openSUSE 13.2 (noarch): bind-doc-9.9.6P1-2.13.1 - openSUSE 13.1 (i586 x86_64): bind-9.9.4P2-2.20.1 bind-chrootenv-9.9.4P2-2.20.1 bind-debuginfo-9.9.4P2-2.20.1 bind-debugsource-9.9.4P2-2.20.1 bind-devel-9.9.4P2-2.20.1 bind-libs-9.9.4P2-2.20.1 bind-libs-debuginfo-9.9.4P2-2.20.1 bind-lwresd-9.9.4P2-2.20.1 bind-lwresd-debuginfo-9.9.4P2-2.20.1 bind-utils-9.9.4P2-2.20.1 bind-utils-debuginfo-9.9.4P2-2.20.1 - openSUSE 13.1 (x86_64): bind-libs-32bit-9.9.4P2-2.20.1 bind-libs-debuginfo-32bit-9.9.4P2-2.20.1 - openSUSE 13.1 (noarch): bind-doc-9.9.4P2-2.20.1 References: https://www.suse.com/security/cve/CVE-2015-8000.html https://bugzilla.suse.com/958861 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:2359-1: important: Security update for bind
by opensuse-security＠opensuse.org 25 Dec '15

25 Dec '15

SUSE Security Update: Security update for bind ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:2359-1 Rating: important References: #958861 Cross-References: CVE-2015-8000 Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP1 SUSE Linux Enterprise Server 12-SP1 SUSE Linux Enterprise Desktop 12-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for bind fixes the following security issue: - CVE-2015-8000: Fix remote denial of service by misparsing incoming responses (bsc#958861). Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 12-SP1: zypper in -t patch SUSE-SLE-SDK-12-SP1-2015-1016=1 - SUSE Linux Enterprise Server 12-SP1: zypper in -t patch SUSE-SLE-SERVER-12-SP1-2015-1016=1 - SUSE Linux Enterprise Desktop 12-SP1: zypper in -t patch SUSE-SLE-DESKTOP-12-SP1-2015-1016=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 12-SP1 (ppc64le s390x x86_64): bind-debuginfo-9.9.6P1-32.1 bind-debugsource-9.9.6P1-32.1 bind-devel-9.9.6P1-32.1 - SUSE Linux Enterprise Server 12-SP1 (ppc64le s390x x86_64): bind-9.9.6P1-32.1 bind-chrootenv-9.9.6P1-32.1 bind-debuginfo-9.9.6P1-32.1 bind-debugsource-9.9.6P1-32.1 bind-libs-9.9.6P1-32.1 bind-libs-debuginfo-9.9.6P1-32.1 bind-utils-9.9.6P1-32.1 bind-utils-debuginfo-9.9.6P1-32.1 - SUSE Linux Enterprise Server 12-SP1 (s390x x86_64): bind-libs-32bit-9.9.6P1-32.1 bind-libs-debuginfo-32bit-9.9.6P1-32.1 - SUSE Linux Enterprise Server 12-SP1 (noarch): bind-doc-9.9.6P1-32.1 - SUSE Linux Enterprise Desktop 12-SP1 (x86_64): bind-debuginfo-9.9.6P1-32.1 bind-debugsource-9.9.6P1-32.1 bind-libs-32bit-9.9.6P1-32.1 bind-libs-9.9.6P1-32.1 bind-libs-debuginfo-32bit-9.9.6P1-32.1 bind-libs-debuginfo-9.9.6P1-32.1 bind-utils-9.9.6P1-32.1 bind-utils-debuginfo-9.9.6P1-32.1 References: https://www.suse.com/security/cve/CVE-2015-8000.html https://bugzilla.suse.com/958861 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2015:2356-1: important: Security update for samba, ldb, talloc, tdb, tevent
by opensuse-security＠opensuse.org 24 Dec '15

24 Dec '15

openSUSE Security Update: Security update for samba, ldb, talloc, tdb, tevent ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2356-1 Rating: important References: #939050 #939051 #949022 #951660 #953382 #954658 #958580 #958581 #958582 #958583 #958584 #958585 #958586 Cross-References: CVE-2015-3223 CVE-2015-5252 CVE-2015-5296 CVE-2015-5299 CVE-2015-5330 CVE-2015-7540 CVE-2015-8467 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that solves 7 vulnerabilities and has 6 fixes is now available. Description: This update for ldb, samba, talloc, tdb, tevent fixes the following issues: ldb was updated to 1.1.24. + Fix ldap \00 search expression attack dos; cve-2015-3223; (bso#11325) + Fix remote read memory exploit in ldb; cve-2015-5330; (bso#11599) + Move ldb_(un)pack_data into ldb_module.h for testing + Fix installation of _ldb_text.py + Fix propagation of ldb errors through tdb + Fix bug triggered by having an empty message in database during search + Test improvements + Improved python bindings + Validate_ldb of string(generalized-time) does not accept millisecond format ".000Z"; (bso#9810) + Fix logic in ldb_val_to_time() + Allow to register extended match rules + Fixes for segfaults in pyldb + Documentation fixes + Build system improvements + Fix a typo in the comment, ldb_flags_mod_xxx -> ldb_flag_mod_xxx + Fix check for third_party + Make the successful ldb_transaction_start() message clearer + Ldb-samba: fix a memory leak in ldif_canonicalise_objectcategory() + Ldb-samba: move pyldb-utils dependency to python_samba__ldb + Build: improve detection of srcdir Samba was updated to 4.1.22. + Malicious request can cause samba ldap server to hang, spinning using cpu; CVE-2015-3223; (bso#11325); (boo#958581). + Remote read memory exploit in ldb; cve-2015-5330; (bso#11599); (boo#958586). + Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (boo#958582). + No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (boo#958584). + Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (boo#958583). + Fix microsoft ms15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (boo#958585). + Fix remote dos in samba (ad) ldap server; cve-2015-7540; (bso#9187); (boo#958580). + Ensure attempt to ssh into locked account triggers "Your account is disabled....." to the console; (boo#953382). + Prevent null pointer access in samlogon fallback when security credentials are null; (boo#949022). talloc was updated to 2.1.5; (boo#954658). + Minor build fixes + Point ld_library_path to the just-built libraries while calling make test. + Disable rpath-install and silent-rules while configure. + Update to 2.1.4; (boo#951660). + Test that talloc magic differs between processes. + Increment minor version due to added talloc_test_get_magic. + Provide tests access to talloc_magic. + Test magic protection measures. + Update the samba library distribution key file 'talloc.keyring'; (bso#945116). + Update to 2.1.3; (boo#939051). + Improved python3 bindings + Documentation fixes regarding talloc_reference() and talloc_unlink() tdb was updated to version 1.3.8; (boo#954658). + Fix broken build with --disable-python + Minor build fixes + Disable rpath-install and silent-rules while configure. + Update the samba library distribution key file 'tdb.keyring'; (bso#945116). + Update to version 1.3.7. + First fix deadlock in the interaction between fcntl and mutex locking; (bso#11381) + Improved python3 bindings + Update to version 1.3.6. + Fix runtime detection for robust mutexes in the standalone build; (bso#11326). + Possible fix for the build with robust mutexes on solaris 11; (bso#11319). + Update to version 1.3.5. + Abi change: tdb_chainlock_read_nonblock() has