April 2017 - openSUSE Security Announce

[security-announce] openSUSE-SU-2017:0973-1: important: Security update for pidgin
by opensuse-security＠opensuse.org 11 Apr '17

11 Apr '17

openSUSE Security Update: Security update for pidgin ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0973-1 Rating: important References: #1009974 #1028835 Cross-References: CVE-2017-2640 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for pidgin to version 2.12.0 fixes the following issues: This security issue was fixed: - CVE-2017-2640: Out of bounds memory read in purple_markup_unescape_entity (boo#1028835). These non-security issues were fixed: + libpurple: - Fix the use of uninitialised memory if running non-debug-enabled versions of glib. - Update AIM dev and dist ID's to new ones that were assigned by AOL. - TLS certificate verification now uses SHA-256 checksums. - Fix the SASL external auth for Freenode (boo#1009974). - Remove the MSN protocol plugin. It has been unusable and dormant for some time. - Remove the Mxit protocol plugin. The service was closed at the end ofSeptember 2016. - Remove the MySpaceIM protocol plugin. The service has been defunct for a long time (pidgin.im#15356). - Remove the Yahoo! protocol plugin. Yahoo has completely reimplemented their protocol, so this version is no longer operable as of August 5th, 2016. - Remove the Facebook (XMPP) account option. According to https://developers.facebook.com/docs/chat the XMPP Chat API service ended April 30th, 2015. - Fix gnutls certificate validation errors that mainly affected Google. + General: - Replace instances of d.pidgin.im with developer.pidgin.im and update the urls to use https (pidgin.im#17036). + IRC: - Fix an issue of messages being silently cut off at 500 characters. Large messages are now split into parts and sent one by one (pidgin.im#4753). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-457=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): libpurple-branding-openSUSE-42.2-3.3.2 libpurple-branding-upstream-2.12.0-8.6.1 libpurple-lang-2.12.0-8.6.1 - openSUSE Leap 42.2 (x86_64): finch-2.12.0-8.6.1 finch-debuginfo-2.12.0-8.6.1 finch-devel-2.12.0-8.6.1 libpurple-2.12.0-8.6.1 libpurple-debuginfo-2.12.0-8.6.1 libpurple-devel-2.12.0-8.6.1 libpurple-plugin-sametime-2.12.0-8.6.1 libpurple-plugin-sametime-debuginfo-2.12.0-8.6.1 libpurple-tcl-2.12.0-8.6.1 libpurple-tcl-debuginfo-2.12.0-8.6.1 pidgin-2.12.0-8.6.1 pidgin-debuginfo-2.12.0-8.6.1 pidgin-debugsource-2.12.0-8.6.1 pidgin-devel-2.12.0-8.6.1 References: https://www.suse.com/security/cve/CVE-2017-2640.html https://bugzilla.suse.com/1009974 https://bugzilla.suse.com/1028835 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2017:0969-1: important: Security update for apparmor
by opensuse-security＠opensuse.org 10 Apr '17

10 Apr '17

openSUSE Security Update: Security update for apparmor ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0969-1 Rating: important References: #1016259 #1017260 #1029696 Cross-References: CVE-2017-6507 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for apparmor fixes the following issues: These security issues were fixed: - CVE-2017-6507: Preserve unknown profiles when reloading apparmor.service (lp#1668892, boo#1029696) - boo#1017260: Migration to apparmor.service accidently disable AppArmor. Note: This will re-enable AppArmor if it was disabled by the last update. You'll need to "rcapparmor reload" to actually load the profiles, and then check aa-status for programs that need to be restarted to apply the profiles. These non-security issues were fixed: - Fixed crash in aa-logprof on specific change_hat events - boo#1016259: Added var.mount dependeny to apparmor.service The aa-remove-unknown utility was added to unload unknown profiles (lp#1668892) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-452=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-452=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): apache2-mod_apparmor-2.10.2-12.3.1 apache2-mod_apparmor-debuginfo-2.10.2-12.3.1 apparmor-debugsource-2.10.2-12.3.1 apparmor-parser-2.10.2-12.3.1 apparmor-parser-debuginfo-2.10.2-12.3.1 libapparmor-devel-2.10.2-12.3.1 libapparmor1-2.10.2-12.3.1 libapparmor1-debuginfo-2.10.2-12.3.1 pam_apparmor-2.10.2-12.3.1 pam_apparmor-debuginfo-2.10.2-12.3.1 perl-apparmor-2.10.2-12.3.1 perl-apparmor-debuginfo-2.10.2-12.3.1 python3-apparmor-2.10.2-12.3.1 python3-apparmor-debuginfo-2.10.2-12.3.1 ruby-apparmor-2.10.2-12.3.1 ruby-apparmor-debuginfo-2.10.2-12.3.1 - openSUSE Leap 42.2 (x86_64): libapparmor1-32bit-2.10.2-12.3.1 libapparmor1-debuginfo-32bit-2.10.2-12.3.1 pam_apparmor-32bit-2.10.2-12.3.1 pam_apparmor-debuginfo-32bit-2.10.2-12.3.1 - openSUSE Leap 42.2 (noarch): apparmor-abstractions-2.10.2-12.3.1 apparmor-docs-2.10.2-12.3.1 apparmor-parser-lang-2.10.2-12.3.1 apparmor-profiles-2.10.2-12.3.1 apparmor-utils-2.10.2-12.3.1 apparmor-utils-lang-2.10.2-12.3.1 - openSUSE Leap 42.1 (i586 x86_64): apache2-mod_apparmor-2.10.2-12.1 apache2-mod_apparmor-debuginfo-2.10.2-12.1 apparmor-debugsource-2.10.2-12.1 apparmor-parser-2.10.2-12.1 apparmor-parser-debuginfo-2.10.2-12.1 libapparmor-devel-2.10.2-12.1 libapparmor1-2.10.2-12.1 libapparmor1-debuginfo-2.10.2-12.1 pam_apparmor-2.10.2-12.1 pam_apparmor-debuginfo-2.10.2-12.1 perl-apparmor-2.10.2-12.1 perl-apparmor-debuginfo-2.10.2-12.1 python3-apparmor-2.10.2-12.1 python3-apparmor-debuginfo-2.10.2-12.1 ruby-apparmor-2.10.2-12.1 ruby-apparmor-debuginfo-2.10.2-12.1 - openSUSE Leap 42.1 (noarch): apparmor-abstractions-2.10.2-12.1 apparmor-docs-2.10.2-12.1 apparmor-parser-lang-2.10.2-12.1 apparmor-profiles-2.10.2-12.1 apparmor-utils-2.10.2-12.1 apparmor-utils-lang-2.10.2-12.1 - openSUSE Leap 42.1 (x86_64): libapparmor1-32bit-2.10.2-12.1 libapparmor1-debuginfo-32bit-2.10.2-12.1 pam_apparmor-32bit-2.10.2-12.1 pam_apparmor-debuginfo-32bit-2.10.2-12.1 References: https://www.suse.com/security/cve/CVE-2017-6507.html https://bugzilla.suse.com/1016259 https://bugzilla.suse.com/1017260 https://bugzilla.suse.com/1029696 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2017:0946-1: important: Security update for jasper
by opensuse-security＠opensuse.org 05 Apr '17

