December 2016 - openSUSE Security Announce

[security-announce] SUSE-SU-2016:3093-1: important: Security update for Linux Kernel Live Patch 2 for SLE 12 SP1
by opensuse-security＠opensuse.org 12 Dec '16

12 Dec '16

SUSE Security Update: Security update for Linux Kernel Live Patch 2 for SLE 12 SP1 ______________________________________________________________________________ Announcement ID: SUSE-SU-2016:3093-1 Rating: important References: #1003253 #1012183 #1012759 Cross-References: CVE-2016-7117 CVE-2016-8655 CVE-2016-9555 Affected Products: SUSE Linux Enterprise Live Patching 12 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for the Linux Kernel 3.12.51-60_25 fixes several issues. The following security bugs were fixed: - CVE-2016-8655: A race condition in the af_packet packet_set_ring function could be used by local attackers to crash the kernel or gain privileges (bsc#1012759). - CVE-2016-9555: The sctp_sf_ootb function in net/sctp/sm_statefuns.c in the Linux kernel lacks chunk-length checking for the first chunk, which allowed remote attackers to cause a denial of service (out-of-bounds slab access) or possibly have unspecified other impact via crafted SCTP data (bsc#1012183). - CVE-2016-7117: Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux kernel allowed remote attackers to execute arbitrary code via vectors involving a recvmmsg system call that is mishandled during error processing (bsc#1003253). Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Live Patching 12: zypper in -t patch SUSE-SLE-Live-Patching-12-2016-1799=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Live Patching 12 (x86_64): kgraft-patch-3_12_51-60_25-default-7-2.1 kgraft-patch-3_12_51-60_25-xen-7-2.1 References: https://www.suse.com/security/cve/CVE-2016-7117.html https://www.suse.com/security/cve/CVE-2016-8655.html https://www.suse.com/security/cve/CVE-2016-9555.html https://bugzilla.suse.com/1003253 https://bugzilla.suse.com/1012183 https://bugzilla.suse.com/1012759 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2016:3086-1: important: Security update for the openSUSE Leap 42.1 kernel.
by opensuse-security＠opensuse.org 12 Dec '16

12 Dec '16

openSUSE Security Update: Security update for the openSUSE Leap 42.1 kernel. ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:3086-1 Rating: important References: #1013604 Cross-References: CVE-2016-9576 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The openSUSE Leap 42.1 kernel has been updated to fix a security issue: - CVE-2016-9576: A use-after-free vulnerability in the SCSI generic driver allows users with write access to /dev/sg* or /dev/bsg* to elevate their privileges (bsc#1013604). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1439=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i686 x86_64): kernel-debug-4.1.36-41.1 kernel-debug-base-4.1.36-41.1 kernel-debug-base-debuginfo-4.1.36-41.1 kernel-debug-debuginfo-4.1.36-41.1 kernel-debug-debugsource-4.1.36-41.1 kernel-debug-devel-4.1.36-41.1 kernel-debug-devel-debuginfo-4.1.36-41.1 kernel-ec2-4.1.36-41.1 kernel-ec2-base-4.1.36-41.1 kernel-ec2-base-debuginfo-4.1.36-41.1 kernel-ec2-debuginfo-4.1.36-41.1 kernel-ec2-debugsource-4.1.36-41.1 kernel-ec2-devel-4.1.36-41.1 kernel-pv-4.1.36-41.1 kernel-pv-base-4.1.36-41.1 kernel-pv-base-debuginfo-4.1.36-41.1 kernel-pv-debuginfo-4.1.36-41.1 kernel-pv-debugsource-4.1.36-41.1 kernel-pv-devel-4.1.36-41.1 kernel-vanilla-4.1.36-41.1 kernel-vanilla-debuginfo-4.1.36-41.1 kernel-vanilla-debugsource-4.1.36-41.1 kernel-vanilla-devel-4.1.36-41.1 kernel-xen-4.1.36-41.1 kernel-xen-base-4.1.36-41.1 kernel-xen-base-debuginfo-4.1.36-41.1 kernel-xen-debuginfo-4.1.36-41.1 kernel-xen-debugsource-4.1.36-41.1 kernel-xen-devel-4.1.36-41.1 - openSUSE Leap 42.1 (i586 x86_64): kernel-default-4.1.36-41.1 kernel-default-base-4.1.36-41.1 kernel-default-base-debuginfo-4.1.36-41.1 kernel-default-debuginfo-4.1.36-41.1 kernel-default-debugsource-4.1.36-41.1 kernel-default-devel-4.1.36-41.1 kernel-obs-build-4.1.36-41.1 kernel-obs-build-debugsource-4.1.36-41.1 kernel-obs-qa-4.1.36-41.1 kernel-syms-4.1.36-41.1 - openSUSE Leap 42.1 (noarch): kernel-devel-4.1.36-41.1 kernel-docs-4.1.36-41.2 kernel-docs-html-4.1.36-41.2 kernel-docs-pdf-4.1.36-41.2 kernel-macros-4.1.36-41.1 kernel-source-4.1.36-41.1 kernel-source-vanilla-4.1.36-41.1 - openSUSE Leap 42.1 (i686): kernel-pae-4.1.36-41.1 kernel-pae-base-4.1.36-41.1 kernel-pae-base-debuginfo-4.1.36-41.1 kernel-pae-debuginfo-4.1.36-41.1 kernel-pae-debugsource-4.1.36-41.1 kernel-pae-devel-4.1.36-41.1 References: https://www.suse.com/security/cve/CVE-2016-9576.html https://bugzilla.suse.com/1013604 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2016:3085-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 12 Dec '16

12 Dec '16

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:3085-1 Rating: important References: #1003606 #1006827 #1008557 #1011913 #1013001 #1013604 #1014120 #981825 Cross-References: CVE-2016-9576 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves one vulnerability and has 7 fixes is now available. Description: The openSUSE 14.2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2016-9576: A use-after-free vulnerability in the SCSI generic driver allows users with write access to /dev/sg* or /dev/bsg* to elevate their privileges (bsc#1013604). The following non-security bugs were fixed: - 8250_pci: Fix potential use-after-free in error path (bsc#1013001). - block_dev: do not test bdev->bd_contains when it is not stable (bsc#1008557). - drm/i915/vlv: Disable HPD in valleyview_crt_detect_hotplug() (bsc#1014120). - drm/i915/vlv: Make intel_crt_reset() per-encoder (bsc#1014120). - drm/i915/vlv: Reset the ADPA in vlv_display_power_well_init() (bsc#1014120). - drm/i915: Enable polling when we do not have hpd (bsc#1014120). - i2c: designware-baytrail: Add support for cherrytrail (bsc#1011913). - i2c: designware-baytrail: Pass dw_i2c_dev into helper functions (bsc#1011913). - i2c: designware: Prevent runtime suspend during adapter registration (bsc#1011913). - i2c: designware: Use transfer timeout from ioctl I2C_TIMEOUT (bsc#1011913). - i2c: designware: retry transfer on transient failure (bsc#1011913). - powerpc/xmon: Add xmon command to dump process/task similar to ps(1) (fate#322020). - sched/fair: Fix incorrect task group ->load_avg (bsc#981825). - serial: 8250_pci: Detach low-level driver during PCI error recovery (bsc#1013001). - target: fix tcm_rbd_gen_it_nexus for emulated XCOPY state (bsc#1003606). - x86/PCI: VMD: Synchronize with RCU freeing MSI IRQ descs (bsc#1006827). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1438=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): kernel-debug-4.4.36-8.1 kernel-debug-base-4.4.36-8.1 kernel-debug-base-debuginfo-4.4.36-8.1 kernel-debug-debuginfo-4.4.36-8.1 kernel-debug-debugsource-4.4.36-8.1 kernel-debug-devel-4.4.36-8.1 kernel-debug-devel-debuginfo-4.4.36-8.1 kernel-default-4.4.36-8.1 kernel-default-base-4.4.36-8.1 kernel-default-base-debuginfo-4.4.36-8.1 kernel-default-debuginfo-4.4.36-8.1 kernel-default-debugsource-4.4.36-8.1 kernel-default-devel-4.4.36-8.1 kernel-obs-build-4.4.36-8.1 kernel-obs-build-debugsource-4.4.36-8.1 kernel-obs-qa-4.4.36-8.1 kernel-syms-4.4.36-8.1 kernel-vanilla-4.4.36-8.1 kernel-vanilla-base-4.4.36-8.1 kernel-vanilla-base-debuginfo-4.4.36-8.1 kernel-vanilla-debuginfo-4.4.36-8.1 kernel-vanilla-debugsource-4.4.36-8.1 kernel-vanilla-devel-4.4.36-8.1 - openSUSE Leap 42.2 (noarch): kernel-devel-4.4.36-8.1 kernel-docs-4.4.36-8.2 kernel-docs-html-4.4.36-8.2 kernel-docs-pdf-4.4.36-8.2 kernel-macros-4.4.36-8.1 kernel-source-4.4.36-8.1 kernel-source-vanilla-4.4.36-8.1 References: https://www.suse.com/security/cve/CVE-2016-9576.html https://bugzilla.suse.com/1003606 https://bugzilla.suse.com/1006827 https://bugzilla.suse.com/1008557 https://bugzilla.suse.com/1011913 https://bugzilla.suse.com/1013001 https://bugzilla.suse.com/1013604 https://bugzilla.suse.com/1014120 https://bugzilla.suse.com/981825 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2016:3083-1: important: Security update for xen
by opensuse-security＠opensuse.org 12 Dec '16

