September 2015 - openSUSE Security Announce

[security-announce] SUSE-SU-2015:1581-1: important: Security update for openssh
by opensuse-security＠opensuse.org 21 Sep '15

21 Sep '15

SUSE Security Update: Security update for openssh ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:1581-1 Rating: important References: #673532 #903649 #905118 #914309 #916549 #932483 #936695 #938746 #943006 #943010 #945493 Cross-References: CVE-2015-4000 CVE-2015-5352 CVE-2015-5600 CVE-2015-6563 CVE-2015-6564 Affected Products: SUSE Linux Enterprise Server for VMWare 11-SP3 SUSE Linux Enterprise Server 11-SP3 SUSE Linux Enterprise Desktop 11-SP3 SUSE Linux Enterprise Debuginfo 11-SP3 ______________________________________________________________________________ An update that solves 5 vulnerabilities and has 6 fixes is now available. Description: openssh was updated to fix several security issues and bugs. These security issues were fixed: * CVE-2015-5352: The x11_open_helper function in channels.c in ssh in OpenSSH when ForwardX11Trusted mode is not used, lacked a check of the refusal deadline for X connections, which made it easier for remote attackers to bypass intended access restrictions via a connection outside of the permitted time window (bsc#936695). * CVE-2015-5600: The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH did not properly restrict the processing of keyboard-interactive devices within a single connection, which made it easier for remote attackers to conduct brute-force attacks or cause a denial of service (CPU consumption) via a long and duplicative list in the ssh -oKbdInteractiveDevices option, as demonstrated by a modified client that provides a different password for each pam element on this list (bsc#938746). * CVE-2015-4000: Removed and disabled weak DH groups to address LOGJAM (bsc#932483). * Hardening patch to fix sftp RCE (bsc#903649). * CVE-2015-6563: The monitor component in sshd in OpenSSH accepted extraneous username data in MONITOR_REQ_PAM_INIT_CTX requests, which allowed local users to conduct impersonation attacks by leveraging any SSH login access in conjunction with control of the sshd uid to send a crafted MONITOR_REQ_PWNAM request, related to monitor.c and monitor_wrap.c. * CVE-2015-6564: Use-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in OpenSSH might have allowed local users to gain privileges by leveraging control of the sshd uid to send an unexpectedly early MONITOR_REQ_PAM_FREE_CTX request. These non-security issues were fixed: - bsc#914309: sshd inherits oom_adj -17 on SIGHUP causing DoS potential for oom_killer. - bsc#673532: limits.conf fsize change in SLES10SP3 causing problems to WebSphere mqm user. - bsc#916549: Fixed support for aesXXX-gcm(a)openssh.com. Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server for VMWare 11-SP3: zypper in -t patch slessp3-openssh-12096=1 - SUSE Linux Enterprise Server 11-SP3: zypper in -t patch slessp3-openssh-12096=1 - SUSE Linux Enterprise Desktop 11-SP3: zypper in -t patch sledsp3-openssh-12096=1 - SUSE Linux Enterprise Debuginfo 11-SP3: zypper in -t patch dbgsp3-openssh-12096=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Server for VMWare 11-SP3 (i586 x86_64): openssh-6.2p2-0.21.1 openssh-askpass-6.2p2-0.21.1 openssh-askpass-gnome-6.2p2-0.21.3 - SUSE Linux Enterprise Server 11-SP3 (i586 ia64 ppc64 s390x x86_64): openssh-6.2p2-0.21.1 openssh-askpass-6.2p2-0.21.1 openssh-askpass-gnome-6.2p2-0.21.3 - SUSE Linux Enterprise Desktop 11-SP3 (i586 x86_64): openssh-6.2p2-0.21.1 openssh-askpass-6.2p2-0.21.1 openssh-askpass-gnome-6.2p2-0.21.3 - SUSE Linux Enterprise Debuginfo 11-SP3 (i586 ia64 ppc64 s390x x86_64): openssh-askpass-gnome-debuginfo-6.2p2-0.21.3 openssh-debuginfo-6.2p2-0.21.1 openssh-debugsource-6.2p2-0.21.1 References: https://www.suse.com/security/cve/CVE-2015-4000.html https://www.suse.com/security/cve/CVE-2015-5352.html https://www.suse.com/security/cve/CVE-2015-5600.html https://www.suse.com/security/cve/CVE-2015-6563.html https://www.suse.com/security/cve/CVE-2015-6564.html https://bugzilla.suse.com/673532 https://bugzilla.suse.com/903649 https://bugzilla.suse.com/905118 https://bugzilla.suse.com/914309 https://bugzilla.suse.com/916549 https://bugzilla.suse.com/932483 https://bugzilla.suse.com/936695 https://bugzilla.suse.com/938746 https://bugzilla.suse.com/943006 https://bugzilla.suse.com/943010 https://bugzilla.suse.com/945493 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:1528-1: important: Security update for MozillaFirefox, mozilla-nss
by opensuse-security＠opensuse.org 10 Sep '15