been added, a nonblock variant of tdb_chainlock_read() + Do not build test binaries if it's not a standalone build + Fix cid 1034842 resource leak + Fix cid 1034841 resource leak + Don't let tdb_wrap_open() segfault with name==null + Update to version 1.3.4. + Toos: allow transactions with tdb_mutex_locking + Test: add tdb1-run-mutex-transaction1 test + Allow transactions on on tdb's with tdb_mutex_locking + Update to version 1.3.3. + Test: tdb_clear_if_first | tdb_mutex_locking, o_rdonly is a valid combination + Update to version 1.3.2. + Allow tdb_open_ex() with o_rdonly of tdb_feature_flag_mutex tdbs. + Fix a comment + Fix tdb_runtime_check_for_robust_mutexes() + Improve wording in a comment + Tdb.h needs bool type; obsoletes include_stdbool_bso10625.patch + Tdb_wrap: make mutexes easier to use + Tdb_wrap: only pull in samba-debug + Tdb_wrap: standalone compile without includes.h + Tdb_wrap: tdb_wrap.h doesn't need struct loadparm_context - Update to version 1.3.1. + Tools: fix a compiler warning + Defragment the freelist in tdb_allocate_from_freelist() + Add "freelist_size" sub-command to tdbtool + Use tdb_freelist_merge_adjacent in tdb_freelist_size() + Add tdb_freelist_merge_adjacent() + Add utility function check_merge_ptr_with_left_record() + Simplify tdb_free() using check_merge_with_left_record() + Add utility function check_merge_with_left_record() + Improve comments for tdb_free(). + Factor merge_with_left_record() out of tdb_free() + Fix debug message in tdb_free() + Reduce indentation in tdb_free() for merging left + Increase readability of read_record_on_left() + Factor read_record_on_left() out of tdb_free() + Build: improve detection of srcdir. tevent was update to version 0.9.26; (boo#954658). + New tevent_thread_proxy api + Minor build fixes + Update the samba library distribution key file 'tevent.keyring'; (bso#945116). + Update to 0.9.25. + Fix compile error in solaris ports backend. + Fix access after free in tevent_common_check_signal(); (bso#11308). + Improve pytevent bindings. + Testsuite fixes. + Improve the documentation of the tevent_add_fd() assumtions. it must be talloc_free'ed before closing the fd! (bso##11141); (bso#11316). + Update to 0.9.24. + Ignore unexpected signal events in the same way the epoll backend does. + Update to 0.9.23. + Update the tevent_data.dox tutrial stuff to fix some errors, including white space problems. + Use tevent_req_simple_recv_unix in a few places. + Update to 0.9.22. + Remove unused exit_code in tevent_select.c + Remove unused exit_code in tevent_poll.c + Build: improve detection of srcdir + Lib: tevent: make tevent_sig_increment atomic. + Update flags in tevent pkgconfig file + Utilize doxygen to generate the api documentation and package it. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-945=1 - openSUSE 13.1: zypper in -t patch openSUSE-2015-945=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): ldb-debugsource-1.1.24-3.4.1 ldb-tools-1.1.24-3.4.1 ldb-tools-debuginfo-1.1.24-3.4.1 libdcerpc-atsvc-devel-4.1.22-21.1 libdcerpc-atsvc0-4.1.22-21.1 libdcerpc-atsvc0-debuginfo-4.1.22-21.1 libdcerpc-binding0-4.1.22-21.1 libdcerpc-binding0-debuginfo-4.1.22-21.1 libdcerpc-devel-4.1.22-21.1 libdcerpc-samr-devel-4.1.22-21.1 libdcerpc-samr0-4.1.22-21.1 libdcerpc-samr0-debuginfo-4.1.22-21.1 libdcerpc0-4.1.22-21.1 libdcerpc0-debuginfo-4.1.22-21.1 libgensec-devel-4.1.22-21.1 libgensec0-4.1.22-21.1 libgensec0-debuginfo-4.1.22-21.1 libldb-devel-1.1.24-3.4.1 libldb1-1.1.24-3.4.1 libldb1-debuginfo-1.1.24-3.4.1 libndr-devel-4.1.22-21.1 libndr-krb5pac-devel-4.1.22-21.1 libndr-krb5pac0-4.1.22-21.1 libndr-krb5pac0-debuginfo-4.1.22-21.1 libndr-nbt-devel-4.1.22-21.1 libndr-nbt0-4.1.22-21.1 libndr-nbt0-debuginfo-4.1.22-21.1 libndr-standard-devel-4.1.22-21.1 libndr-standard0-4.1.22-21.1 libndr-standard0-debuginfo-4.1.22-21.1 libndr0-4.1.22-21.1 libndr0-debuginfo-4.1.22-21.1 libnetapi-devel-4.1.22-21.1 libnetapi0-4.1.22-21.1 libnetapi0-debuginfo-4.1.22-21.1 libpdb-devel-4.1.22-21.1 libpdb0-4.1.22-21.1 libpdb0-debuginfo-4.1.22-21.1 libregistry-devel-4.1.22-21.1 libregistry0-4.1.22-21.1 libregistry0-debuginfo-4.1.22-21.1 libsamba-credentials-devel-4.1.22-21.1 libsamba-credentials0-4.1.22-21.1 libsamba-credentials0-debuginfo-4.1.22-21.1 libsamba-hostconfig-devel-4.1.22-21.1 libsamba-hostconfig0-4.1.22-21.1 libsamba-hostconfig0-debuginfo-4.1.22-21.1 libsamba-policy-devel-4.1.22-21.1 libsamba-policy0-4.1.22-21.1 libsamba-policy0-debuginfo-4.1.22-21.1 libsamba-util-devel-4.1.22-21.1 libsamba-util0-4.1.22-21.1 libsamba-util0-debuginfo-4.1.22-21.1 libsamdb-devel-4.1.22-21.1 libsamdb0-4.1.22-21.1 libsamdb0-debuginfo-4.1.22-21.1 libsmbclient-devel-4.1.22-21.1 libsmbclient-raw-devel-4.1.22-21.1 libsmbclient-raw0-4.1.22-21.1 libsmbclient-raw0-debuginfo-4.1.22-21.1 libsmbclient0-4.1.22-21.1 libsmbclient0-debuginfo-4.1.22-21.1 libsmbconf-devel-4.1.22-21.1 libsmbconf0-4.1.22-21.1 libsmbconf0-debuginfo-4.1.22-21.1 libsmbldap-devel-4.1.22-21.1 libsmbldap0-4.1.22-21.1 libsmbldap0-debuginfo-4.1.22-21.1 libsmbsharemodes-devel-4.1.22-21.1 libsmbsharemodes0-4.1.22-21.1 libsmbsharemodes0-debuginfo-4.1.22-21.1 libtalloc-devel-2.1.5-2.6.1 libtalloc2-2.1.5-2.6.1 libtalloc2-debuginfo-2.1.5-2.6.1 libtdb-devel-1.3.8-3.1 libtdb1-1.3.8-3.1 libtdb1-debuginfo-1.3.8-3.1 libtevent-devel-0.9.26-3.1 libtevent-util-devel-4.1.22-21.1 libtevent-util0-4.1.22-21.1 libtevent-util0-debuginfo-4.1.22-21.1 libtevent0-0.9.26-3.1 libtevent0-debuginfo-0.9.26-3.1 libwbclient-devel-4.1.22-21.1 libwbclient0-4.1.22-21.1 libwbclient0-debuginfo-4.1.22-21.1 pyldb-1.1.24-3.4.1 pyldb-debuginfo-1.1.24-3.4.1 pyldb-devel-1.1.24-3.4.1 pytalloc-2.1.5-2.6.1 pytalloc-debuginfo-2.1.5-2.6.1 pytalloc-devel-2.1.5-2.6.1 python-tdb-1.3.8-3.1 python-tdb-debuginfo-1.3.8-3.1 python-tevent-0.9.26-3.1 python-tevent-debuginfo-0.9.26-3.1 samba-4.1.22-21.1 samba-client-4.1.22-21.1 samba-client-debuginfo-4.1.22-21.1 samba-core-devel-4.1.22-21.1 samba-debuginfo-4.1.22-21.1 samba-debugsource-4.1.22-21.1 samba-libs-4.1.22-21.1 samba-libs-debuginfo-4.1.22-21.1 samba-pidl-4.1.22-21.1 samba-python-4.1.22-21.1 samba-python-debuginfo-4.1.22-21.1 samba-test-4.1.22-21.1 samba-test-debuginfo-4.1.22-21.1 samba-test-devel-4.1.22-21.1 samba-winbind-4.1.22-21.1 samba-winbind-debuginfo-4.1.22-21.1 talloc-debugsource-2.1.5-2.6.1 tdb-debugsource-1.3.8-3.1 tdb-tools-1.3.8-3.1 tdb-tools-debuginfo-1.3.8-3.1 tevent-debugsource-0.9.26-3.1 - openSUSE 13.2 (x86_64): libdcerpc-atsvc0-32bit-4.1.22-21.1 