October 2016 - openSUSE Security Announce

[security-announce] openSUSE-SU-2016:2607-1: important: Security update for gd
by opensuse-security＠opensuse.org 24 Oct '16

24 Oct '16

openSUSE Security Update: Security update for gd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2607-1 Rating: important References: #1001900 Cross-References: CVE-2016-7568 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for gd fixes the following issue: - CVE-2016-7568: Integer overflow in the gdImageWebpCtx function in gd_webp.c (libgd) (bsc#1001900). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-1220=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): gd-2.1.0-7.19.1 gd-debuginfo-2.1.0-7.19.1 gd-debugsource-2.1.0-7.19.1 gd-devel-2.1.0-7.19.1 libgd3-2.1.0-7.19.1 libgd3-debuginfo-2.1.0-7.19.1 - openSUSE 13.2 (x86_64): libgd3-32bit-2.1.0-7.19.1 libgd3-debuginfo-32bit-2.1.0-7.19.1 References: https://www.suse.com/security/cve/CVE-2016-7568.html https://bugzilla.suse.com/1001900 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2016:2606-1: important: Security update for php5
by opensuse-security＠opensuse.org 24 Oct '16

24 Oct '16

openSUSE Security Update: Security update for php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2606-1 Rating: important References: #1001900 #1004924 #1005274 Cross-References: CVE-2016-6911 CVE-2016-7568 CVE-2016-8670 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for php5 fixes the following issu: - CVE-2016-8670: Stack Buffer Overflow in GD dynamicGetbuf (bsc#1004924). - CVE-2016-7568: Integer overflow in the gdImageWebpCtx function in gd_webp.c (libgd) (bsc#1001900). - CVE-2016-6911: Check for out-of-bound read in dynamicGetbuf() (bsc#1005274). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-1221=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): apache2-mod_php5-5.6.1-83.1 apache2-mod_php5-debuginfo-5.6.1-83.1 php5-5.6.1-83.1 php5-bcmath-5.6.1-83.1 php5-bcmath-debuginfo-5.6.1-83.1 php5-bz2-5.6.1-83.1 php5-bz2-debuginfo-5.6.1-83.1 php5-calendar-5.6.1-83.1 php5-calendar-debuginfo-5.6.1-83.1 php5-ctype-5.6.1-83.1 php5-ctype-debuginfo-5.6.1-83.1 php5-curl-5.6.1-83.1 php5-curl-debuginfo-5.6.1-83.1 php5-dba-5.6.1-83.1 php5-dba-debuginfo-5.6.1-83.1 php5-debuginfo-5.6.1-83.1 php5-debugsource-5.6.1-83.1 php5-devel-5.6.1-83.1 php5-dom-5.6.1-83.1 php5-dom-debuginfo-5.6.1-83.1 php5-enchant-5.6.1-83.1 php5-enchant-debuginfo-5.6.1-83.1 php5-exif-5.6.1-83.1 php5-exif-debuginfo-5.6.1-83.1 php5-fastcgi-5.6.1-83.1 php5-fastcgi-debuginfo-5.6.1-83.1 php5-fileinfo-5.6.1-83.1 php5-fileinfo-debuginfo-5.6.1-83.1 php5-firebird-5.6.1-83.1 php5-firebird-debuginfo-5.6.1-83.1 php5-fpm-5.6.1-83.1 php5-fpm-debuginfo-5.6.1-83.1 php5-ftp-5.6.1-83.1 php5-ftp-debuginfo-5.6.1-83.1 php5-gd-5.6.1-83.1 php5-gd-debuginfo-5.6.1-83.1 php5-gettext-5.6.1-83.1 php5-gettext-debuginfo-5.6.1-83.1 php5-gmp-5.6.1-83.1 php5-gmp-debuginfo-5.6.1-83.1 php5-iconv-5.6.1-83.1 php5-iconv-debuginfo-5.6.1-83.1 php5-imap-5.6.1-83.1 php5-imap-debuginfo-5.6.1-83.1 php5-intl-5.6.1-83.1 php5-intl-debuginfo-5.6.1-83.1 php5-json-5.6.1-83.1 php5-json-debuginfo-5.6.1-83.1 php5-ldap-5.6.1-83.1 php5-ldap-debuginfo-5.6.1-83.1 php5-mbstring-5.6.1-83.1 php5-mbstring-debuginfo-5.6.1-83.1 php5-mcrypt-5.6.1-83.1 php5-mcrypt-debuginfo-5.6.1-83.1 php5-mssql-5.6.1-83.1 php5-mssql-debuginfo-5.6.1-83.1 php5-mysql-5.6.1-83.1 php5-mysql-debuginfo-5.6.1-83.1 php5-odbc-5.6.1-83.1 php5-odbc-debuginfo-5.6.1-83.1 php5-opcache-5.6.1-83.1 php5-opcache-debuginfo-5.6.1-83.1 php5-openssl-5.6.1-83.1 php5-openssl-debuginfo-5.6.1-83.1 php5-pcntl-5.6.1-83.1 php5-pcntl-debuginfo-5.6.1-83.1 php5-pdo-5.6.1-83.1 php5-pdo-debuginfo-5.6.1-83.1 php5-pgsql-5.6.1-83.1 php5-pgsql-debuginfo-5.6.1-83.1 php5-phar-5.6.1-83.1 php5-phar-debuginfo-5.6.1-83.1 php5-posix-5.6.1-83.1 php5-posix-debuginfo-5.6.1-83.1 php5-pspell-5.6.1-83.1 php5-pspell-debuginfo-5.6.1-83.1 php5-readline-5.6.1-83.1 php5-readline-debuginfo-5.6.1-83.1 php5-shmop-5.6.1-83.1 php5-shmop-debuginfo-5.6.1-83.1 php5-snmp-5.6.1-83.1 php5-snmp-debuginfo-5.6.1-83.1 php5-soap-5.6.1-83.1 php5-soap-debuginfo-5.6.1-83.1 php5-sockets-5.6.1-83.1 php5-sockets-debuginfo-5.6.1-83.1 php5-sqlite-5.6.1-83.1 php5-sqlite-debuginfo-5.6.1-83.1 php5-suhosin-5.6.1-83.1 php5-suhosin-debuginfo-5.6.1-83.1 php5-sysvmsg-5.6.1-83.1 php5-sysvmsg-debuginfo-5.6.1-83.1 php5-sysvsem-5.6.1-83.1 php5-sysvsem-debuginfo-5.6.1-83.1 php5-sysvshm-5.6.1-83.1 php5-sysvshm-debuginfo-5.6.1-83.1 php5-tidy-5.6.1-83.1 php5-tidy-debuginfo-5.6.1-83.1 php5-tokenizer-5.6.1-83.1 php5-tokenizer-debuginfo-5.6.1-83.1 php5-wddx-5.6.1-83.1 php5-wddx-debuginfo-5.6.1-83.1 php5-xmlreader-5.6.1-83.1 php5-xmlreader-debuginfo-5.6.1-83.1 php5-xmlrpc-5.6.1-83.1 php5-xmlrpc-debuginfo-5.6.1-83.1 php5-xmlwriter-5.6.1-83.1 php5-xmlwriter-debuginfo-5.6.1-83.1 php5-xsl-5.6.1-83.1 php5-xsl-debuginfo-5.6.1-83.1 php5-zip-5.6.1-83.1 php5-zip-debuginfo-5.6.1-83.1 php5-zlib-5.6.1-83.1 php5-zlib-debuginfo-5.6.1-83.1 - openSUSE 13.2 (noarch): php5-pear-5.6.1-83.1 References: https://www.suse.com/security/cve/CVE-2016-6911.html https://www.suse.com/security/cve/CVE-2016-7568.html https://www.suse.com/security/cve/CVE-2016-8670.html https://bugzilla.suse.com/1001900 https://bugzilla.suse.com/1004924 https://bugzilla.suse.com/1005274 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2016:2598-1: important: Security update for Chromium
by opensuse-security＠opensuse.org 23 Oct '16

