January 2016 - openSUSE Security Announce

[security-announce] SUSE-SU-2016:0174-1: important: Security update for bind
by opensuse-security＠opensuse.org 19 Jan '16

19 Jan '16

SUSE Security Update: Security update for bind ______________________________________________________________________________ Announcement ID: SUSE-SU-2016:0174-1 Rating: important References: #962189 Cross-References: CVE-2015-8704 Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP1 SUSE Linux Enterprise Server 12-SP1 SUSE Linux Enterprise Desktop 12-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for bind fixes the following issues: - CVE-2015-8704: Specific APL data allowed remote attacker to trigger a crash in certain configurations (bsc#962189) Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 12-SP1: zypper in -t patch SUSE-SLE-SDK-12-SP1-2016-114=1 - SUSE Linux Enterprise Server 12-SP1: zypper in -t patch SUSE-SLE-SERVER-12-SP1-2016-114=1 - SUSE Linux Enterprise Desktop 12-SP1: zypper in -t patch SUSE-SLE-DESKTOP-12-SP1-2016-114=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 12-SP1 (ppc64le s390x x86_64): bind-debuginfo-9.9.6P1-35.1 bind-debugsource-9.9.6P1-35.1 bind-devel-9.9.6P1-35.1 - SUSE Linux Enterprise Server 12-SP1 (ppc64le s390x x86_64): bind-9.9.6P1-35.1 bind-chrootenv-9.9.6P1-35.1 bind-debuginfo-9.9.6P1-35.1 bind-debugsource-9.9.6P1-35.1 bind-libs-9.9.6P1-35.1 bind-libs-debuginfo-9.9.6P1-35.1 bind-utils-9.9.6P1-35.1 bind-utils-debuginfo-9.9.6P1-35.1 - SUSE Linux Enterprise Server 12-SP1 (s390x x86_64): bind-libs-32bit-9.9.6P1-35.1 bind-libs-debuginfo-32bit-9.9.6P1-35.1 - SUSE Linux Enterprise Server 12-SP1 (noarch): bind-doc-9.9.6P1-35.1 - SUSE Linux Enterprise Desktop 12-SP1 (x86_64): bind-debuginfo-9.9.6P1-35.1 bind-debugsource-9.9.6P1-35.1 bind-libs-32bit-9.9.6P1-35.1 bind-libs-9.9.6P1-35.1 bind-libs-debuginfo-32bit-9.9.6P1-35.1 bind-libs-debuginfo-9.9.6P1-35.1 bind-utils-9.9.6P1-35.1 bind-utils-debuginfo-9.9.6P1-35.1 References: https://www.suse.com/security/cve/CVE-2015-8704.html https://bugzilla.suse.com/962189 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2016:0168-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 19 Jan '16