05 Apr '17

SUSE Security Update: Security update for jasper ______________________________________________________________________________ Announcement ID: SUSE-SU-2017:0946-1 Rating: important References: #1010977 #1010979 #1011830 #1012530 #1015400 #1015993 #1018088 #1020353 #1021868 #1029497 Cross-References: CVE-2016-10251 CVE-2016-8654 CVE-2016-9395 CVE-2016-9398 CVE-2016-9560 CVE-2016-9583 CVE-2016-9591 CVE-2016-9600 CVE-2017-5498 CVE-2017-6850 Affected Products: SUSE Linux Enterprise Software Development Kit 11-SP4 SUSE Linux Enterprise Server 11-SP4 SUSE Linux Enterprise Debuginfo 11-SP4 ______________________________________________________________________________ An update that fixes 10 vulnerabilities is now available. Description: This update for jasper fixes the following issues: Security issues fixed: - CVE-2016-8654: Heap-based buffer overflow in QMFB code in JPC codec (bsc#1012530) - CVE-2016-9395: Missing sanity checks on the data in a SIZ marker segment (bsc#1010977). - CVE-2016-9398: jpc_math.c:94: int jpc_floorlog2(int): Assertion 'x > 0' failed. (bsc#1010979) - CVE-2016-9560: stack-based buffer overflow in jpc_tsfb_getbands2 (jpc_tsfb.c) (bsc#1011830) - CVE-2016-9583: Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400) - CVE-2016-9591: Use-after-free on heap in jas_matrix_destroy (bsc#1015993) - CVE-2016-9600: Null Pointer Dereference due to missing check for UNKNOWN color space in JP2 encoder (bsc#1018088) - CVE-2016-10251: Use of uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c) (bsc#1029497) - CVE-2017-5498: left-shift undefined behaviour (bsc#1020353) - CVE-2017-6850: NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c) (bsc#1021868) Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11-SP4: zypper in -t patch sdksp4-jasper-13051=1 - SUSE Linux Enterprise Server 11-SP4: zypper in -t patch slessp4-jasper-13051=1 - SUSE Linux Enterprise Debuginfo 11-SP4: zypper in -t patch dbgsp4-jasper-13051=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11-SP4 (i586 ia64 ppc64 s390x x86_64): libjasper-devel-1.900.14-134.32.1 - SUSE Linux Enterprise Server 11-SP4 (i586 ia64 ppc64 s390x x86_64): libjasper-1.900.14-134.32.1 - SUSE Linux Enterprise Server 11-SP4 (ppc64 s390x x86_64): libjasper-32bit-1.900.14-134.32.1 - SUSE Linux Enterprise Server 11-SP4 (ia64): libjasper-x86-1.900.14-134.32.1 - SUSE Linux Enterprise Debuginfo 11-SP4 (i586 ia64 ppc64 s390x x86_64): jasper-debuginfo-1.900.14-134.32.1 jasper-debugsource-1.900.14-134.32.1 References: https://www.suse.com/security/cve/CVE-2016-10251.html https://www.suse.com/security/cve/CVE-2016-8654.html https://www.suse.com/security/cve/CVE-2016-9395.html https://www.suse.com/security/cve/CVE-2016-9398.html https://www.suse.com/security/cve/CVE-2016-9560.html https://www.suse.com/security/cve/CVE-2016-9583.html https://www.suse.com/security/cve/CVE-2016-9591.html https://www.suse.com/security/cve/CVE-2016-9600.html https://www.suse.com/security/cve/CVE-2017-5498.html https://www.suse.com/security/cve/CVE-2017-6850.html https://bugzilla.suse.com/1010977 https://bugzilla.suse.com/1010979 https://bugzilla.suse.com/1011830 https://bugzilla.suse.com/1012530 https://bugzilla.suse.com/1015400 https://bugzilla.suse.com/1015993 https://bugzilla.suse.com/1018088 https://bugzilla.suse.com/1020353 https://bugzilla.suse.com/1021868 https://bugzilla.suse.com/1029497 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2017:0944-1: important: Security update for samba
by opensuse-security＠opensuse.org 05 Apr '17