23 Oct '16

SUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: SUSE-SU-2016:2598-1 Rating: important References: #1000019 #1004465 Cross-References: CVE-2016-5181 CVE-2016-5182 CVE-2016-5183 CVE-2016-5184 CVE-2016-5185 CVE-2016-5186 CVE-2016-5187 CVE-2016-5188 CVE-2016-5189 CVE-2016-5190 CVE-2016-5191 CVE-2016-5192 CVE-2016-5193 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes 13 vulnerabilities is now available. Description: Chromium was updated to 54.0.2840.59 to fix security issues and bugs. The following security issues are fixed (bnc#1004465): - CVE-2016-5181: Universal XSS in Blink - CVE-2016-5182: Heap overflow in Blink - CVE-2016-5183: Use after free in PDFium - CVE-2016-5184: Use after free in PDFium - CVE-2016-5185: Use after free in Blink - CVE-2016-5187: URL spoofing - CVE-2016-5188: UI spoofing - CVE-2016-5192: Cross-origin bypass in Blink - CVE-2016-5189: URL spoofing - CVE-2016-5186: Out of bounds read in DevTools - CVE-2016-5191: Universal XSS in Bookmarks - CVE-2016-5190: Use after free in Internals - CVE-2016-5193: Scheme bypass The following bugs were fixed: - bnc#1000019: display issues in full screen mode, add --ui-disable-partial-swap to the launcher The following packaging changes are included: - The desktop sub-packages are no obsolete - The package now uses the system variants of some bundled libraries - The hangouts extension is now built Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch 5717=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): chromedriver-54.0.2840.59-109.1 chromedriver-debuginfo-54.0.2840.59-109.1 chromium-54.0.2840.59-109.1 chromium-debuginfo-54.0.2840.59-109.1 chromium-debugsource-54.0.2840.59-109.1 chromium-ffmpegsumo-54.0.2840.59-109.1 chromium-ffmpegsumo-debuginfo-54.0.2840.59-109.1 References: https://www.suse.com/security/cve/CVE-2016-5181.html https://www.suse.com/security/cve/CVE-2016-5182.html https://www.suse.com/security/cve/CVE-2016-5183.html https://www.suse.com/security/cve/CVE-2016-5184.html https://www.suse.com/security/cve/CVE-2016-5185.html https://www.suse.com/security/cve/CVE-2016-5186.html https://www.suse.com/security/cve/CVE-2016-5187.html https://www.suse.com/security/cve/CVE-2016-5188.html https://www.suse.com/security/cve/CVE-2016-5189.html https://www.suse.com/security/cve/CVE-2016-5190.html https://www.suse.com/security/cve/CVE-2016-5191.html https://www.suse.com/security/cve/CVE-2016-5192.html https://www.suse.com/security/cve/CVE-2016-5193.html https://bugzilla.suse.com/1000019 https://bugzilla.suse.com/1004465 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2016:2597-1: important: Security update for Chromium
by opensuse-security＠opensuse.org 23 Oct '16

23 Oct '16

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2597-1 Rating: important References: #1000019 #1004465 Cross-References: CVE-2016-5181 CVE-2016-5182 CVE-2016-5183 CVE-2016-5184 CVE-2016-5185 CVE-2016-5186 CVE-2016-5187 CVE-2016-5188 CVE-2016-5189 CVE-2016-5190 CVE-2016-5191 CVE-2016-5192 CVE-2016-5193 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes 13 vulnerabilities is now available. Description: Chromium was updated to 54.0.2840.59 to fix security issues and bugs. The following security issues are fixed (bnc#1004465): - CVE-2016-5181: Universal XSS in Blink - CVE-2016-5182: Heap overflow in Blink - CVE-2016-5183: Use after free in PDFium - CVE-2016-5184: Use after free in PDFium - CVE-2016-5185: Use after free in Blink - CVE-2016-5187: URL spoofing - CVE-2016-5188: UI spoofing - CVE-2016-5192: Cross-origin bypass in Blink - CVE-2016-5189: URL spoofing - CVE-2016-5186: Out of bounds read in DevTools - CVE-2016-5191: Universal XSS in Bookmarks - CVE-2016-5190: Use after free in Internals - CVE-2016-5193: Scheme bypass The following bugs were fixed: - bnc#1000019: display issues in full screen mode, add --ui-disable-partial-swap to the launcher The following packaging changes are included: - The desktop sub-packages are no obsolete - The package now uses the system variants of some bundled libraries - The hangouts extension is now built Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch 5717=1 - openSUSE 13.2: zypper in -t patch 5717=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (x86_64): chromedriver-54.0.2840.59-82.1 chromedriver-debuginfo-54.0.2840.59-82.1 chromium-54.0.2840.59-82.1 chromium-debuginfo-54.0.2840.59-82.1 chromium-debugsource-54.0.2840.59-82.1 chromium-ffmpegsumo-54.0.2840.59-82.1 chromium-ffmpegsumo-debuginfo-54.0.2840.59-82.1 - openSUSE 13.2 (i586 x86_64): chromedriver-54.0.2840.59-131.2 chromedriver-debuginfo-54.0.2840.59-131.2 chromium-54.0.2840.59-131.2 chromium-debuginfo-54.0.2840.59-131.2 chromium-debugsource-54.0.2840.59-131.2 chromium-ffmpegsumo-54.0.2840.59-131.2 chromium-ffmpegsumo-debuginfo-54.0.2840.59-131.2 References: https://www.suse.com/security/cve/CVE-2016-5181.html https://www.suse.com/security/cve/CVE-2016-5182.html https://www.suse.com/security/cve/CVE-2016-5183.html https://www.suse.com/security/cve/CVE-2016-5184.html https://www.suse.com/security/cve/CVE-2016-5185.html https://www.suse.com/security/cve/CVE-2016-5186.html https://www.suse.com/security/cve/CVE-2016-5187.html https://www.suse.com/security/cve/CVE-2016-5188.html https://www.suse.com/security/cve/CVE-2016-5189.html https://www.suse.com/security/cve/CVE-2016-5190.html https://www.suse.com/security/cve/CVE-2016-5191.html https://www.suse.com/security/cve/CVE-2016-5192.html https://www.suse.com/security/cve/CVE-2016-5193.html https://bugzilla.suse.com/1000019 https://bugzilla.suse.com/1004465 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2016:2596-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 21 Oct '16