19 Jan '16

SUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: SUSE-SU-2016:0168-1 Rating: important References: #758040 #902606 #924919 #935087 #937261 #943959 #945649 #949440 #951155 #951199 #951392 #951615 #951638 #952579 #952976 #956708 #956801 #956876 #957395 #957546 #957988 #957990 #958463 #958504 #958510 #958647 #958886 #958951 #959190 #959364 #959399 #959436 #959705 #960300 Cross-References: CVE-2015-7550 CVE-2015-8539 CVE-2015-8543 CVE-2015-8550 CVE-2015-8551 CVE-2015-8552 CVE-2015-8569 CVE-2015-8575 Affected Products: SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Live Patching 12 SUSE Linux Enterprise Desktop 12 ______________________________________________________________________________ An update that solves 8 vulnerabilities and has 26 fixes is now available. Description: The SUSE Linux Enterprise 12 kernel was updated to receive various security and bugfixes. Following security bugs were fixed: - CVE-2015-7550: A local user could have triggered a race between read and revoke in keyctl (bnc#958951). - CVE-2015-8539: A negatively instantiated user key could have been used by a local user to leverage privileges (bnc#958463). - CVE-2015-8543: The networking implementation in the Linux kernel did not validate protocol identifiers for certain protocol families, which allowed local users to cause a denial of service (NULL function pointer dereference and system crash) or possibly gain privileges by leveraging CLONE_NEWUSER support to execute a crafted SOCK_RAW application (bnc#958886). - CVE-2015-8550: Compiler optimizations in the XEN PV backend drivers could have lead to double fetch vulnerabilities, causing denial of service or arbitrary code execution (depending on the configuration) (bsc#957988). - CVE-2015-8551, CVE-2015-8552: xen/pciback: For XEN_PCI_OP_disable_msi[|x] only disable if device has MSI(X) enabled (bsc#957990). - CVE-2015-8569: The (1) pptp_bind and (2) pptp_connect functions in drivers/net/ppp/pptp.c in the Linux kernel did not verify an address length, which allowed local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism via a crafted application (bnc#959190). - CVE-2015-8575: Validate socket address length in sco_sock_bind() to prevent information leak (bsc#959399). The following non-security bugs were fixed: - ACPICA: Correctly cleanup after a ACPI table load failure (bnc#937261). - ALSA: hda - Fix noise problems on Thinkpad T440s (boo#958504). - Input: aiptek - fix crash on detecting device without endpoints (bnc#956708). - Re-add copy_page_vector_to_user() - Refresh patches.xen/xen3-patch-3.12.46-47 (bsc#959705). - Refresh patches.xen/xen3-patch-3.9 (bsc#951155). - Update patches.suse/btrfs-8361-Btrfs-keep-dropped-roots-in-cache-until-transaction -.patch (bnc#935087, bnc#945649, bnc#951615). - bcache: Add btree_insert_node() (bnc#951638). - bcache: Add explicit keylist arg to btree_insert() (bnc#951638). - bcache: Clean up keylist code (bnc#951638). - bcache: Convert btree_insert_check_key() to btree_insert_node() (bnc#951638). - bcache: Convert bucket_wait to wait_queue_head_t (bnc#951638). - bcache: Convert try_wait to wait_queue_head_t (bnc#951638). - bcache: Explicitly track btree node's parent (bnc#951638). - bcache: Fix a bug when detaching (bsc#951638). - bcache: Fix a lockdep splat in an error path (bnc#951638). - bcache: Fix a shutdown bug (bsc#951638). - bcache: Fix more early shutdown bugs (bsc#951638). - bcache: Fix sysfs splat on shutdown with flash only devs (bsc#951638). - bcache: Insert multiple keys at a time (bnc#951638). - bcache: Refactor journalling flow control (bnc#951638). - bcache: Refactor request_write() (bnc#951638). - bcache: Use blkdev_issue_discard() (bnc#951638). - bcache: backing device set to clean after finishing detach (bsc#951638). - bcache: kill closure locking usage (bnc#951638). - blktap: also call blkif_disconnect() when frontend switched to closed (bsc#952976). - blktap: refine mm tracking (bsc#952976). - block: Always check queue limits for cloned requests (bsc#902606). - btrfs: Add qgroup tracing (bnc#935087, bnc#945649). - btrfs: Adjust commit-transaction condition to avoid NO_SPACE more (bsc#958647). - btrfs: Fix out-of-space bug (bsc#958647). - btrfs: Fix tail space processing in find_free_dev_extent() (bsc#958647). - btrfs: Set relative data on clear btrfs_block_group_cache->pinned (bsc#958647). - btrfs: Update btrfs qgroup status item when rescan is done (bnc#960300). - btrfs: backref: Add special time_seq == (u64)-1 case for btrfs_find_all_roots() (bnc#935087, bnc#945649). - btrfs: backref: Do not merge refs which are not for same block (bnc#935087, bnc#945649). - btrfs: cleanup: remove no-used alloc_chunk in btrfs_check_data_free_space() (bsc#958647). - btrfs: delayed-ref: Cleanup the unneeded functions (bnc#935087, bnc#945649). - btrfs: delayed-ref: Use list to replace the ref_root in ref_head (bnc#935087, bnc#945649). - btrfs: extent-tree: Use ref_node to replace unneeded parameters in __inc_extent_ref() and __free_extent() (bnc#935087, bnc#945649). - btrfs: fix comp_oper to get right order (bnc#935087, bnc#945649). - btrfs: fix condition of commit transaction (bsc#958647). - btrfs: fix leak in qgroup_subtree_accounting() error path (bnc#935087, bnc#945649). - btrfs: fix order by which delayed references are run (bnc#949440). - btrfs: fix qgroup sanity tests (bnc#951615). - btrfs: fix race waiting for qgroup rescan worker (bnc#960300). - btrfs: fix regression running delayed references when using qgroups (bnc#951615). - btrfs: fix regression when running delayed references (bnc#951615). - btrfs: fix sleeping inside atomic context in qgroup rescan worker (bnc#960300). - btrfs: fix the number of transaction units needed to remove a block group (bsc#958647). - btrfs: keep dropped roots in cache until transaction commit (bnc#935087, bnc#945649). - btrfs: qgroup: Add function qgroup_update_counters() (bnc#935087, bnc#945649). - btrfs: qgroup: Add function qgroup_update_refcnt() (bnc#935087, bnc#945649). - btrfs: qgroup: Add new function to record old_roots (bnc#935087, bnc#945649). - btrfs: qgroup: Add new qgroup calculation function btrfs_qgroup_account_extents() (bnc#935087, bnc#945649). - btrfs: qgroup: Add the ability to skip given qgroup for old/new_roots (bnc#935087, bnc#945649). - btrfs: qgroup: Cleanup open-coded old/new_refcnt update and read (bnc#935087, bnc#945649). - btrfs: qgroup: Cleanup the old ref_node-oriented mechanism (bnc#935087, bnc#945649). - btrfs: qgroup: Do not copy extent buffer to do qgroup rescan (bnc#960300). - btrfs: qgroup: Fix a regression in qgroup reserved space (bnc#935087, bnc#945649). - btrfs: qgroup: Make snapshot accounting work with new extent-oriented qgroup (bnc#935087, bnc#945649). - btrfs: qgroup: Record possible quota-related