12 Dec '16

SUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: SUSE-SU-2016:3083-1 Rating: important References: #1000106 #1003030 #1003032 #1003870 #1004016 #1005004 #1005005 #1007157 #1007160 #1009100 #1009103 #1009104 #1009107 #1009108 #1009109 #1009111 #1011652 Cross-References: CVE-2016-7777 CVE-2016-7908 CVE-2016-7909 CVE-2016-7995 CVE-2016-8576 CVE-2016-8667 CVE-2016-8669 CVE-2016-8909 CVE-2016-8910 CVE-2016-9377 CVE-2016-9378 CVE-2016-9379 CVE-2016-9380 CVE-2016-9381 CVE-2016-9382 CVE-2016-9383 CVE-2016-9385 CVE-2016-9386 CVE-2016-9637 Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP1 SUSE Linux Enterprise Server 12-SP1 SUSE Linux Enterprise Desktop 12-SP1 ______________________________________________________________________________ An update that fixes 19 vulnerabilities is now available. Description: This update for xen to version 4.5.5 fixes several issues. These security issues were fixed: - CVE-2016-9637: ioport array overflow allowing a malicious guest administrator can escalate their privilege to that of the host (bsc#1011652) - CVE-2016-9386: x86 null segments were not always treated as unusable allowing an unprivileged guest user program to elevate its privilege to that of the guest operating system. Exploit of this vulnerability is easy on Intel and more complicated on AMD (bsc#1009100) - CVE-2016-9382: x86 task switch to VM86 mode was mis-handled, allowing a unprivileged guest process to escalate its privilege to that of the guest operating system on AMD hardware. On Intel hardware a malicious unprivileged guest process can crash the guest (bsc#1009103) - CVE-2016-9385: x86 segment base write emulation lacked canonical address checks, allowing a malicious guest administrator to crash the host (bsc#1009104) - CVE-2016-9383: The x86 64-bit bit test instruction emulation was broken, allowing a guest to modify arbitrary memory leading to arbitray code execution (bsc#1009107) - CVE-2016-9378: x86 software interrupt injection was mis-handled, allowing an unprivileged guest user to crash the guest (bsc#1009108) - CVE-2016-9377: x86 software interrupt injection was mis-handled, allowing an unprivileged guest user to crash the guest (bsc#1009108) - CVE-2016-9381: Improper processing of shared rings allowing guest administrators take over the qemu process, elevating their privilege to that of the qemu process (bsc#1009109) - CVE-2016-9380: Delimiter injection vulnerabilities in pygrub allowed guest administrators to obtain the contents of sensitive host files or delete the files (bsc#1009111) - CVE-2016-9379: Delimiter injection vulnerabilities in pygrub allowed guest administrators to obtain the contents of sensitive host files or delete the files (bsc#1009111) - CVE-2016-7777: Xen did not properly honor CR0.TS and CR0.EM, which allowed local x86 HVM guest OS users to read or modify FPU, MMX, or XMM register state information belonging to arbitrary tasks on the guest by modifying an instruction while the hypervisor is preparing to emulate it (bsc#1000106) - CVE-2016-8910: The rtl8139_cplus_transmit function in hw/net/rtl8139.c allowed local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) by leveraging failure to limit the ring descriptor count (bsc#1007157) - CVE-2016-8909: The intel_hda_xfer function in hw/audio/intel-hda.c allowed local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via an entry with the same value for buffer length and pointer position (bsc#1007160). - CVE-2016-8667: The rc4030_write function in hw/dma/rc4030.c in allowed local guest OS administrators to cause a denial of service (divide-by-zero error and QEMU process crash) via a large interval timer reload value (bsc#1005004) - CVE-2016-8669: The serial_update_parameters function in hw/char/serial.c allowed local guest OS administrators to cause a denial of service (divide-by-zero error and QEMU process crash) via vectors involving a value of divider greater than baud base (bsc#1005005) - CVE-2016-7995: A memory leak in ehci_process_itd allowed a privileged user inside guest to DoS the host (bsc#1003870). - CVE-2016-8576: The xhci_ring_fetch function in hw/usb/hcd-xhci.c allowed local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by leveraging failure to limit the number of link Transfer Request Blocks (TRB) to process (bsc#1004016). - CVE-2016-7908: The mcf_fec_do_tx function in hw/net/mcf_fec.c did not properly limit the buffer descriptor count when transmitting packets, which allowed local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via vectors involving a buffer descriptor with a length of 0 and crafted values in bd.flags (bsc#1003030) - CVE-2016-7909: The pcnet_rdra_addr function in hw/net/pcnet.c allowed local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by setting the (1) receive or (2) transmit descriptor ring length to 0 (bsc#1003032) Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 12-SP1: zypper in -t patch SUSE-SLE-SDK-12-SP1-2016-1795=1 - SUSE Linux Enterprise Server 12-SP1: zypper in -t patch SUSE-SLE-SERVER-12-SP1-2016-1795=1 - SUSE Linux Enterprise Desktop 12-SP1: zypper in -t patch SUSE-SLE-DESKTOP-12-SP1-2016-1795=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 12-SP1 (x86_64): xen-debugsource-4.5.5_02-22.3.1 xen-devel-4.5.5_02-22.3.1 - SUSE Linux Enterprise Server 12-SP1 (x86_64): xen-4.5.5_02-22.3.1 xen-debugsource-4.5.5_02-22.3.1 xen-doc-html-4.5.5_02-22.3.1 xen-kmp-default-4.5.5_02_k3.12.67_60.64.18-22.3.1 xen-kmp-default-debuginfo-4.5.5_02_k3.12.67_60.64.18-22.3.1 xen-libs-32bit-4.5.5_02-22.3.1 xen-libs-4.5.5_02-22.3.1 xen-libs-debuginfo-32bit-4.5.5_02-22.3.1 xen-libs-debuginfo-4.5.5_02-22.3.1 xen-tools-4.5.5_02-22.3.1 xen-tools-debuginfo-4.5.5_02-22.3.1 xen-tools-domU-4.5.5_02-22.3.1 xen-tools-domU-debuginfo-4.5.5_02-22.3.1 - SUSE Linux Enterprise Desktop 12-SP1 (x86_64): xen-4.5.5_02-22.3.1 xen-debugsource-4.5.5_02-22.3.1 xen-kmp-default-4.5.5_02_k3.12.67_60.64.18-22.3.1 xen-kmp-default-debuginfo-4.5.5_02_k3.12.67_60.64.18-22.3.1 xen-libs-32bit-4.5.5_02-22.3.1 xen-libs-4.5.5_02-22.3.1 xen-libs-debuginfo-32bit-4.5.5_02-22.3.1 xen-libs-debuginfo-4.5.5_02-22.3.1 References: https://www.suse.com/security/cve/CVE-2016-7777.html https://www.suse.com/security/cve/CVE-2016-7908.html https://www.suse.com/security/cve/CVE-2016-7909.html https://www.suse.com/security/cve/CVE-2016-7995.html https://www.suse.com/security/cve/CVE-2016-8576.html https://www.suse.com/security/cve/CVE-2016-8667.html https://www.suse.com/security/cve/CVE-2016-8669.html https://www.suse.com/security/cve/CVE-2016-8909.html https://www.suse.com/security/cve/CVE-2016-8910.html https://www.suse.com/security/cve/CVE-2016-9377.html https://www.suse.com/security/cve/CVE-2016-9378.html https://www.suse.com/security/cve/CVE-2016-9379.html https://www.suse.com/security/cve/CVE-2016-9380.html https://www.suse.com/security/cve/CVE-2016-9381.html https://www.suse.com/security/cve/CVE-2016-9382.html https://www.suse.com/security/cve/CVE-2016-9383.html https://www.suse.com/security/cve/CVE-2016-9385.html https://www.suse.com/security/cve/CVE-2016-9386.html https://www.suse.com/security/cve/CVE-2016-9637.html https://bugzilla.suse.com/1000106 https://bugzilla.suse.com/1003030 https://bugzilla.suse.com/1003032 https://bugzilla.suse.com/1003870 https://bugzilla.suse.com/1004016 https://bugzilla.suse.com/1005004 https://bugzilla.suse.com/1005005 https://bugzilla.suse.com/1007157 https://bugzilla.suse.com/1007160 https://bugzilla.suse.com/1009100 https://bugzilla.suse.com/1009103 https://bugzilla.suse.com/1009104 https://bugzilla.suse.com/1009107 https://bugzilla.suse.com/1009108 https://bugzilla.suse.com/1009109 https://bugzilla.suse.com/1009111 https://bugzilla.suse.com/1011652 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2016:3081-1: important: Security update for tomcat
by opensuse-security＠opensuse.org 10 Dec '16