05 Apr '17

openSUSE Security Update: Security update for samba ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0944-1 Rating: important References: #1012092 #1019416 #1023847 #1024416 #1027147 #993692 #993707 Cross-References: CVE-2017-2619 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves one vulnerability and has 6 fixes is now available. Description: This update for samba fixes the following issues: Security issues fixed: - CVE-2017-2619: Symlink race permits opening files outside share directory (bsc#1027147). Bugfixes: - Force usage of ncurses6-config thru NCURSES_CONFIG env var (bsc#1023847). - Add missing ldb module directory (bsc#1012092). - Don't package man pages for VFS modules that aren't built (bsc#993707). - sync_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416). - Document "winbind: ignore domains" parameter; (bsc#1019416). - Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692). This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-437=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): ctdb-4.4.2-11.3.1 ctdb-debuginfo-4.4.2-11.3.1 ctdb-tests-4.4.2-11.3.1 ctdb-tests-debuginfo-4.4.2-11.3.1 libdcerpc-binding0-4.4.2-11.3.1 libdcerpc-binding0-debuginfo-4.4.2-11.3.1 libdcerpc-devel-4.4.2-11.3.1 libdcerpc-samr-devel-4.4.2-11.3.1 libdcerpc-samr0-4.4.2-11.3.1 libdcerpc-samr0-debuginfo-4.4.2-11.3.1 libdcerpc0-4.4.2-11.3.1 libdcerpc0-debuginfo-4.4.2-11.3.1 libndr-devel-4.4.2-11.3.1 libndr-krb5pac-devel-4.4.2-11.3.1 libndr-krb5pac0-4.4.2-11.3.1 libndr-krb5pac0-debuginfo-4.4.2-11.3.1 libndr-nbt-devel-4.4.2-11.3.1 libndr-nbt0-4.4.2-11.3.1 libndr-nbt0-debuginfo-4.4.2-11.3.1 libndr-standard-devel-4.4.2-11.3.1 libndr-standard0-4.4.2-11.3.1 libndr-standard0-debuginfo-4.4.2-11.3.1 libndr0-4.4.2-11.3.1 libndr0-debuginfo-4.4.2-11.3.1 libnetapi-devel-4.4.2-11.3.1 libnetapi0-4.4.2-11.3.1 libnetapi0-debuginfo-4.4.2-11.3.1 libsamba-credentials-devel-4.4.2-11.3.1 libsamba-credentials0-4.4.2-11.3.1 libsamba-credentials0-debuginfo-4.4.2-11.3.1 libsamba-errors-devel-4.4.2-11.3.1 libsamba-errors0-4.4.2-11.3.1 libsamba-errors0-debuginfo-4.4.2-11.3.1 libsamba-hostconfig-devel-4.4.2-11.3.1 libsamba-hostconfig0-4.4.2-11.3.1 libsamba-hostconfig0-debuginfo-4.4.2-11.3.1 libsamba-passdb-devel-4.4.2-11.3.1 libsamba-passdb0-4.4.2-11.3.1 libsamba-passdb0-debuginfo-4.4.2-11.3.1 libsamba-policy-devel-4.4.2-11.3.1 libsamba-policy0-4.4.2-11.3.1 libsamba-policy0-debuginfo-4.4.2-11.3.1 libsamba-util-devel-4.4.2-11.3.1 libsamba-util0-4.4.2-11.3.1 libsamba-util0-debuginfo-4.4.2-11.3.1 libsamdb-devel-4.4.2-11.3.1 libsamdb0-4.4.2-11.3.1 libsamdb0-debuginfo-4.4.2-11.3.1 libsmbclient-devel-4.4.2-11.3.1 libsmbclient0-4.4.2-11.3.1 libsmbclient0-debuginfo-4.4.2-11.3.1 libsmbconf-devel-4.4.2-11.3.1 libsmbconf0-4.4.2-11.3.1 libsmbconf0-debuginfo-4.4.2-11.3.1 libsmbldap-devel-4.4.2-11.3.1 libsmbldap0-4.4.2-11.3.1 libsmbldap0-debuginfo-4.4.2-11.3.1 libtevent-util-devel-4.4.2-11.3.1 libtevent-util0-4.4.2-11.3.1 libtevent-util0-debuginfo-4.4.2-11.3.1 libwbclient-devel-4.4.2-11.3.1 libwbclient0-4.4.2-11.3.1 libwbclient0-debuginfo-4.4.2-11.3.1 samba-4.4.2-11.3.1 samba-client-4.4.2-11.3.1 samba-client-debuginfo-4.4.2-11.3.1 samba-core-devel-4.4.2-11.3.1 samba-debuginfo-4.4.2-11.3.1 samba-debugsource-4.4.2-11.3.1 samba-libs-4.4.2-11.3.1 samba-libs-debuginfo-4.4.2-11.3.1 samba-pidl-4.4.2-11.3.1 samba-python-4.4.2-11.3.1 samba-python-debuginfo-4.4.2-11.3.1 samba-test-4.4.2-11.3.1 samba-test-debuginfo-4.4.2-11.3.1 samba-winbind-4.4.2-11.3.1 samba-winbind-debuginfo-4.4.2-11.3.1 - openSUSE Leap 42.2 (x86_64): libdcerpc-binding0-32bit-4.4.2-11.3.1 libdcerpc-binding0-debuginfo-32bit-4.4.2-11.3.1 libdcerpc-samr0-32bit-4.4.2-11.3.1 libdcerpc-samr0-debuginfo-32bit-4.4.2-11.3.1 libdcerpc0-32bit-4.4.2-11.3.1 libdcerpc0-debuginfo-32bit-4.4.2-11.3.1 libndr-krb5pac0-32bit-4.4.2-11.3.1 libndr-krb5pac0-debuginfo-32bit-4.4.2-11.3.1 libndr-nbt0-32bit-4.4.2-11.3.1 libndr-nbt0-debuginfo-32bit-4.4.2-11.3.1 libndr-standard0-32bit-4.4.2-11.3.1 libndr-standard0-debuginfo-32bit-4.4.2-11.3.1 libndr0-32bit-4.4.2-11.3.1 libndr0-debuginfo-32bit-4.4.2-11.3.1 libnetapi0-32bit-4.4.2-11.3.1 libnetapi0-debuginfo-32bit-4.4.2-11.3.1 libsamba-credentials0-32bit-4.4.2-11.3.1 libsamba-credentials0-debuginfo-32bit-4.4.2-11.3.1 libsamba-errors0-32bit-4.4.2-11.3.1 libsamba-errors0-debuginfo-32bit-4.4.2-11.3.1 libsamba-hostconfig0-32bit-4.4.2-11.3.1 libsamba-hostconfig0-debuginfo-32bit-4.4.2-11.3.1 libsamba-passdb0-32bit-4.4.2-11.3.1 libsamba-passdb0-debuginfo-32bit-4.4.2-11.3.1 libsamba-policy0-32bit-4.4.2-11.3.1 libsamba-policy0-debuginfo-32bit-4.4.2-11.3.1 libsamba-util0-32bit-4.4.2-11.3.1 libsamba-util0-debuginfo-32bit-4.4.2-11.3.1 libsamdb0-32bit-4.4.2-11.3.1 libsamdb0-debuginfo-32bit-4.4.2-11.3.1 libsmbclient0-32bit-4.4.2-11.3.1 libsmbclient0-debuginfo-32bit-4.4.2-11.3.1 libsmbconf0-32bit-4.4.2-11.3.1 libsmbconf0-debuginfo-32bit-4.4.2-11.3.1 libsmbldap0-32bit-4.4.2-11.3.1 libsmbldap0-debuginfo-32bit-4.4.2-11.3.1 libtevent-util0-32bit-4.4.2-11.3.1 libtevent-util0-debuginfo-32bit-4.4.2-11.3.1 libwbclient0-32bit-4.4.2-11.3.1 libwbclient0-debuginfo-32bit-4.4.2-11.3.1 samba-client-32bit-4.4.2-11.3.1 samba-client-debuginfo-32bit-4.4.2-11.3.1 samba-libs-32bit-4.4.2-11.3.1 samba-libs-debuginfo-32bit-4.4.2-11.3.1 samba-winbind-32bit-4.4.2-11.3.1 samba-winbind-debuginfo-32bit-4.4.2-11.3.1 - openSUSE Leap 42.2 (noarch): samba-doc-4.4.2-11.3.1 References: https://www.suse.com/security/cve/CVE-2017-2619.html https://bugzilla.suse.com/1012092 https://bugzilla.suse.com/1019416 https://bugzilla.suse.com/1023847 https://bugzilla.suse.com/1024416 https://bugzilla.suse.com/1027147 https://bugzilla.suse.com/993692 https://bugzilla.suse.com/993707 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2017:0935-1: important: Security update for samba
by opensuse-security＠opensuse.org 05 Apr '17