libdcerpc-atsvc0-debuginfo-32bit-4.1.22-21.1 libdcerpc-binding0-32bit-4.1.22-21.1 libdcerpc-binding0-debuginfo-32bit-4.1.22-21.1 libdcerpc-samr0-32bit-4.1.22-21.1 libdcerpc-samr0-debuginfo-32bit-4.1.22-21.1 libdcerpc0-32bit-4.1.22-21.1 libdcerpc0-debuginfo-32bit-4.1.22-21.1 libgensec0-32bit-4.1.22-21.1 libgensec0-debuginfo-32bit-4.1.22-21.1 libldb1-32bit-1.1.24-3.4.1 libldb1-debuginfo-32bit-1.1.24-3.4.1 libndr-krb5pac0-32bit-4.1.22-21.1 libndr-krb5pac0-debuginfo-32bit-4.1.22-21.1 libndr-nbt0-32bit-4.1.22-21.1 libndr-nbt0-debuginfo-32bit-4.1.22-21.1 libndr-standard0-32bit-4.1.22-21.1 libndr-standard0-debuginfo-32bit-4.1.22-21.1 libndr0-32bit-4.1.22-21.1 libndr0-debuginfo-32bit-4.1.22-21.1 libnetapi0-32bit-4.1.22-21.1 libnetapi0-debuginfo-32bit-4.1.22-21.1 libpdb0-32bit-4.1.22-21.1 libpdb0-debuginfo-32bit-4.1.22-21.1 libregistry0-32bit-4.1.22-21.1 libregistry0-debuginfo-32bit-4.1.22-21.1 libsamba-credentials0-32bit-4.1.22-21.1 libsamba-credentials0-debuginfo-32bit-4.1.22-21.1 libsamba-hostconfig0-32bit-4.1.22-21.1 libsamba-hostconfig0-debuginfo-32bit-4.1.22-21.1 libsamba-policy0-32bit-4.1.22-21.1 libsamba-policy0-debuginfo-32bit-4.1.22-21.1 libsamba-util0-32bit-4.1.22-21.1 libsamba-util0-debuginfo-32bit-4.1.22-21.1 libsamdb0-32bit-4.1.22-21.1 libsamdb0-debuginfo-32bit-4.1.22-21.1 libsmbclient-raw0-32bit-4.1.22-21.1 libsmbclient-raw0-debuginfo-32bit-4.1.22-21.1 libsmbclient0-32bit-4.1.22-21.1 libsmbclient0-debuginfo-32bit-4.1.22-21.1 libsmbconf0-32bit-4.1.22-21.1 libsmbconf0-debuginfo-32bit-4.1.22-21.1 libsmbldap0-32bit-4.1.22-21.1 libsmbldap0-debuginfo-32bit-4.1.22-21.1 libtalloc2-32bit-2.1.5-2.6.1 libtalloc2-debuginfo-32bit-2.1.5-2.6.1 libtdb1-32bit-1.3.8-3.1 libtdb1-debuginfo-32bit-1.3.8-3.1 libtevent-util0-32bit-4.1.22-21.1 libtevent-util0-debuginfo-32bit-4.1.22-21.1 libtevent0-32bit-0.9.26-3.1 libtevent0-debuginfo-32bit-0.9.26-3.1 libwbclient0-32bit-4.1.22-21.1 libwbclient0-debuginfo-32bit-4.1.22-21.1 pyldb-32bit-1.1.24-3.4.1 pyldb-debuginfo-32bit-1.1.24-3.4.1 pytalloc-32bit-2.1.5-2.6.1 pytalloc-debuginfo-32bit-2.1.5-2.6.1 python-tdb-32bit-1.3.8-3.1 python-tdb-debuginfo-32bit-1.3.8-3.1 python-tevent-32bit-0.9.26-3.1 python-tevent-debuginfo-32bit-0.9.26-3.1 samba-32bit-4.1.22-21.1 samba-client-32bit-4.1.22-21.1 samba-client-debuginfo-32bit-4.1.22-21.1 samba-debuginfo-32bit-4.1.22-21.1 samba-libs-32bit-4.1.22-21.1 samba-libs-debuginfo-32bit-4.1.22-21.1 samba-winbind-32bit-4.1.22-21.1 samba-winbind-debuginfo-32bit-4.1.22-21.1 - openSUSE 13.2 (noarch): samba-doc-4.1.22-21.1 - openSUSE 13.1 (i586 x86_64): ldb-debugsource-1.1.24-3.7.1 ldb-tools-1.1.24-3.7.1 ldb-tools-debuginfo-1.1.24-3.7.1 libdcerpc-atsvc-devel-4.1.22-3.46.1 libdcerpc-atsvc0-4.1.22-3.46.1 libdcerpc-atsvc0-debuginfo-4.1.22-3.46.1 libdcerpc-binding0-4.1.22-3.46.1 libdcerpc-binding0-debuginfo-4.1.22-3.46.1 libdcerpc-devel-4.1.22-3.46.1 libdcerpc-samr-devel-4.1.22-3.46.1 libdcerpc-samr0-4.1.22-3.46.1 libdcerpc-samr0-debuginfo-4.1.22-3.46.1 libdcerpc0-4.1.22-3.46.1 libdcerpc0-debuginfo-4.1.22-3.46.1 libgensec-devel-4.1.22-3.46.1 libgensec0-4.1.22-3.46.1 libgensec0-debuginfo-4.1.22-3.46.1 libldb-devel-1.1.24-3.7.1 libldb1-1.1.24-3.7.1 libldb1-debuginfo-1.1.24-3.7.1 libndr-devel-4.1.22-3.46.1 libndr-krb5pac-devel-4.1.22-3.46.1 libndr-krb5pac0-4.1.22-3.46.1 libndr-krb5pac0-debuginfo-4.1.22-3.46.1 libndr-nbt-devel-4.1.22-3.46.1 libndr-nbt0-4.1.22-3.46.1 libndr-nbt0-debuginfo-4.1.22-3.46.1 libndr-standard-devel-4.1.22-3.46.1 libndr-standard0-4.1.22-3.46.1 libndr-standard0-debuginfo-4.1.22-3.46.1 libndr0-4.1.22-3.46.1 libndr0-debuginfo-4.1.22-3.46.1 libnetapi-devel-4.1.22-3.46.1 libnetapi0-4.1.22-3.46.1 libnetapi0-debuginfo-4.1.22-3.46.1 libpdb-devel-4.1.22-3.46.1 libpdb0-4.1.22-3.46.1 libpdb0-debuginfo-4.1.22-3.46.1 libregistry-devel-4.1.22-3.46.1 libregistry0-4.1.22-3.46.1 libregistry0-debuginfo-4.1.22-3.46.1 libsamba-credentials-devel-4.1.22-3.46.1 libsamba-credentials0-4.1.22-3.46.1 libsamba-credentials0-debuginfo-4.1.22-3.46.1 libsamba-hostconfig-devel-4.1.22-3.46.1 libsamba-hostconfig0-4.1.22-3.46.1 libsamba-hostconfig0-debuginfo-4.1.22-3.46.1 libsamba-policy-devel-4.1.22-3.46.1 libsamba-policy0-4.1.22-3.46.1 libsamba-policy0-debuginfo-4.1.22-3.46.1 libsamba-util-devel-4.1.22-3.46.1 libsamba-util0-4.1.22-3.46.1 libsamba-util0-debuginfo-4.1.22-3.46.1 libsamdb-devel-4.1.22-3.46.1 libsamdb0-4.1.22-3.46.1 libsamdb0-debuginfo-4.1.22-3.46.1 libsmbclient-devel-4.1.22-3.46.1 libsmbclient-raw-devel-4.1.22-3.46.1 libsmbclient-raw0-4.1.22-3.46.1 libsmbclient-raw0-debuginfo-4.1.22-3.46.1 libsmbclient0-4.1.22-3.46.1 libsmbclient0-debuginfo-4.1.22-3.46.1 libsmbconf-devel-4.1.22-3.46.1 libsmbconf0-4.1.22-3.46.1 libsmbconf0-debuginfo-4.1.22-3.46.1 libsmbldap-devel-4.1.22-3.46.1 libsmbldap0-4.1.22-3.46.1 libsmbldap0-debuginfo-4.1.22-3.46.1 libsmbsharemodes-devel-4.1.22-3.46.1 libsmbsharemodes0-4.1.22-3.46.1 libsmbsharemodes0-debuginfo-4.1.22-3.46.1 libtalloc-devel-2.1.5-7.10.1 libtalloc2-2.1.5-7.10.1 libtalloc2-debuginfo-2.1.5-7.10.1 libtdb-devel-1.3.8-4.7.1 libtdb1-1.3.8-4.7.1 libtdb1-debuginfo-1.3.8-4.7.1 libtevent-devel-0.9.26-4.7.1 libtevent-util-devel-4.1.22-3.46.1 libtevent-util0-4.1.22-3.46.1 libtevent-util0-debuginfo-4.1.22-3.46.1 libtevent0-0.9.26-4.7.1 libtevent0-debuginfo-0.9.26-4.7.1 libwbclient-devel-4.1.22-3.46.1 libwbclient0-4.1.22-3.46.1 libwbclient0-debuginfo-4.1.22-3.46.1 pyldb-1.1.24-3.7.1 pyldb-debuginfo-1.1.24-3.7.1 pyldb-devel-1.1.24-3.7.1 pytalloc-2.1.5-7.10.1 pytalloc-debuginfo-2.1.5-7.10.1 pytalloc-devel-2.1.5-7.10.1 python-tdb-1.3.8-4.7.1 python-tdb-debuginfo-1.3.8-4.7.1 python-tevent-0.9.26-4.7.1 python-tevent-debuginfo-0.9.26-4.7.1 samba-4.1.22-3.46.1 samba-client-4.1.22-3.46.1 samba-client-debuginfo-4.1.22-3.46.1 samba-core-devel-4.1.22-3.46.1 samba-debuginfo-4.1.22-3.46.1 samba-debugsource-4.1.22-3.46.1 samba-libs-4.1.22-3.46.1 samba-libs-debuginfo-4.1.22-3.46.1 samba-pidl-4.1.22-3.46.1 samba-python-4.1.22-3.46.1 samba-python-debuginfo-4.1.22-3.46.1 samba-test-4.1.22-3.46.1 samba-test-debuginfo-4.1.22-3.46.1 samba-test-devel-4.1.22-3.46.1 samba-winbind-4.1.22-3.46.1 samba-winbind-debuginfo-4.1.22-3.46.1 talloc-debugsource-2.1.5-7.10.1 tdb-debugsource-1.3.8-4.7.1 tdb-tools-1.3.8-4.7.1 tdb-tools-debuginfo-1.3.8-4.7.1 tevent-debugsource-0.9.26-4.7.1 - openSUSE 13.1 (x86_64): libdcerpc-atsvc0-32bit-4.1.22-3.46.1 libdcerpc-atsvc0-debuginfo-32bit-4.1.22-3.46.1 libdcerpc-binding0-32bit-4.1.22-3.46.1 libdcerpc-binding0-debuginfo-32bit-4.1.22-3.46.1 libdcerpc-samr0-32bit-4.1.22-3.46.1 libdcerpc-samr0-debuginfo-32bit-4.1.22-3.46.1 