extent for qgroup (bnc#935087, bnc#945649). - btrfs: qgroup: Switch rescan to new mechanism (bnc#935087, bnc#945649). - btrfs: qgroup: Switch self test to extent-oriented qgroup mechanism (bnc#935087, bnc#945649). - btrfs: qgroup: Switch to new extent-oriented qgroup mechanism (bnc#935087, bnc#945649). - btrfs: qgroup: account shared subtree during snapshot delete (bnc#935087, bnc#945649). - btrfs: qgroup: clear STATUS_FLAG_ON in disabling quota (bnc#960300). - btrfs: qgroup: exit the rescan worker during umount (bnc#960300). - btrfs: qgroup: fix quota disable during rescan (bnc#960300). - btrfs: qgroup: move WARN_ON() to the correct location (bnc#935087, bnc#945649). - btrfs: remove transaction from send (bnc#935087, bnc#945649). - btrfs: ulist: Add ulist_del() function (bnc#935087, bnc#945649). - btrfs: use btrfs_get_fs_root in resolve_indirect_ref (bnc#935087, bnc#945649). - btrfs: use global reserve when deleting unused block group after ENOSPC (bsc#958647). - cache: Fix sysfs splat on shutdown with flash only devs (bsc#951638). - cpusets, isolcpus: exclude isolcpus from load balancing in cpusets (bsc#957395). - drm/i915: Fix SRC_COPY width on 830/845g (bsc#758040). - drm: Allocate new master object when client becomes master (bsc#956876, bsc#956801). - drm: Fix KABI of "struct drm_file" (bsc#956876, bsc#956801). - e1000e: Do not read ICR in Other interrupt (bsc#924919). - e1000e: Do not write lsc to ics in msi-x mode (bsc#924919). - e1000e: Fix msi-x interrupt automask (bsc#924919). - e1000e: Remove unreachable code (bsc#924919). - genksyms: Handle string literals with spaces in reference files (bsc#958510). - ipv6: fix tunnel error handling (bsc#952579). - lpfc: Fix null ndlp dereference in target_reset_handler (bsc#951392). - mm/mempolicy.c: convert the shared_policy lock to a rwlock (bnc#959436). - mm: remove PG_waiters from PAGE_FLAGS_CHECK_AT_FREE (bnc#943959). - pm, hinernate: use put_page in release_swap_writer (bnc#943959). - sched, isolcpu: make cpu_isolated_map visible outside scheduler (bsc#957395). - udp: properly support MSG_PEEK with truncated buffers (bsc#951199 bsc#959364). - xhci: Workaround to get Intel xHCI reset working more reliably (bnc#957546). Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Workstation Extension 12: zypper in -t patch SUSE-SLE-WE-12-2016-107=1 - SUSE Linux Enterprise Software Development Kit 12: zypper in -t patch SUSE-SLE-SDK-12-2016-107=1 - SUSE Linux Enterprise Server 12: zypper in -t patch SUSE-SLE-SERVER-12-2016-107=1 - SUSE Linux Enterprise Module for Public Cloud 12: zypper in -t patch SUSE-SLE-Module-Public-Cloud-12-2016-107=1 - SUSE Linux Enterprise Live Patching 12: zypper in -t patch SUSE-SLE-Live-Patching-12-2016-107=1 - SUSE Linux Enterprise Desktop 12: zypper in -t patch SUSE-SLE-DESKTOP-12-2016-107=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Workstation Extension 12 (x86_64): kernel-default-debuginfo-3.12.51-52.34.1 kernel-default-debugsource-3.12.51-52.34.1 kernel-default-extra-3.12.51-52.34.1 kernel-default-extra-debuginfo-3.12.51-52.34.1 - SUSE Linux Enterprise Software Development Kit 12 (ppc64le s390x x86_64): kernel-obs-build-3.12.51-52.34.1 kernel-obs-build-debugsource-3.12.51-52.34.1 - SUSE Linux Enterprise Software Development Kit 12 (noarch): kernel-docs-3.12.51-52.34.3 - SUSE Linux Enterprise Server 12 (ppc64le s390x x86_64): kernel-default-3.12.51-52.34.1 kernel-default-base-3.12.51-52.34.1 kernel-default-base-debuginfo-3.12.51-52.34.1 kernel-default-debuginfo-3.12.51-52.34.1 kernel-default-debugsource-3.12.51-52.34.1 kernel-default-devel-3.12.51-52.34.1 kernel-syms-3.12.51-52.34.1 - SUSE Linux Enterprise Server 12 (x86_64): kernel-xen-3.12.51-52.34.1 kernel-xen-base-3.12.51-52.34.1 kernel-xen-base-debuginfo-3.12.51-52.34.1 kernel-xen-debuginfo-3.12.51-52.34.1 kernel-xen-debugsource-3.12.51-52.34.1 kernel-xen-devel-3.12.51-52.34.1 - SUSE Linux Enterprise Server 12 (noarch): kernel-devel-3.12.51-52.34.1 kernel-macros-3.12.51-52.34.1 kernel-source-3.12.51-52.34.1 - SUSE Linux Enterprise Server 12 (s390x): kernel-default-man-3.12.51-52.34.1 - SUSE Linux Enterprise Module for Public Cloud 12 (x86_64): kernel-ec2-3.12.51-52.34.1 kernel-ec2-debuginfo-3.12.51-52.34.1 kernel-ec2-debugsource-3.12.51-52.34.1 kernel-ec2-devel-3.12.51-52.34.1 kernel-ec2-extra-3.12.51-52.34.1 kernel-ec2-extra-debuginfo-3.12.51-52.34.1 - SUSE Linux Enterprise Live Patching 12 (x86_64): kgraft-patch-3_12_51-52_34-default-1-2.1 kgraft-patch-3_12_51-52_34-xen-1-2.1 - SUSE Linux Enterprise Desktop 12 (x86_64): kernel-default-3.12.51-52.34.1 kernel-default-debuginfo-3.12.51-52.34.1 kernel-default-debugsource-3.12.51-52.34.1 kernel-default-devel-3.12.51-52.34.1 kernel-default-extra-3.12.51-52.34.1 kernel-default-extra-debuginfo-3.12.51-52.34.1 kernel-syms-3.12.51-52.34.1 kernel-xen-3.12.51-52.34.1 kernel-xen-debuginfo-3.12.51-52.34.1 kernel-xen-debugsource-3.12.51-52.34.1 kernel-xen-devel-3.12.51-52.34.1 - SUSE Linux Enterprise Desktop 12 (noarch): kernel-devel-3.12.51-52.34.1 kernel-macros-3.12.51-52.34.1 kernel-source-3.12.51-52.34.1 References: https://www.suse.com/security/cve/CVE-2015-7550.html https://www.suse.com/security/cve/CVE-2015-8539.html https://www.suse.com/security/cve/CVE-2015-8543.html https://www.suse.com/security/cve/CVE-2015-8550.html https://www.suse.com/security/cve/CVE-2015-8551.html https://www.suse.com/security/cve/CVE-2015-8552.html https://www.suse.com/security/cve/CVE-2015-8569.html https://www.suse.com/security/cve/CVE-2015-8575.html https://bugzilla.suse.com/758040 https://bugzilla.suse.com/902606 https://bugzilla.suse.com/924919 https://bugzilla.suse.com/935087 https://bugzilla.suse.com/937261 https://bugzilla.suse.com/943959 https://bugzilla.suse.com/945649 https://bugzilla.suse.com/949440 https://bugzilla.suse.com/951155 https://bugzilla.suse.com/951199 https://bugzilla.suse.com/951392 https://bugzilla.suse.com/951615 https://bugzilla.suse.com/951638 https://bugzilla.suse.com/952579 https://bugzilla.suse.com/952976 https://bugzilla.suse.com/956708 https://bugzilla.suse.com/956801 https://bugzilla.suse.com/956876 https://bugzilla.suse.com/957395 https://bugzilla.suse.com/957546 https://bugzilla.suse.com/957988 https://bugzilla.suse.com/957990 https://bugzilla.suse.com/958463 https://bugzilla.suse.com/958504 https://bugzilla.suse.com/958510 https://bugzilla.suse.com/958647 https://bugzilla.suse.com/958886 https://bugzilla.suse.com/958951 https://bugzilla.suse.com/959190 https://bugzilla.suse.com/959364 https://bugzilla.suse.com/959399 https://bugzilla.suse.com/959436 https://bugzilla.suse.com/959705 https://bugzilla.suse.com/960300 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2016:0164-1: important: Security update for samba
by opensuse-security＠opensuse.org 19 Jan '16