21 Oct '16

SUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: SUSE-SU-2016:2596-1 Rating: important References: #1004418 Cross-References: CVE-2016-5195 Affected Products: SUSE Linux Enterprise Server 11-SP2-LTSS SUSE Linux Enterprise Debuginfo 11-SP2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The SUSE Linux Enterprise 11 SP2 LTSS kernel was updated to fix one security issue. This security bug was fixed: - CVE-2016-5195: Local privilege escalation using MAP_PRIVATE. It is reportedly exploited in the wild (bsc#1004418). Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 11-SP2-LTSS: zypper in -t patch slessp2-kernel-source-12807=1 - SUSE Linux Enterprise Debuginfo 11-SP2: zypper in -t patch dbgsp2-kernel-source-12807=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Server 11-SP2-LTSS (i586 s390x x86_64): kernel-default-3.0.101-0.7.44.1 kernel-default-base-3.0.101-0.7.44.1 kernel-default-devel-3.0.101-0.7.44.1 kernel-source-3.0.101-0.7.44.1 kernel-syms-3.0.101-0.7.44.1 kernel-trace-3.0.101-0.7.44.1 kernel-trace-base-3.0.101-0.7.44.1 kernel-trace-devel-3.0.101-0.7.44.1 - SUSE Linux Enterprise Server 11-SP2-LTSS (i586 x86_64): kernel-ec2-3.0.101-0.7.44.1 kernel-ec2-base-3.0.101-0.7.44.1 kernel-ec2-devel-3.0.101-0.7.44.1 kernel-xen-3.0.101-0.7.44.1 kernel-xen-base-3.0.101-0.7.44.1 kernel-xen-devel-3.0.101-0.7.44.1 - SUSE Linux Enterprise Server 11-SP2-LTSS (s390x): kernel-default-man-3.0.101-0.7.44.1 - SUSE Linux Enterprise Server 11-SP2-LTSS (i586): kernel-pae-3.0.101-0.7.44.1 kernel-pae-base-3.0.101-0.7.44.1 kernel-pae-devel-3.0.101-0.7.44.1 - SUSE Linux Enterprise Debuginfo 11-SP2 (i586 s390x x86_64): kernel-default-debuginfo-3.0.101-0.7.44.1 kernel-default-debugsource-3.0.101-0.7.44.1 kernel-default-devel-debuginfo-3.0.101-0.7.44.1 kernel-trace-debuginfo-3.0.101-0.7.44.1 kernel-trace-debugsource-3.0.101-0.7.44.1 kernel-trace-devel-debuginfo-3.0.101-0.7.44.1 - SUSE Linux Enterprise Debuginfo 11-SP2 (i586 x86_64): kernel-ec2-debuginfo-3.0.101-0.7.44.1 kernel-ec2-debugsource-3.0.101-0.7.44.1 kernel-xen-debuginfo-3.0.101-0.7.44.1 kernel-xen-debugsource-3.0.101-0.7.44.1 kernel-xen-devel-debuginfo-3.0.101-0.7.44.1 - SUSE Linux Enterprise Debuginfo 11-SP2 (i586): kernel-pae-debuginfo-3.0.101-0.7.44.1 kernel-pae-debugsource-3.0.101-0.7.44.1 kernel-pae-devel-debuginfo-3.0.101-0.7.44.1 References: https://www.suse.com/security/cve/CVE-2016-5195.html https://bugzilla.suse.com/1004418 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2016:2593-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 21 Oct '16

21 Oct '16

SUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: SUSE-SU-2016:2593-1 Rating: important References: #1001419 #1002165 #1004418 #904970 #907150 #920615 #920633 #930408 Cross-References: CVE-2016-5195 Affected Products: SUSE Linux Enterprise Server for SAP 12 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Module for Public Cloud 12 ______________________________________________________________________________ An update that solves one vulnerability and has 7 fixes is now available. Description: The SUSE Linux Enterprise 12 GA LTSS kernel was updated to fix two issues. This security bug was fixed: - CVE-2016-5195: Local privilege escalation using MAP_PRIVATE. It is reportedly exploited in the wild (bsc#1004418). This non-security bug was fixed: - sched/core: Fix a race between try_to_wake_up() and a woken up task (bsc#1002165, bsc#1001419). Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server for SAP 12: zypper in -t patch SUSE-SLE-SAP-12-2016-1524=1 - SUSE Linux Enterprise Server 12-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-2016-1524=1 - SUSE Linux Enterprise Module for Public Cloud 12: zypper in -t patch SUSE-SLE-Module-Public-Cloud-12-2016-1524=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Server for SAP 12 (noarch): kernel-devel-3.12.60-52.57.1 kernel-macros-3.12.60-52.57.1 kernel-source-3.12.60-52.57.1 - SUSE Linux Enterprise Server for SAP 12 (x86_64): kernel-default-3.12.60-52.57.1 kernel-default-base-3.12.60-52.57.1 kernel-default-base-debuginfo-3.12.60-52.57.1 kernel-default-debuginfo-3.12.60-52.57.1 kernel-default-debugsource-3.12.60-52.57.1 kernel-default-devel-3.12.60-52.57.1 kernel-syms-3.12.60-52.57.1 kernel-xen-3.12.60-52.57.1 kernel-xen-base-3.12.60-52.57.1 kernel-xen-base-debuginfo-3.12.60-52.57.1 kernel-xen-debuginfo-3.12.60-52.57.1 kernel-xen-debugsource-3.12.60-52.57.1 kernel-xen-devel-3.12.60-52.57.1 kgraft-patch-3_12_60-52_57-default-1-2.1 kgraft-patch-3_12_60-52_57-xen-1-2.1 - SUSE Linux Enterprise Server 12-LTSS (ppc64le s390x x86_64): kernel-default-3.12.60-52.57.1 kernel-default-base-3.12.60-52.57.1 kernel-default-base-debuginfo-3.12.60-52.57.1 kernel-default-debuginfo-3.12.60-52.57.1 kernel-default-debugsource-3.12.60-52.57.1 kernel-default-devel-3.12.60-52.57.1 kernel-syms-3.12.60-52.57.1 - SUSE Linux Enterprise Server 12-LTSS (noarch): kernel-devel-3.12.60-52.57.1 kernel-macros-3.12.60-52.57.1 kernel-source-3.12.60-52.57.1 - SUSE Linux Enterprise Server 12-LTSS (x86_64): kernel-xen-3.12.60-52.57.1 kernel-xen-base-3.12.60-52.57.1 kernel-xen-base-debuginfo-3.12.60-52.57.1 kernel-xen-debuginfo-3.12.60-52.57.1 kernel-xen-debugsource-3.12.60-52.57.1 kernel-xen-devel-3.12.60-52.57.1 kgraft-patch-3_12_60-52_57-default-1-2.1 kgraft-patch-3_12_60-52_57-xen-1-2.1 - SUSE Linux Enterprise Server 12-LTSS (s390x): kernel-default-man-3.12.60-52.57.1 - SUSE Linux Enterprise Module for Public Cloud 12 (x86_64): kernel-ec2-3.12.60-52.57.1 kernel-ec2-debuginfo-3.12.60-52.57.1 kernel-ec2-debugsource-3.12.60-52.57.1 kernel-ec2-devel-3.12.60-52.57.1 kernel-ec2-extra-3.12.60-52.57.1 kernel-ec2-extra-debuginfo-3.12.60-52.57.1 References: https://www.suse.com/security/cve/CVE-2016-5195.html https://bugzilla.suse.com/1001419 https://bugzilla.suse.com/1002165 https://bugzilla.suse.com/1004418 https://bugzilla.suse.com/904970 https://bugzilla.suse.com/907150 https://bugzilla.suse.com/920615 https://bugzilla.suse.com/920633 https://bugzilla.suse.com/930408 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2016:2592-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 21 Oct '16