10 Dec '16

SUSE Security Update: Security update for tomcat ______________________________________________________________________________ Announcement ID: SUSE-SU-2016:3081-1 Rating: important References: #1002639 #1007853 #1007854 #1007855 #1007857 #1007858 #1010893 #1011805 #1011812 Cross-References: CVE-2016-0762 CVE-2016-5018 CVE-2016-6794 CVE-2016-6796 CVE-2016-6797 CVE-2016-6816 CVE-2016-8735 Affected Products: SUSE Linux Enterprise Server for Raspberry Pi 12-SP2 SUSE Linux Enterprise Server 12-SP2 ______________________________________________________________________________ An update that solves 7 vulnerabilities and has two fixes is now available. Description: This update for tomcat fixes the following issues: Feature changes: The embedded Apache Commons DBCP component was updated to version 2.0. (bsc#1010893 fate#321029) Security fixes: - CVE-2016-0762: Realm Timing Attack (bsc#1007854) - CVE-2016-5018: Security Manager Bypass (bsc#1007855) - CVE-2016-6794: System Property Disclosure (bsc#1007857) - CVE-2016-6796: Security Manager Bypass (bsc#1007858) - CVE-2016-6797: Unrestricted Access to Global Resources (bsc#1007853) - CVE-2016-8735: Remote code execution vulnerability in JmxRemoteLifecycleListener (bsc#1011805) - CVE-2016-6816: HTTP Request smuggling vulnerability due to permitting invalid character in HTTP requests (bsc#1011812) Bug fixes: - Enabled optional setenv.sh script. See section '(3.4) Using the "setenv" script' in http://tomcat.apache.org/tomcat-8.0-doc/RUNNING.txt. (bsc#1002639) Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server for Raspberry Pi 12-SP2: zypper in -t patch SUSE-SLE-RPI-12-SP2-2016-1790=1 - SUSE Linux Enterprise Server 12-SP2: zypper in -t patch SUSE-SLE-SERVER-12-SP2-2016-1790=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Server for Raspberry Pi 12-SP2 (noarch): tomcat-8.0.36-17.1 tomcat-admin-webapps-8.0.36-17.1 tomcat-docs-webapp-8.0.36-17.1 tomcat-el-3_0-api-8.0.36-17.1 tomcat-javadoc-8.0.36-17.1 tomcat-jsp-2_3-api-8.0.36-17.1 tomcat-lib-8.0.36-17.1 tomcat-servlet-3_1-api-8.0.36-17.1 tomcat-webapps-8.0.36-17.1 - SUSE Linux Enterprise Server 12-SP2 (noarch): tomcat-8.0.36-17.1 tomcat-admin-webapps-8.0.36-17.1 tomcat-docs-webapp-8.0.36-17.1 tomcat-el-3_0-api-8.0.36-17.1 tomcat-javadoc-8.0.36-17.1 tomcat-jsp-2_3-api-8.0.36-17.1 tomcat-lib-8.0.36-17.1 tomcat-servlet-3_1-api-8.0.36-17.1 tomcat-webapps-8.0.36-17.1 References: https://www.suse.com/security/cve/CVE-2016-0762.html https://www.suse.com/security/cve/CVE-2016-5018.html https://www.suse.com/security/cve/CVE-2016-6794.html https://www.suse.com/security/cve/CVE-2016-6796.html https://www.suse.com/security/cve/CVE-2016-6797.html https://www.suse.com/security/cve/CVE-2016-6816.html https://www.suse.com/security/cve/CVE-2016-8735.html https://bugzilla.suse.com/1002639 https://bugzilla.suse.com/1007853 https://bugzilla.suse.com/1007854 https://bugzilla.suse.com/1007855 https://bugzilla.suse.com/1007857 https://bugzilla.suse.com/1007858 https://bugzilla.suse.com/1010893 https://bugzilla.suse.com/1011805 https://bugzilla.suse.com/1011812 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2016:3080-1: important: Security update for MozillaFirefox, mozilla-nss
by opensuse-security＠opensuse.org 10 Dec '16