libdcerpc0-32bit-4.1.22-3.46.1 libdcerpc0-debuginfo-32bit-4.1.22-3.46.1 libgensec0-32bit-4.1.22-3.46.1 libgensec0-debuginfo-32bit-4.1.22-3.46.1 libldb1-32bit-1.1.24-3.7.1 libldb1-debuginfo-32bit-1.1.24-3.7.1 libndr-krb5pac0-32bit-4.1.22-3.46.1 libndr-krb5pac0-debuginfo-32bit-4.1.22-3.46.1 libndr-nbt0-32bit-4.1.22-3.46.1 libndr-nbt0-debuginfo-32bit-4.1.22-3.46.1 libndr-standard0-32bit-4.1.22-3.46.1 libndr-standard0-debuginfo-32bit-4.1.22-3.46.1 libndr0-32bit-4.1.22-3.46.1 libndr0-debuginfo-32bit-4.1.22-3.46.1 libnetapi0-32bit-4.1.22-3.46.1 libnetapi0-debuginfo-32bit-4.1.22-3.46.1 libpdb0-32bit-4.1.22-3.46.1 libpdb0-debuginfo-32bit-4.1.22-3.46.1 libregistry0-32bit-4.1.22-3.46.1 libregistry0-debuginfo-32bit-4.1.22-3.46.1 libsamba-credentials0-32bit-4.1.22-3.46.1 libsamba-credentials0-debuginfo-32bit-4.1.22-3.46.1 libsamba-hostconfig0-32bit-4.1.22-3.46.1 libsamba-hostconfig0-debuginfo-32bit-4.1.22-3.46.1 libsamba-policy0-32bit-4.1.22-3.46.1 libsamba-policy0-debuginfo-32bit-4.1.22-3.46.1 libsamba-util0-32bit-4.1.22-3.46.1 libsamba-util0-debuginfo-32bit-4.1.22-3.46.1 libsamdb0-32bit-4.1.22-3.46.1 libsamdb0-debuginfo-32bit-4.1.22-3.46.1 libsmbclient-raw0-32bit-4.1.22-3.46.1 libsmbclient-raw0-debuginfo-32bit-4.1.22-3.46.1 libsmbclient0-32bit-4.1.22-3.46.1 libsmbclient0-debuginfo-32bit-4.1.22-3.46.1 libsmbconf0-32bit-4.1.22-3.46.1 libsmbconf0-debuginfo-32bit-4.1.22-3.46.1 libsmbldap0-32bit-4.1.22-3.46.1 libsmbldap0-debuginfo-32bit-4.1.22-3.46.1 libtalloc2-32bit-2.1.5-7.10.1 libtalloc2-debuginfo-32bit-2.1.5-7.10.1 libtdb1-32bit-1.3.8-4.7.1 libtdb1-debuginfo-32bit-1.3.8-4.7.1 libtevent-util0-32bit-4.1.22-3.46.1 libtevent-util0-debuginfo-32bit-4.1.22-3.46.1 libtevent0-32bit-0.9.26-4.7.1 libtevent0-debuginfo-32bit-0.9.26-4.7.1 libwbclient0-32bit-4.1.22-3.46.1 libwbclient0-debuginfo-32bit-4.1.22-3.46.1 pyldb-32bit-1.1.24-3.7.1 pyldb-debuginfo-32bit-1.1.24-3.7.1 pytalloc-32bit-2.1.5-7.10.1 pytalloc-debuginfo-32bit-2.1.5-7.10.1 python-tdb-32bit-1.3.8-4.7.1 python-tdb-debuginfo-32bit-1.3.8-4.7.1 python-tevent-32bit-0.9.26-4.7.1 python-tevent-debuginfo-32bit-0.9.26-4.7.1 samba-32bit-4.1.22-3.46.1 samba-client-32bit-4.1.22-3.46.1 samba-client-debuginfo-32bit-4.1.22-3.46.1 samba-debuginfo-32bit-4.1.22-3.46.1 samba-libs-32bit-4.1.22-3.46.1 samba-libs-debuginfo-32bit-4.1.22-3.46.1 samba-winbind-32bit-4.1.22-3.46.1 samba-winbind-debuginfo-32bit-4.1.22-3.46.1 - openSUSE 13.1 (noarch): samba-doc-4.1.22-3.46.1 References: https://www.suse.com/security/cve/CVE-2015-3223.html https://www.suse.com/security/cve/CVE-2015-5252.html https://www.suse.com/security/cve/CVE-2015-5296.html https://www.suse.com/security/cve/CVE-2015-5299.html https://www.suse.com/security/cve/CVE-2015-5330.html https://www.suse.com/security/cve/CVE-2015-7540.html https://www.suse.com/security/cve/CVE-2015-8467.html https://bugzilla.suse.com/939050 https://bugzilla.suse.com/939051 https://bugzilla.suse.com/949022 https://bugzilla.suse.com/951660 https://bugzilla.suse.com/953382 https://bugzilla.suse.com/954658 https://bugzilla.suse.com/958580 https://bugzilla.suse.com/958581 https://bugzilla.suse.com/958582 https://bugzilla.suse.com/958583 https://bugzilla.suse.com/958584 https://bugzilla.suse.com/958585 https://bugzilla.suse.com/958586 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2015:2354-1: important: Security update for ldb, samba, talloc, tdb, tevent
by opensuse-security＠opensuse.org 24 Dec '15

24 Dec '15

openSUSE Security Update: Security update for ldb, samba, talloc, tdb, tevent ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2354-1 Rating: important References: #949022 #951660 #954658 #958581 #958582 #958583 #958584 #958585 #958586 Cross-References: CVE-2015-3223 CVE-2015-5252 CVE-2015-5296 CVE-2015-5299 CVE-2015-5330 CVE-2015-8467 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves 6 vulnerabilities and has three fixes is now available. Description: This update for ldb, samba, talloc, tdb, tevent fixes the following security issues and bugs: The Samba LDB was updated to version 1.1.24: - Fix ldap \00 search expression attack dos; CVE-2015-3223; (bso#11325) - Fix remote read memory exploit in ldb; CVE-2015-5330; (bso#11599) - Move ldb_(un)pack_data into ldb_module.h for testing - Fix installation of _ldb_text.py - Fix propagation of ldb errors through tdb - Fix bug triggered by having an empty message in database during search Samba was updated to fix these issues: - Malicious request can cause Samba LDAP server to hang, spinning using CPU; CVE-2015-3223; (bso#11325); (bnc#958581). - Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599); (bnc#958586). - Insufficient symlink verification (file access outside the share); CVE-2015-5252; (bso#11395); (bnc#958582). - No man in the middle protection when forcing smb encryption on the client side; CVE-2015-5296; (bso#11536); (bnc#958584). - Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583). - Fix Microsoft MS15-096 to prevent machine accounts from being changed into user accounts; CVE-2015-8467; (bso#11552); (bnc#958585). - Changing log level of two entries to from 1 to 3; (bso#9912). - vfs_gpfs: Re-enable share modes; (bso#11243). - wafsamba: Also build libraries with RELRO protection; (bso#11346). - ctdb: Strip trailing spaces from nodes file; (bso#11365). - s3-smbd: Fix old DOS client doing wildcard delete - gives a attribute type of zero; (bso#11452). - nss_wins: Do not run into use after free issues when we access memory allocated on the globals and the global being reinitialized; (bso#11563). - async_req: Fix non-blocking connect(); (bso#11564). - auth: gensec: Fix a memory leak; (bso#11565). - lib: util: Make non-critical message a warning; (bso#11566). - Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bnc#949022). - smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). - ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). - manpage: Correct small typo error; (bso#11584). - s3: smbd: If EA's are turned off on a share don't allow an SMB2 create containing them; (bso#11589). - Backport some valgrind fixes from upstream master; (bso#11597). - s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). - docs: Fix some typos in the idmap config section of man 5 smb.conf; (bso#11619). - Cleanup and enhance the pidl sub package. - s3: smbd: Fix our access-based enumeration on "hide unreadable" to match Windows; (bso#10252). - smbd: Fix file name buflen and padding in notify repsonse; (bso#10634). - kerberos: Make sure we only