10 Sep '15

SUSE Security Update: Security update for MozillaFirefox, mozilla-nss ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:1528-1 Rating: important References: #940806 Cross-References: CVE-2015-4473 CVE-2015-4474 CVE-2015-4475 CVE-2015-4478 CVE-2015-4479 CVE-2015-4484 CVE-2015-4485 CVE-2015-4486 CVE-2015-4487 CVE-2015-4488 CVE-2015-4489 CVE-2015-4491 CVE-2015-4492 CVE-2015-4495 Affected Products: SUSE Linux Enterprise Software Development Kit 11-SP4 SUSE Linux Enterprise Software Development Kit 11-SP3 SUSE Linux Enterprise Server for VMWare 11-SP3 SUSE Linux Enterprise Server 11-SP4 SUSE Linux Enterprise Server 11-SP3 SUSE Linux Enterprise Desktop 11-SP4 SUSE Linux Enterprise Desktop 11-SP3 SUSE Linux Enterprise Debuginfo 11-SP4 SUSE Linux Enterprise Debuginfo 11-SP3 ______________________________________________________________________________ An update that fixes 14 vulnerabilities is now available. Description: Mozilla Firefox is being updated to the current Firefox 38ESR branch (specifically the 38.2.0ESR release). Security issues fixed: - MFSA 2015-78 / CVE-2015-4495: Same origin violation and local file stealing via PDF reader - MFSA 2015-79 / CVE-2015-4473/CVE-2015-4474: Miscellaneous memory safety hazards (rv:40.0 / rv:38.2) - MFSA 2015-80 / CVE-2015-4475: Out-of-bounds read with malformed MP3 file - MFSA 2015-82 / CVE-2015-4478: Redefinition of non-configurable JavaScript object properties - MFSA 2015-83 / CVE-2015-4479: Overflow issues in libstagefright - MFSA 2015-87 / CVE-2015-4484: Crash when using shared memory in JavaScript - MFSA 2015-88 / CVE-2015-4491: Heap overflow in gdk-pixbuf when scaling bitmap images - MFSA 2015-89 / CVE-2015-4485/CVE-2015-4486: Buffer overflows on Libvpx when decoding WebM video - MFSA 2015-90 / CVE-2015-4487/CVE-2015-4488/CVE-2015-4489: Vulnerabilities found through code inspection - MFSA 2015-92 / CVE-2015-4492: Use-after-free in XMLHttpRequest with shared workers This update also contains a lot of feature improvements and bug fixes from 31ESR to 38ESR. Also the Mozilla NSS library switched its CKBI API from 1.98 to 2.4, which is what Firefox 38ESR uses. Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11-SP4: zypper in -t patch sdksp4-firefox38-20150820-12083=1 - SUSE Linux Enterprise Software Development Kit 11-SP3: zypper in -t patch sdksp3-firefox38-20150820-12083=1 - SUSE Linux Enterprise Server for VMWare 11-SP3: zypper in -t patch slessp3-firefox38-20150820-12083=1 - SUSE Linux Enterprise Server 11-SP4: zypper in -t patch slessp4-firefox38-20150820-12083=1 - SUSE Linux Enterprise Server 11-SP3: zypper in -t patch slessp3-firefox38-20150820-12083=1 - SUSE Linux Enterprise Desktop 11-SP4: zypper in -t patch sledsp4-firefox38-20150820-12083=1 - SUSE Linux Enterprise Desktop 11-SP3: zypper in -t patch sledsp3-firefox38-20150820-12083=1 - SUSE Linux Enterprise Debuginfo 11-SP4: zypper in -t patch dbgsp4-firefox38-20150820-12083=1 - SUSE Linux Enterprise Debuginfo 11-SP3: zypper in -t patch dbgsp3-firefox38-20150820-12083=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11-SP4 (i586 ia64 ppc64 s390x x86_64): MozillaFirefox-devel-38.2.1esr-19.3 mozilla-nss-devel-3.19.2.0-0.16.1 - SUSE Linux Enterprise Software Development Kit 11-SP3 (i586 ia64 ppc64 s390x x86_64): MozillaFirefox-devel-38.2.1esr-19.3 mozilla-nss-devel-3.19.2.0-0.16.1 - SUSE Linux Enterprise Server for VMWare 11-SP3 (i586 x86_64): MozillaFirefox-38.2.1esr-19.3 MozillaFirefox-branding-SLES-for-VMware-31.0-0.7.5 MozillaFirefox-translations-38.2.1esr-19.3 libfreebl3-3.19.2.0-0.16.1 libsoftokn3-3.19.2.0-0.16.1 mozilla-nss-3.19.2.0-0.16.1 mozilla-nss-tools-3.19.2.0-0.16.1 - SUSE Linux Enterprise Server for VMWare 11-SP3 (x86_64): libfreebl3-32bit-3.19.2.0-0.16.1 libsoftokn3-32bit-3.19.2.0-0.16.1 mozilla-nss-32bit-3.19.2.0-0.16.1 - SUSE Linux Enterprise Server 11-SP4 (i586 ia64 ppc64 s390x x86_64): MozillaFirefox-38.2.1esr-19.3 MozillaFirefox-branding-SLED-31.0-0.12.51 MozillaFirefox-translations-38.2.1esr-19.3 libfreebl3-3.19.2.0-0.16.1 libsoftokn3-3.19.2.0-0.16.1 mozilla-nss-3.19.2.0-0.16.1 mozilla-nss-tools-3.19.2.0-0.16.1 - SUSE Linux Enterprise Server 11-SP4 (ppc64 s390x x86_64): libfreebl3-32bit-3.19.2.0-0.16.1 libsoftokn3-32bit-3.19.2.0-0.16.1 mozilla-nss-32bit-3.19.2.0-0.16.1 - SUSE Linux Enterprise Server 11-SP4 (ia64): libfreebl3-x86-3.19.2.0-0.16.1 libsoftokn3-x86-3.19.2.0-0.16.1 mozilla-nss-x86-3.19.2.0-0.16.1 - SUSE Linux Enterprise Server 11-SP3 (i586 ia64 ppc64 s390x x86_64): MozillaFirefox-38.2.1esr-19.3 MozillaFirefox-branding-SLED-31.0-0.12.51 MozillaFirefox-translations-38.2.1esr-19.3 libfreebl3-3.19.2.0-0.16.1 libsoftokn3-3.19.2.0-0.16.1 mozilla-nss-3.19.2.0-0.16.1 mozilla-nss-tools-3.19.2.0-0.16.1 - SUSE Linux Enterprise Server 11-SP3 (ppc64 s390x x86_64): libfreebl3-32bit-3.19.2.0-0.16.1 libsoftokn3-32bit-3.19.2.0-0.16.1 mozilla-nss-32bit-3.19.2.0-0.16.1 - SUSE Linux Enterprise Server 11-SP3 (ia64): libfreebl3-x86-3.19.2.0-0.16.1 libsoftokn3-x86-3.19.2.0-0.16.1 mozilla-nss-x86-3.19.2.0-0.16.1 - SUSE Linux Enterprise Desktop 11-SP4 (i586 x86_64): MozillaFirefox-38.2.1esr-19.3 MozillaFirefox-branding-SLED-31.0-0.12.51 MozillaFirefox-translations-38.2.1esr-19.3 libfreebl3-3.19.2.0-0.16.1 libsoftokn3-3.19.2.0-0.16.1 mozilla-nss-3.19.2.0-0.16.1 mozilla-nss-tools-3.19.2.0-0.16.1 - SUSE Linux Enterprise Desktop 11-SP4 (x86_64): libfreebl3-32bit-3.19.2.0-0.16.1 libsoftokn3-32bit-3.19.2.0-0.16.1 mozilla-nss-32bit-3.19.2.0-0.16.1 - SUSE Linux Enterprise Desktop 11-SP3 (i586 x86_64): MozillaFirefox-38.2.1esr-19.3 MozillaFirefox-branding-SLED-31.0-0.12.51 MozillaFirefox-translations-38.2.1esr-19.3 libfreebl3-3.19.2.0-0.16.1 libsoftokn3-3.19.2.0-0.16.1 mozilla-nss-3.19.2.0-0.16.1 mozilla-nss-tools-3.19.2.0-0.16.1 - SUSE Linux Enterprise Desktop 11-SP3 (x86_64): libfreebl3-32bit-3.19.2.0-0.16.1 libsoftokn3-32bit-3.19.2.0-0.16.1 mozilla-nss-32bit-3.19.2.0-0.16.1 - SUSE Linux Enterprise Debuginfo 11-SP4 (i586 ia64 ppc64 s390x x86_64): MozillaFirefox-debuginfo-38.2.1esr-19.3 MozillaFirefox-debugsource-38.2.1esr-19.3 mozilla-nss-debuginfo-3.19.2.0-0.16.1 mozilla-nss-debugsource-3.19.2.0-0.16.1 - SUSE Linux Enterprise Debuginfo 11-SP3 (i586 ia64 ppc64 s390x x86_64): MozillaFirefox-debuginfo-38.2.1esr-19.3 MozillaFirefox-debugsource-38.2.1esr-19.3 mozilla-nss-debuginfo-3.19.2.0-0.16.1 mozilla-nss-debugsource-3.19.2.0-0.16.1 References: https://www.suse.com/security/cve/CVE-2015-4473.html https://www.suse.com/security/cve/CVE-2015-4474.html https://www.suse.com/security/cve/CVE-2015-4475.html https://www.suse.com/security/cve/CVE-2015-4478.html https://www.suse.com/security/cve/CVE-2015-4479.html https://www.suse.com/security/cve/CVE-2015-4484.html https://www.suse.com/security/cve/CVE-2015-4485.html https://www.suse.com/security/cve/CVE-2015-4486.html https://www.suse.com/security/cve/CVE-2015-4487.html https://www.suse.com/security/cve/CVE-2015-4488.html https://www.suse.com/security/cve/CVE-2015-4489.html https://www.suse.com/security/cve/CVE-2015-4491.html https://www.suse.com/security/cve/CVE-2015-4492.html https://www.suse.com/security/cve/CVE-2015-4495.html https://bugzilla.suse.com/940806 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:1519-1: important: Security update for qemu
by opensuse-security＠opensuse.org 09 Sep '15