10 Dec '16

SUSE Security Update: Security update for MozillaFirefox, mozilla-nss ______________________________________________________________________________ Announcement ID: SUSE-SU-2016:3080-1 Rating: important References: #1000751 #1009026 #1010395 #1010401 #1010402 #1010404 #1010410 #1010422 #1010427 #1010517 #1012964 #992549 Cross-References: CVE-2016-5285 CVE-2016-5290 CVE-2016-5291 CVE-2016-5296 CVE-2016-5297 CVE-2016-9064 CVE-2016-9066 CVE-2016-9074 CVE-2016-9079 Affected Products: SUSE OpenStack Cloud 5 SUSE Manager Proxy 2.1 SUSE Manager 2.1 SUSE Linux Enterprise Software Development Kit 11-SP4 SUSE Linux Enterprise Server 11-SP4 SUSE Linux Enterprise Server 11-SP3-LTSS SUSE Linux Enterprise Point of Sale 11-SP3 SUSE Linux Enterprise Debuginfo 11-SP4 SUSE Linux Enterprise Debuginfo 11-SP3 ______________________________________________________________________________ An update that solves 9 vulnerabilities and has three fixes is now available. Description: This update for MozillaFirefox, mozilla-nss fixes security issues and bugs. The following vulnerabilities were fixed in Firefox ESR 45.5.1 (bsc#1009026 bsc#1012964): - CVE-2016-9079: Use-after-free in SVG Animation (MFSA 2016-92 bsc#1012964) - CVE-2016-5297: Incorrect argument length checking in Javascript (bsc#1010401) - CVE-2016-9066: Integer overflow leading to a buffer overflow in nsScriptLoadHandler (bsc#1010404) - CVE-2016-5296: Heap-buffer-overflow WRITE in rasterize_edges_1 (bsc#1010395) - CVE-2016-9064: Addons update must verify IDs match between current and new versions (bsc#1010402) - CVE-2016-5290: Memory safety bugs fixed in Firefox 50 and Firefox ESR 45.5 (bsc#1010427) - CVE-2016-5291: Same-origin policy violation using local HTML file and saved shortcut file (bsc#1010410) The following vulnerabilities were fixed in mozilla-nss 3.21.3: - CVE-2016-9074: Insufficient timing side-channel resistance in divSpoiler (bsc#1010422) - CVE-2016-5285: Missing NULL check in PK11_SignWithSymKey / ssl3_ComputeRecordMACConstantTime causes server crash (bsc#1010517) The following bugs were fixed: - Firefox would fail to go into fullscreen mode with some window managers (bsc#992549) - font warning messages would flood console, now using fontconfig configuration from firefox-fontconfig instead of the system one (bsc#1000751) Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud 5: zypper in -t patch sleclo50sp3-mfsa2016-90-12882=1 - SUSE Manager Proxy 2.1: zypper in -t patch slemap21-mfsa2016-90-12882=1 - SUSE Manager 2.1: zypper in -t patch sleman21-mfsa2016-90-12882=1 - SUSE Linux Enterprise Software Development Kit 11-SP4: zypper in -t patch sdksp4-mfsa2016-90-12882=1 - SUSE Linux Enterprise Server 11-SP4: zypper in -t patch slessp4-mfsa2016-90-12882=1 - SUSE Linux Enterprise Server 11-SP3-LTSS: zypper in -t patch slessp3-mfsa2016-90-12882=1 - SUSE Linux Enterprise Point of Sale 11-SP3: zypper in -t patch sleposp3-mfsa2016-90-12882=1 - SUSE Linux Enterprise Debuginfo 11-SP4: zypper in -t patch dbgsp4-mfsa2016-90-12882=1 - SUSE Linux Enterprise Debuginfo 11-SP3: zypper in -t patch dbgsp3-mfsa2016-90-12882=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE OpenStack Cloud 5 (x86_64): MozillaFirefox-45.5.1esr-59.1 MozillaFirefox-translations-45.5.1esr-59.1 libfreebl3-3.21.3-39.1 libfreebl3-32bit-3.21.3-39.1 libsoftokn3-3.21.3-39.1 libsoftokn3-32bit-3.21.3-39.1 mozilla-nss-3.21.3-39.1 mozilla-nss-32bit-3.21.3-39.1 mozilla-nss-tools-3.21.3-39.1 - SUSE Manager Proxy 2.1 (x86_64): MozillaFirefox-45.5.1esr-59.1 MozillaFirefox-translations-45.5.1esr-59.1 libfreebl3-3.21.3-39.1 libfreebl3-32bit-3.21.3-39.1 libsoftokn3-3.21.3-39.1 libsoftokn3-32bit-3.21.3-39.1 mozilla-nss-3.21.3-39.1 mozilla-nss-32bit-3.21.3-39.1 mozilla-nss-tools-3.21.3-39.1 - SUSE Manager 2.1 (s390x x86_64): MozillaFirefox-45.5.1esr-59.1 MozillaFirefox-translations-45.5.1esr-59.1 libfreebl3-3.21.3-39.1 libfreebl3-32bit-3.21.3-39.1 libsoftokn3-3.21.3-39.1 libsoftokn3-32bit-3.21.3-39.1 mozilla-nss-3.21.3-39.1 mozilla-nss-32bit-3.21.3-39.1 mozilla-nss-tools-3.21.3-39.1 - SUSE Linux Enterprise Software Development Kit 11-SP4 (i586 ia64 ppc64 s390x x86_64): MozillaFirefox-devel-45.5.1esr-59.1 mozilla-nss-devel-3.21.3-39.1 - SUSE Linux Enterprise Server 11-SP4 (i586 ia64 ppc64 s390x x86_64): MozillaFirefox-45.5.1esr-59.1 MozillaFirefox-translations-45.5.1esr-59.1 libfreebl3-3.21.3-39.1 libsoftokn3-3.21.3-39.1 mozilla-nss-3.21.3-39.1 mozilla-nss-tools-3.21.3-39.1 - SUSE Linux Enterprise Server 11-SP4 (ppc64 s390x x86_64): libfreebl3-32bit-3.21.3-39.1 libsoftokn3-32bit-3.21.3-39.1 mozilla-nss-32bit-3.21.3-39.1 - SUSE Linux Enterprise Server 11-SP4 (ia64): libfreebl3-x86-3.21.3-39.1 libsoftokn3-x86-3.21.3-39.1 mozilla-nss-x86-3.21.3-39.1 - SUSE Linux Enterprise Server 11-SP3-LTSS (i586 s390x x86_64): MozillaFirefox-45.5.1esr-59.1 MozillaFirefox-translations-45.5.1esr-59.1 libfreebl3-3.21.3-39.1 libsoftokn3-3.21.3-39.1 mozilla-nss-3.21.3-39.1 mozilla-nss-tools-3.21.3-39.1 - SUSE Linux Enterprise Server 11-SP3-LTSS (s390x x86_64): libfreebl3-32bit-3.21.3-39.1 libsoftokn3-32bit-3.21.3-39.1 mozilla-nss-32bit-3.21.3-39.1 - SUSE Linux Enterprise Point of Sale 11-SP3 (i586): MozillaFirefox-45.5.1esr-59.1 MozillaFirefox-translations-45.5.1esr-59.1 libfreebl3-3.21.3-39.1 libsoftokn3-3.21.3-39.1 mozilla-nss-3.21.3-39.1 mozilla-nss-tools-3.21.3-39.1 - SUSE Linux Enterprise Debuginfo 11-SP4 (i586 ia64 ppc64 s390x x86_64): MozillaFirefox-debuginfo-45.5.1esr-59.1 MozillaFirefox-debugsource-45.5.1esr-59.1 mozilla-nss-debuginfo-3.21.3-39.1 mozilla-nss-debugsource-3.21.3-39.1 - SUSE Linux Enterprise Debuginfo 11-SP3 (i586 s390x x86_64): MozillaFirefox-debuginfo-45.5.1esr-59.1 MozillaFirefox-debugsource-45.5.1esr-59.1 mozilla-nss-debuginfo-3.21.3-39.1 mozilla-nss-debugsource-3.21.3-39.1 References: https://www.suse.com/security/cve/CVE-2016-5285.html https://www.suse.com/security/cve/CVE-2016-5290.html https://www.suse.com/security/cve/CVE-2016-5291.html https://www.suse.com/security/cve/CVE-2016-5296.html https://www.suse.com/security/cve/CVE-2016-5297.html https://www.suse.com/security/cve/CVE-2016-9064.html https://www.suse.com/security/cve/CVE-2016-9066.html https://www.suse.com/security/cve/CVE-2016-9074.html https://www.suse.com/security/cve/CVE-2016-9079.html https://bugzilla.suse.com/1000751 https://bugzilla.suse.com/1009026 https://bugzilla.suse.com/1010395 https://bugzilla.suse.com/1010401 https://bugzilla.suse.com/1010402 https://bugzilla.suse.com/1010404 https://bugzilla.suse.com/1010410 https://bugzilla.suse.com/1010422 https://bugzilla.suse.com/1010427 https://bugzilla.suse.com/1010517 https://bugzilla.suse.com/1012964 https://bugzilla.suse.com/992549 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2016:3079-1: important: Security update for tomcat
by opensuse-security＠opensuse.org 10 Dec '16

10 Dec '16

SUSE Security Update: Security update for tomcat ______________________________________________________________________________ Announcement ID: SUSE-SU-2016:3079-1 Rating: important References: #1002639 #1004728 #1007853 #1007854 #1007855 #1007857 #1007858 #1010893 #1011805 #1011812 #974407 Cross-References: CVE-2016-0762 CVE-2016-5018 CVE-2016-6794 CVE-2016-6796 CVE-2016-6797 CVE-2016-6816 CVE-2016-8735 Affected Products: SUSE Linux Enterprise Server 12-SP1 ______________________________________________________________________________ An update that solves 7 vulnerabilities and has four fixes is now available. Description: This update for Tomcat provides the following fixes: Feature changes: The embedded Apache Commons DBCP component was updated to version 2.0. (bsc#1010893 fate#321029) Security fixes: - CVE-2016-0762: Realm Timing Attack (bsc#1007854) - CVE-2016-5018: Security Manager Bypass (bsc#1007855) - CVE-2016-6794: System Property Disclosure (bsc#1007857) - CVE-2016-6796: Manager Bypass (bsc#1007858) - CVE-2016-6797: Unrestricted Access to Global Resources (bsc#1007853) - CVE-2016-8735: Remote code execution vulnerability in JmxRemoteLifecycleListener (bsc#1011805) - CVE-2016-6816: HTTP Request smuggling vulnerability due to permitting invalid character in HTTP requests (bsc#1011812) Bugs fixed: - Fixed StringIndexOutOfBoundsException in WebAppClassLoaderBase.filter(). (bsc#974407) - Fixed a deployment error in the examples webapp by changing the context.xml format to the new one introduced by Tomcat 8. (bsc#1004728) - Enabled optional setenv.sh script. See section '(3.4) Using the "setenv" script' in http://tomcat.apache.org/tomcat-8.0-doc/RUNNING.txt. (bsc#1002639) - Fixed regression caused by CVE-2016-6816. Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 12-SP1: zypper in -t patch SUSE-SLE-SERVER-12-SP1-2016-1791=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Server 12-SP1 (noarch): tomcat-8.0.32-10.13.2 tomcat-admin-webapps-8.0.32-10.13.2 tomcat-docs-webapp-8.0.32-10.13.2 tomcat-el-3_0-api-8.0.32-10.13.2 tomcat-javadoc-8.0.32-10.13.2 tomcat-jsp-2_3-api-8.0.32-10.13.2 tomcat-lib-8.0.32-10.13.2 tomcat-servlet-3_1-api-8.0.32-10.13.2 tomcat-webapps-8.0.32-10.13.2 References: https://www.suse.com/security/cve/CVE-2016-0762.html https://www.suse.com/security/cve/CVE-2016-5018.html https://www.suse.com/security/cve/CVE-2016-6794.html https://www.suse.com/security/cve/CVE-2016-6796.html https://www.suse.com/security/cve/CVE-2016-6797.html https://www.suse.com/security/cve/CVE-2016-6816.html https://www.suse.com/security/cve/CVE-2016-8735.html https://bugzilla.suse.com/1002639 https://bugzilla.suse.com/1004728 https://bugzilla.suse.com/1007853 https://bugzilla.suse.com/1007854 https://bugzilla.suse.com/1007855 https://bugzilla.suse.com/1007857 https://bugzilla.suse.com/1007858 https://bugzilla.suse.com/1010893 https://bugzilla.suse.com/1011805 https://bugzilla.suse.com/1011812 https://bugzilla.suse.com/974407 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2016:3078-1: important: Security update for java-1_8_0-ibm
by opensuse-security＠opensuse.org 10 Dec '16