21 Oct '16

SUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: SUSE-SU-2016:2592-1 Rating: important References: #1001419 #1002165 #1004418 #904970 #907150 #920615 #920633 #930408 Cross-References: CVE-2016-5195 Affected Products: SUSE Linux Enterprise Workstation Extension 12-SP1 SUSE Linux Enterprise Software Development Kit 12-SP1 SUSE Linux Enterprise Server 12-SP1 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Live Patching 12 SUSE Linux Enterprise Desktop 12-SP1 ______________________________________________________________________________ An update that solves one vulnerability and has 7 fixes is now available. Description: The SUSE Linux Enterprise 12 SP1 kernel was updated to fix two issues. This security bug was fixed: - CVE-2016-5195: Local privilege escalation using MAP_PRIVATE. It is reportedly exploited in the wild (bsc#1004418). This non-security bug was fixed: - sched/core: Fix a race between try_to_wake_up() and a woken up task (bsc#1002165, bsc#1001419). Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Workstation Extension 12-SP1: zypper in -t patch SUSE-SLE-WE-12-SP1-2016-1522=1 - SUSE Linux Enterprise Software Development Kit 12-SP1: zypper in -t patch SUSE-SLE-SDK-12-SP1-2016-1522=1 - SUSE Linux Enterprise Server 12-SP1: zypper in -t patch SUSE-SLE-SERVER-12-SP1-2016-1522=1 - SUSE Linux Enterprise Module for Public Cloud 12: zypper in -t patch SUSE-SLE-Module-Public-Cloud-12-2016-1522=1 - SUSE Linux Enterprise Live Patching 12: zypper in -t patch SUSE-SLE-Live-Patching-12-2016-1522=1 - SUSE Linux Enterprise Desktop 12-SP1: zypper in -t patch SUSE-SLE-DESKTOP-12-SP1-2016-1522=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Workstation Extension 12-SP1 (x86_64): kernel-default-debuginfo-3.12.62-60.64.8.2 kernel-default-debugsource-3.12.62-60.64.8.2 kernel-default-extra-3.12.62-60.64.8.2 kernel-default-extra-debuginfo-3.12.62-60.64.8.2 - SUSE Linux Enterprise Software Development Kit 12-SP1 (ppc64le s390x x86_64): kernel-obs-build-3.12.62-60.64.8.3 kernel-obs-build-debugsource-3.12.62-60.64.8.3 - SUSE Linux Enterprise Software Development Kit 12-SP1 (noarch): kernel-docs-3.12.62-60.64.8.5 - SUSE Linux Enterprise Server 12-SP1 (ppc64le s390x x86_64): kernel-default-3.12.62-60.64.8.2 kernel-default-base-3.12.62-60.64.8.2 kernel-default-base-debuginfo-3.12.62-60.64.8.2 kernel-default-debuginfo-3.12.62-60.64.8.2 kernel-default-debugsource-3.12.62-60.64.8.2 kernel-default-devel-3.12.62-60.64.8.2 kernel-syms-3.12.62-60.64.8.2 - SUSE Linux Enterprise Server 12-SP1 (noarch): kernel-devel-3.12.62-60.64.8.2 kernel-macros-3.12.62-60.64.8.2 kernel-source-3.12.62-60.64.8.2 - SUSE Linux Enterprise Server 12-SP1 (x86_64): kernel-xen-3.12.62-60.64.8.2 kernel-xen-base-3.12.62-60.64.8.2 kernel-xen-base-debuginfo-3.12.62-60.64.8.2 kernel-xen-debuginfo-3.12.62-60.64.8.2 kernel-xen-debugsource-3.12.62-60.64.8.2 kernel-xen-devel-3.12.62-60.64.8.2 - SUSE Linux Enterprise Server 12-SP1 (s390x): kernel-default-man-3.12.62-60.64.8.2 - SUSE Linux Enterprise Module for Public Cloud 12 (x86_64): kernel-ec2-3.12.62-60.64.8.2 kernel-ec2-debuginfo-3.12.62-60.64.8.2 kernel-ec2-debugsource-3.12.62-60.64.8.2 kernel-ec2-devel-3.12.62-60.64.8.2 kernel-ec2-extra-3.12.62-60.64.8.2 kernel-ec2-extra-debuginfo-3.12.62-60.64.8.2 - SUSE Linux Enterprise Live Patching 12 (x86_64): kgraft-patch-3_12_62-60_64_8-default-1-2.2 kgraft-patch-3_12_62-60_64_8-xen-1-2.2 - SUSE Linux Enterprise Desktop 12-SP1 (x86_64): kernel-default-3.12.62-60.64.8.2 kernel-default-debuginfo-3.12.62-60.64.8.2 kernel-default-debugsource-3.12.62-60.64.8.2 kernel-default-devel-3.12.62-60.64.8.2 kernel-default-extra-3.12.62-60.64.8.2 kernel-default-extra-debuginfo-3.12.62-60.64.8.2 kernel-syms-3.12.62-60.64.8.2 kernel-xen-3.12.62-60.64.8.2 kernel-xen-debuginfo-3.12.62-60.64.8.2 kernel-xen-debugsource-3.12.62-60.64.8.2 kernel-xen-devel-3.12.62-60.64.8.2 - SUSE Linux Enterprise Desktop 12-SP1 (noarch): kernel-devel-3.12.62-60.64.8.2 kernel-macros-3.12.62-60.64.8.2 kernel-source-3.12.62-60.64.8.2 References: https://www.suse.com/security/cve/CVE-2016-5195.html https://bugzilla.suse.com/1001419 https://bugzilla.suse.com/1002165 https://bugzilla.suse.com/1004418 https://bugzilla.suse.com/904970 https://bugzilla.suse.com/907150 https://bugzilla.suse.com/920615 https://bugzilla.suse.com/920633 https://bugzilla.suse.com/930408 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2016:2589-1: important: Security update for qemu
by opensuse-security＠opensuse.org 21 Oct '16