05 Apr '17

openSUSE Security Update: Security update for samba ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0935-1 Rating: important References: #1019416 #1024416 #1027147 #993692 #993707 Cross-References: CVE-2017-2619 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves one vulnerability and has four fixes is now available. Description: This update for samba fixes the following issues: Security issues fixed: - CVE-2017-2619: Symlink race permits opening files outside share directory (bsc#1027147). Bugfixes: - Don't package man pages for VFS modules that aren't built (bsc#993707). - sync_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416). - Document "winbind: ignore domains" parameter; (bsc#1019416). - Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692). This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-439=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): ctdb-4.2.4-27.1 ctdb-debuginfo-4.2.4-27.1 ctdb-devel-4.2.4-27.1 ctdb-tests-4.2.4-27.1 ctdb-tests-debuginfo-4.2.4-27.1 libdcerpc-atsvc-devel-4.2.4-27.1 libdcerpc-atsvc0-4.2.4-27.1 libdcerpc-atsvc0-debuginfo-4.2.4-27.1 libdcerpc-binding0-4.2.4-27.1 libdcerpc-binding0-debuginfo-4.2.4-27.1 libdcerpc-devel-4.2.4-27.1 libdcerpc-samr-devel-4.2.4-27.1 libdcerpc-samr0-4.2.4-27.1 libdcerpc-samr0-debuginfo-4.2.4-27.1 libdcerpc0-4.2.4-27.1 libdcerpc0-debuginfo-4.2.4-27.1 libgensec-devel-4.2.4-27.1 libgensec0-4.2.4-27.1 libgensec0-debuginfo-4.2.4-27.1 libndr-devel-4.2.4-27.1 libndr-krb5pac-devel-4.2.4-27.1 libndr-krb5pac0-4.2.4-27.1 libndr-krb5pac0-debuginfo-4.2.4-27.1 libndr-nbt-devel-4.2.4-27.1 libndr-nbt0-4.2.4-27.1 libndr-nbt0-debuginfo-4.2.4-27.1 libndr-standard-devel-4.2.4-27.1 libndr-standard0-4.2.4-27.1 libndr-standard0-debuginfo-4.2.4-27.1 libndr0-4.2.4-27.1 libndr0-debuginfo-4.2.4-27.1 libnetapi-devel-4.2.4-27.1 libnetapi0-4.2.4-27.1 libnetapi0-debuginfo-4.2.4-27.1 libregistry-devel-4.2.4-27.1 libregistry0-4.2.4-27.1 libregistry0-debuginfo-4.2.4-27.1 libsamba-credentials-devel-4.2.4-27.1 libsamba-credentials0-4.2.4-27.1 libsamba-credentials0-debuginfo-4.2.4-27.1 libsamba-hostconfig-devel-4.2.4-27.1 libsamba-hostconfig0-4.2.4-27.1 libsamba-hostconfig0-debuginfo-4.2.4-27.1 libsamba-passdb-devel-4.2.4-27.1 libsamba-passdb0-4.2.4-27.1 libsamba-passdb0-debuginfo-4.2.4-27.1 libsamba-policy-devel-4.2.4-27.1 libsamba-policy0-4.2.4-27.1 libsamba-policy0-debuginfo-4.2.4-27.1 libsamba-util-devel-4.2.4-27.1 libsamba-util0-4.2.4-27.1 libsamba-util0-debuginfo-4.2.4-27.1 libsamdb-devel-4.2.4-27.1 libsamdb0-4.2.4-27.1 libsamdb0-debuginfo-4.2.4-27.1 libsmbclient-devel-4.2.4-27.1 libsmbclient-raw-devel-4.2.4-27.1 libsmbclient-raw0-4.2.4-27.1 libsmbclient-raw0-debuginfo-4.2.4-27.1 libsmbclient0-4.2.4-27.1 libsmbclient0-debuginfo-4.2.4-27.1 libsmbconf-devel-4.2.4-27.1 libsmbconf0-4.2.4-27.1 libsmbconf0-debuginfo-4.2.4-27.1 libsmbldap-devel-4.2.4-27.1 libsmbldap0-4.2.4-27.1 libsmbldap0-debuginfo-4.2.4-27.1 libtevent-util-devel-4.2.4-27.1 libtevent-util0-4.2.4-27.1 libtevent-util0-debuginfo-4.2.4-27.1 libwbclient-devel-4.2.4-27.1 libwbclient0-4.2.4-27.1 libwbclient0-debuginfo-4.2.4-27.1 samba-4.2.4-27.1 samba-client-4.2.4-27.1 samba-client-debuginfo-4.2.4-27.1 samba-core-devel-4.2.4-27.1 samba-debuginfo-4.2.4-27.1 samba-debugsource-4.2.4-27.1 samba-libs-4.2.4-27.1 samba-libs-debuginfo-4.2.4-27.1 samba-pidl-4.2.4-27.1 samba-python-4.2.4-27.1 samba-python-debuginfo-4.2.4-27.1 samba-test-4.2.4-27.1 samba-test-debuginfo-4.2.4-27.1 samba-test-devel-4.2.4-27.1 samba-winbind-4.2.4-27.1 samba-winbind-debuginfo-4.2.4-27.1 - openSUSE Leap 42.1 (x86_64): libdcerpc-atsvc0-32bit-4.2.4-27.1 libdcerpc-atsvc0-debuginfo-32bit-4.2.4-27.1 libdcerpc-binding0-32bit-4.2.4-27.1 libdcerpc-binding0-debuginfo-32bit-4.2.4-27.1 libdcerpc-samr0-32bit-4.2.4-27.1 libdcerpc-samr0-debuginfo-32bit-4.2.4-27.1 libdcerpc0-32bit-4.2.4-27.1 libdcerpc0-debuginfo-32bit-4.2.4-27.1 libgensec0-32bit-4.2.4-27.1 libgensec0-debuginfo-32bit-4.2.4-27.1 libndr-krb5pac0-32bit-4.2.4-27.1 libndr-krb5pac0-debuginfo-32bit-4.2.4-27.1 libndr-nbt0-32bit-4.2.4-27.1 libndr-nbt0-debuginfo-32bit-4.2.4-27.1 libndr-standard0-32bit-4.2.4-27.1 libndr-standard0-debuginfo-32bit-4.2.4-27.1 libndr0-32bit-4.2.4-27.1 libndr0-debuginfo-32bit-4.2.4-27.1 libnetapi0-32bit-4.2.4-27.1 libnetapi0-debuginfo-32bit-4.2.4-27.1 libregistry0-32bit-4.2.4-27.1 libregistry0-debuginfo-32bit-4.2.4-27.1 libsamba-credentials0-32bit-4.2.4-27.1 libsamba-credentials0-debuginfo-32bit-4.2.4-27.1 libsamba-hostconfig0-32bit-4.2.4-27.1 libsamba-hostconfig0-debuginfo-32bit-4.2.4-27.1 libsamba-passdb0-32bit-4.2.4-27.1 libsamba-passdb0-debuginfo-32bit-4.2.4-27.1 libsamba-policy0-32bit-4.2.4-27.1 libsamba-policy0-debuginfo-32bit-4.2.4-27.1 libsamba-util0-32bit-4.2.4-27.1 libsamba-util0-debuginfo-32bit-4.2.4-27.1 libsamdb0-32bit-4.2.4-27.1 libsamdb0-debuginfo-32bit-4.2.4-27.1 libsmbclient-raw0-32bit-4.2.4-27.1 libsmbclient-raw0-debuginfo-32bit-4.2.4-27.1 libsmbclient0-32bit-4.2.4-27.1 libsmbclient0-debuginfo-32bit-4.2.4-27.1 libsmbconf0-32bit-4.2.4-27.1 libsmbconf0-debuginfo-32bit-4.2.4-27.1 libsmbldap0-32bit-4.2.4-27.1 libsmbldap0-debuginfo-32bit-4.2.4-27.1 libtevent-util0-32bit-4.2.4-27.1 libtevent-util0-debuginfo-32bit-4.2.4-27.1 libwbclient0-32bit-4.2.4-27.1 libwbclient0-debuginfo-32bit-4.2.4-27.1 samba-32bit-4.2.4-27.1 samba-client-32bit-4.2.4-27.1 samba-client-debuginfo-32bit-4.2.4-27.1 samba-debuginfo-32bit-4.2.4-27.1 samba-libs-32bit-4.2.4-27.1 samba-libs-debuginfo-32bit-4.2.4-27.1 samba-winbind-32bit-4.2.4-27.1 samba-winbind-debuginfo-32bit-4.2.4-27.1 - openSUSE Leap 42.1 (noarch): samba-doc-4.2.4-27.1 References: https://www.suse.com/security/cve/CVE-2017-2619.html https://bugzilla.suse.com/1019416 https://bugzilla.suse.com/1024416 https://bugzilla.suse.com/1027147 https://bugzilla.suse.com/993692 https://bugzilla.suse.com/993707 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2017:0933-1: important: Security update for ruby2.2, ruby2.3
by opensuse-security＠opensuse.org 05 Apr '17