10 Dec '16

SUSE Security Update: Security update for java-1_8_0-ibm ______________________________________________________________________________ Announcement ID: SUSE-SU-2016:3078-1 Rating: important References: #1009280 Cross-References: CVE-2016-5542 CVE-2016-5554 CVE-2016-5556 CVE-2016-5568 CVE-2016-5573 CVE-2016-5597 Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP2 SUSE Linux Enterprise Software Development Kit 12-SP1 SUSE Linux Enterprise Server 12-SP2 SUSE Linux Enterprise Server 12-SP1 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for java-1_8_0-ibm fixes the following issues: - CVE-2016-5568: Unspecified vulnerability allowed remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT - CVE-2016-5556: Unspecified vulnerability allowed remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D - CVE-2016-5573: Unspecified vulnerability allowed remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot - CVE-2016-5597: Unspecified vulnerability allowed remote attackers to affect confidentiality via vectors related to Networking - CVE-2016-5554: Unspecified vulnerability allowed remote attackers to affect integrity via vectors related to JMX - CVE-2016-5542: Unspecified vulnerability allowed remote attackers to affect integrity via vectors related to Libraries Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 12-SP2: zypper in -t patch SUSE-SLE-SDK-12-SP2-2016-1792=1 - SUSE Linux Enterprise Software Development Kit 12-SP1: zypper in -t patch SUSE-SLE-SDK-12-SP1-2016-1792=1 - SUSE Linux Enterprise Server 12-SP2: zypper in -t patch SUSE-SLE-SERVER-12-SP2-2016-1792=1 - SUSE Linux Enterprise Server 12-SP1: zypper in -t patch SUSE-SLE-SERVER-12-SP1-2016-1792=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 12-SP2 (ppc64le s390x x86_64): java-1_8_0-ibm-devel-1.8.0_sr3.21-20.1 - SUSE Linux Enterprise Software Development Kit 12-SP1 (ppc64le s390x x86_64): java-1_8_0-ibm-devel-1.8.0_sr3.21-20.1 - SUSE Linux Enterprise Server 12-SP2 (ppc64le x86_64): java-1_8_0-ibm-1.8.0_sr3.21-20.1 - SUSE Linux Enterprise Server 12-SP2 (x86_64): java-1_8_0-ibm-alsa-1.8.0_sr3.21-20.1 java-1_8_0-ibm-plugin-1.8.0_sr3.21-20.1 - SUSE Linux Enterprise Server 12-SP1 (ppc64le s390x x86_64): java-1_8_0-ibm-1.8.0_sr3.21-20.1 - SUSE Linux Enterprise Server 12-SP1 (x86_64): java-1_8_0-ibm-alsa-1.8.0_sr3.21-20.1 java-1_8_0-ibm-plugin-1.8.0_sr3.21-20.1 References: https://www.suse.com/security/cve/CVE-2016-5542.html https://www.suse.com/security/cve/CVE-2016-5554.html https://www.suse.com/security/cve/CVE-2016-5556.html https://www.suse.com/security/cve/CVE-2016-5568.html https://www.suse.com/security/cve/CVE-2016-5573.html https://www.suse.com/security/cve/CVE-2016-5597.html https://bugzilla.suse.com/1009280 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2016:3077-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 10 Dec '16