21 Oct '16

SUSE Security Update: Security update for qemu ______________________________________________________________________________ Announcement ID: SUSE-SU-2016:2589-1 Rating: important References: #1000048 #967012 #967013 #982017 #982018 #982019 #982222 #982223 #982285 #982959 #983961 #983982 #991080 #991466 #994760 #994771 #994774 #996441 #997858 #997859 Cross-References: CVE-2016-2391 CVE-2016-2392 CVE-2016-4453 CVE-2016-4454 CVE-2016-5105 CVE-2016-5106 CVE-2016-5107 CVE-2016-5126 CVE-2016-5238 CVE-2016-5337 CVE-2016-5338 CVE-2016-5403 CVE-2016-6490 CVE-2016-6833 CVE-2016-6836 CVE-2016-6888 CVE-2016-7116 CVE-2016-7155 CVE-2016-7156 Affected Products: SUSE Linux Enterprise Server 12-SP1 SUSE Linux Enterprise Desktop 12-SP1 ______________________________________________________________________________ An update that solves 19 vulnerabilities and has one errata is now available. Description: qemu was updated to fix 19 security issues. These security issues were fixed: - CVE-2016-2392: The is_rndis function in the USB Net device emulator (hw/usb/dev-network.c) in QEMU did not properly validate USB configuration descriptor objects, which allowed local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors involving a remote NDIS control message packet (bsc#967012) - CVE-2016-2391: The ohci_bus_start function in the USB OHCI emulation support (hw/usb/hcd-ohci.c) in QEMU allowed local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors related to multiple eof_timers (bsc#967013) - CVE-2016-5106: The megasas_dcmd_set_properties function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allowed local guest administrators to cause a denial of service (out-of-bounds write access) via vectors involving a MegaRAID Firmware Interface (MFI) command (bsc#982018) - CVE-2016-5105: The megasas_dcmd_cfg_read function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, used an uninitialized variable, which allowed local guest administrators to read host memory via vectors involving a MegaRAID Firmware Interface (MFI) command (bsc#982017) - CVE-2016-5107: The megasas_lookup_frame function in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allowed local guest OS administrators to cause a denial of service (out-of-bounds read and crash) via unspecified vectors (bsc#982019) - CVE-2016-5126: Heap-based buffer overflow in the iscsi_aio_ioctl function in block/iscsi.c in QEMU allowed local guest OS users to cause a denial of service (QEMU process crash) or possibly execute arbitrary code via a crafted iSCSI asynchronous I/O ioctl call (bsc#982285) - CVE-2016-4454: The vmsvga_fifo_read_raw function in hw/display/vmware_vga.c in QEMU allowed local guest OS administrators to obtain sensitive host memory information or cause a denial of service (QEMU process crash) by changing FIFO registers and issuing a VGA command, which triggers an out-of-bounds read (bsc#982222) - CVE-2016-4453: The vmsvga_fifo_run function in hw/display/vmware_vga.c in QEMU allowed local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via a VGA command (bsc#982223) - CVE-2016-5338: The (1) esp_reg_read and (2) esp_reg_write functions in hw/scsi/esp.c in QEMU allowed local guest OS administrators to cause a denial of service (QEMU process crash) or execute arbitrary code on the QEMU host via vectors related to the information transfer buffer (bsc#983982) - CVE-2016-5337: The megasas_ctrl_get_info function in hw/scsi/megasas.c in QEMU allowed local guest OS administrators to obtain sensitive host memory information via vectors related to reading device control information (bsc#983961) - CVE-2016-5238: The get_cmd function in hw/scsi/esp.c in QEMU allowed local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via vectors related to reading from the information transfer buffer in non-DMA mode (bsc#982959) - CVE-2016-5403: The virtqueue_pop function in hw/virtio/virtio.c in QEMU allowed local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) by submitting requests without waiting for completion (bsc#991080) - CVE-2016-6490: Infinite loop in the virtio framework. A privileged user inside the guest could have used this flaw to crash the Qemu instance on the host resulting in DoS (bsc#991466) - CVE-2016-6888: Integer overflow in packet initialisation in VMXNET3 device driver. A privileged user inside guest could have used this flaw to crash the Qemu instance resulting in DoS (bsc#994771) - CVE-2016-6833: Use-after-free issue in the VMWARE VMXNET3 NIC device support. A privileged user inside guest could have used this issue to crash the Qemu instance resulting in DoS (bsc#994774) - CVE-2016-7116: Host directory sharing via Plan 9 File System(9pfs) was vulnerable to a directory/path traversal issue. A privileged user inside guest could have used this flaw to access undue files on the host (bsc#996441) - CVE-2016-6836: VMWARE VMXNET3 NIC device support was leaging information leakage. A privileged user inside guest could have used this to leak host memory bytes to a guest (bsc#994760) - CVE-2016-7155: In the VMWARE PVSCSI paravirtual SCSI bus a OOB access and/or infinite loop issue could have allowed a privileged user inside guest to crash the Qemu process resulting in DoS (bsc#997858) - CVE-2016-7156: In the VMWARE PVSCSI paravirtual SCSI bus a infinite loop issue could have allowed a privileged user inside guest to crash the Qemu process resulting in DoS (bsc#997859) This non-security issue was fixed: - bsc#1000048: Fix migration failure where target host is a soon to be released SLES 12 SP2. Qemu's spice code gets an assertion. Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 12-SP1: zypper in -t patch SUSE-SLE-SERVER-12-SP1-2016-1523=1 - SUSE Linux Enterprise Desktop 12-SP1: zypper in -t patch SUSE-SLE-DESKTOP-12-SP1-2016-1523=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Server 12-SP1 (ppc64le s390x x86_64): qemu-2.3.1-21.1 qemu-block-curl-2.3.1-21.1 qemu-block-curl-debuginfo-2.3.1-21.1 qemu-debugsource-2.3.1-21.1 qemu-guest-agent-2.3.1-21.1 qemu-guest-agent-debuginfo-2.3.1-21.1 qemu-lang-2.3.1-21.1 qemu-tools-2.3.1-21.1 qemu-tools-debuginfo-2.3.1-21.1 - SUSE Linux Enterprise Server 12-SP1 (s390x x86_64): qemu-kvm-2.3.1-21.1 - SUSE Linux Enterprise Server 12-SP1 (ppc64le): qemu-ppc-2.3.1-21.1 qemu-ppc-debuginfo-2.3.1-21.1 - SUSE Linux Enterprise Server 12-SP1 (noarch): qemu-ipxe-1.0.0-21.1 qemu-seabios-1.8.1-21.1 qemu-sgabios-8-21.1 qemu-vgabios-1.8.1-21.1 - SUSE Linux Enterprise Server 12-SP1 (x86_64): qemu-block-rbd-2.3.1-21.1 qemu-block-rbd-debuginfo-2.3.1-21.1 qemu-x86-2.3.1-21.1 - SUSE Linux Enterprise Server 12-SP1 (s390x): qemu-s390-2.3.1-21.1 qemu-s390-debuginfo-2.3.1-21.1 - SUSE Linux Enterprise Desktop 12-SP1 (noarch): qemu-ipxe-1.0.0-21.1 qemu-seabios-1.8.1-21.1 qemu-sgabios-8-21.1 qemu-vgabios-1.8.1-21.1 - SUSE Linux Enterprise Desktop 12-SP1 (x86_64): qemu-2.3.1-21.1 qemu-block-curl-2.3.1-21.1 qemu-block-curl-debuginfo-2.3.1-21.1 qemu-debugsource-2.3.1-21.1 qemu-kvm-2.3.1-21.1 qemu-tools-2.3.1-21.1 qemu-tools-debuginfo-2.3.1-21.1 qemu-x86-2.3.1-21.1 References: https://www.suse.com/security/cve/CVE-2016-2391.html https://www.suse.com/security/cve/CVE-2016-2392.html https://www.suse.com/security/cve/CVE-2016-4453.html https://www.suse.com/security/cve/CVE-2016-4454.html https://www.suse.com/security/cve/CVE-2016-5105.html https://www.suse.com/security/cve/CVE-2016-5106.html https://www.suse.com/security/cve/CVE-2016-5107.html https://www.suse.com/security/cve/CVE-2016-5126.html https://www.suse.com/security/cve/CVE-2016-5238.html https://www.suse.com/security/cve/CVE-2016-5337.html https://www.suse.com/security/cve/CVE-2016-5338.html https://www.suse.com/security/cve/CVE-2016-5403.html https://www.suse.com/security/cve/CVE-2016-6490.html https://www.suse.com/security/cve/CVE-2016-6833.html https://www.suse.com/security/cve/CVE-2016-6836.html https://www.suse.com/security/cve/CVE-2016-6888.html https://www.suse.com/security/cve/CVE-2016-7116.html https://www.suse.com/security/cve/CVE-2016-7155.html https://www.suse.com/security/cve/CVE-2016-7156.html https://bugzilla.suse.com/1000048 https://bugzilla.suse.com/967012 https://bugzilla.suse.com/967013 https://bugzilla.suse.com/982017 https://bugzilla.suse.com/982018 https://bugzilla.suse.com/982019 https://bugzilla.suse.com/982222 https://bugzilla.suse.com/982223 https://bugzilla.suse.com/982285 https://bugzilla.suse.com/982959 https://bugzilla.suse.com/983961 https://bugzilla.suse.com/983982 https://bugzilla.suse.com/991080 https://bugzilla.suse.com/991466 https://bugzilla.suse.com/994760 https://bugzilla.suse.com/994771 https://bugzilla.suse.com/994774 https://bugzilla.suse.com/996441 https://bugzilla.suse.com/997858 https://bugzilla.suse.com/997859 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2016:2585-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 21 Oct '16