19 Jan '16

SUSE Security Update: Security update for samba ______________________________________________________________________________ Announcement ID: SUSE-SU-2016:0164-1 Rating: important References: #295284 #912457 #934299 #936909 #948244 #949022 #953382 #958582 #958583 #958584 #958586 Cross-References: CVE-2015-5252 CVE-2015-5296 CVE-2015-5299 CVE-2015-5330 Affected Products: SUSE Linux Enterprise Software Development Kit 11-SP4 SUSE Linux Enterprise Software Development Kit 11-SP3 SUSE Linux Enterprise Server for VMWare 11-SP3 SUSE Linux Enterprise Server 11-SP4 SUSE Linux Enterprise Server 11-SP3 SUSE Linux Enterprise Desktop 11-SP4 SUSE Linux Enterprise Desktop 11-SP3 SUSE Linux Enterprise Debuginfo 11-SP4 SUSE Linux Enterprise Debuginfo 11-SP3 ______________________________________________________________________________ An update that solves four vulnerabilities and has 7 fixes is now available. Description: This update for Samba fixes the following security issues: - CVE-2015-5330: Remote read memory exploit in LDB (bnc#958586) - CVE-2015-5252: Insufficient symlink verification (file access outside the share) (bnc#958582) - CVE-2015-5296: No man in the middle protection when forcing smb encryption on the client side (bnc#958584) - CVE-2015-5299: Currently the snapshot browsing is not secure thru windows previous version (shadow_copy2) (bnc#958583) Non-security issues fixed: - Prevent null pointer access in samlogon fallback when security credentials are null (bnc#949022) - Ensure samlogon fall-back requests are rerouted after kerberos failure (bnc#953382) - Ensure "Your account is disabled" message is displayed when attempting to ssh into locked account (bnc#953382) - Address unrecoverable winbind failure: "key length too large" (bnc#934299) - Take resource group sids into account when caching netsamlogon data (bnc#912457) - Fix lookup of groups with "Local Domain" scope from Active Directory (bnc#948244) - dependency issue with samba-winbind (bnc#936909) Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11-SP4: zypper in -t patch sdksp4-samba-20160113-12338=1 - SUSE Linux Enterprise Software Development Kit 11-SP3: zypper in -t patch sdksp3-samba-20160113-12338=1 - SUSE Linux Enterprise Server for VMWare 11-SP3: zypper in -t patch slessp3-samba-20160113-12338=1 - SUSE Linux Enterprise Server 11-SP4: zypper in -t patch slessp4-samba-20160113-12338=1 - SUSE Linux Enterprise Server 11-SP3: zypper in -t patch slessp3-samba-20160113-12338=1 - SUSE Linux Enterprise Desktop 11-SP4: zypper in -t patch sledsp4-samba-20160113-12338=1 - SUSE Linux Enterprise Desktop 11-SP3: zypper in -t patch sledsp3-samba-20160113-12338=1 - SUSE Linux Enterprise Debuginfo 11-SP4: zypper in -t patch dbgsp4-samba-20160113-12338=1 - SUSE Linux Enterprise Debuginfo 11-SP3: zypper in -t patch dbgsp3-samba-20160113-12338=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11-SP4 (i586 ia64 ppc64 s390x x86_64): libldb-devel-3.6.3-64.1 libnetapi-devel-3.6.3-64.1 libnetapi0-3.6.3-64.1 libsmbclient-devel-3.6.3-64.1 libsmbsharemodes-devel-3.6.3-64.1 libsmbsharemodes0-3.6.3-64.1 libtalloc-devel-3.6.3-64.1 libtdb-devel-3.6.3-64.1 libtevent-devel-3.6.3-64.1 libwbclient-devel-3.6.3-64.1 samba-devel-3.6.3-64.1 - SUSE Linux Enterprise Software Development Kit 11-SP4 (ia64 ppc64 s390x x86_64): samba-test-3.6.3-64.1 - SUSE Linux Enterprise Software Development Kit 11-SP3 (i586 ia64 ppc64 s390x x86_64): libldb-devel-3.6.3-64.1 libnetapi-devel-3.6.3-64.1 libnetapi0-3.6.3-64.1 libsmbclient-devel-3.6.3-64.1 libsmbsharemodes-devel-3.6.3-64.1 libsmbsharemodes0-3.6.3-64.1 libtalloc-devel-3.6.3-64.1 libtdb-devel-3.6.3-64.1 libtevent-devel-3.6.3-64.1 libwbclient-devel-3.6.3-64.1 samba-devel-3.6.3-64.1 samba-test-3.6.3-64.1 - SUSE Linux Enterprise Server for VMWare 11-SP3 (i586 x86_64): ldapsmb-1.34b-64.1 libldb1-3.6.3-64.1 libsmbclient0-3.6.3-64.1 libtalloc2-3.6.3-64.1 libtdb1-3.6.3-64.1 libtevent0-3.6.3-64.1 libwbclient0-3.6.3-64.1 samba-3.6.3-64.1 samba-client-3.6.3-64.1 samba-krb-printing-3.6.3-64.1 samba-winbind-3.6.3-64.1 - SUSE Linux Enterprise Server for VMWare 11-SP3 (x86_64): libsmbclient0-32bit-3.6.3-64.1 libtalloc2-32bit-3.6.3-64.1 libtdb1-32bit-3.6.3-64.1 libtevent0-32bit-3.6.3-64.1 libwbclient0-32bit-3.6.3-64.1 samba-32bit-3.6.3-64.1 samba-client-32bit-3.6.3-64.1 samba-winbind-32bit-3.6.3-64.1 - SUSE Linux Enterprise Server for VMWare 11-SP3 (noarch): samba-doc-3.6.3-64.1 - SUSE