10 Dec '16

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:3077-1 Rating: important References: #1008831 #1011685 #1012754 Cross-References: CVE-2016-8632 CVE-2016-8655 CVE-2016-9555 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: The openSUSE 13.1 kernel was updated to receive various critical security fixes. The following security bugs were fixed: - CVE-2016-8655: A race condition in the af_packet packet_set_ring function could be used by local attackers to crash the kernel or gain privileges (bsc#1012754). - CVE-2016-8632: The tipc_msg_build function in net/tipc/msg.c in the Linux kernel did not validate the relationship between the minimum fragment length and the maximum packet size, which allowed local users to gain privileges or cause a denial of service (heap-based buffer overflow) by leveraging the CAP_NET_ADMIN capability (bnc#1008831). - CVE-2016-9555: The sctp_sf_ootb function in net/sctp/sm_statefuns.c in the Linux kernel lacks chunk-length checking for the first chunk, which allowed remote attackers to cause a denial of service (out-of-bounds slab access) or possibly have unspecified other impact via crafted SCTP data (bnc#1011685). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2016-1436=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i686 x86_64): kernel-debug-3.12.67-61.1 kernel-debug-base-3.12.67-61.1 kernel-debug-base-debuginfo-3.12.67-61.1 kernel-debug-debuginfo-3.12.67-61.1 kernel-debug-debugsource-3.12.67-61.1 kernel-debug-devel-3.12.67-61.1 kernel-debug-devel-debuginfo-3.12.67-61.1 kernel-desktop-3.12.67-61.1 kernel-desktop-base-3.12.67-61.1 kernel-desktop-base-debuginfo-3.12.67-61.1 kernel-desktop-debuginfo-3.12.67-61.1 kernel-desktop-debugsource-3.12.67-61.1 kernel-desktop-devel-3.12.67-61.1 kernel-ec2-3.12.67-61.1 kernel-ec2-base-3.12.67-61.1 kernel-ec2-base-debuginfo-3.12.67-61.1 kernel-ec2-debuginfo-3.12.67-61.1 kernel-ec2-debugsource-3.12.67-61.1 kernel-ec2-devel-3.12.67-61.1 kernel-trace-3.12.67-61.1 kernel-trace-base-3.12.67-61.1 kernel-trace-base-debuginfo-3.12.67-61.1 kernel-trace-debuginfo-3.12.67-61.1 kernel-trace-debugsource-3.12.67-61.1 kernel-trace-devel-3.12.67-61.1 kernel-vanilla-3.12.67-61.1 kernel-vanilla-debuginfo-3.12.67-61.1 kernel-vanilla-debugsource-3.12.67-61.1 kernel-vanilla-devel-3.12.67-61.1 kernel-xen-3.12.67-61.1 kernel-xen-base-3.12.67-61.1 kernel-xen-base-debuginfo-3.12.67-61.1 kernel-xen-debuginfo-3.12.67-61.1 kernel-xen-debugsource-3.12.67-61.1 kernel-xen-devel-3.12.67-61.1 - openSUSE 13.1 (i586 x86_64): cloop-2.639-11.38.1 cloop-debuginfo-2.639-11.38.1 cloop-debugsource-2.639-11.38.1 cloop-kmp-default-2.639_k3.12.67_61-11.38.1 cloop-kmp-default-debuginfo-2.639_k3.12.67_61-11.38.1 cloop-kmp-desktop-2.639_k3.12.67_61-11.38.1 cloop-kmp-desktop-debuginfo-2.639_k3.12.67_61-11.38.1 cloop-kmp-xen-2.639_k3.12.67_61-11.38.1 cloop-kmp-xen-debuginfo-2.639_k3.12.67_61-11.38.1 crash-7.0.2-2.38.1 crash-debuginfo-7.0.2-2.38.1 crash-debugsource-7.0.2-2.38.1 crash-devel-7.0.2-2.38.1 crash-doc-7.0.2-2.38.1 crash-eppic-7.0.2-2.38.1 crash-eppic-debuginfo-7.0.2-2.38.1 crash-gcore-7.0.2-2.38.1 crash-gcore-debuginfo-7.0.2-2.38.1 crash-kmp-default-7.0.2_k3.12.67_61-2.38.1 crash-kmp-default-debuginfo-7.0.2_k3.12.67_61-2.38.1 crash-kmp-desktop-7.0.2_k3.12.67_61-2.38.1 crash-kmp-desktop-debuginfo-7.0.2_k3.12.67_61-2.38.1 crash-kmp-xen-7.0.2_k3.12.67_61-2.38.1 crash-kmp-xen-debuginfo-7.0.2_k3.12.67_61-2.38.1 hdjmod-debugsource-1.28-16.38.1 hdjmod-kmp-default-1.28_k3.12.67_61-16.38.1 hdjmod-kmp-default-debuginfo-1.28_k3.12.67_61-16.38.1 hdjmod-kmp-desktop-1.28_k3.12.67_61-16.38.1 hdjmod-kmp-desktop-debuginfo-1.28_k3.12.67_61-16.38.1 hdjmod-kmp-xen-1.28_k3.12.67_61-16.38.1 hdjmod-kmp-xen-debuginfo-1.28_k3.12.67_61-16.38.1 ipset-6.21.1-2.42.1 ipset-debuginfo-6.21.1-2.42.1 ipset-debugsource-6.21.1-2.42.1 ipset-devel-6.21.1-2.42.1 ipset-kmp-default-6.21.1_k3.12.67_61-2.42.1 ipset-kmp-default-debuginfo-6.21.1_k3.12.67_61-2.42.1 ipset-kmp-desktop-6.21.1_k3.12.67_61-2.42.1 ipset-kmp-desktop-debuginfo-6.21.1_k3.12.67_61-2.42.1 ipset-kmp-xen-6.21.1_k3.12.67_61-2.42.1 ipset-kmp-xen-debuginfo-6.21.1_k3.12.67_61-2.42.1 iscsitarget-1.4.20.3-13.38.1 iscsitarget-debuginfo-1.4.20.3-13.38.1 iscsitarget-debugsource-1.4.20.3-13.38.1 iscsitarget-kmp-default-1.4.20.3_k3.12.67_61-13.38.1 iscsitarget-kmp-default-debuginfo-1.4.20.3_k3.12.67_61-13.38.1 iscsitarget-kmp-desktop-1.4.20.3_k3.12.67_61-13.38.1 iscsitarget-kmp-desktop-debuginfo-1.4.20.3_k3.12.67_61-13.38.1 iscsitarget-kmp-xen-1.4.20.3_k3.12.67_61-13.38.1 iscsitarget-kmp-xen-debuginfo-1.4.20.3_k3.12.67_61-13.38.1 kernel-default-3.12.67-61.1 kernel-default-base-3.12.67-61.1 kernel-default-base-debuginfo-3.12.67-61.1 kernel-default-debuginfo-3.12.67-61.1 kernel-default-debugsource-3.12.67-61.1 kernel-default-devel-3.12.67-61.1 kernel-syms-3.12.67-61.1 libipset3-6.21.1-2.42.1 libipset3-debuginfo-6.21.1-2.42.1 ndiswrapper-1.58-39.1 ndiswrapper-debuginfo-1.58-39.1 ndiswrapper-debugsource-1.58-39.1 ndiswrapper-kmp-default-1.58_k3.12.67_61-39.1 ndiswrapper-kmp-default-debuginfo-1.58_k3.12.67_61-39.1 ndiswrapper-kmp-desktop-1.58_k3.12.67_61-39.1 ndiswrapper-kmp-desktop-debuginfo-1.58_k3.12.67_61-39.1 openvswitch-1.11.0-0.45.1 openvswitch-controller-1.11.0-0.45.1 openvswitch-controller-debuginfo-1.11.0-0.45.1 openvswitch-debuginfo-1.11.0-0.45.1 