21 Oct '16

SUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: SUSE-SU-2016:2585-1 Rating: important References: #1004418 Cross-References: CVE-2016-5195 Affected Products: SUSE Linux Enterprise Software Development Kit 11-SP4 SUSE Linux Enterprise Server 11-SP4 SUSE Linux Enterprise Server 11-EXTRA SUSE Linux Enterprise Debuginfo 11-SP4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The SUSE Linux Enterprise 11 SP4 kernel was updated to fix one security issue. This security bug was fixed: - CVE-2016-5195: Local privilege escalation using MAP_PRIVATE. It is reportedly exploited in the wild (bsc#1004418). Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11-SP4: zypper in -t patch sdksp4-kernel-source-12804=1 - SUSE Linux Enterprise Server 11-SP4: zypper in -t patch slessp4-kernel-source-12804=1 - SUSE Linux Enterprise Server 11-EXTRA: zypper in -t patch slexsp3-kernel-source-12804=1 - SUSE Linux Enterprise Debuginfo 11-SP4: zypper in -t patch dbgsp4-kernel-source-12804=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11-SP4 (noarch): kernel-docs-3.0.101-84.2 - SUSE Linux Enterprise Server 11-SP4 (i586 ia64 ppc64 s390x x86_64): kernel-default-3.0.101-84.1 kernel-default-base-3.0.101-84.1 kernel-default-devel-3.0.101-84.1 kernel-source-3.0.101-84.1 kernel-syms-3.0.101-84.1 kernel-trace-3.0.101-84.1 kernel-trace-base-3.0.101-84.1 kernel-trace-devel-3.0.101-84.1 - SUSE Linux Enterprise Server 11-SP4 (i586 x86_64): kernel-ec2-3.0.101-84.1 kernel-ec2-base-3.0.101-84.1 kernel-ec2-devel-3.0.101-84.1 kernel-xen-3.0.101-84.1 kernel-xen-base-3.0.101-84.1 kernel-xen-devel-3.0.101-84.1 - SUSE Linux Enterprise Server 11-SP4 (s390x): kernel-default-man-3.0.101-84.1 - SUSE Linux Enterprise Server 11-SP4 (ppc64): kernel-ppc64-3.0.101-84.1 kernel-ppc64-base-3.0.101-84.1 kernel-ppc64-devel-3.0.101-84.1 - SUSE Linux Enterprise Server 11-SP4 (i586): kernel-pae-3.0.101-84.1 kernel-pae-base-3.0.101-84.1 kernel-pae-devel-3.0.101-84.1 - SUSE Linux Enterprise Server 11-EXTRA (i586 ia64 ppc64 s390x x86_64): kernel-default-extra-3.0.101-84.1 - SUSE Linux Enterprise Server 11-EXTRA (i586 x86_64): kernel-xen-extra-3.0.101-84.1 - SUSE Linux Enterprise Server 11-EXTRA (x86_64): kernel-trace-extra-3.0.101-84.1 - SUSE Linux Enterprise Server 11-EXTRA (ppc64): kernel-ppc64-extra-3.0.101-84.1 - SUSE Linux Enterprise Server 11-EXTRA (i586): kernel-pae-extra-3.0.101-84.1 - SUSE Linux Enterprise Debuginfo 11-SP4 (i586 ia64 ppc64 s390x x86_64): kernel-default-debuginfo-3.0.101-84.1 kernel-default-debugsource-3.0.101-84.1 kernel-trace-debuginfo-3.0.101-84.1 kernel-trace-debugsource-3.0.101-84.1 - SUSE Linux Enterprise Debuginfo 11-SP4 (i586 ia64 s390x x86_64): kernel-default-devel-debuginfo-3.0.101-84.1 kernel-trace-devel-debuginfo-3.0.101-84.1 - SUSE Linux Enterprise Debuginfo 11-SP4 (i586 x86_64): kernel-ec2-debuginfo-3.0.101-84.1 kernel-ec2-debugsource-3.0.101-84.1 kernel-xen-debuginfo-3.0.101-84.1 kernel-xen-debugsource-3.0.101-84.1 kernel-xen-devel-debuginfo-3.0.101-84.1 - SUSE Linux Enterprise Debuginfo 11-SP4 (ppc64): kernel-ppc64-debuginfo-3.0.101-84.1 kernel-ppc64-debugsource-3.0.101-84.1 - SUSE Linux Enterprise Debuginfo 11-SP4 (i586): kernel-pae-debuginfo-3.0.101-84.1 kernel-pae-debugsource-3.0.101-84.1 kernel-pae-devel-debuginfo-3.0.101-84.1 References: https://www.suse.com/security/cve/CVE-2016-5195.html https://bugzilla.suse.com/1004418 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2016:2584-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 21 Oct '16