Linux Enterprise Server 11-SP4 (i586 ia64 ppc64 s390x x86_64): ldapsmb-1.34b-64.1 libldb1-3.6.3-64.1 libsmbclient0-3.6.3-64.1 libtalloc2-3.6.3-64.1 libtdb1-3.6.3-64.1 libtevent0-3.6.3-64.1 libwbclient0-3.6.3-64.1 samba-3.6.3-64.1 samba-client-3.6.3-64.1 samba-krb-printing-3.6.3-64.1 samba-winbind-3.6.3-64.1 - SUSE Linux Enterprise Server 11-SP4 (ppc64 s390x x86_64): libsmbclient0-32bit-3.6.3-64.1 libtalloc2-32bit-3.6.3-64.1 libtdb1-32bit-3.6.3-64.1 libtevent0-32bit-3.6.3-64.1 libwbclient0-32bit-3.6.3-64.1 samba-32bit-3.6.3-64.1 samba-client-32bit-3.6.3-64.1 samba-winbind-32bit-3.6.3-64.1 - SUSE Linux Enterprise Server 11-SP4 (noarch): samba-doc-3.6.3-64.1 - SUSE Linux Enterprise Server 11-SP4 (ia64): libsmbclient0-x86-3.6.3-64.1 libtalloc2-x86-3.6.3-64.1 libtdb1-x86-3.6.3-64.1 libtevent0-x86-3.6.3-64.1 libwbclient0-x86-3.6.3-64.1 samba-client-x86-3.6.3-64.1 samba-winbind-x86-3.6.3-64.1 samba-x86-3.6.3-64.1 - SUSE Linux Enterprise Server 11-SP3 (i586 ia64 ppc64 s390x x86_64): ldapsmb-1.34b-64.1 libldb1-3.6.3-64.1 libsmbclient0-3.6.3-64.1 libtalloc2-3.6.3-64.1 libtdb1-3.6.3-64.1 libtevent0-3.6.3-64.1 libwbclient0-3.6.3-64.1 samba-3.6.3-64.1 samba-client-3.6.3-64.1 samba-krb-printing-3.6.3-64.1 samba-winbind-3.6.3-64.1 - SUSE Linux Enterprise Server 11-SP3 (ppc64 s390x x86_64): libsmbclient0-32bit-3.6.3-64.1 libtalloc2-32bit-3.6.3-64.1 libtdb1-32bit-3.6.3-64.1 libtevent0-32bit-3.6.3-64.1 libwbclient0-32bit-3.6.3-64.1 samba-32bit-3.6.3-64.1 samba-client-32bit-3.6.3-64.1 samba-winbind-32bit-3.6.3-64.1 - SUSE Linux Enterprise Server 11-SP3 (noarch): samba-doc-3.6.3-64.1 - SUSE Linux Enterprise Server 11-SP3 (ia64): libsmbclient0-x86-3.6.3-64.1 libtalloc2-x86-3.6.3-64.1 libtdb1-x86-3.6.3-64.1 libwbclient0-x86-3.6.3-64.1 samba-client-x86-3.6.3-64.1 samba-winbind-x86-3.6.3-64.1 samba-x86-3.6.3-64.1 - SUSE Linux Enterprise Desktop 11-SP4 (i586 x86_64): libldb1-3.6.3-64.1 libsmbclient0-3.6.3-64.1 libtalloc2-3.6.3-64.1 libtdb1-3.6.3-64.1 libtevent0-3.6.3-64.1 libwbclient0-3.6.3-64.1 samba-3.6.3-64.1 samba-client-3.6.3-64.1 samba-krb-printing-3.6.3-64.1 samba-winbind-3.6.3-64.1 - SUSE Linux Enterprise Desktop 11-SP4 (x86_64): libldb1-32bit-3.6.3-64.1 libsmbclient0-32bit-3.6.3-64.1 libtalloc2-32bit-3.6.3-64.1 libtdb1-32bit-3.6.3-64.1 libtevent0-32bit-3.6.3-64.1 libwbclient0-32bit-3.6.3-64.1 samba-32bit-3.6.3-64.1 samba-client-32bit-3.6.3-64.1 samba-winbind-32bit-3.6.3-64.1 - SUSE Linux Enterprise Desktop 11-SP4 (noarch): samba-doc-3.6.3-64.1 - SUSE Linux Enterprise Desktop 11-SP3 (i586 x86_64): libldb1-3.6.3-64.1 libsmbclient0-3.6.3-64.1 libtalloc2-3.6.3-64.1 libtdb1-3.6.3-64.1 libtevent0-3.6.3-64.1 libwbclient0-3.6.3-64.1 samba-3.6.3-64.1 samba-client-3.6.3-64.1 samba-krb-printing-3.6.3-64.1 samba-winbind-3.6.3-64.1 - SUSE Linux Enterprise Desktop 11-SP3 (x86_64): libldb1-32bit-3.6.3-64.1 libsmbclient0-32bit-3.6.3-64.1 libtalloc2-32bit-3.6.3-64.1 libtdb1-32bit-3.6.3-64.1 libtevent0-32bit-3.6.3-64.1 libwbclient0-32bit-3.6.3-64.1 samba-32bit-3.6.3-64.1 samba-client-32bit-3.6.3-64.1 samba-winbind-32bit-3.6.3-64.1 - SUSE Linux Enterprise Desktop 11-SP3 (noarch): samba-doc-3.6.3-64.1 - SUSE Linux Enterprise Debuginfo 11-SP4 (i586 ia64 ppc64 s390x x86_64): samba-debuginfo-3.6.3-64.1 samba-debugsource-3.6.3-64.1 - SUSE Linux Enterprise Debuginfo 11-SP4 (ppc64 s390x x86_64): samba-debuginfo-32bit-3.6.3-64.1 - SUSE Linux Enterprise Debuginfo 11-SP4 (ia64): samba-debuginfo-x86-3.6.3-64.1 - SUSE Linux Enterprise Debuginfo 11-SP3 (i586 ia64 ppc64 s390x x86_64): samba-debuginfo-3.6.3-64.1 samba-debugsource-3.6.3-64.1 - SUSE Linux Enterprise Debuginfo 11-SP3 (ppc64 s390x): samba-debuginfo-32bit-3.6.3-64.1 - SUSE Linux Enterprise Debuginfo 11-SP3 (ia64): samba-debuginfo-x86-3.6.3-64.1 References: https://www.suse.com/security/cve/CVE-2015-5252.html https://www.suse.com/security/cve/CVE-2015-5296.html https://www.suse.com/security/cve/CVE-2015-5299.html https://www.suse.com/security/cve/CVE-2015-5330.html https://bugzilla.suse.com/295284 https://bugzilla.suse.com/912457 https://bugzilla.suse.com/934299 https://bugzilla.suse.com/936909 https://bugzilla.suse.com/948244 https://bugzilla.suse.com/949022 https://bugzilla.suse.com/953382 https://bugzilla.suse.com/958582 https://bugzilla.suse.com/958583 https://bugzilla.suse.com/958584 https://bugzilla.suse.com/958586 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2016:0145-1: critical: openssh
by opensuse-security＠opensuse.org 16 Jan '16