openvswitch-debugsource-1.11.0-0.45.1 openvswitch-kmp-default-1.11.0_k3.12.67_61-0.45.1 openvswitch-kmp-default-debuginfo-1.11.0_k3.12.67_61-0.45.1 openvswitch-kmp-desktop-1.11.0_k3.12.67_61-0.45.1 openvswitch-kmp-desktop-debuginfo-1.11.0_k3.12.67_61-0.45.1 openvswitch-kmp-xen-1.11.0_k3.12.67_61-0.45.1 openvswitch-kmp-xen-debuginfo-1.11.0_k3.12.67_61-0.45.1 openvswitch-pki-1.11.0-0.45.1 openvswitch-switch-1.11.0-0.45.1 openvswitch-switch-debuginfo-1.11.0-0.45.1 openvswitch-test-1.11.0-0.45.1 pcfclock-0.44-258.39.1 pcfclock-debuginfo-0.44-258.39.1 pcfclock-debugsource-0.44-258.39.1 pcfclock-kmp-default-0.44_k3.12.67_61-258.39.1 pcfclock-kmp-default-debuginfo-0.44_k3.12.67_61-258.39.1 pcfclock-kmp-desktop-0.44_k3.12.67_61-258.39.1 pcfclock-kmp-desktop-debuginfo-0.44_k3.12.67_61-258.39.1 python-openvswitch-1.11.0-0.45.1 python-openvswitch-test-1.11.0-0.45.1 python-virtualbox-4.2.36-2.70.1 python-virtualbox-debuginfo-4.2.36-2.70.1 vhba-kmp-debugsource-20130607-2.38.1 vhba-kmp-default-20130607_k3.12.67_61-2.38.1 vhba-kmp-default-debuginfo-20130607_k3.12.67_61-2.38.1 vhba-kmp-desktop-20130607_k3.12.67_61-2.38.1 vhba-kmp-desktop-debuginfo-20130607_k3.12.67_61-2.38.1 vhba-kmp-xen-20130607_k3.12.67_61-2.38.1 vhba-kmp-xen-debuginfo-20130607_k3.12.67_61-2.38.1 virtualbox-4.2.36-2.70.1 virtualbox-debuginfo-4.2.36-2.70.1 virtualbox-debugsource-4.2.36-2.70.1 virtualbox-devel-4.2.36-2.70.1 virtualbox-guest-kmp-default-4.2.36_k3.12.67_61-2.70.1 virtualbox-guest-kmp-default-debuginfo-4.2.36_k3.12.67_61-2.70.1 virtualbox-guest-kmp-desktop-4.2.36_k3.12.67_61-2.70.1 virtualbox-guest-kmp-desktop-debuginfo-4.2.36_k3.12.67_61-2.70.1 virtualbox-guest-tools-4.2.36-2.70.1 virtualbox-guest-tools-debuginfo-4.2.36-2.70.1 virtualbox-guest-x11-4.2.36-2.70.1 virtualbox-guest-x11-debuginfo-4.2.36-2.70.1 virtualbox-host-kmp-default-4.2.36_k3.12.67_61-2.70.1 virtualbox-host-kmp-default-debuginfo-4.2.36_k3.12.67_61-2.70.1 virtualbox-host-kmp-desktop-4.2.36_k3.12.67_61-2.70.1 virtualbox-host-kmp-desktop-debuginfo-4.2.36_k3.12.67_61-2.70.1 virtualbox-qt-4.2.36-2.70.1 virtualbox-qt-debuginfo-4.2.36-2.70.1 virtualbox-websrv-4.2.36-2.70.1 virtualbox-websrv-debuginfo-4.2.36-2.70.1 xen-debugsource-4.3.4_10-71.1 xen-devel-4.3.4_10-71.1 xen-kmp-default-4.3.4_10_k3.12.67_61-71.1 xen-kmp-default-debuginfo-4.3.4_10_k3.12.67_61-71.1 xen-kmp-desktop-4.3.4_10_k3.12.67_61-71.1 xen-kmp-desktop-debuginfo-4.3.4_10_k3.12.67_61-71.1 xen-libs-4.3.4_10-71.1 xen-libs-debuginfo-4.3.4_10-71.1 xen-tools-domU-4.3.4_10-71.1 xen-tools-domU-debuginfo-4.3.4_10-71.1 xtables-addons-2.3-2.37.1 xtables-addons-debuginfo-2.3-2.37.1 xtables-addons-debugsource-2.3-2.37.1 xtables-addons-kmp-default-2.3_k3.12.67_61-2.37.1 xtables-addons-kmp-default-debuginfo-2.3_k3.12.67_61-2.37.1 xtables-addons-kmp-desktop-2.3_k3.12.67_61-2.37.1 xtables-addons-kmp-desktop-debuginfo-2.3_k3.12.67_61-2.37.1 xtables-addons-kmp-xen-2.3_k3.12.67_61-2.37.1 xtables-addons-kmp-xen-debuginfo-2.3_k3.12.67_61-2.37.1 - openSUSE 13.1 (x86_64): xen-4.3.4_10-71.1 xen-doc-html-4.3.4_10-71.1 xen-libs-32bit-4.3.4_10-71.1 xen-libs-debuginfo-32bit-4.3.4_10-71.1 xen-tools-4.3.4_10-71.1 xen-tools-debuginfo-4.3.4_10-71.1 xen-xend-tools-4.3.4_10-71.1 xen-xend-tools-debuginfo-4.3.4_10-71.1 - openSUSE 13.1 (noarch): kernel-devel-3.12.67-61.1 kernel-docs-3.12.67-61.2 kernel-macros-3.12.67-61.1 kernel-source-3.12.67-61.1 kernel-source-vanilla-3.12.67-61.1 virtualbox-host-source-4.2.36-2.70.1 - openSUSE 13.1 (i586): cloop-kmp-pae-2.639_k3.12.67_61-11.38.1 cloop-kmp-pae-debuginfo-2.639_k3.12.67_61-11.38.1 crash-kmp-pae-7.0.2_k3.12.67_61-2.38.1 crash-kmp-pae-debuginfo-7.0.2_k3.12.67_61-2.38.1 hdjmod-kmp-pae-1.28_k3.12.67_61-16.38.1 hdjmod-kmp-pae-debuginfo-1.28_k3.12.67_61-16.38.1 ipset-kmp-pae-6.21.1_k3.12.67_61-2.42.1 ipset-kmp-pae-debuginfo-6.21.1_k3.12.67_61-2.42.1 iscsitarget-kmp-pae-1.4.20.3_k3.12.67_61-13.38.1 iscsitarget-kmp-pae-debuginfo-1.4.20.3_k3.12.67_61-13.38.1 ndiswrapper-kmp-pae-1.58_k3.12.67_61-39.1 ndiswrapper-kmp-pae-debuginfo-1.58_k3.12.67_61-39.1 openvswitch-kmp-pae-1.11.0_k3.12.67_61-0.45.1 openvswitch-kmp-pae-debuginfo-1.11.0_k3.12.67_61-0.45.1 pcfclock-kmp-pae-0.44_k3.12.67_61-258.39.1 pcfclock-kmp-pae-debuginfo-0.44_k3.12.67_61-258.39.1 vhba-kmp-pae-20130607_k3.12.67_61-2.38.1 vhba-kmp-pae-debuginfo-20130607_k3.12.67_61-2.38.1 virtualbox-guest-kmp-pae-4.2.36_k3.12.67_61-2.70.1 virtualbox-guest-kmp-pae-debuginfo-4.2.36_k3.12.67_61-2.70.1 virtualbox-host-kmp-pae-4.2.36_k3.12.67_61-2.70.1 virtualbox-host-kmp-pae-debuginfo-4.2.36_k3.12.67_61-2.70.1 xen-kmp-pae-4.3.4_10_k3.12.67_61-71.1 xen-kmp-pae-debuginfo-4.3.4_10_k3.12.67_61-71.1 xtables-addons-kmp-pae-2.3_k3.12.67_61-2.37.1 xtables-addons-kmp-pae-debuginfo-2.3_k3.12.67_61-2.37.1 - openSUSE 13.1 (i686): kernel-pae-3.12.67-61.1 kernel-pae-base-3.12.67-61.1 kernel-pae-base-debuginfo-3.12.67-61.1 kernel-pae-debuginfo-3.12.67-61.1 kernel-pae-debugsource-3.12.67-61.1 kernel-pae-devel-3.12.67-61.1 References: https://www.suse.com/security/cve/CVE-2016-8632.html https://www.suse.com/security/cve/CVE-2016-8655.html https://www.suse.com/security/cve/CVE-2016-9555.html https://bugzilla.suse.com/1008831 https://bugzilla.suse.com/1011685 https://bugzilla.suse.com/1012754 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2016:3069-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 09 Dec '16