21 Oct '16

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2584-1 Rating: important References: #1001419 #1001486 #1002165 #1004418 Cross-References: CVE-2016-5195 CVE-2016-8666 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has two fixes is now available. Description: The openSUSE 13.1 kernel was updated to fix bugs and security issues. The following security bugs were fixed: - CVE-2016-8666: The IP stack in the Linux kernel allowed remote attackers to cause a denial of service (stack consumption and panic) or possibly have unspecified other impact by triggering use of the GRO path for packets with tunnel stacking, as demonstrated by interleaved IPv4 headers and GRE headers, a related issue to CVE-2016-7039 (bnc#1001486). - CVE-2016-5195: A local privilege escalation using MAP_PRIVATE was fixed, which is reportedly exploited in the wild (bsc#1004418). The following non-security bugs were fixed: - sched/core: Fix a race between try_to_wake_up() and a woken up task (bsc#1002165, bsc#1001419). - sched/core: Fix an SMP ordering race in try_to_wake_up() vs. schedule() (bnc#1001419). - tunnels: Do not apply GRO to multiple layers of encapsulation (bsc#1001486). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2016-1211=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): cloop-2.639-11.34.1 cloop-debuginfo-2.639-11.34.1 cloop-debugsource-2.639-11.34.1 cloop-kmp-default-2.639_k3.12.62_55-11.34.1 cloop-kmp-default-debuginfo-2.639_k3.12.62_55-11.34.1 cloop-kmp-desktop-2.639_k3.12.62_55-11.34.1 cloop-kmp-desktop-debuginfo-2.639_k3.12.62_55-11.34.1 cloop-kmp-xen-2.639_k3.12.62_55-11.34.1 cloop-kmp-xen-debuginfo-2.639_k3.12.62_55-11.34.1 crash-7.0.2-2.34.1 crash-debuginfo-7.0.2-2.34.1 crash-debugsource-7.0.2-2.34.1 crash-devel-7.0.2-2.34.1 crash-doc-7.0.2-2.34.1 crash-eppic-7.0.2-2.34.1 crash-eppic-debuginfo-7.0.2-2.34.1 crash-gcore-7.0.2-2.34.1 crash-gcore-debuginfo-7.0.2-2.34.1 crash-kmp-default-7.0.2_k3.12.62_55-2.34.1 crash-kmp-default-debuginfo-7.0.2_k3.12.62_55-2.34.1 crash-kmp-desktop-7.0.2_k3.12.62_55-2.34.1 crash-kmp-desktop-debuginfo-7.0.2_k3.12.62_55-2.34.1 crash-kmp-xen-7.0.2_k3.12.62_55-2.34.1 crash-kmp-xen-debuginfo-7.0.2_k3.12.62_55-2.34.1 hdjmod-debugsource-1.28-16.34.1 hdjmod-kmp-default-1.28_k3.12.62_55-16.34.1 hdjmod-kmp-default-debuginfo-1.28_k3.12.62_55-16.34.1 hdjmod-kmp-desktop-1.28_k3.12.62_55-16.34.1 hdjmod-kmp-desktop-debuginfo-1.28_k3.12.62_55-16.34.1 hdjmod-kmp-xen-1.28_k3.12.62_55-16.34.1 hdjmod-kmp-xen-debuginfo-1.28_k3.12.62_55-16.34.1 ipset-6.21.1-2.38.1 ipset-debuginfo-6.21.1-2.38.1 ipset-debugsource-6.21.1-2.38.1 ipset-devel-6.21.1-2.38.1 ipset-kmp-default-6.21.1_k3.12.62_55-2.38.1 ipset-kmp-default-debuginfo-6.21.1_k3.12.62_55-2.38.1 ipset-kmp-desktop-6.21.1_k3.12.62_55-2.38.1 ipset-kmp-desktop-debuginfo-6.21.1_k3.12.62_55-2.38.1 ipset-kmp-xen-6.21.1_k3.12.62_55-2.38.1 ipset-kmp-xen-debuginfo-6.21.1_k3.12.62_55-2.38.1 iscsitarget-1.4.20.3-13.34.1 iscsitarget-debuginfo-1.4.20.3-13.34.1 iscsitarget-debugsource-1.4.20.3-13.34.1 iscsitarget-kmp-default-1.4.20.3_k3.12.62_55-13.34.1 iscsitarget-kmp-default-debuginfo-1.4.20.3_k3.12.62_55-13.34.1 iscsitarget-kmp-desktop-1.4.20.3_k3.12.62_55-13.34.1 iscsitarget-kmp-desktop-debuginfo-1.4.20.3_k3.12.62_55-13.34.1 iscsitarget-kmp-xen-1.4.20.3_k3.12.62_55-13.34.1 iscsitarget-kmp-xen-debuginfo-1.4.20.3_k3.12.62_55-13.34.1 kernel-default-3.12.62-55.1 kernel-default-base-3.12.62-55.1 kernel-default-base-debuginfo-3.12.62-55.1 kernel-default-debuginfo-3.12.62-55.1 kernel-default-debugsource-3.12.62-55.1 kernel-default-devel-3.12.62-55.1 kernel-syms-3.12.62-55.1 libipset3-6.21.1-2.38.1 libipset3-debuginfo-6.21.1-2.38.1 ndiswrapper-1.58-35.1 ndiswrapper-debuginfo-1.58-35.1 ndiswrapper-debugsource-1.58-35.1 ndiswrapper-kmp-default-1.58_k3.12.62_55-35.1 ndiswrapper-kmp-default-debuginfo-1.58_k3.12.62_55-35.1 ndiswrapper-kmp-desktop-1.58_k3.12.62_55-35.1 ndiswrapper-kmp-desktop-debuginfo-1.58_k3.12.62_55-35.1 openvswitch-1.11.0-0.41.1 openvswitch-controller-1.11.0-0.41.1 openvswitch-controller-debuginfo-1.11.0-0.41.1 openvswitch-debuginfo-1.11.0-0.41.1 openvswitch-debugsource-1.11.0-0.41.1 openvswitch-kmp-default-1.11.0_k3.12.62_55-0.41.1 openvswitch-kmp-default-debuginfo-1.11.0_k3.12.62_55-0.41.1 openvswitch-kmp-desktop-1.11.0_k3.12.62_55-0.41.1 openvswitch-kmp-desktop-debuginfo-1.11.0_k3.12.62_55-0.41.1 openvswitch-kmp-xen-1.11.0_k3.12.62_55-0.41.1 openvswitch-kmp-xen-debuginfo-1.11.0_k3.12.62_55-0.41.1 openvswitch-pki-1.11.0-0.41.1 openvswitch-switch-1.11.0-0.41.1 openvswitch-switch-debuginfo-1.11.0-0.41.1 openvswitch-test-1.11.0-0.41.1 pcfclock-0.44-258.35.1 pcfclock-debuginfo-0.44-258.35.1 pcfclock-debugsource-0.44-258.35.1 pcfclock-kmp-default-0.44_k3.12.62_55-258.35.1 pcfclock-kmp-default-debuginfo-0.44_k3.12.62_55-258.35.1 pcfclock-kmp-desktop-0.44_k3.12.62_55-258.35.1 pcfclock-kmp-desktop-debuginfo-0.44_k3.12.62_55-258.35.1 python-openvswitch-1.11.0-0.41.1 python-openvswitch-test-1.11.0-0.41.1 python-virtualbox-4.2.36-2.66.1 python-virtualbox-debuginfo-4.2.36-2.66.1 vhba-kmp-debugsource-20130607-2.34.1 vhba-kmp-default-20130607_k3.12.62_55-2.34.1 vhba-kmp-default-debuginfo-20130607_k3.12.62_55-2.34.1 vhba-kmp-desktop-20130607_k3.12.62_55-2.34.1 vhba-kmp-desktop-debuginfo-20130607_k3.12.62_55-2.34.1 