16 Jan '16

openSUSE Security Update: openssh ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0145-1 Rating: critical References: #961642 #961645 Cross-References: CVE-2016-077 CVE-2016-0777 CVE-2016-0778 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: - CVE-2016-0777: A malicious or compromised server could cause the OpenSSH client to expose part or all of the client's private key through the roaming feature (bsc#961642) - CVE-2016-0778: A malicious or compromised server could could trigger a buffer overflow in the OpenSSH client through the roaming feature (bsc#961645) This update disables the undocumented feature supported by the OpenSSH client and a commercial SSH server. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-49=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): openssh-6.2p2-3.7.1 openssh-askpass-gnome-6.2p2-3.7.1 openssh-askpass-gnome-debuginfo-6.2p2-3.7.1 openssh-debuginfo-6.2p2-3.7.1 openssh-debugsource-6.2p2-3.7.1 References: https://www.suse.com/security/cve/CVE-2016-077.html https://www.suse.com/security/cve/CVE-2016-0777.html https://www.suse.com/security/cve/CVE-2016-0778.html https://bugzilla.suse.com/961642 https://bugzilla.suse.com/961645 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2016:0144-1: critical: Security update for openssh
by opensuse-security＠opensuse.org 16 Jan '16

16 Jan '16

openSUSE Security Update: Security update for openssh ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0144-1 Rating: critical References: #961642 #961645 Cross-References: CVE-2016-077 CVE-2016-0777 CVE-2016-0778 Affected Products: openSUSE Evergreen 11.4 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: - CVE-2016-0777: A malicious or compromised server could cause the OpenSSH client to expose part or all of the client's private key through the roaming feature (bsc#961642) - CVE-2016-0778: A malicious or compromised server could could trigger a buffer overflow in the OpenSSH client through the roaming feature (bsc#961645) This update disables the undocumented feature supported by the OpenSSH client and a commercial SSH server. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Evergreen 11.4: zypper in -t patch 2016-48=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Evergreen 11.4 (i586 x86_64): openssh-5.8p1-11.1 openssh-askpass-5.8p1-11.1 openssh-askpass-debuginfo-5.8p1-11.1 openssh-askpass-gnome-5.8p1-11.1 openssh-askpass-gnome-debuginfo-5.8p1-11.1 openssh-debuginfo-5.8p1-11.1 openssh-debugsource-5.8p1-11.1 References: https://www.suse.com/security/cve/CVE-2016-077.html https://www.suse.com/security/cve/CVE-2016-0777.html https://www.suse.com/security/cve/CVE-2016-0778.html https://bugzilla.suse.com/961642 https://bugzilla.suse.com/961645 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2016:0128-1: critical: Security update for openssh
by opensuse-security＠opensuse.org 15 Jan '16

15 Jan '16

openSUSE Security Update: Security update for openssh ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0128-1 Rating: critical References: #961642 #961645 Cross-References: CVE-2016-0777 CVE-2016-0778 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for openssh fixes the following issues: - CVE-2016-0777: A malicious or compromised server could cause the OpenSSH client to expose part or all of the client's private key through the roaming feature (bsc#961642) - CVE-2016-0778: A malicious or compromised server could could trigger a buffer overflow in the OpenSSH client through the roaming feature (bsc#961645) This update disables the undocumented feature supported by the OpenSSH client and a commercial SSH server. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-38=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): openssh-6.6p1-8.1 openssh-askpass-gnome-6.6p1-8.1 openssh-askpass-gnome-debuginfo-6.6p1-8.1 openssh-cavs-6.6p1-8.1 openssh-cavs-debuginfo-6.6p1-8.1 openssh-debuginfo-6.6p1-8.1 openssh-debugsource-6.6p1-8.1 openssh-fips-6.6p1-8.1 openssh-helpers-6.6p1-8.1 openssh-helpers-debuginfo-6.6p1-8.1 References: https://www.suse.com/security/cve/CVE-2016-0777.html https://www.suse.com/security/cve/CVE-2016-0778.html https://bugzilla.suse.com/961642 https://bugzilla.suse.com/961645 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2016:0127-1: critical: Security update for openssh
by opensuse-security＠opensuse.org 15 Jan '16

15 Jan '16

openSUSE Security Update: Security update for openssh ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0127-1 Rating: critical References: #961642 #961645 Cross-References: CVE-2016-0777 CVE-2016-0778 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for openssh fixes the following issues: - CVE-2016-0777: A malicious or compromised server could cause the OpenSSH client to expose part or all of the client's private key through the roaming feature (bsc#961642) - CVE-2016-0778: A malicious or compromised server could could trigger a buffer overflow in the OpenSSH client through the roaming feature (bsc#961645) This update disables the undocumented feature supported by the OpenSSH client and a commercial SSH server. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-39=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): openssh-6.6p1-5.3.1 openssh-askpass-gnome-6.6p1-5.3.1 openssh-askpass-gnome-debuginfo-6.6p1-5.3.1 openssh-debuginfo-6.6p1-5.3.1 openssh-debugsource-6.6p1-5.3.1 openssh-fips-6.6p1-5.3.1 openssh-helpers-6.6p1-5.3.1 openssh-helpers-debuginfo-6.6p1-5.3.1 References: https://www.suse.com/security/cve/CVE-2016-0777.html https://www.suse.com/security/cve/CVE-2016-0778.html https://bugzilla.suse.com/961642 https://bugzilla.suse.com/961645 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2016:0126-1: important: Security update for xen
by opensuse-security＠opensuse.org 14 Jan '16