use prompter type when available; (bso#11038). - s3:ctdbd_conn: Make sure we destroy tevent_fd before closing the socket; (bso#11316). - dcerpc.idl: accept invalid dcerpc_bind_nak pdus; (bso#11327). - Fix a deadlock in tdb; (bso#11381). - s3: smbd: Fix mkdir race condition; (bso#11486). - pam_winbind: Fix a segfault if initialization fails; (bso#11502). - s3: dfs: Fix a crash when the dfs targets are disabled; (bso#11509). - s3: smbd: Fix opening/creating :stream files on the root share directory; (bso#11522). - net: Fix a crash with 'net ads keytab create'; (bso#11528). - s3: smbd: Fix a crash in unix_convert() and a NULL pointer bug introduced by previous 'raw' stream fix (bso#11522); (bso#11535). - vfs_fruit: Return value of ad_pack in vfs_fruit.c; (bso#11543). - vfs_commit: Set the fd on open before calling SMB_VFS_FSTAT; (bso#11547). - Fix bug in smbstatus where the lease info is not printed; (bso#11549). - s3:smbstatus: Add stream name to share_entry_forall(); (bso#11550). - Prevent null pointer access in samlogon fallback when security credentials are null; (bnc#949022). - Fix 100% CPU in winbindd when logging in with "user must change password on next logon"; (bso#11038). talloc was updated to version 2.1.5; (bsc#954658) (bsc#951660). - Test that talloc magic differs between processes. - Increment minor version due to added talloc_test_get_magic. - Provide tests access to talloc_magic. - Test magic protection measures. tdb was updated to version 1.3.8; (bsc#954658). - Improved python3 bindings tevent was updated to 0.9.26; (bsc#954658). - New tevent_thread_proxy api - Minor build fixes This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-943=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): ldb-debugsource-1.1.24-7.1 ldb-tools-1.1.24-7.1 ldb-tools-debuginfo-1.1.24-7.1 libdcerpc-atsvc-devel-4.2.4-9.2 libdcerpc-atsvc0-4.2.4-9.2 libdcerpc-atsvc0-debuginfo-4.2.4-9.2 libdcerpc-binding0-4.2.4-9.2 libdcerpc-binding0-debuginfo-4.2.4-9.2 libdcerpc-devel-4.2.4-9.2 libdcerpc-samr-devel-4.2.4-9.2 libdcerpc-samr0-4.2.4-9.2 libdcerpc-samr0-debuginfo-4.2.4-9.2 libdcerpc0-4.2.4-9.2 libdcerpc0-debuginfo-4.2.4-9.2 libgensec-devel-4.2.4-9.2 libgensec0-4.2.4-9.2 libgensec0-debuginfo-4.2.4-9.2 libldb-devel-1.1.24-7.1 libldb1-1.1.24-7.1 libldb1-debuginfo-1.1.24-7.1 libndr-devel-4.2.4-9.2 libndr-krb5pac-devel-4.2.4-9.2 libndr-krb5pac0-4.2.4-9.2 libndr-krb5pac0-debuginfo-4.2.4-9.2 libndr-nbt-devel-4.2.4-9.2 libndr-nbt0-4.2.4-9.2 libndr-nbt0-debuginfo-4.2.4-9.2 libndr-standard-devel-4.2.4-9.2 libndr-standard0-4.2.4-9.2 libndr-standard0-debuginfo-4.2.4-9.2 libndr0-4.2.4-9.2 libndr0-debuginfo-4.2.4-9.2 libnetapi-devel-4.2.4-9.2 libnetapi0-4.2.4-9.2 libnetapi0-debuginfo-4.2.4-9.2 libregistry-devel-4.2.4-9.2 libregistry0-4.2.4-9.2 libregistry0-debuginfo-4.2.4-9.2 libsamba-credentials-devel-4.2.4-9.2 libsamba-credentials0-4.2.4-9.2 libsamba-credentials0-debuginfo-4.2.4-9.2 libsamba-hostconfig-devel-4.2.4-9.2 libsamba-hostconfig0-4.2.4-9.2 libsamba-hostconfig0-debuginfo-4.2.4-9.2 libsamba-passdb-devel-4.2.4-9.2 libsamba-passdb0-4.2.4-9.2 libsamba-passdb0-debuginfo-4.2.4-9.2 libsamba-policy-devel-4.2.4-9.2 libsamba-policy0-4.2.4-9.2 libsamba-policy0-debuginfo-4.2.4-9.2 libsamba-util-devel-4.2.4-9.2 libsamba-util0-4.2.4-9.2 libsamba-util0-debuginfo-4.2.4-9.2 libsamdb-devel-4.2.4-9.2 libsamdb0-4.2.4-9.2 libsamdb0-debuginfo-4.2.4-9.2 libsmbclient-devel-4.2.4-9.2 libsmbclient-raw-devel-4.2.4-9.2 libsmbclient-raw0-4.2.4-9.2 libsmbclient-raw0-debuginfo-4.2.4-9.2 libsmbclient0-4.2.4-9.2 libsmbclient0-debuginfo-4.2.4-9.2 libsmbconf-devel-4.2.4-9.2 libsmbconf0-4.2.4-9.2 libsmbconf0-debuginfo-4.2.4-9.2 libsmbldap-devel-4.2.4-9.2 libsmbldap0-4.2.4-9.2 libsmbldap0-debuginfo-4.2.4-9.2 libtalloc-devel-2.1.5-7.1 libtalloc2-2.1.5-7.1 libtalloc2-debuginfo-2.1.5-7.1 libtdb-devel-1.3.8-7.1 libtdb1-1.3.8-7.1 libtdb1-debuginfo-1.3.8-7.1 libtevent-devel-0.9.26-7.1 libtevent-util-devel-4.2.4-9.2 libtevent-util0-4.2.4-9.2 libtevent-util0-debuginfo-4.2.4-9.2 libtevent0-0.9.26-7.1 libtevent0-debuginfo-0.9.26-7.1 libwbclient-devel-4.2.4-9.2 libwbclient0-4.2.4-9.2 libwbclient0-debuginfo-4.2.4-9.2 pyldb-1.1.24-7.1 pyldb-debuginfo-1.1.24-7.1 pyldb-devel-1.1.24-7.1 pytalloc-2.1.5-7.1 pytalloc-debuginfo-2.1.5-7.1 pytalloc-devel-2.1.5-7.1 python-tdb-1.3.8-7.1 python-tdb-debuginfo-1.3.8-7.1 python-tevent-0.9.26-7.1 python-tevent-debuginfo-0.9.26-7.1 samba-4.2.4-9.2 samba-client-4.2.4-9.2 samba-client-debuginfo-4.2.4-9.2 samba-core-devel-4.2.4-9.2 samba-debuginfo-4.2.4-9.2 samba-debugsource-4.2.4-9.2 samba-libs-4.2.4-9.2 samba-libs-debuginfo-4.2.4-9.2 samba-pidl-4.2.4-9.2 samba-python-4.2.4-9.2 samba-python-debuginfo-4.2.4-9.2 samba-test-4.2.4-9.2 samba-test-debuginfo-4.2.4-9.2 samba-test-devel-4.2.4-9.2 samba-winbind-4.2.4-9.2 samba-winbind-debuginfo-4.2.4-9.2 talloc-debugsource-2.1.5-7.1 tdb-debugsource-1.3.8-7.1 tdb-tools-1.3.8-7.1 tdb-tools-debuginfo-1.3.8-7.1 tevent-debugsource-0.9.26-7.1 - openSUSE Leap 42.1 (x86_64): libdcerpc-atsvc0-32bit-4.2.4-9.2 libdcerpc-atsvc0-debuginfo-32bit-4.2.4-9.2 libdcerpc-binding0-32bit-4.2.4-9.2 libdcerpc-binding0-debuginfo-32bit-4.2.4-9.2 libdcerpc-samr0-32bit-4.2.4-9.2 libdcerpc-samr0-debuginfo-32bit-4.2.4-9.2 libdcerpc0-32bit-4.2.4-9.2 libdcerpc0-debuginfo-32bit-4.2.4-9.2 libgensec0-32bit-4.2.4-9.2 libgensec0-debuginfo-32bit-4.2.4-9.2 libldb1-32bit-1.1.24-7.1 libldb1-debuginfo-32bit-1.1.24-7.1 libndr-krb5pac0-32bit-4.2.4-9.2 libndr-krb5pac0-debuginfo-32bit-4.2.4-9.2 libndr-nbt0-32bit-4.2.4-9.2 libndr-nbt0-debuginfo-32bit-4.2.4-9.2 libndr-standard0-32bit-4.2.4-9.2 libndr-standard0-debuginfo-32bit-4.2.4-9.2 libndr0-32bit-4.2.4-9.2 libndr0-debuginfo-32bit-4.2.4-9.2 libnetapi0-32bit-4.2.4-9.2 libnetapi0-debuginfo-32bit-4.2.4-9.2 libregistry0-32bit-4.2.4-9.2 libregistry0-debuginfo-32bit-4.2.4-9.2 libsamba-credentials0-32bit-4.2.4-9.2 libsamba-credentials0-debuginfo-32bit-4.2.4-9.2 libsamba-hostconfig0-32bit-4.2.4-9.2 libsamba-hostconfig0-debuginfo-32bit-4.2.4-9.2 libsamba-passdb0-32bit-4.2.4-9.2 libsamba-passdb0-debuginfo-32bit-4.2.4-9.2 libsamba-policy0-32bit-4.2.4-9.2 libsamba-policy0-debuginfo-32bit-4.2.4-9.2 libsamba-util0-32bit-4.2.4-9.2 libsamba-util0-debuginfo-32bit-4.2.4-9.2 libsamdb0-32bit-4.2.4-9.2 libsamdb0-debuginfo-32bit-4.2.4-9.2 libsmbclient-raw0-32bit-4.2.4-9.2 libsmbclient-raw0-debuginfo-32bit-4.2.4-9.2 libsmbclient0-32bit-4.2.4-9.2 libsmbclient0-debuginfo-32bit-4.2.4-9.2 libsmbconf0-32bit-4.2.4-9.2 libsmbconf0-debuginfo-32bit-4.2.4-9.2 libsmbldap0-32bit-4.2.4-9.2 