09 Dec '16

SUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: SUSE-SU-2016:3069-1 Rating: important References: #1000189 #1001419 #1002165 #1004418 #732582 #839104 #843236 #909994 #911687 #915183 #920016 #934760 #951392 #956514 #960689 #963655 #971975 #971989 #974620 #976867 #977687 #979514 #979595 #979681 #980371 #982218 #982783 #983535 #983619 #984102 #984194 #984992 #985206 #986362 #986365 #986445 #987565 #988440 #989152 #989261 #989779 #991608 #991665 #991923 #992566 #993127 #993890 #993891 #994296 #994436 #994618 #994759 #994926 #996329 #996664 #997708 #998399 #999584 #999600 #999932 Cross-References: CVE-2013-4312 CVE-2015-7513 CVE-2016-0823 CVE-2016-3841 CVE-2016-4997 CVE-2016-4998 CVE-2016-5195 CVE-2016-5696 CVE-2016-6480 CVE-2016-6828 CVE-2016-7425 Affected Products: SUSE Linux Enterprise Real Time Extension 11-SP4 SUSE Linux Enterprise Debuginfo 11-SP4 ______________________________________________________________________________ An update that solves 11 vulnerabilities and has 49 fixes is now available. Description: The SUSE Linux Enterprise 11 SP4 RT kernel was updated to receive various security and bugfixes. This feature was added: - Support for the 2017 Intel Purley platform. The following security bugs were fixed: - CVE-2016-5195: A local privilege escalation using MAP_PRIVATE was fixed, which is reportedly exploited in the wild (bsc#1004418). - CVE-2016-0823: The pagemap_open function in fs/proc/task_mmu.c in the Linux kernel allowed local users to obtain sensitive physical-address information by reading a pagemap file, aka Android internal bug 25739721 (bnc#994759). - CVE-2016-3841: The IPv6 stack in the Linux kernel mishandled options data, which allowed local users to gain privileges or cause a denial of service (use-after-free and system crash) via a crafted sendmsg system call (bnc#992566). - CVE-2016-6828: Use after free in tcp_xmit_retransmit_queue or other tcp_ functions (bsc#994296) - CVE-2016-5696: net/ipv4/tcp_input.c in the Linux kernel did not properly determine the rate of challenge ACK segments, which made it easier for man-in-the-middle attackers to hijack TCP sessions via a blind in-window attack (bnc#989152) - CVE-2016-6480: Race condition in the ioctl_send_fib function in drivers/scsi/aacraid/commctrl.c in the Linux kernel allowed local users to cause a denial of service (out-of-bounds access or system crash) by changing a certain size value, aka a "double fetch" vulnerability (bnc#991608) - CVE-2016-4997: The compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations in the netfilter subsystem in the Linux kernel allowed local users to gain privileges or cause a denial of service (memory corruption) by leveraging in-container root access to provide a crafted offset value that triggers an unintended decrement (bnc#986362). - CVE-2015-7513: arch/x86/kvm/x86.c in the Linux kernel did not reset the PIT counter values during state restoration, which allowed guest OS users to cause a denial of service (divide-by-zero error and host OS crash) via a zero value, related to the kvm_vm_ioctl_set_pit and kvm_vm_ioctl_set_pit2 functions (bnc#960689). - CVE-2013-4312: The Linux kernel allowed local users to bypass file-descriptor limits and cause a denial of service (memory consumption) by sending each descriptor over a UNIX socket closing it, related to net/unix/af_unix.c and net/unix/garbage.c (bnc#839104). - CVE-2016-7425: A buffer overflow in the Linux Kernel in arcmsr_iop_message_xfer() could have caused kernel heap corruption and arbitraty kernel code execution (bsc#999932) The following non-security bugs were fixed: - ahci: Order SATA device IDs for codename Lewisburg. - AHCI: Remove obsolete Intel Lewisburg SATA RAID device IDs. - ALSA: hda - Add Intel Lewisburg device IDs Audio. - avoid dentry crash triggered by NFS (bsc#984194). - blktap2: eliminate deadlock potential from shutdown path (bsc#909994). - blktap2: eliminate race from deferred work queue handling (bsc#911687). - bonding: always set recv_probe to bond_arp_rcv in arp monitor (bsc#977687). - bonding: fix bond_arp_rcv setting and arp validate desync state (bsc#977687). - btrfs: account for non-CoW'd blocks in btrfs_abort_transaction (bsc#983619). - btrfs: ensure that file descriptor used with subvol ioctls is a dir (bsc#999600). - cdc-acm: added sanity checking for probe() (bsc#993891). - cxgb4: Set VPD size so we can read both VPD structures (bsc#976867). - Delete patches.fixes/net-fix-crash-due-to-wrong-dev-in-calling.patch. (bsc#979514) - fs/cifs: fix wrongly prefixed path to root (bsc#963655, bsc#979681) - fs/select: add vmalloc fallback for select(2) (bsc#1000189). - fs/select: introduce SIZE_MAX (bsc#1000189). - i2c: i801: add Intel Lewisburg device IDs. - include/linux/mmdebug.h: should include linux/bug.h (bnc#971975 VM performance -- git fixes). - increase CONFIG_NR_IRQS 512 -> 2048 reportedly irq error with multiple nvme and tg3 in the same machine is resolved by increasing CONFIG_NR_IRQS (bsc#998399) - kabi, unix: properly account for FDs passed over unix sockets (bnc#839104). - kaweth: fix firmware download (bsc#993890). - kaweth: fix oops upon failed memory allocation (bsc#993890). - KVM: x86: SYSENTER emulation is broken (bsc#994618). - libfc: sanity check cpu number extracted from xid (bsc#988440). - lpfc: call lpfc_sli_validate_fcp_iocb() with the hbalock held (bsc#951392). - md: lockless I/O submission for RAID1 (bsc#982783). - mm: thp: fix SMP race condition between THP page fault and MADV_DONTNEED (VM Functionality, bnc#986445). - mpt2sas, mpt3sas: Fix panic when aer correct error occurred (bsc#997708). - net: add pfmemalloc check in sk_add_backlog() (bnc#920016). - netback: fix flipping mode (bsc#996664). - nfs: Do not drop directory dentry which is in use (bsc#993127). - nfs: Don't disconnect open-owner on NFS4ERR_BAD_SEQID (bsc#989261). - nfs: Don't write enable new pages while an invalidation is proceeding (bsc#999584). - nfs: Fix a regression in the read() syscall (bsc#999584). - nfs: Fix races in nfs_revalidate_mapping (bsc#999584). - nfs: fix the handling of NFS_INO_INVALID_DATA flag in nfs_revalidate_mapping (bsc#999584). - nfs: Fix writeback performance issue on cache invalidation (bsc#999584). - nfs: Refresh open-owner id when server says SEQID is bad (bsc#989261). - nfsv4: do not check MAY_WRITE access bit in OPEN (bsc#985206). - nfsv4: fix broken patch relating to v4 read delegations (bsc#956514, bsc#989261, bsc#979595). - nfsv4: Fix range checking in __nfs4_get_acl_uncached and __nfs4_proc_set_acl (bsc#982218). - pci: Add pci_set_vpd_size() to set VPD size (bsc#976867). - pciback: fix conf_space read/write overlap check. - powerpc: add kernel parameter iommu_alloc_quiet (bsc#994926). - ppp: defer netns reference release for ppp channel (bsc#980371). - random32: add prandom_u32_max (bsc#989152). - rpm/constraints.in: Bump x86 disk space requirement to 20GB Clamav tends to run out of space nowadays. - s390/dasd: fix hanging device after clear subchannel (bnc#994436). - sata: Adding Intel Lewisburg device IDs for SATA. - sched/core: Fix an SMP ordering race in try_to_wake_up() vs. schedule() (bnc#1001419). - sched/core: Fix a race between try_to_wake_up() and a woken up task (bnc#1002165). - sched: Fix possible divide by zero in avg_atom() calculation (bsc#996329). - scsi_dh_rdac: retry inquiry for UNIT ATTENTION (bsc#934760). - scsi: do not print "reservation conflict" for TEST UNIT READY (bsc#984102). - scsi: ibmvfc: add FC Class 3 Error Recovery support (bsc#984992). - scsi: ibmvfc: Fix I/O hang when port is not mapped (bsc#971989) - scsi: ibmvfc: Set READ FCP_XFER_READY DISABLED bit in PRLI (bsc#984992). - scsi_scan: Send TEST UNIT READY to LUN0 before LUN scanning (bnc#843236,bsc#989779). - tmpfs: change final i_blocks BUG to WARNING (bsc#991923). - Update patches.drivers/fcoe-0102-fcoe-ensure-that-skb-placed-on-the-fip_recv_list- are.patch (add bsc#732582 reference). - USB: fix typo in wMaxPacketSize validation (bsc#991665). - USB: validate wMaxPacketValue entries in endpoint descriptors (bnc#991665). - vlan: don't deliver frames for unknown vlans to protocols (bsc#979514). - vlan: mask vlan prio bits (bsc#979514). - xenbus: inspect the correct type in xenbus_dev_request_and_reply(). - xen: x86/mm/pat, /dev/mem: Remove superfluous error message (bsc#974620). - xfs: Avoid grabbing ilock when file size is not changed (bsc#983535). - xfs: Silence warnings in xfs_vm_releasepage() (bnc#915183 bsc#987565). Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Real Time Extension 11-SP4: zypper in -t patch slertesp4-kernel-source-12880=1 - SUSE Linux Enterprise Debuginfo 11-SP4: zypper in -t patch dbgsp4-kernel-source-12880=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Real Time Extension 11-SP4 (x86_64): kernel-rt-3.0.101.rt130-65.1 kernel-rt-base-3.0.101.rt130-65.1 kernel-rt-devel-3.0.101.rt130-65.1 kernel-rt_trace-3.0.101.rt130-65.1 kernel-rt_trace-base-3.0.101.rt130-65.1 kernel-rt_trace-devel-3.0.101.rt130-65.1 kernel-source-rt-3.0.101.rt130-65.1 kernel-syms-rt-3.0.101.rt130-65.1 - SUSE Linux Enterprise Debuginfo 11-SP4 (x86_64): kernel-rt-debuginfo-3.0.101.rt130-65.1 kernel-rt-debugsource-3.0.101.rt130-65.1 kernel-rt_debug-debuginfo-3.0.101.rt130-65.1 kernel-rt_debug-debugsource-3.0.101.rt130-65.1 kernel-rt_trace-debuginfo-3.0.101.rt130-65.1 kernel-rt_trace-debugsource-3.0.101.rt130-65.1 References: https://www.suse.com/security/cve/CVE-2013-4312.html https://www.suse.com/security/cve/CVE-2015-7513.html https://www.suse.com/security/cve/CVE-2016-0823.html https://www.suse.com/security/cve/CVE-2016-3841.html https://www.suse.com/security/cve/CVE-2016-4997.html https://www.suse.com/security/cve/CVE-2016-4998.html https://www.suse.com/security/cve/CVE-2016-5195.html https://www.suse.com/security/cve/CVE-2016-5696.html https://www.suse.com/security/cve/CVE-2016-6480.html https://www.suse.com/security/cve/CVE-2016-6828.html https://www.suse.com/security/cve/CVE-2016-7425.html https://bugzilla.suse.com/1000189 https://bugzilla.suse.com/1001419 https://bugzilla.suse.com/1002165 https://bugzilla.suse.com/1004418 https://bugzilla.suse.com/732582 https://bugzilla.suse.com/839104 https://bugzilla.suse.com/843236 https://bugzilla.suse.com/909994 https://bugzilla.suse.com/911687 https://bugzilla.suse.com/915183 https://bugzilla.suse.com/920016 https://bugzilla.suse.com/934760 https://bugzilla.suse.com/951392 https://bugzilla.suse.com/956514 https://bugzilla.suse.com/960689 https://bugzilla.suse.com/963655 https://bugzilla.suse.com/971975 https://bugzilla.suse.com/971989 https://bugzilla.suse.com/974620 https://bugzilla.suse.com/976867 https://bugzilla.suse.com/977687 https://bugzilla.suse.com/979514 https://bugzilla.suse.com/979595 https://bugzilla.suse.com/979681 https://bugzilla.suse.com/980371 https://bugzilla.suse.com/982218 https://bugzilla.suse.com/982783 https://bugzilla.suse.com/983535 https://bugzilla.suse.com/983619 https://bugzilla.suse.com/984102 https://bugzilla.suse.com/984194 https://bugzilla.suse.com/984992 https://bugzilla.suse.com/985206 https://bugzilla.suse.com/986362 https://bugzilla.suse.com/986365 https://bugzilla.suse.com/986445 https://bugzilla.suse.com/987565 https://bugzilla.suse.com/988440 https://bugzilla.suse.com/989152 https://bugzilla.suse.com/989261 https://bugzilla.suse.com/989779 https://bugzilla.suse.com/991608 https://bugzilla.suse.com/991665 https://bugzilla.suse.com/991923 https://bugzilla.suse.com/992566 https://bugzilla.suse.com/993127 https://bugzilla.suse.com/993890 https://bugzilla.suse.com/993891 https://bugzilla.suse.com/994296 https://bugzilla.suse.com/994436 https://bugzilla.suse.com/994618 https://bugzilla.suse.com/994759 https://bugzilla.suse.com/994926 https://bugzilla.suse.com/996329 https://bugzilla.suse.com/996664 https://bugzilla.suse.com/997708 https://bugzilla.suse.com/998399 https://bugzilla.suse.com/999584 https://bugzilla.suse.com/999600 https://bugzilla.suse.com/999932 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0