09 Sep '15

SUSE Security Update: Security update for qemu ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:1519-1 Rating: important References: #893892 #932267 #932770 Cross-References: CVE-2015-3209 CVE-2015-4037 Affected Products: SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Desktop 12 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: qemu was updated to fix two security issues and augments one non-security bug fix. The following vulnerabilities were fixed: * CVE-2015-3209: heap overflow in qemu pcnet controller allowing guest to host escape (XSA-135) (bsc#932770) * CVE-2015-4037: Avoid predictable directory name for smb config (bsc#932267) The fix for the following non-security bug was improved: * bsc#893892: Use improved upstream patch for display issue affecting installs of SLES 11 VMs on SLES 12 Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 12: zypper in -t patch SUSE-SLE-SERVER-12-2015-509=1 - SUSE Linux Enterprise Desktop 12: zypper in -t patch SUSE-SLE-DESKTOP-12-2015-509=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Server 12 (ppc64le s390x x86_64): qemu-2.0.2-48.4.1 qemu-block-curl-2.0.2-48.4.1 qemu-block-curl-debuginfo-2.0.2-48.4.1 qemu-debugsource-2.0.2-48.4.1 qemu-guest-agent-2.0.2-48.4.1 qemu-guest-agent-debuginfo-2.0.2-48.4.1 qemu-lang-2.0.2-48.4.1 qemu-tools-2.0.2-48.4.1 qemu-tools-debuginfo-2.0.2-48.4.1 - SUSE Linux Enterprise Server 12 (s390x x86_64): qemu-kvm-2.0.2-48.4.1 - SUSE Linux Enterprise Server 12 (ppc64le): qemu-ppc-2.0.2-48.4.1 qemu-ppc-debuginfo-2.0.2-48.4.1 - SUSE Linux Enterprise Server 12 (noarch): qemu-ipxe-1.0.0-48.4.1 qemu-seabios-1.7.4-48.4.1 qemu-sgabios-8-48.4.1 qemu-vgabios-1.7.4-48.4.1 - SUSE Linux Enterprise Server 12 (x86_64): qemu-block-rbd-2.0.2-48.4.1 qemu-block-rbd-debuginfo-2.0.2-48.4.1 qemu-x86-2.0.2-48.4.1 qemu-x86-debuginfo-2.0.2-48.4.1 - SUSE Linux Enterprise Server 12 (s390x): qemu-s390-2.0.2-48.4.1 qemu-s390-debuginfo-2.0.2-48.4.1 - SUSE Linux Enterprise Desktop 12 (x86_64): qemu-2.0.2-48.4.1 qemu-block-curl-2.0.2-48.4.1 qemu-block-curl-debuginfo-2.0.2-48.4.1 qemu-debugsource-2.0.2-48.4.1 qemu-kvm-2.0.2-48.4.1 qemu-tools-2.0.2-48.4.1 qemu-tools-debuginfo-2.0.2-48.4.1 qemu-x86-2.0.2-48.4.1 qemu-x86-debuginfo-2.0.2-48.4.1 - SUSE Linux Enterprise Desktop 12 (noarch): qemu-ipxe-1.0.0-48.4.1 qemu-seabios-1.7.4-48.4.1 qemu-sgabios-8-48.4.1 qemu-vgabios-1.7.4-48.4.1 References: https://www.suse.com/security/cve/CVE-2015-3209.html https://www.suse.com/security/cve/CVE-2015-4037.html https://bugzilla.suse.com/893892 https://bugzilla.suse.com/932267 https://bugzilla.suse.com/932770 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:1509-1: important: Security update for java-1_6_0-ibm
by opensuse-security＠opensuse.org 08 Sep '15