05 Apr '17

openSUSE Security Update: Security update for ruby2.2, ruby2.3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0933-1 Rating: important References: #1018808 #959495 Cross-References: CVE-2015-7551 CVE-2016-2339 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for ruby2.2, ruby2.3 fixes the following issues: Security issues fixed: - CVE-2016-2339: heap overflow vulnerability in the Fiddle::Function.new"initialize" (boo#1018808) - CVE-2015-7551: Unsafe tainted string usage in Fiddle and DL (boo#959495) Detailed ChangeLog: - http://svn.ruby-lang.org/repos/ruby/tags/v2_2_6/ChangeLog - http://svn.ruby-lang.org/repos/ruby/tags/v2_3_3/ChangeLog Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-435=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-435=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libruby2_2-2_2-2.2.6-6.3.1 libruby2_2-2_2-debuginfo-2.2.6-6.3.1 libruby2_3-2_3-2.3.3-2.3.1 libruby2_3-2_3-debuginfo-2.3.3-2.3.1 ruby2.2-2.2.6-6.3.1 ruby2.2-debuginfo-2.2.6-6.3.1 ruby2.2-debugsource-2.2.6-6.3.1 ruby2.2-devel-2.2.6-6.3.1 ruby2.2-devel-extra-2.2.6-6.3.1 ruby2.2-doc-2.2.6-6.3.1 ruby2.2-stdlib-2.2.6-6.3.1 ruby2.2-stdlib-debuginfo-2.2.6-6.3.1 ruby2.2-tk-2.2.6-6.3.1 ruby2.2-tk-debuginfo-2.2.6-6.3.1 ruby2.3-2.3.3-2.3.1 ruby2.3-debuginfo-2.3.3-2.3.1 ruby2.3-debugsource-2.3.3-2.3.1 ruby2.3-devel-2.3.3-2.3.1 ruby2.3-devel-extra-2.3.3-2.3.1 ruby2.3-doc-2.3.3-2.3.1 ruby2.3-stdlib-2.3.3-2.3.1 ruby2.3-stdlib-debuginfo-2.3.3-2.3.1 ruby2.3-tk-2.3.3-2.3.1 ruby2.3-tk-debuginfo-2.3.3-2.3.1 - openSUSE Leap 42.2 (noarch): ruby2.2-doc-ri-2.2.6-6.3.1 ruby2.3-doc-ri-2.3.3-2.3.1 - openSUSE Leap 42.1 (i586 x86_64): libruby2_2-2_2-2.2.6-6.1 libruby2_2-2_2-debuginfo-2.2.6-6.1 ruby2.2-2.2.6-6.1 ruby2.2-debuginfo-2.2.6-6.1 ruby2.2-debugsource-2.2.6-6.1 ruby2.2-devel-2.2.6-6.1 ruby2.2-devel-extra-2.2.6-6.1 ruby2.2-doc-2.2.6-6.1 ruby2.2-stdlib-2.2.6-6.1 ruby2.2-stdlib-debuginfo-2.2.6-6.1 ruby2.2-tk-2.2.6-6.1 ruby2.2-tk-debuginfo-2.2.6-6.1 - openSUSE Leap 42.1 (noarch): ruby2.2-doc-ri-2.2.6-6.1 References: https://www.suse.com/security/cve/CVE-2015-7551.html https://www.suse.com/security/cve/CVE-2016-2339.html https://bugzilla.suse.com/1018808 https://bugzilla.suse.com/959495 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2017:0914-1: important: Security update for ruby19
by opensuse-security＠opensuse.org 03 Apr '17

03 Apr '17

SUSE Security Update: Security update for ruby19 ______________________________________________________________________________ Announcement ID: SUSE-SU-2017:0914-1 Rating: important References: #1018808 #986630 Cross-References: CVE-2016-2339 Affected Products: SUSE Studio Onsite Runner 1.3 SUSE Studio Onsite 1.3 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for ruby19 fixes the following issues: Security issue fixed: - CVE-2016-2339: heap overflow vulnerability in the Fiddle::Function.new"initialize" (bsc#1018808) Bugfixes: - fix small mistake in the backport for (bsc#986630) - HTTP Header injection in 'net/http' (bsc#986630) - make the testsuite work with our new openssl requirements Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Studio Onsite Runner 1.3: zypper in -t patch slestso13-ruby19-13046=1 - SUSE Studio Onsite 1.3: zypper in -t patch slestso13-ruby19-13046=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Studio Onsite Runner 1.3 (s390x): ruby19-1.9.3.p392-0.26.1 - SUSE Studio Onsite 1.3 (x86_64): ruby19-1.9.3.p392-0.26.1 ruby19-devel-1.9.3.p392-0.26.1 ruby19-devel-extra-1.9.3.p392-0.26.1 References: https://www.suse.com/security/cve/CVE-2016-2339.html https://bugzilla.suse.com/1018808 https://bugzilla.suse.com/986630 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2017:0913-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 03 Apr '17