vhba-kmp-xen-20130607_k3.12.62_55-2.34.1 vhba-kmp-xen-debuginfo-20130607_k3.12.62_55-2.34.1 virtualbox-4.2.36-2.66.1 virtualbox-debuginfo-4.2.36-2.66.1 virtualbox-debugsource-4.2.36-2.66.1 virtualbox-devel-4.2.36-2.66.1 virtualbox-guest-kmp-default-4.2.36_k3.12.62_55-2.66.1 virtualbox-guest-kmp-default-debuginfo-4.2.36_k3.12.62_55-2.66.1 virtualbox-guest-kmp-desktop-4.2.36_k3.12.62_55-2.66.1 virtualbox-guest-kmp-desktop-debuginfo-4.2.36_k3.12.62_55-2.66.1 virtualbox-guest-tools-4.2.36-2.66.1 virtualbox-guest-tools-debuginfo-4.2.36-2.66.1 virtualbox-guest-x11-4.2.36-2.66.1 virtualbox-guest-x11-debuginfo-4.2.36-2.66.1 virtualbox-host-kmp-default-4.2.36_k3.12.62_55-2.66.1 virtualbox-host-kmp-default-debuginfo-4.2.36_k3.12.62_55-2.66.1 virtualbox-host-kmp-desktop-4.2.36_k3.12.62_55-2.66.1 virtualbox-host-kmp-desktop-debuginfo-4.2.36_k3.12.62_55-2.66.1 virtualbox-qt-4.2.36-2.66.1 virtualbox-qt-debuginfo-4.2.36-2.66.1 virtualbox-websrv-4.2.36-2.66.1 virtualbox-websrv-debuginfo-4.2.36-2.66.1 xen-debugsource-4.3.4_10-67.1 xen-devel-4.3.4_10-67.1 xen-kmp-default-4.3.4_10_k3.12.62_55-67.1 xen-kmp-default-debuginfo-4.3.4_10_k3.12.62_55-67.1 xen-kmp-desktop-4.3.4_10_k3.12.62_55-67.1 xen-kmp-desktop-debuginfo-4.3.4_10_k3.12.62_55-67.1 xen-libs-4.3.4_10-67.1 xen-libs-debuginfo-4.3.4_10-67.1 xen-tools-domU-4.3.4_10-67.1 xen-tools-domU-debuginfo-4.3.4_10-67.1 xtables-addons-2.3-2.33.1 xtables-addons-debuginfo-2.3-2.33.1 xtables-addons-debugsource-2.3-2.33.1 xtables-addons-kmp-default-2.3_k3.12.62_55-2.33.1 xtables-addons-kmp-default-debuginfo-2.3_k3.12.62_55-2.33.1 xtables-addons-kmp-desktop-2.3_k3.12.62_55-2.33.1 xtables-addons-kmp-desktop-debuginfo-2.3_k3.12.62_55-2.33.1 xtables-addons-kmp-xen-2.3_k3.12.62_55-2.33.1 xtables-addons-kmp-xen-debuginfo-2.3_k3.12.62_55-2.33.1 - openSUSE 13.1 (i686 x86_64): kernel-debug-3.12.62-55.1 kernel-debug-base-3.12.62-55.1 kernel-debug-base-debuginfo-3.12.62-55.1 kernel-debug-debuginfo-3.12.62-55.1 kernel-debug-debugsource-3.12.62-55.1 kernel-debug-devel-3.12.62-55.1 kernel-debug-devel-debuginfo-3.12.62-55.1 kernel-desktop-3.12.62-55.1 kernel-desktop-base-3.12.62-55.1 kernel-desktop-base-debuginfo-3.12.62-55.1 kernel-desktop-debuginfo-3.12.62-55.1 kernel-desktop-debugsource-3.12.62-55.1 kernel-desktop-devel-3.12.62-55.1 kernel-ec2-3.12.62-55.1 kernel-ec2-base-3.12.62-55.1 kernel-ec2-base-debuginfo-3.12.62-55.1 kernel-ec2-debuginfo-3.12.62-55.1 kernel-ec2-debugsource-3.12.62-55.1 kernel-ec2-devel-3.12.62-55.1 kernel-trace-3.12.62-55.1 kernel-trace-base-3.12.62-55.1 kernel-trace-base-debuginfo-3.12.62-55.1 kernel-trace-debuginfo-3.12.62-55.1 kernel-trace-debugsource-3.12.62-55.1 kernel-trace-devel-3.12.62-55.1 kernel-vanilla-3.12.62-55.1 kernel-vanilla-debuginfo-3.12.62-55.1 kernel-vanilla-debugsource-3.12.62-55.1 kernel-vanilla-devel-3.12.62-55.1 kernel-xen-3.12.62-55.1 kernel-xen-base-3.12.62-55.1 kernel-xen-base-debuginfo-3.12.62-55.1 kernel-xen-debuginfo-3.12.62-55.1 kernel-xen-debugsource-3.12.62-55.1 kernel-xen-devel-3.12.62-55.1 - openSUSE 13.1 (noarch): kernel-devel-3.12.62-55.1 kernel-docs-3.12.62-55.2 kernel-macros-3.12.62-55.1 kernel-source-3.12.62-55.1 kernel-source-vanilla-3.12.62-55.1 virtualbox-host-source-4.2.36-2.66.1 - openSUSE 13.1 (x86_64): xen-4.3.4_10-67.1 xen-doc-html-4.3.4_10-67.1 xen-libs-32bit-4.3.4_10-67.1 xen-libs-debuginfo-32bit-4.3.4_10-67.1 xen-tools-4.3.4_10-67.1 xen-tools-debuginfo-4.3.4_10-67.1 xen-xend-tools-4.3.4_10-67.1 xen-xend-tools-debuginfo-4.3.4_10-67.1 - openSUSE 13.1 (i686): kernel-pae-3.12.62-55.1 kernel-pae-base-3.12.62-55.1 kernel-pae-base-debuginfo-3.12.62-55.1 kernel-pae-debuginfo-3.12.62-55.1 kernel-pae-debugsource-3.12.62-55.1 kernel-pae-devel-3.12.62-55.1 - openSUSE 13.1 (i586): cloop-kmp-pae-2.639_k3.12.62_55-11.34.1 cloop-kmp-pae-debuginfo-2.639_k3.12.62_55-11.34.1 crash-kmp-pae-7.0.2_k3.12.62_55-2.34.1 crash-kmp-pae-debuginfo-7.0.2_k3.12.62_55-2.34.1 hdjmod-kmp-pae-1.28_k3.12.62_55-16.34.1 hdjmod-kmp-pae-debuginfo-1.28_k3.12.62_55-16.34.1 ipset-kmp-pae-6.21.1_k3.12.62_55-2.38.1 ipset-kmp-pae-debuginfo-6.21.1_k3.12.62_55-2.38.1 iscsitarget-kmp-pae-1.4.20.3_k3.12.62_55-13.34.1 iscsitarget-kmp-pae-debuginfo-1.4.20.3_k3.12.62_55-13.34.1 ndiswrapper-kmp-pae-1.58_k3.12.62_55-35.1 ndiswrapper-kmp-pae-debuginfo-1.58_k3.12.62_55-35.1 openvswitch-kmp-pae-1.11.0_k3.12.62_55-0.41.1 openvswitch-kmp-pae-debuginfo-1.11.0_k3.12.62_55-0.41.1 pcfclock-kmp-pae-0.44_k3.12.62_55-258.35.1 pcfclock-kmp-pae-debuginfo-0.44_k3.12.62_55-258.35.1 vhba-kmp-pae-20130607_k3.12.62_55-2.34.1 vhba-kmp-pae-debuginfo-20130607_k3.12.62_55-2.34.1 virtualbox-guest-kmp-pae-4.2.36_k3.12.62_55-2.66.1 virtualbox-guest-kmp-pae-debuginfo-4.2.36_k3.12.62_55-2.66.1 virtualbox-host-kmp-pae-4.2.36_k3.12.62_55-2.66.1 virtualbox-host-kmp-pae-debuginfo-4.2.36_k3.12.62_55-2.66.1 xen-kmp-pae-4.3.4_10_k3.12.62_55-67.1 xen-kmp-pae-debuginfo-4.3.4_10_k3.12.62_55-67.1 xtables-addons-kmp-pae-2.3_k3.12.62_55-2.33.1 xtables-addons-kmp-pae-debuginfo-2.3_k3.12.62_55-2.33.1 References: https://www.suse.com/security/cve/CVE-2016-5195.html https://www.suse.com/security/cve/CVE-2016-8666.html https://bugzilla.suse.com/1001419 https://bugzilla.suse.com/1001486 https://bugzilla.suse.com/1002165 https://bugzilla.suse.com/1004418 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0