08 Sep '15

SUSE Security Update: Security update for java-1_6_0-ibm ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:1509-1 Rating: important References: #935540 #936844 #938895 #941939 Cross-References: CVE-2015-1931 CVE-2015-2590 CVE-2015-2601 CVE-2015-2621 CVE-2015-2625 CVE-2015-2632 CVE-2015-2637 CVE-2015-2638 CVE-2015-2664 CVE-2015-2808 CVE-2015-4000 CVE-2015-4731 CVE-2015-4732 CVE-2015-4733 CVE-2015-4748 CVE-2015-4749 CVE-2015-4760 Affected Products: SUSE Linux Enterprise Software Development Kit 11-SP3 SUSE Linux Enterprise Server for VMWare 11-SP3 SUSE Linux Enterprise Server 11-SP3 SUSE Linux Enterprise Server 11-SP2-LTSS SUSE Linux Enterprise Server 11-SP1-LTSS ______________________________________________________________________________ An update that fixes 17 vulnerabilities is now available. Description: IBM Java was updated to version 6 SR16 FP7 (6.0-16.7) to fix several security issues and bugs. The following vulnerabilities were fixed: * CVE-2015-1931: IBM Java Security Components store plain text data in memory dumps, which could allow a local attacker to obtain information to aid in further attacks against the system. * CVE-2015-2590: Easily exploitable vulnerability in the Libraries component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution. * CVE-2015-2601: Easily exploitable vulnerability in the JCE component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data. * CVE-2015-2621: Easily exploitable vulnerability in the JMX component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data. * CVE-2015-2625: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data. * CVE-2015-2632: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data. * CVE-2015-2637: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data. * CVE-2015-2638: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution. * CVE-2015-2664: Difficult to exploit vulnerability in the Deployment component requiring logon to Operating System. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution. * CVE-2015-2808: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access to some Java accessible data as well as read access to a subset of Java accessible data. * CVE-2015-4000: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access to some Java accessible data as well as read access to a subset of Java Embedded accessible data. (bnc#935540) * CVE-2015-4731: Easily exploitable vulnerability in the JMX component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution. * CVE-2015-4732: Easily exploitable vulnerability in the Libraries component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution. * CVE-2015-4733: Easily exploitable vulnerability in the RMI component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution. * CVE-2015-4748: Very difficult to exploit vulnerability in the Security component allowed successful unauthenticated network attacks via OCSP. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution. * CVE-2015-4749: Difficult to exploit vulnerability in the JNDI component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized ability to cause a partial denial of service (partial DOS). * CVE-2015-4760: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution. The following non-security bugs were fixed: * bsc#936844: misconfigured update-alternative entries * bsc#941939: provide %{name} instead of %{sdklnk} only in _jvmprivdir Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11-SP3: zypper in -t patch sdksp3-java-1_6_0-ibm-12072=1 - SUSE Linux Enterprise Server for VMWare 11-SP3: zypper in -t patch slessp3-java-1_6_0-ibm-12072=1 - SUSE Linux Enterprise Server 11-SP3: zypper in -t patch slessp3-java-1_6_0-ibm-12072=1 - SUSE Linux Enterprise Server 11-SP2-LTSS: zypper in -t patch slessp2-java-1_6_0-ibm-12072=1 - SUSE Linux Enterprise Server 11-SP1-LTSS: zypper in -t patch slessp1-java-1_6_0-ibm-12072=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11-SP3 (i586 ppc64 s390x x86_64): java-1_6_0-ibm-devel-1.6.0_sr16.7-10.1 - SUSE Linux Enterprise Software Development Kit 11-SP3 (i586 x86_64): java-1_6_0-ibm-1.6.0_sr16.7-10.1 java-1_6_0-ibm-fonts-1.6.0_sr16.7-10.1 - SUSE Linux Enterprise Server for VMWare 11-SP3 (i586 x86_64): java-1_6_0-ibm-1.6.0_sr16.7-10.1 java-1_6_0-ibm-fonts-1.6.0_sr16.7-10.1 java-1_6_0-ibm-jdbc-1.6.0_sr16.7-10.1 java-1_6_0-ibm-plugin-1.6.0_sr16.7-10.1 - SUSE Linux Enterprise Server for VMWare 11-SP3 (i586): java-1_6_0-ibm-alsa-1.6.0_sr16.7-10.1 - SUSE Linux Enterprise Server 11-SP3 (i586 ppc64 s390x x86_64): java-1_6_0-ibm-1.6.0_sr16.7-10.1 java-1_6_0-ibm-fonts-1.6.0_sr16.7-10.1 java-1_6_0-ibm-jdbc-1.6.0_sr16.7-10.1 - SUSE Linux Enterprise Server 11-SP3 (i586 x86_64): java-1_6_0-ibm-plugin-1.6.0_sr16.7-10.1 - SUSE Linux Enterprise Server 11-SP3 (i586): java-1_6_0-ibm-alsa-1.6.0_sr16.7-10.1 - SUSE Linux Enterprise Server 11-SP2-LTSS (i586 s390x x86_64): java-1_6_0-ibm-1.6.0_sr16.7-10.1 java-1_6_0-ibm-devel-1.6.0_sr16.7-10.1 java-1_6_0-ibm-fonts-1.6.0_sr16.7-10.1 java-1_6_0-ibm-jdbc-1.6.0_sr16.7-10.1 - SUSE Linux Enterprise Server 11-SP2-LTSS (i586 x86_64): java-1_6_0-ibm-plugin-1.6.0_sr16.7-10.1 - SUSE Linux Enterprise Server 11-SP2-LTSS (i586): java-1_6_0-ibm-alsa-1.6.0_sr16.7-10.1 - SUSE Linux Enterprise Server 11-SP1-LTSS (i586 s390x x86_64): java-1_6_0-ibm-1.6.0_sr16.7-10.1 java-1_6_0-ibm-fonts-1.6.0_sr16.7-10.1 java-1_6_0-ibm-jdbc-1.6.0_sr16.7-10.1 - SUSE Linux Enterprise Server 11-SP1-LTSS (i586 x86_64): java-1_6_0-ibm-plugin-1.6.0_sr16.7-10.1 - SUSE Linux Enterprise Server 11-SP1-LTSS (i586): java-1_6_0-ibm-alsa-1.6.0_sr16.7-10.1 References: https://www.suse.com/security/cve/CVE-2015-1931.html https://www.suse.com/security/cve/CVE-2015-2590.html https://www.suse.com/security/cve/CVE-2015-2601.html https://www.suse.com/security/cve/CVE-2015-2621.html https://www.suse.com/security/cve/CVE-2015-2625.html https://www.suse.com/security/cve/CVE-2015-2632.html https://www.suse.com/security/cve/CVE-2015-2637.html https://www.suse.com/security/cve/CVE-2015-2638.html https://www.suse.com/security/cve/CVE-2015-2664.html https://www.suse.com/security/cve/CVE-2015-2808.html https://www.suse.com/security/cve/CVE-2015-4000.html https://www.suse.com/security/cve/CVE-2015-4731.html https://www.suse.com/security/cve/CVE-2015-4732.html https://www.suse.com/security/cve/CVE-2015-4733.html https://www.suse.com/security/cve/CVE-2015-4748.html https://www.suse.com/security/cve/CVE-2015-4749.html https://www.suse.com/security/cve/CVE-2015-4760.html https://bugzilla.suse.com/935540 https://bugzilla.suse.com/936844 https://bugzilla.suse.com/938895 https://bugzilla.suse.com/941939 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:1504-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 07 Sep '15