03 Apr '17

SUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: SUSE-SU-2017:0913-1 Rating: important References: #1027565 Cross-References: CVE-2017-2636 Affected Products: SUSE OpenStack Cloud 5 SUSE Manager Proxy 2.1 SUSE Manager 2.1 SUSE Linux Enterprise Server 11-SP3-LTSS SUSE Linux Enterprise Server 11-EXTRA SUSE Linux Enterprise Point of Sale 11-SP3 SUSE Linux Enterprise Debuginfo 11-SP3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The SUSE Linux Enterprise 11 SP3 kernel was updated to fix the following security bug: CVE-2017-2636: A race condition in the n_hdlc tty Linux kernel driver (drivers/tty/n_hdlc.c) could have been exploited to gain a local privilege escalation (bnc#1027565) Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud 5: zypper in -t patch sleclo50sp3-kernel-13048=1 - SUSE Manager Proxy 2.1: zypper in -t patch slemap21-kernel-13048=1 - SUSE Manager 2.1: zypper in -t patch sleman21-kernel-13048=1 - SUSE Linux Enterprise Server 11-SP3-LTSS: zypper in -t patch slessp3-kernel-13048=1 - SUSE Linux Enterprise Server 11-EXTRA: zypper in -t patch slexsp3-kernel-13048=1 - SUSE Linux Enterprise Point of Sale 11-SP3: zypper in -t patch sleposp3-kernel-13048=1 - SUSE Linux Enterprise Debuginfo 11-SP3: zypper in -t patch dbgsp3-kernel-13048=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE OpenStack Cloud 5 (x86_64): kernel-bigsmp-3.0.101-0.47.99.1 kernel-bigsmp-base-3.0.101-0.47.99.1 kernel-bigsmp-devel-3.0.101-0.47.99.1 kernel-default-3.0.101-0.47.99.1 kernel-default-base-3.0.101-0.47.99.1 kernel-default-devel-3.0.101-0.47.99.1 kernel-ec2-3.0.101-0.47.99.1 kernel-ec2-base-3.0.101-0.47.99.1 kernel-ec2-devel-3.0.101-0.47.99.1 kernel-source-3.0.101-0.47.99.1 kernel-syms-3.0.101-0.47.99.1 kernel-trace-3.0.101-0.47.99.1 kernel-trace-base-3.0.101-0.47.99.1 kernel-trace-devel-3.0.101-0.47.99.1 kernel-xen-3.0.101-0.47.99.1 kernel-xen-base-3.0.101-0.47.99.1 kernel-xen-devel-3.0.101-0.47.99.1 - SUSE Manager Proxy 2.1 (x86_64): kernel-bigsmp-3.0.101-0.47.99.1 kernel-bigsmp-base-3.0.101-0.47.99.1 kernel-bigsmp-devel-3.0.101-0.47.99.1 kernel-default-3.0.101-0.47.99.1 kernel-default-base-3.0.101-0.47.99.1 kernel-default-devel-3.0.101-0.47.99.1 kernel-ec2-3.0.101-0.47.99.1 kernel-ec2-base-3.0.101-0.47.99.1 kernel-ec2-devel-3.0.101-0.47.99.1 kernel-source-3.0.101-0.47.99.1 kernel-syms-3.0.101-0.47.99.1 kernel-trace-3.0.101-0.47.99.1 kernel-trace-base-3.0.101-0.47.99.1 kernel-trace-devel-3.0.101-0.47.99.1 kernel-xen-3.0.101-0.47.99.1 kernel-xen-base-3.0.101-0.47.99.1 kernel-xen-devel-3.0.101-0.47.99.1 - SUSE Manager 2.1 (s390x x86_64): kernel-default-3.0.101-0.47.99.1 kernel-default-base-3.0.101-0.47.99.1 kernel-default-devel-3.0.101-0.47.99.1 kernel-source-3.0.101-0.47.99.1 kernel-syms-3.0.101-0.47.99.1 kernel-trace-3.0.101-0.47.99.1 kernel-trace-base-3.0.101-0.47.99.1 kernel-trace-devel-3.0.101-0.47.99.1 - SUSE Manager 2.1 (x86_64): kernel-bigsmp-3.0.101-0.47.99.1 kernel-bigsmp-base-3.0.101-0.47.99.1 kernel-bigsmp-devel-3.0.101-0.47.99.1 kernel-ec2-3.0.101-0.47.99.1 kernel-ec2-base-3.0.101-0.47.99.1 kernel-ec2-devel-3.0.101-0.47.99.1 kernel-xen-3.0.101-0.47.99.1 kernel-xen-base-3.0.101-0.47.99.1 kernel-xen-devel-3.0.101-0.47.99.1 - SUSE Manager 2.1 (s390x): kernel-default-man-3.0.101-0.47.99.1 - SUSE Linux Enterprise Server 11-SP3-LTSS (i586 s390x x86_64): kernel-default-3.0.101-0.47.99.1 kernel-default-base-3.0.101-0.47.99.1 kernel-default-devel-3.0.101-0.47.99.1 kernel-source-3.0.101-0.47.99.1 kernel-syms-3.0.101-0.47.99.1 kernel-trace-3.0.101-0.47.99.1 kernel-trace-base-3.0.101-0.47.99.1 kernel-trace-devel-3.0.101-0.47.99.1 - SUSE Linux Enterprise Server 11-SP3-LTSS (i586 x86_64): kernel-ec2-3.0.101-0.47.99.1 kernel-ec2-base-3.0.101-0.47.99.1 kernel-ec2-devel-3.0.101-0.47.99.1 kernel-xen-3.0.101-0.47.99.1 kernel-xen-base-3.0.101-0.47.99.1 kernel-xen-devel-3.0.101-0.47.99.1 - SUSE Linux Enterprise Server 11-SP3-LTSS (x86_64): kernel-bigsmp-3.0.101-0.47.99.1 kernel-bigsmp-base-3.0.101-0.47.99.1 kernel-bigsmp-devel-3.0.101-0.47.99.1 - SUSE Linux Enterprise Server 11-SP3-LTSS (s390x): kernel-default-man-3.0.101-0.47.99.1 - SUSE Linux Enterprise Server 11-SP3-LTSS (i586): kernel-pae-3.0.101-0.47.99.1 kernel-pae-base-3.0.101-0.47.99.1 kernel-pae-devel-3.0.101-0.47.99.1 - SUSE Linux Enterprise Server 11-EXTRA (i586 ia64 ppc64 s390x x86_64): kernel-default-extra-3.0.101-0.47.99.1 - SUSE Linux Enterprise Server 11-EXTRA (i586 x86_64): kernel-xen-extra-3.0.101-0.47.99.1 - SUSE Linux Enterprise Server 11-EXTRA (x86_64): kernel-bigsmp-extra-3.0.101-0.47.99.1 kernel-trace-extra-3.0.101-0.47.99.1 - SUSE Linux Enterprise Server 11-EXTRA (ppc64): kernel-ppc64-extra-3.0.101-0.47.99.1 - SUSE Linux Enterprise Server 11-EXTRA (i586): kernel-pae-extra-3.0.101-0.47.99.1 - SUSE Linux Enterprise Point of Sale 11-SP3 (i586): kernel-default-3.0.101-0.47.99.1 kernel-default-base-3.0.101-0.47.99.1 kernel-default-devel-3.0.101-0.47.99.1 kernel-ec2-3.0.101-0.47.99.1 kernel-ec2-base-3.0.101-0.47.99.1 kernel-ec2-devel-3.0.101-0.47.99.1 kernel-pae-3.0.101-0.47.99.1 kernel-pae-base-3.0.101-0.47.99.1 kernel-pae-devel-3.0.101-0.47.99.1 kernel-source-3.0.101-0.47.99.1 kernel-syms-3.0.101-0.47.99.1 kernel-trace-3.0.101-0.47.99.1 kernel-trace-base-3.0.101-0.47.99.1 kernel-trace-devel-3.0.101-0.47.99.1 kernel-xen-3.0.101-0.47.99.1 kernel-xen-base-3.0.101-0.47.99.1 kernel-xen-devel-3.0.101-0.47.99.1 - SUSE Linux Enterprise Debuginfo 11-SP3 (i586 s390x x86_64): kernel-default-debuginfo-3.0.101-0.47.99.1 kernel-default-debugsource-3.0.101-0.47.99.1 kernel-trace-debuginfo-3.0.101-0.47.99.1 kernel-trace-debugsource-3.0.101-0.47.99.1 - SUSE Linux Enterprise Debuginfo 11-SP3 (i586 x86_64): kernel-ec2-debuginfo-3.0.101-0.47.99.1 kernel-ec2-debugsource-3.0.101-0.47.99.1 kernel-xen-debuginfo-3.0.101-0.47.99.1 kernel-xen-debugsource-3.0.101-0.47.99.1 - SUSE Linux Enterprise Debuginfo 11-SP3 (x86_64): kernel-bigsmp-debuginfo-3.0.101-0.47.99.1 kernel-bigsmp-debugsource-3.0.101-0.47.99.1 - SUSE Linux Enterprise Debuginfo 11-SP3 (i586): kernel-pae-debuginfo-3.0.101-0.47.99.1 kernel-pae-debugsource-3.0.101-0.47.99.1 References: https://www.suse.com/security/cve/CVE-2017-2636.html https://bugzilla.suse.com/1027565 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2017:0912-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 03 Apr '17