libsmbldap0-debuginfo-32bit-4.2.4-9.2 libtalloc2-32bit-2.1.5-7.1 libtalloc2-debuginfo-32bit-2.1.5-7.1 libtdb1-32bit-1.3.8-7.1 libtdb1-debuginfo-32bit-1.3.8-7.1 libtevent-util0-32bit-4.2.4-9.2 libtevent-util0-debuginfo-32bit-4.2.4-9.2 libtevent0-32bit-0.9.26-7.1 libtevent0-debuginfo-32bit-0.9.26-7.1 libwbclient0-32bit-4.2.4-9.2 libwbclient0-debuginfo-32bit-4.2.4-9.2 pyldb-32bit-1.1.24-7.1 pyldb-debuginfo-32bit-1.1.24-7.1 pytalloc-32bit-2.1.5-7.1 pytalloc-debuginfo-32bit-2.1.5-7.1 python-tdb-32bit-1.3.8-7.1 python-tdb-debuginfo-32bit-1.3.8-7.1 python-tevent-32bit-0.9.26-7.1 python-tevent-debuginfo-32bit-0.9.26-7.1 samba-32bit-4.2.4-9.2 samba-client-32bit-4.2.4-9.2 samba-client-debuginfo-32bit-4.2.4-9.2 samba-debuginfo-32bit-4.2.4-9.2 samba-libs-32bit-4.2.4-9.2 samba-libs-debuginfo-32bit-4.2.4-9.2 samba-winbind-32bit-4.2.4-9.2 samba-winbind-debuginfo-32bit-4.2.4-9.2 - openSUSE Leap 42.1 (noarch): samba-doc-4.2.4-9.2 References: https://www.suse.com/security/cve/CVE-2015-3223.html https://www.suse.com/security/cve/CVE-2015-5252.html https://www.suse.com/security/cve/CVE-2015-5296.html https://www.suse.com/security/cve/CVE-2015-5299.html https://www.suse.com/security/cve/CVE-2015-5330.html https://www.suse.com/security/cve/CVE-2015-8467.html https://bugzilla.suse.com/949022 https://bugzilla.suse.com/951660 https://bugzilla.suse.com/954658 https://bugzilla.suse.com/958581 https://bugzilla.suse.com/958582 https://bugzilla.suse.com/958583 https://bugzilla.suse.com/958584 https://bugzilla.suse.com/958585 https://bugzilla.suse.com/958586 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:2350-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 23 Dec '15

23 Dec '15

SUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:2350-1 Rating: important References: #814440 #879378 #879381 #900610 #904348 #904965 #921081 #926709 #926774 #930145 #930770 #930788 #930835 #932805 #935053 #935123 #935757 #937256 #937444 #937969 #937970 #938706 #939207 #939826 #939926 #939955 #940017 #940913 #940946 #941202 #942938 #943786 #944677 #944831 #944837 #944989 #944993 #945691 #945825 #945827 #946078 #946214 #946309 #947957 #948330 #948347 #948521 #949100 #949298 #949502 #949706 #949744 #949936 #949981 #950298 #950750 #950998 #951440 #952084 #952384 #952579 #952976 #953527 #953799 #953980 #954404 #954628 #954950 #954984 #955354 #955673 #956709 Cross-References: CVE-2015-0272 CVE-2015-5157 CVE-2015-5307 CVE-2015-6937 CVE-2015-7509 CVE-2015-7799 CVE-2015-7872 CVE-2015-7990 CVE-2015-8104 CVE-2015-8215 Affected Products: SUSE Linux Enterprise Real Time Extension 11-SP4 SUSE Linux Enterprise Debuginfo 11-SP4 ______________________________________________________________________________ An update that solves 10 vulnerabilities and has 62 fixes is now available. Description: The SUSE Linux Enterprise 11 SP4 Realtime kernel was updated to receive various security and bugfixes. Following security bugs were fixed: - CVE-2015-7509: Mounting a prepared ext2 filesystem as ext4 could lead to a local denial of service (crash) (bsc#956709). - CVE-2015-7799: The slhc_init function in drivers/net/slip/slhc.c in the Linux kernel did not ensure that certain slot numbers are valid, which allowed local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted PPPIOCSMAXCID ioctl call (bnc#949936). - CVE-2015-8104: The KVM subsystem in the Linux kernel allowed guest OS users to cause a denial of service (host OS panic or hang) by triggering many #DB (aka Debug) exceptions, related to svm.c (bnc#954404). - CVE-2015-5307: The KVM subsystem in the Linux kernel allowed guest OS users to cause a denial of service (host OS panic or hang) by triggering many #AC (aka Alignment Check) exceptions, related to svm.c and vmx.c (bnc#953527). - CVE-2015-7990: RDS: Verify the underlying transport exists before creating a connection, preventing possible DoS (bsc#952384). - CVE-2015-5157: arch/x86/entry/entry_64.S in the Linux kernel on the x86_64 platform mishandled IRET faults in processing NMIs that occurred during userspace execution, which might allow local users to gain privileges by triggering an NMI (bnc#937969 937970 938706 939207). - CVE-2015-7872: The key_gc_unused_keys function in security/keys/gc.c in the Linux kernel allowed local users to cause a denial of service (OOPS) via crafted keyctl commands (bnc#951440). - CVE-2015-8215: net/ipv6/addrconf.c in the IPv6 stack in the Linux kernel did not validate attempted changes to the MTU value, which allowed context-dependent attackers to cause a denial of service (packet loss) via a value that is (1) smaller than the minimum compliant value or (2) larger than the MTU of an interface, as demonstrated by a Router Advertisement (RA) message that is not validated by a daemon, a different vulnerability than CVE-2015-0272. NOTE: the scope of CVE-2015-0272 is limited to the NetworkManager product. (bnc#955354). - CVE-2015-6937: The __rds_conn_create function in net/rds/connection.c in the Linux kernel allowed local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by using a socket that was not properly bound (bnc#945825). The following non-security bugs were fixed: - af_xhci: avoid path quiesce of severed path in shutdown() (bnc#946214, LTC#131684). - ahci: Add Device ID for Intel Sunrise Point PCH (bsc#953799). - alsa: hda - Disable 64bit address for Creative HDA controllers (bnc#814440). - blktap: also call blkif_disconnect() when frontend switched to closed (bsc#952976). - blktap: refine mm tracking (bsc#952976). - cachefiles: Avoid deadlocks with fs freezing (bsc#935123). - dm: do not start current request if it would've merged with the previous (bsc#904348). - dm: impose configurable deadline for dm_request_fn's merge heuristic (bsc#904348). - dm-snap: avoid deadock on s->lock when a read is split (bsc#939826). - dm sysfs: introduce ability to add writable attributes (bsc#904348). - drivers: hv: do not do hypercalls when hypercall_page is NULL. - drivers: hv: kvp: move poll_channel() to hyperv_vmbus.h. - drivers: hv: util: move kvp/vss function declarations to hyperv_vmbus.h. - drivers: hv: vmbus: add special crash handler (bnc#930770). - drivers: hv: vmbus: add special kexec handler. - drivers: hv: vmbus: Get rid of some unused definitions. - drivers: hv: vmbus: Implement the protocol for tearing down vmbus state. - drivers: hv: vmbus: kill tasklets on module unload. - drivers: hv: vmbus: prefer "die" notification chain to 'panic'. - drivers: hv: vmbus: remove hv_synic_free_cpu() call