07 Sep '15

SUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:1504-1 Rating: important References: #943557 #943558 #943608 Cross-References: CVE-2015-4497 CVE-2015-4498 Affected Products: SUSE Linux Enterprise Server 11-SP2-LTSS SUSE Linux Enterprise Server 11-SP1-LTSS SUSE Linux Enterprise Debuginfo 11-SP2 SUSE Linux Enterprise Debuginfo 11-SP1 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: Mozilla Firefox was updated to 38.2.1 ESR, fixing two severe security bugs. (bsc#943608) * MFSA 2015-94/CVE-2015-4497 (bsc#943557): Use-after-free when resizing canvas element during restyling * MFSA 2015-95/CVE-2015-4498 (bsc#943558): Add-on notification bypass through data URLs Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 11-SP2-LTSS: zypper in -t patch slessp2-firefox-20150831-12071=1 - SUSE Linux Enterprise Server 11-SP1-LTSS: zypper in -t patch slessp1-firefox-20150831-12071=1 - SUSE Linux Enterprise Debuginfo 11-SP2: zypper in -t patch dbgsp2-firefox-20150831-12071=1 - SUSE Linux Enterprise Debuginfo 11-SP1: zypper in -t patch dbgsp1-firefox-20150831-12071=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Server 11-SP2-LTSS (i586 s390x x86_64): MozillaFirefox-38.2.1esr-17.1 MozillaFirefox-translations-38.2.1esr-17.1 - SUSE Linux Enterprise Server 11-SP1-LTSS (i586 s390x x86_64): MozillaFirefox-38.2.1esr-17.1 MozillaFirefox-translations-38.2.1esr-17.1 - SUSE Linux Enterprise Debuginfo 11-SP2 (i586 s390x x86_64): MozillaFirefox-debuginfo-38.2.1esr-17.1 MozillaFirefox-debugsource-38.2.1esr-17.1 - SUSE Linux Enterprise Debuginfo 11-SP1 (i586 s390x x86_64): MozillaFirefox-debuginfo-38.2.1esr-17.1 MozillaFirefox-debugsource-38.2.1esr-17.1 References: https://www.suse.com/security/cve/CVE-2015-4497.html https://www.suse.com/security/cve/CVE-2015-4498.html https://bugzilla.suse.com/943557 https://bugzilla.suse.com/943558 https://bugzilla.suse.com/943608 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:1496-1: important: Security update for bind
by opensuse-security＠opensuse.org 04 Sep '15