03 Apr '17

SUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: SUSE-SU-2017:0912-1 Rating: important References: #1027565 Cross-References: CVE-2017-2636 Affected Products: SUSE Linux Enterprise Software Development Kit 11-SP4 SUSE Linux Enterprise Server 11-SP4 SUSE Linux Enterprise Server 11-EXTRA SUSE Linux Enterprise Debuginfo 11-SP4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The SUSE Linux Enterprise 11 SP4 kernel was updated to fix the following security bug: CVE-2017-2636: A race condition in the n_hdlc tty Linux kernel driver (drivers/tty/n_hdlc.c) could have been exploited to gain a local privilege escalation (bnc#1027565) Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11-SP4: zypper in -t patch sdksp4-kernel-13047=1 - SUSE Linux Enterprise Server 11-SP4: zypper in -t patch slessp4-kernel-13047=1 - SUSE Linux Enterprise Server 11-EXTRA: zypper in -t patch slexsp3-kernel-13047=1 - SUSE Linux Enterprise Debuginfo 11-SP4: zypper in -t patch dbgsp4-kernel-13047=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11-SP4 (noarch): kernel-docs-3.0.101-97.3 - SUSE Linux Enterprise Server 11-SP4 (i586 ia64 ppc64 s390x x86_64): kernel-default-3.0.101-97.1 kernel-default-base-3.0.101-97.1 kernel-default-devel-3.0.101-97.1 kernel-source-3.0.101-97.1 kernel-syms-3.0.101-97.1 kernel-trace-3.0.101-97.1 kernel-trace-base-3.0.101-97.1 kernel-trace-devel-3.0.101-97.1 - SUSE Linux Enterprise Server 11-SP4 (i586 x86_64): kernel-ec2-3.0.101-97.1 kernel-ec2-base-3.0.101-97.1 kernel-ec2-devel-3.0.101-97.1 kernel-xen-3.0.101-97.1 kernel-xen-base-3.0.101-97.1 kernel-xen-devel-3.0.101-97.1 - SUSE Linux Enterprise Server 11-SP4 (s390x): kernel-default-man-3.0.101-97.1 - SUSE Linux Enterprise Server 11-SP4 (ppc64): kernel-bigmem-3.0.101-97.1 kernel-bigmem-base-3.0.101-97.1 kernel-bigmem-devel-3.0.101-97.1 kernel-ppc64-3.0.101-97.1 kernel-ppc64-base-3.0.101-97.1 kernel-ppc64-devel-3.0.101-97.1 - SUSE Linux Enterprise Server 11-SP4 (i586): kernel-pae-3.0.101-97.1 kernel-pae-base-3.0.101-97.1 kernel-pae-devel-3.0.101-97.1 - SUSE Linux Enterprise Server 11-EXTRA (i586 ia64 ppc64 s390x x86_64): kernel-default-extra-3.0.101-97.1 - SUSE Linux Enterprise Server 11-EXTRA (i586 x86_64): kernel-xen-extra-3.0.101-97.1 - SUSE Linux Enterprise Server 11-EXTRA (x86_64): kernel-trace-extra-3.0.101-97.1 - SUSE Linux Enterprise Server 11-EXTRA (ppc64): kernel-ppc64-extra-3.0.101-97.1 - SUSE Linux Enterprise Server 11-EXTRA (i586): kernel-pae-extra-3.0.101-97.1 - SUSE Linux Enterprise Debuginfo 11-SP4 (i586 ia64 ppc64 s390x x86_64): kernel-default-debuginfo-3.0.101-97.1 kernel-default-debugsource-3.0.101-97.1 kernel-trace-debuginfo-3.0.101-97.1 kernel-trace-debugsource-3.0.101-97.1 - SUSE Linux Enterprise Debuginfo 11-SP4 (i586 ia64 s390x x86_64): kernel-default-devel-debuginfo-3.0.101-97.1 kernel-trace-devel-debuginfo-3.0.101-97.1 - SUSE Linux Enterprise Debuginfo 11-SP4 (i586 x86_64): kernel-ec2-debuginfo-3.0.101-97.1 kernel-ec2-debugsource-3.0.101-97.1 kernel-xen-debuginfo-3.0.101-97.1 kernel-xen-debugsource-3.0.101-97.1 kernel-xen-devel-debuginfo-3.0.101-97.1 - SUSE Linux Enterprise Debuginfo 11-SP4 (ppc64): kernel-bigmem-debuginfo-3.0.101-97.1 kernel-bigmem-debugsource-3.0.101-97.1 kernel-ppc64-debuginfo-3.0.101-97.1 kernel-ppc64-debugsource-3.0.101-97.1 - SUSE Linux Enterprise Debuginfo 11-SP4 (i586): kernel-pae-debuginfo-3.0.101-97.1 kernel-pae-debugsource-3.0.101-97.1 kernel-pae-devel-debuginfo-3.0.101-97.1 References: https://www.suse.com/security/cve/CVE-2017-2636.html https://bugzilla.suse.com/1027565 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2017:0909-1: important: Security update for Chromium
by opensuse-security＠opensuse.org 01 Apr '17