14 Jan '16

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0126-1 Rating: important References: #954018 #956408 #956409 #956411 #956592 #956832 #957988 #958007 #958009 #958493 #958523 #958918 #959006 #959387 Cross-References: CVE-2015-5307 CVE-2015-7504 CVE-2015-7549 CVE-2015-8339 CVE-2015-8340 CVE-2015-8341 CVE-2015-8345 CVE-2015-8504 CVE-2015-8550 CVE-2015-8554 CVE-2015-8555 CVE-2015-8558 CVE-2015-8567 CVE-2015-8568 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 14 vulnerabilities is now available. Description: This update for xen fixes the following issues: - CVE-2015-8567,CVE-2015-8568: xen: qemu: net: vmxnet3: host memory leakage (boo#959387) - CVE-2015-8550: xen: paravirtualized drivers incautious about shared memory contents (XSA-155, boo#957988) - CVE-2015-8558: xen: qemu: usb: infinite loop in ehci_advance_state results in DoS (boo#959006) - CVE-2015-7549: xen: qemu pci: null pointer dereference issue (boo#958918) - CVE-2015-8504: xen: qemu: ui: vnc: avoid floating point exception (boo#958493) - CVE-2015-8554: xen: qemu-dm buffer overrun in MSI-X handling (XSA-164, boo#958007) - CVE-2015-8555: xen: information leak in legacy x86 FPU/XMM initialization (XSA-165, boo#958009) - boo#958523: xen: ioreq handling possibly susceptible to multiple read issue (XSA-166) - CVE-2015-8345: xen: qemu: net: eepro100: infinite loop in processing command block list (boo#956832) - CVE-2015-5307: xen: x86: CPU lockup during fault delivery (XSA-156, boo#954018) - boo#956592: xen: virtual PMU is unsupported (XSA-163) - CVE-2015-8339, CVE-2015-8340: xen: XENMEM_exchange error handling issues (XSA-159, boo#956408) - CVE-2015-8341: xen: libxl leak of pv kernel and initrd on error (XSA-160, boo#956409) - CVE-2015-7504: xen: heap buffer overflow vulnerability in pcnet emulator (XSA-162, boo#956411) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-36=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): xen-debugsource-4.5.2_04-9.2 xen-devel-4.5.2_04-9.2 xen-libs-4.5.2_04-9.2 xen-libs-debuginfo-4.5.2_04-9.2 xen-tools-domU-4.5.2_04-9.2 xen-tools-domU-debuginfo-4.5.2_04-9.2 - openSUSE Leap 42.1 (x86_64): xen-4.5.2_04-9.2 xen-doc-html-4.5.2_04-9.2 xen-kmp-default-4.5.2_04_k4.1.13_5-9.2 xen-kmp-default-debuginfo-4.5.2_04_k4.1.13_5-9.2 xen-libs-32bit-4.5.2_04-9.2 xen-libs-debuginfo-32bit-4.5.2_04-9.2 xen-tools-4.5.2_04-9.2 xen-tools-debuginfo-4.5.2_04-9.2 References: https://www.suse.com/security/cve/CVE-2015-5307.html https://www.suse.com/security/cve/CVE-2015-7504.html https://www.suse.com/security/cve/CVE-2015-7549.html https://www.suse.com/security/cve/CVE-2015-8339.html https://www.suse.com/security/cve/CVE-2015-8340.html https://www.suse.com/security/cve/CVE-2015-8341.html https://www.suse.com/security/cve/CVE-2015-8345.html https://www.suse.com/security/cve/CVE-2015-8504.html https://www.suse.com/security/cve/CVE-2015-8550.html https://www.suse.com/security/cve/CVE-2015-8554.html https://www.suse.com/security/cve/CVE-2015-8555.html https://www.suse.com/security/cve/CVE-2015-8558.html https://www.suse.com/security/cve/CVE-2015-8567.html https://www.suse.com/security/cve/CVE-2015-8568.html https://bugzilla.suse.com/954018 https://bugzilla.suse.com/956408 https://bugzilla.suse.com/956409 https://bugzilla.suse.com/956411 https://bugzilla.suse.com/956592 https://bugzilla.suse.com/956832 https://bugzilla.suse.com/957988 https://bugzilla.suse.com/958007 https://bugzilla.suse.com/958009 https://bugzilla.suse.com/958493 https://bugzilla.suse.com/958523 https://bugzilla.suse.com/958918 https://bugzilla.suse.com/959006 https://bugzilla.suse.com/959387 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2016:0124-1: important: Security update for xen
by opensuse-security＠opensuse.org 14 Jan '16

14 Jan '16

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0124-1 Rating: important References: #947165 #950704 #954018 #954405 #956408 #956409 #956411 #956592 #956832 #957988 #958007 #958009 #958493 #958523 #958918 #959006 Cross-References: CVE-2015-5307 CVE-2015-7311 CVE-2015-7504 CVE-2015-7549 CVE-2015-7970 CVE-2015-8104 CVE-2015-8339 CVE-2015-8340 CVE-2015-8341 CVE-2015-8345 CVE-2015-8504 CVE-2015-8550 CVE-2015-8554 CVE-2015-8555 CVE-2015-8558 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that solves 15 vulnerabilities and has one errata is now available. Description: This update for xen fixes the following security issues: - CVE-2015-8550: paravirtualized drivers incautious about shared memory contents (XSA-155, boo#957988) - CVE-2015-8558: qemu: usb: infinite loop in ehci_advance_state results in DoS (boo#959006) - CVE-2015-7549: qemu pci: null pointer dereference issue (boo#958918) - CVE-2015-8504: qemu: ui: vnc: avoid floating point exception (boo#958493) - CVE-2015-8554: qemu-dm buffer overrun in MSI-X handling (XSA-164, boo#958007) - CVE-2015-8555: information leak in legacy x86 FPU/XMM initialization (XSA-165, boo#958009) - boo#958523 xen: ioreq handling possibly susceptible to multiple read issue (XSA-166) - CVE-2015-8345: xen: qemu: net: eepro100: infinite loop in processing command block list (boo#956832) - boo#956592: xen: virtual PMU is unsupported (XSA-163) - CVE-2015-8339, CVE-2015-8340: xen: XENMEM_exchange error handling issues (XSA-159, boo#956408) - CVE-2015-8341: xen: libxl leak of pv kernel and initrd on error (XSA-160, boo#956409) - CVE-2015-7504: xen: heap buffer overflow vulnerability in pcnet emulator (XSA-162, boo#956411) - CVE-2015-7311: xen: libxl fails to honour readonly flag on disks with qemu-xen (xsa-142, boo#947165) - CVE-2015-8104: Xen: guest to host DoS by triggering an infinite loop in microcode via #DB exception (boo#954405) - CVE-2015-5307: xen: x86: CPU lockup during fault delivery (XSA-156, boo#954018) - CVE-2015-7970: xen: x86: Long latency populate-on-demand operation is not preemptible (XSA-150, boo#950704) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2016-34=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): xen-debugsource-4.3.4_10-53.1 xen-devel-4.3.4_10-53.1 xen-kmp-default-4.3.4_10_k3.11.10_29-53.1 xen-kmp-default-debuginfo-4.3.4_10_k3.11.10_29-53.1 xen-kmp-desktop-4.3.4_10_k3.11.10_29-53.1 xen-kmp-desktop-debuginfo-4.3.4_10_k3.11.10_29-53.1 xen-libs-4.3.4_10-53.1 xen-libs-debuginfo-4.3.4_10-53.1 xen-tools-domU-4.3.4_10-53.1 xen-tools-domU-debuginfo-4.3.4_10-53.1 - openSUSE 13.1 (x86_64): xen-4.3.4_10-53.1 xen-doc-html-4.3.4_10-53.1 xen-libs-32bit-4.3.4_10-53.1 xen-libs-debuginfo-32bit-4.3.4_10-53.1 xen-tools-4.3.4_10-53.1 xen-tools-debuginfo-4.3.4_10-53.1 xen-xend-tools-4.3.4_10-53.1 xen-xend-tools-debuginfo-4.3.4_10-53.1 - openSUSE 13.1 (i586): xen-kmp-pae-4.3.4_10_k3.11.10_29-53.1 xen-kmp-pae-debuginfo-4.3.4_10_k3.11.10_29-53.1 References: https://www.suse.com/security/cve/CVE-2015-5307.html https://www.suse.com/security/cve/CVE-2015-7311.html https://www.suse.com/security/cve/CVE-2015-7504.html https://www.suse.com/security/cve/CVE-2015-7549.html https://www.suse.com/security/cve/CVE-2015-7970.html https://www.suse.com/security/cve/CVE-2015-8104.html https://www.suse.com/security/cve/CVE-2015-8339.html https://www.suse.com/security/cve/CVE-2015-8340.html https://www.suse.com/security/cve/CVE-2015-8341.html https://www.suse.com/security/cve/CVE-2015-8345.html https://www.suse.com/security/cve/CVE-2015-8504.html https://www.suse.com/security/cve/CVE-2015-8550.html https://www.suse.com/security/cve/CVE-2015-8554.html https://www.suse.com/security/cve/CVE-2015-8555.html https://www.suse.com/security/cve/CVE-2015-8558.html https://bugzilla.suse.com/947165 https://bugzilla.suse.com/950704 https://bugzilla.suse.com/954018 https://bugzilla.suse.com/954405 https://bugzilla.suse.com/956408 https://bugzilla.suse.com/956409 https://bugzilla.suse.com/956411 https://bugzilla.suse.com/956592 https://bugzilla.suse.com/956832 https://bugzilla.suse.com/957988 https://bugzilla.suse.com/958007 https://bugzilla.suse.com/958009 https://bugzilla.suse.com/958493 https://bugzilla.suse.com/958523 https://bugzilla.suse.com/958918 https://bugzilla.suse.com/959006 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2016:0123-1: important: Security update for xen
by opensuse-security＠opensuse.org 14 Jan '16