04 Sep '15

SUSE Security Update: Security update for bind ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:1496-1 Rating: important References: #944066 Cross-References: CVE-2015-5722 Affected Products: SUSE Linux Enterprise Server 11-SP1-LTSS SUSE Linux Enterprise Debuginfo 11-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The nameserver bind was updated to fix a remote denial of service (crash) attack against bind nameservers doing validation on DNSSEC signed records. (CVE-2015-5722, bsc#944066). Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 11-SP1-LTSS: zypper in -t patch slessp1-bind-12070=1 - SUSE Linux Enterprise Debuginfo 11-SP1: zypper in -t patch dbgsp1-bind-12070=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Server 11-SP1-LTSS (i586 s390x x86_64): bind-9.6ESVR11W1-0.9.1 bind-chrootenv-9.6ESVR11W1-0.9.1 bind-devel-9.6ESVR11W1-0.9.1 bind-doc-9.6ESVR11W1-0.9.1 bind-libs-9.6ESVR11W1-0.9.1 bind-utils-9.6ESVR11W1-0.9.1 - SUSE Linux Enterprise Server 11-SP1-LTSS (s390x x86_64): bind-libs-32bit-9.6ESVR11W1-0.9.1 - SUSE Linux Enterprise Debuginfo 11-SP1 (i586 s390x x86_64): bind-debuginfo-9.6ESVR11W1-0.9.1 bind-debugsource-9.6ESVR11W1-0.9.1 References: https://www.suse.com/security/cve/CVE-2015-5722.html https://bugzilla.suse.com/944066 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:1491-1: important: Live patch for the Linux Kernel
by opensuse-security＠opensuse.org 04 Sep '15

04 Sep '15

SUSE Security Update: Live patch for the Linux Kernel ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:1491-1 Rating: important References: #939044 #939241 #939262 #939263 #939270 #939273 #939276 #939277 Cross-References: CVE-2014-8159 CVE-2015-1805 CVE-2015-3331 CVE-2015-3339 CVE-2015-3636 CVE-2015-4700 CVE-2015-5364 CVE-2015-5366 Affected Products: SUSE Linux Enterprise Live Patching 12 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: This update contains a kernel live patch for the 3.12.39-47 SUSE Linux Enterprise Server 12 Kernel, fixing following security issues. - CVE-2015-3339: A race condition in the prepare_binprm function in fs/exec.c in the Linux kernel allowed local users to gain privileges by executing a setuid program at a time instant when a chown to root is in progress, and the ownership is changed but the setuid bit is not yet stripped. (bsc#939263 bsc#939044) - CVE-2015-3636: The ping_unhash function in net/ipv4/ping.c in the Linux kernel did not initialize a certain list data structure during an unhash operation, which allowed local users to gain privileges or cause a denial of service (use-after-free and system crash) by leveraging the ability to make a SOCK_DGRAM socket system call for the IPPROTO_ICMP or IPPROTO_ICMPV6 protocol, and then making a connect system call after a disconnect. (bsc#939277) - CVE-2015-5364/CVE-2015-5366: Two denial of service attacks via a flood of UDP packets with invalid checksums were fixed that could be used by remote attackers to delay execution. (bsc#939276) - CVE-2015-1805: The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in the Linux kernel did not properly consider the side effects of failed __copy_to_user_inatomic and __copy_from_user_inatomic calls, which allowed local users to cause a denial of service (system crash) or possibly gain privileges via a crafted application, aka an "I/O vector array overrun." (bsc#939270) - CVE-2015-4700: A BPF Jit optimization flaw could allow local users to panic the kernel. (bsc#939273) - CVE-2015-3331: The __driver_rfc4106_decrypt function in arch/x86/crypto/aesni-intel_glue.c in the Linux kernel did not properly determine the memory locations used for encrypted data, which allowed context-dependent attackers to cause a denial of service (buffer overflow and system crash) or possibly execute arbitrary code by triggering a crypto API call, as demonstrated by use of a libkcapi test program with an AF_ALG(aead) socket. (bsc#939262) - CVE-2014-8159: The InfiniBand (IB) implementation in the Linux kernel did not properly restrict use of User Verbs for registration of memory regions, which allowed local users to access arbitrary physical memory locations, and consequently cause a denial of service (system crash) or gain privileges, by leveraging permissions on a uverbs device under /dev/infiniband/. (bsc#939241) Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Live Patching 12: zypper in -t patch SUSE-SLE-Live-Patching-12-2015-487=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Live Patching 12 (x86_64): kgraft-patch-3_12_39-47-default-2-10.1 kgraft-patch-3_12_39-47-xen-2-10.1 References: https://www.suse.com/security/cve/CVE-2014-8159.html https://www.suse.com/security/cve/CVE-2015-1805.html https://www.suse.com/security/cve/CVE-2015-3331.html https://www.suse.com/security/cve/CVE-2015-3339.html https://www.suse.com/security/cve/CVE-2015-3636.html https://www.suse.com/security/cve/CVE-2015-4700.html https://www.suse.com/security/cve/CVE-2015-5364.html https://www.suse.com/security/cve/CVE-2015-5366.html https://bugzilla.suse.com/939044 https://bugzilla.suse.com/939241 https://bugzilla.suse.com/939262 https://bugzilla.suse.com/939263 https://bugzilla.suse.com/939270 https://bugzilla.suse.com/939273 https://bugzilla.suse.com/939276 https://bugzilla.suse.com/939277 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:1490-1: important: Live patch for the Linux Kernel
by opensuse-security＠opensuse.org 04 Sep '15