from hv_synic_cleanup(). - drivers: hv: vmbus: unregister panic notifier on module unload. - driver: Vmxnet3: Fix ethtool -S to return correct rx queue stats (bsc#950750). - drm/i915: add hotplug activation period to hotplug update mask (bsc#953980). - drm/i915: Avoid race of intel_crt_detect_hotplug() with HPD interrupt, v2 (bsc#942938). - drm/i915: Fix DDC probe for passive adapters (bsc#900610, fdo#85924). - fix lpfc_send_rscn_event allocation size claims bnc#935757 - fs: Avoid deadlocks of fsync_bdev() and fs freezing (bsc#935123). - fs: Fix deadlocks between sync and fs freezing (bsc#935123). - hugetlb: simplify migrate_huge_page() (bnc#947957, VM Functionality). - hwpoison, hugetlb: lock_page/unlock_page does not match for handling a free hugepage (bnc#947957, VM Functionality). - IB/srp: Avoid skipping srp_reset_host() after a transport error (bsc#904965). - IB/srp: Fix a sporadic crash triggered by cable pulling (bsc#904965). - Import SP4-RT GA kabi files - ipr: Fix incorrect trace indexing (bsc#940913). - ipr: Fix invalid array indexing for HRRQ (bsc#940913). - ipv6: fix tunnel error handling (bsc#952579). - ipvs: drop first packet to dead server (bsc#946078). - ipvs: Fix reuse connection if real server is dead (bnc#945827). - kernel: correct uc_sigmask of the compat signal frame (bnc#946214, LTC#130124). - kernel: fix incorrect use of DIAG44 in continue_trylock_relax() (bnc#946214, LTC#132100). - kexec: Fix race between panic() and crash_kexec() called directly (bnc#937444). - keys: Fix race between key destruction and finding a keyring by name (bsc#951440). - ktime: add ktime_after and ktime_before helpe (bsc#904348). - lib/string.c: introduce memchr_inv() (bnc#930788). - lpfc: Fix cq_id masking problem (bsc#944677). - macvlan: Support bonding events bsc#948521 - Make sure XPRT_CONNECTING gets cleared when needed (bsc#946309). - memory-failure: do code refactor of soft_offline_page() (bnc#947957, VM Functionality). - memory-failure: fix an error of mce_bad_pages statistics (bnc#947957, VM Functionality). - memory-failure: use num_poisoned_pages instead of mce_bad_pages (bnc#947957, VM Functionality). - memory-hotplug: update mce_bad_pages when removing the memory (bnc#947957, VM Functionality). - mm: exclude reserved pages from dirtyable memory 32b fix (bnc#940017, bnc#949298). - mm: fix GFP_THISNODE callers and clarify (bsc#954950, VM Functionality). - mm/memory-failure.c: fix wrong num_poisoned_pages in handling memory error on thp (bnc#947957, VM Functionality). - mm/memory-failure.c: recheck PageHuge() after hugetlb page migrate successfully (bnc#947957, VM Functionality). - mm/migrate.c: pair unlock_page() and lock_page() when migrating huge pages (bnc#947957, VM Functionality). - mm: remove GFP_THISNODE (bsc#954950, VM Functionality). - mm: sl[au]b: add knowledge of PFMEMALLOC reserve pages (Swap over NFS (fate#304949)). - Modified -rt patches: 343 of 434, noise elided. - net/core: Add VF link state control policy (bsc#950298). - netfilter: xt_recent: fix namespace destroy path (bsc#879378). - NFSv4: Fix two infinite loops in the mount code (bsc#954628). - panic/x86: Allow cpus to save registers even if they (bnc#940946). - panic/x86: Fix re-entrance problem due to panic on (bnc#937444). - pci: Add dev_flags bit to access VPD through function 0 (bnc#943786). - pci: Add VPD function 0 quirk for Intel Ethernet devices (bnc#943786). - pci: Clear NumVFs when disabling SR-IOV in sriov_init() (bnc#952084). - pci: delay configuration of SRIOV capability (bnc#952084). - pci: Refresh First VF Offset and VF Stride when updating NumVFs (bnc#952084). - pci: set pci sriov page size before reading SRIOV BAR (bnc#952084). - pci: Update NumVFs register when disabling SR-IOV (bnc#952084). - pktgen: clean up ktime_t helpers (bsc#904348). - qla2xxx: do not clear slot in outstanding cmd array (bsc#944993). - qla2xxx: Do not reset adapter if SRB handle is in range (bsc#944993). - qla2xxx: Remove decrement of sp reference count in abort handler (bsc#944993). - qla2xxx: Remove unavailable firmware files (bsc#921081). - qlge: Fix qlge_update_hw_vlan_features to handle if interface is down (bsc#930835). - quota: Fix deadlock with suspend and quotas (bsc#935123). - rcu: Eliminate deadlock between CPU hotplug and expedited grace periods (bsc#949706). - Refresh patches.xen/1282-usbback-limit-copying.patch (bsc#941202). - rtc: cmos: Cancel alarm timer if alarm time is equal to now+1 seconds (bsc#930145). - rtnetlink: Fix VF IFLA policy (bsc#950298). - rtnetlink: fix VF info size (bsc#950298). - s390/dasd: fix disconnected device with valid path mask (bnc#946214, LTC#132707). - s390/dasd: fix invalid PAV assignment after suspend/resume (bnc#946214, LTC#132706). - s390/dasd: fix list_del corruption after lcu changes (bnc#954984, LTC#133077). - s390/pci: handle events for unused functions (bnc#946214, LTC#130628). - s390/pci: improve handling of hotplug event 0x301 (bnc#946214, LTC#130628). - s390/pci: improve state check when processing hotplug events (bnc#946214, LTC#130628). - sched/core: Fix task and run queue sched_info::run_delay inconsistencies (bnc#949100). - scsi: hosts: update to use ida_simple for host_no (bsc#939926) - sg: fix read() error reporting (bsc#926774). - sunrpc: refactor rpcauth_checkverf error returns (bsc#955673). - Update patches.fixes/fanotify-fix-deadlock-during-thread-exit.patch (bsc#935053, bsc#926709). Add bug reference. - usbback: correct copy length for partial transfers (bsc#941202). - usbvision fix overflow of interfaces array (bnc#950998). - usb: xhci: apply XHCI_AVOID_BEI quirk to all Intel xHCI controllers (bnc#944989). - veth: extend device features (bsc#879381). - vfs: Provide function to get superblock and wait for it to thaw (bsc#935123). - vmxnet3: adjust ring sizes when interface is down (bsc#950750). - vmxnet3: fix ethtool ring buffer size setting (bsc#950750). - writeback: Skip writeback for frozen filesystem (bsc#935123). - x86/evtchn: make use of PHYSDEVOP_map_pirq. - x86: mm: drop TLB flush from ptep_set_access_flags (bsc#948330). - x86: mm: only do a local tlb flush in ptep_set_access_flags() (bsc#948330). - x86, pageattr: Prevent overflow in slow_virt_to_phys() for X86_PAE (fate#317533, bnc#937256). - xen: x86, pageattr: Prevent overflow in slow_virt_to_phys() for X86_PAE (fate#317533, bnc#937256). - xfs: add background scanning to clear eofblocks inodes (bnc#930788). - xfs: add EOFBLOCKS inode tagging/untagging (bnc#930788). - xfs: add inode id filtering to eofblocks scan (bnc#930788). - xfs: add minimum file size filtering to eofblocks scan (bnc#930788). - xfs: add XFS_IOC_FREE_EOFBLOCKS ioctl (bnc#930788). - xfs: create function to scan and clear EOFBLOCKS inodes (bnc#930788). - xfs: create helper to check whether to free eofblocks on inode (bnc#930788). - xfs: Fix lost direct IO write in the last block (bsc#949744). - xfs: Fix softlockup in xfs_inode_ag_walk() (bsc#948347). - xfs: introduce a common helper xfs_icluster_size_fsb (bsc#932805). - xfs: make xfs_free_eofblocks() non-static, return EAGAIN on trylock failure (bnc#930788). - xfs: support a tag-based inode_ag_iterator (bnc#930788). - xfs: support multiple inode id filtering in eofblocks scan (bnc#930788). - xfs: use xfs_icluster_size_fsb in xfs_bulkstat (bsc#932805). - xfs: use xfs_icluster_size_fsb in xfs_ialloc_inode_init (bsc#932805). - xfs: use xfs_icluster_size_fsb in xfs_ifree_cluster (bsc#932805). - xfs: use xfs_icluster_size_fsb in xfs_imap (bsc#932805). - xhci: Add spurious wakeup quirk for LynxPoint-LP controllers (bnc#949981). - xhci: Calculate old endpoints correctly on device reset (bnc#944831). - xhci: change xhci 1.0 only restrictions to support xhci 1.1 (bnc#949502). - xhci: fix isoc endpoint dequeue from advancing too far on transaction error (bnc#944837). - xhci: For streams the css flag most be read from the stream-ctx on ep stop (bnc#945691). - xhci: silence TD warning (bnc#939955). - xhci: use uninterruptible sleep for waiting for internal operations (bnc#939955). Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Real Time Extension 11-SP4: zypper in -t patch slertesp4-kernel-rt-20151204-12284=1 - SUSE Linux Enterprise Debuginfo 11-SP4: zypper in -t patch dbgsp4-kernel-rt-20151204-12284=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Real Time Extension 11-SP4 (x86_64): kernel-rt-3.0.101.rt130-48.1 kernel-rt-base-3.0.101.rt130-48.1 kernel-rt-devel-3.0.101.rt130-48.1 kernel-rt_trace-3.0.101.rt130-48.1 kernel-rt_trace-base-3.0.101.rt130-48.1 kernel-rt_trace-devel-3.0.101.rt130-48.1 kernel-source-rt-3.0.101.rt130-48.1 kernel-syms-rt-3.0.101.rt130-48.1 - SUSE Linux Enterprise Debuginfo 11-SP4 (x86_64): kernel-rt-debuginfo-3.0.101.rt130-48.1 kernel-rt-debugsource-3.0.101.rt130-48.1 kernel-rt_debug-debuginfo-3.0.101.rt130-48.1 kernel-rt_debug-debugsource-3.0.101.rt130-48.1 kernel-rt_trace-debuginfo-3.0.101.rt130-48.1 kernel-rt_trace-debugsource-3.0.101.rt130-48.1 References: https://www.suse.com/security/cve/CVE-2015-0272.html https://www.suse.com/security/cve/CVE-2015-5157.html https://www.suse.com/security/cve/CVE-2015-5307.html https://www.suse.com/security/cve/CVE-2015-6937.html https://www.suse.com/security/cve/CVE-2015-7509.html https://www.suse.com/security/cve/CVE-2015-7799.html https://www.suse.com/security/cve/CVE-2015-7872.html https://www.suse.com/security/cve/CVE-2015-7990.html https://www.suse.com/security/cve/CVE-2015-8104.html https://www.suse.com/security/cve/CVE-2015-8215.html https://bugzilla.suse.com/814440 https://bugzilla.suse.com/879378 https://bugzilla.suse.com/879381 https://bugzilla.suse.com/900610 https://bugzilla.suse.com/904348 https://bugzilla.suse.com/904965 https://bugzilla.suse.com/921081 https://bugzilla.suse.com/926709 https://bugzilla.suse.com/926774 https://bugzilla.suse.com/930145 https://bugzilla.suse.com/930770 https://bugzilla.suse.com/930788 https://bugzilla.suse.com/930835 https://bugzilla.suse.com/932805 https://bugzilla.suse.com/935053 https://bugzilla.suse.com/935123 https://bugzilla.suse.com/935757 https://bugzilla.suse.com/937256 https://bugzilla.suse.com/937444 https://bugzilla.suse.com/937969 https://bugzilla.suse.com/937970 https://bugzilla.suse.com/938706 https://bugzilla.suse.com/939207 https://bugzilla.suse.com/939826 https://bugzilla.suse.com/939926 https://bugzilla.suse.com/939955 https://bugzilla.suse.com/940017 https://bugzilla.suse.com/940913 https://bugzilla.suse.com/940946 https://bugzilla.suse.com/941202 https://bugzilla.suse.com/942938 https://bugzilla.suse.com/943786 https://bugzilla.suse.com/944677 https://bugzilla.suse.com/944831 https://bugzilla.suse.com/944837 https://bugzilla.suse.com/944989 https://bugzilla.suse.com/944993 https://bugzilla.suse.com/945691 https://bugzilla.suse.com/945825 https://bugzilla.suse.com/945827 https://bugzilla.suse.com/946078 https://bugzilla.suse.com/946214 https://bugzilla.suse.com/946309 https://bugzilla.suse.com/947957 https://bugzilla.suse.com/948330 https://bugzilla.suse.com/948347 https://bugzilla.suse.com/948521 https://bugzilla.suse.com/949100 https://bugzilla.suse.com/949298 https://bugzilla.suse.com/949502 https://bugzilla.suse.com/949706 https://bugzilla.suse.com/949744 https://bugzilla.suse.com/949936 https://bugzilla.suse.com/949981 https://bugzilla.suse.com/950298 https://bugzilla.suse.com/950750 https://bugzilla.suse.com/950998 https://bugzilla.suse.com/951440 https://bugzilla.suse.com/952084 https://bugzilla.suse.com/952384 https://bugzilla.suse.com/952579 https://bugzilla.suse.com/952976 https://bugzilla.suse.com/953527 https://bugzilla.suse.com/953799 https://bugzilla.suse.com/953980 https://bugzilla.suse.com/954404 https://bugzilla.suse.com/954628 https://bugzilla.suse.com/954950 https://bugzilla.suse.com/954984 https://bugzilla.suse.com/955354 https://bugzilla.suse.com/955673 https://bugzilla.suse.com/956709 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2015:2347-1: important: Security update for Chromium
by opensuse-security＠opensuse.org 23 Dec '15

23 Dec '15

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2347-1 Rating: important References: #959458 Cross-References: CVE-2015-6792 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Chromium was updated to 47.0.2525.106 to fix security issues. Vulnerabilities were fixed under the following collective identifier: * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2015-939=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): chromedriver-47.0.2526.106-38.1 chromedriver-debuginfo-47.0.2526.106-38.1 chromium-47.0.2526.106-38.1 chromium-debuginfo-47.0.2526.106-38.1 chromium-debugsource-47.0.2526.106-38.1 chromium-desktop-gnome-47.0.2526.106-38.1 chromium-desktop-kde-47.0.2526.106-38.1 chromium-ffmpegsumo-47.0.2526.106-38.1 chromium-ffmpegsumo-debuginfo-47.0.2526.106-38.1 References: https://www.suse.com/security/cve/CVE-2015-6792.html https://bugzilla.suse.com/959458 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0