14 Jan '16

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0123-1 Rating: important References: #954018 #956408 #956409 #956411 #956592 #956832 #957988 #958007 #958009 #958493 #958523 #958918 #959006 #959387 Cross-References: CVE-2015-5307 CVE-2015-7504 CVE-2015-7549 CVE-2015-8339 CVE-2015-8340 CVE-2015-8341 CVE-2015-8345 CVE-2015-8504 CVE-2015-8550 CVE-2015-8554 CVE-2015-8555 CVE-2015-8558 CVE-2015-8567 CVE-2015-8568 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes 14 vulnerabilities is now available. Description: This update for xen fixes the following security issues: - CVE-2015-8568 CVE-2015-8567: xen: qemu: net: vmxnet3: host memory leakage (boo#959387) - CVE-2015-8550: xen: paravirtualized drivers incautious about shared memory contents (XSA-155, boo#957988) - CVE-2015-8558: xen: qemu: usb: infinite loop in ehci_advance_state results in DoS (boo#959006) - CVE-2015-7549: xen: qemu pci: null pointer dereference issue (boo#958918) - CVE-2015-8504: xen: qemu: ui: vnc: avoid floating point exception (boo#958493) - CVE-2015-8554: xen: qemu-dm buffer overrun in MSI-X handling (XSA-164, boo#958007) - CVE-2015-8555: xen: information leak in legacy x86 FPU/XMM initialization (XSA-165, boo#958009) - boo#958523: xen: ioreq handling possibly susceptible to multiple read issue (XSA-166) - CVE-2015-5307: xen: x86: CPU lockup during fault delivery (XSA-156, boo#954018) - CVE-2015-8345: xen: qemu: net: eepro100: infinite loop in processing command block list (boo#956832) - boo#956592: xen: virtual PMU is unsupported (XSA-163) - CVE-2015-8339, CVE-2015-8340: xen: XENMEM_exchange error handling issues (XSA-159, boo#956408) - CVE-2015-8341: xen: libxl leak of pv kernel and initrd on error (XSA-160, boo#956409) - CVE-2015-7504: xen: heap buffer overflow vulnerability in pcnet emulator (XSA-162, boo#956411) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-35=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): xen-debugsource-4.4.3_08-36.1 xen-devel-4.4.3_08-36.1 xen-libs-4.4.3_08-36.1 xen-libs-debuginfo-4.4.3_08-36.1 xen-tools-domU-4.4.3_08-36.1 xen-tools-domU-debuginfo-4.4.3_08-36.1 - openSUSE 13.2 (x86_64): xen-4.4.3_08-36.1 xen-doc-html-4.4.3_08-36.1 xen-kmp-default-4.4.3_08_k3.16.7_29-36.1 xen-kmp-default-debuginfo-4.4.3_08_k3.16.7_29-36.1 xen-kmp-desktop-4.4.3_08_k3.16.7_29-36.1 xen-kmp-desktop-debuginfo-4.4.3_08_k3.16.7_29-36.1 xen-libs-32bit-4.4.3_08-36.1 xen-libs-debuginfo-32bit-4.4.3_08-36.1 xen-tools-4.4.3_08-36.1 xen-tools-debuginfo-4.4.3_08-36.1 References: https://www.suse.com/security/cve/CVE-2015-5307.html https://www.suse.com/security/cve/CVE-2015-7504.html https://www.suse.com/security/cve/CVE-2015-7549.html https://www.suse.com/security/cve/CVE-2015-8339.html https://www.suse.com/security/cve/CVE-2015-8340.html https://www.suse.com/security/cve/CVE-2015-8341.html https://www.suse.com/security/cve/CVE-2015-8345.html https://www.suse.com/security/cve/CVE-2015-8504.html https://www.suse.com/security/cve/CVE-2015-8550.html https://www.suse.com/security/cve/CVE-2015-8554.html https://www.suse.com/security/cve/CVE-2015-8555.html https://www.suse.com/security/cve/CVE-2015-8558.html https://www.suse.com/security/cve/CVE-2015-8567.html https://www.suse.com/security/cve/CVE-2015-8568.html https://bugzilla.suse.com/954018 https://bugzilla.suse.com/956408 https://bugzilla.suse.com/956409 https://bugzilla.suse.com/956411 https://bugzilla.suse.com/956592 https://bugzilla.suse.com/956832 https://bugzilla.suse.com/957988 https://bugzilla.suse.com/958007 https://bugzilla.suse.com/958009 https://bugzilla.suse.com/958493 https://bugzilla.suse.com/958523 https://bugzilla.suse.com/958918 https://bugzilla.suse.com/959006 https://bugzilla.suse.com/959387 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0