04 Sep '15

SUSE Security Update: Live patch for the Linux Kernel ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:1490-1 Rating: important References: #939044 #939270 #939273 #939276 Cross-References: CVE-2015-1805 CVE-2015-4700 CVE-2015-5364 CVE-2015-5366 Affected Products: SUSE Linux Enterprise Live Patching 12 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update contains a kernel live patch for the 3.12.43-52.6 SUSE Linux Enterprise Server 12 Kernel, fixing following security issues. - CVE-2015-5364/CVE-2015-5366: Two denial of service attacks via a flood of UDP packets with invalid checksums were fixed that could be used by remote attackers to delay execution. (bsc#939276) - CVE-2015-1805: The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in the Linux kernel did not properly consider the side effects of failed __copy_to_user_inatomic and __copy_from_user_inatomic calls, which allowed local users to cause a denial of service (system crash) or possibly gain privileges via a crafted application, aka an "I/O vector array overrun." (bsc#939270) - CVE-2015-4700: A BPF Jit optimization flaw could allow local users to panic the kernel. (bsc#939273) Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Live Patching 12: zypper in -t patch SUSE-SLE-Live-Patching-12-2015-488=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Live Patching 12 (x86_64): kgraft-patch-3_12_43-52_6-default-2-6.1 kgraft-patch-3_12_43-52_6-xen-2-6.1 References: https://www.suse.com/security/cve/CVE-2015-1805.html https://www.suse.com/security/cve/CVE-2015-4700.html https://www.suse.com/security/cve/CVE-2015-5364.html https://www.suse.com/security/cve/CVE-2015-5366.html https://bugzilla.suse.com/939044 https://bugzilla.suse.com/939270 https://bugzilla.suse.com/939273 https://bugzilla.suse.com/939276 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:1489-1: important: Live patch for the Linux Kernel
by opensuse-security＠opensuse.org 04 Sep '15

04 Sep '15

SUSE Security Update: Live patch for the Linux Kernel ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:1489-1 Rating: important References: #902349 #916225 #939044 #939240 #939241 #939260 #939262 #939263 #939270 #939273 #939276 #939277 Cross-References: CVE-2014-3687 CVE-2014-7822 CVE-2014-8159 CVE-2014-9710 CVE-2015-1465 CVE-2015-1805 CVE-2015-3331 CVE-2015-3339 CVE-2015-3636 CVE-2015-4700 CVE-2015-5364 CVE-2015-5366 Affected Products: SUSE Linux Enterprise Live Patching 12 ______________________________________________________________________________ An update that fixes 12 vulnerabilities is now available. Description: This update contains a kernel live patch for the 3.12.32-33 SUSE Linux Enterprise Server 12 Kernel, fixing following security issues. - CVE-2015-3339: A race condition in the prepare_binprm function in fs/exec.c in the Linux kernel allowed local users to gain privileges by executing a setuid program at a time instant when a chown to root is in progress, and the ownership is changed but the setuid bit is not yet stripped. (bsc#939263 bsc#939044) - CVE-2015-1465: The IPv4 implementation in the Linux kernel did not properly consider the length of the Read-Copy Update (RCU) grace period for redirecting lookups in the absence of caching, which allowed remote attackers to cause a denial of service (memory consumption or system crash) via a flood of packets. (bsc#939044 bsc#916225) - CVE-2015-3636: The ping_unhash function in net/ipv4/ping.c in the Linux kernel did not initialize a certain list data structure during an unhash operation, which allowed local users to gain privileges or cause a denial of service (use-after-free and system crash) by leveraging the ability to make a SOCK_DGRAM socket system call for the IPPROTO_ICMP or IPPROTO_ICMPV6 protocol, and then making a connect system call after a disconnect. (bsc#939277) - CVE-2015-5364/CVE-2015-5366: Two denial of service attacks via a flood of UDP packets with invalid checksums were fixed that could be used by remote attackers to delay execution. (bsc#939276) - CVE-2015-1805: The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in the Linux kernel did not properly consider the side effects of failed __copy_to_user_inatomic and __copy_from_user_inatomic calls, which allowed local users to cause a denial of service (system crash) or possibly gain privileges via a crafted application, aka an "I/O vector array overrun." (bsc#939270) - CVE-2015-4700: A BPF Jit optimization flaw could allow local users to panic the kernel. (bsc#939273) - CVE-2014-9710: The Btrfs implementation in the Linux kernel did not ensure that the visible xattr state is consistent with a requested replacement, which allowed local users to bypass intended ACL settings and gain privileges via standard filesystem operations (1) during an xattr-replacement time window, related to a race condition, or (2) after an xattr-replacement attempt that fails because the data does not fit. (bsc#939260) - CVE-2014-3687: The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel allowed remote attackers to cause a denial of service (panic) via duplicate ASCONF chunks that trigger an incorrect uncork within the side-effect interpreter. (bsc#902349 bsc#939044) - CVE-2015-3331: The __driver_rfc4106_decrypt function in arch/x86/crypto/aesni-intel_glue.c in the Linux kernel did not properly determine the memory locations used for encrypted data, which allowed context-dependent attackers to cause a denial of service (buffer overflow and system crash) or possibly execute arbitrary code by triggering a crypto API call, as demonstrated by use of a libkcapi test program with an AF_ALG(aead) socket. (bsc#939262) - CVE-2014-8159: The InfiniBand (IB) implementation in the Linux kernel did not properly restrict use of User Verbs for registration of memory regions, which allowed local users to access arbitrary physical memory locations, and consequently cause a denial of service (system crash) or gain privileges, by leveraging permissions on a uverbs device under /dev/infiniband/. (bsc#939241) - CVE-2014-7822: The implementation of certain splice_write file operations in the Linux kernel before 3.16 does not enforce a restriction on the maximum size of a single file, which allows local users to cause a denial of service (system crash) or possibly have unspecified other impact via a crafted splice system call, as demonstrated by use of a file descriptor associated with an ext4 filesystem. (bsc#939240) Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Live Patching 12: zypper in -t patch SUSE-SLE-Live-Patching-12-2015-484=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Live Patching 12 (x86_64): kgraft-patch-3_12_32-33-default-3-2.1 kgraft-patch-3_12_32-33-xen-3-2.1 References: https://www.suse.com/security/cve/CVE-2014-3687.html https://www.suse.com/security/cve/CVE-2014-7822.html https://www.suse.com/security/cve/CVE-2014-8159.html https://www.suse.com/security/cve/CVE-2014-9710.html https://www.suse.com/security/cve/CVE-2015-1465.html https://www.suse.com/security/cve/CVE-2015-1805.html https://www.suse.com/security/cve/CVE-2015-3331.html https://www.suse.com/security/cve/CVE-2015-3339.html https://www.suse.com/security/cve/CVE-2015-3636.html https://www.suse.com/security/cve/CVE-2015-4700.html https://www.suse.com/security/cve/CVE-2015-5364.html https://www.suse.com/security/cve/CVE-2015-5366.html https://bugzilla.suse.com/902349 https://bugzilla.suse.com/916225 https://bugzilla.suse.com/939044 https://bugzilla.suse.com/939240 https://bugzilla.suse.com/939241 https://bugzilla.suse.com/939260 https://bugzilla.suse.com/939262 https://bugzilla.suse.com/939263 https://bugzilla.suse.com/939270 https://bugzilla.suse.com/939273 https://bugzilla.suse.com/939276 https://bugzilla.suse.com/939277 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:1488-1: important: Live patch for the Linux Kernel
by opensuse-security＠opensuse.org 04 Sep '15

04 Sep '15

SUSE Security Update: Live patch for the Linux Kernel ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:1488-1 Rating: important References: #916225 #939044 #939240 #939241 #939262 #939263 #939270 #939273 #939276 #939277 Cross-References: CVE-2014-7822 CVE-2014-8159 CVE-2015-1465 CVE-2015-1805 CVE-2015-3331 CVE-2015-3339 CVE-2015-3636 CVE-2015-4700 CVE-2015-5364 CVE-2015-5366 Affected Products: SUSE Linux Enterprise Live Patching 12 ______________________________________________________________________________ An update that fixes 10 vulnerabilities is now available. Description: This update contains a kernel live patch for the 3.12.36-38 SUSE Linux Enterprise Server 12 Kernel, fixing following security issues. - CVE-2015-3339: A race condition in the prepare_binprm function in fs/exec.c in the Linux kernel allowed local users to gain privileges by executing a setuid program at a time instant when a chown to root is in progress, and the ownership is changed but the setuid bit is not yet stripped. (bsc#939263 bsc#939044) - CVE-2015-1465: The IPv4 implementation in the Linux kernel did not properly consider the length of the Read-Copy Update (RCU) grace period for redirecting lookups in the absence of caching, which allowed remote attackers to cause a denial of service (memory consumption or system crash) via a flood of packets. (bsc#939044 bsc#916225) - CVE-2015-3636: The ping_unhash function in net/ipv4/ping.c in the Linux kernel did not initialize a certain list data structure during an unhash operation, which allowed local users to gain privileges or cause a denial of service (use-after-free and system crash) by leveraging the ability to make a SOCK_DGRAM socket system call for the IPPROTO_ICMP or IPPROTO_ICMPV6 protocol, and then making a connect system call after a disconnect. (bsc#939277) - CVE-2015-5364/CVE-2015-5366: Two denial of service attacks via a flood of UDP packets with invalid checksums were fixed that could be used by remote attackers to delay execution. (bsc#939276) - CVE-2015-1805: The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in the Linux kernel did not properly consider the side effects of failed __copy_to_user_inatomic and __copy_from_user_inatomic calls, which allowed local users to cause a denial of service (system crash) or possibly gain privileges via a crafted application, aka an "I/O vector array overrun." (bsc#939270) - CVE-2015-4700: A BPF Jit optimization flaw could allow local users to panic the kernel. (bsc#939273) - CVE-2015-3331: The __driver_rfc4106_decrypt function in arch/x86/crypto/aesni-intel_glue.c in the Linux kernel did not properly determine the memory locations used for encrypted data, which allowed context-dependent attackers to cause a denial of service (buffer overflow and system crash) or possibly execute arbitrary code by triggering a crypto API call, as demonstrated by use of a libkcapi test program with an AF_ALG(aead) socket. (bsc#939262) - CVE-2014-8159: The InfiniBand (IB) implementation in the Linux kernel did not properly restrict use of User Verbs for registration of memory regions, which allowed local users to access arbitrary physical memory locations, and consequently cause a denial of service (system crash) or gain privileges, by leveraging permissions on a uverbs device under /dev/infiniband/. (bsc#939241) - CVE-2014-7822: The implementation of certain splice_write file operations in the Linux kernel before 3.16 does not enforce a restriction on the maximum size of a single file, which allows local users to cause a denial of service (system crash) or possibly have unspecified other impact via a crafted splice system call, as demonstrated by use of a file descriptor associated with an ext4 filesystem. (bsc#939240) Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Live Patching 12: zypper in -t patch SUSE-SLE-Live-Patching-12-2015-485=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Live Patching 12 (x86_64): kgraft-patch-3_12_36-38-default-3-2.1 kgraft-patch-3_12_36-38-xen-3-2.1 References: https://www.suse.com/security/cve/CVE-2014-7822.html https://www.suse.com/security/cve/CVE-2014-8159.html https://www.suse.com/security/cve/CVE-2015-1465.html https://www.suse.com/security/cve/CVE-2015-1805.html https://www.suse.com/security/cve/CVE-2015-3331.html https://www.suse.com/security/cve/CVE-2015-3339.html https://www.suse.com/security/cve/CVE-2015-3636.html https://www.suse.com/security/cve/CVE-2015-4700.html https://www.suse.com/security/cve/CVE-2015-5364.html https://www.suse.com/security/cve/CVE-2015-5366.html https://bugzilla.suse.com/916225 https://bugzilla.suse.com/939044 https://bugzilla.suse.com/939240 https://bugzilla.suse.com/939241 https://bugzilla.suse.com/939262 https://bugzilla.suse.com/939263 https://bugzilla.suse.com/939270 https://bugzilla.suse.com/939273 https://bugzilla.suse.com/939276 https://bugzilla.suse.com/939277 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0