01 Apr '17

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0909-1 Rating: important References: #1031677 Cross-References: CVE-2017-5052 CVE-2017-5053 CVE-2017-5054 CVE-2017-5055 CVE-2017-5056 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update to Chromium 57.0.2987.133 fixes the following issues (boo#1031677): - CVE-2017-5055: Use after free in printing - CVE-2017-5054: Heap buffer overflow in V8 - CVE-2017-5052: Bad cast in Blink - CVE-2017-5056: Use after free in Blink - CVE-2017-5053: Out of bounds memory access in V8 The following packaging changes are included: - No longer claim to provide browser(npapi) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-420=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-420=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): chromedriver-57.0.2987.133-104.6.1 chromedriver-debuginfo-57.0.2987.133-104.6.1 chromium-57.0.2987.133-104.6.1 chromium-debuginfo-57.0.2987.133-104.6.1 chromium-debugsource-57.0.2987.133-104.6.1 - openSUSE Leap 42.1 (x86_64): chromedriver-57.0.2987.133-108.1 chromedriver-debuginfo-57.0.2987.133-108.1 chromium-57.0.2987.133-108.1 chromium-debuginfo-57.0.2987.133-108.1 chromium-debugsource-57.0.2987.133-108.1 References: https://www.suse.com/security/cve/CVE-2017-5052.html https://www.suse.com/security/cve/CVE-2017-5053.html https://www.suse.com/security/cve/CVE-2017-5054.html https://www.suse.com/security/cve/CVE-2017-5055.html https://www.suse.com/security/cve/CVE-2017-5056.html https://bugzilla.suse.com/1031677 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2017:0908-1: important: Security update for Chromium
by opensuse-security＠opensuse.org 01 Apr '17

01 Apr '17

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0908-1 Rating: important References: #1031677 Cross-References: CVE-2017-5052 CVE-2017-5053 CVE-2017-5054 CVE-2017-5055 CVE-2017-5056 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update to Chromium 57.0.2987.133 fixes the following issues (boo#1031677): - CVE-2017-5055: Use after free in printing - CVE-2017-5054: Heap buffer overflow in V8 - CVE-2017-5052: Bad cast in Blink - CVE-2017-5056: Use after free in Blink - CVE-2017-5053: Out of bounds memory access in V8 The following packaging changes are included: - No longer claim to provide browser(npapi) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-420=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): chromedriver-57.0.2987.133-11.1 chromedriver-debuginfo-57.0.2987.133-11.1 chromium-57.0.2987.133-11.1 chromium-debuginfo-57.0.2987.133-11.1 chromium-debugsource-57.0.2987.133-11.1 References: https://www.suse.com/security/cve/CVE-2017-5052.html https://www.suse.com/security/cve/CVE-2017-5053.html https://www.suse.com/security/cve/CVE-2017-5054.html https://www.suse.com/security/cve/CVE-2017-5055.html https://www.suse.com/security/cve/CVE-2017-5056.html https://bugzilla.suse.com/1031677 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2017:0907-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 01 Apr '17

01 Apr '17

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0907-1 Rating: important References: #1007959 #1007962 #1008842 #1011913 #1012910 #1013994 #1015609 #1017461 #1017641 #1018263 #1018419 #1019163 #1019618 #1020048 #1022785 #1023866 #1024015 #1025235 #1025683 #1026405 #1026462 #1026505 #1026509 #1026692 #1026722 #1027054 #1027066 #1027179 #1027189 #1027190 #1027195 #1027273 #1027565 #1027575 #1028017 #1028041 #1028158 #1028217 #1028325 #1028372 #1028415 #1028819 #1028895 #1029220 #1029986 #1030573 #1030575 #951844 #968697 #969755 #982783 #998106 Cross-References: CVE-2016-10200 CVE-2016-2117 CVE-2016-9191 CVE-2017-2596 CVE-2017-2636 CVE-2017-6214 CVE-2017-6345 CVE-2017-6346 CVE-2017-6347 CVE-2017-6353 CVE-2017-7184 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves 11 vulnerabilities and has 41 fixes is now available. Description: The openSUSE Leap 42.2 kernel was updated to 4.4.56 fix various security issues and bugs. The following security bugs were fixed: - CVE-2017-7184: The xfrm_replay_verify_len function in net/xfrm/xfrm_user.c in the Linux kernel did not validate certain size data after an XFRM_MSG_NEWAE update, which allowed local users to obtain root privileges or cause a denial of service (heap-based out-of-bounds access) by leveraging the CAP_NET_ADMIN capability, as demonstrated during a Pwn2Own competition at CanSecWest 2017 for the Ubuntu 16.10 linux-image-* package 4.8.0.41.52 (bnc#1030573). - CVE-2016-10200: Race condition in the L2TPv3 IP Encapsulation feature in the Linux kernel allowed local users to gain privileges or cause a denial of service (use-after-free) by making multiple bind system calls without properly ascertaining whether a socket has the SOCK_ZAPPED status, related to net/l2tp/l2tp_ip.c and net/l2tp/l2tp_ip6.c (bnc#1028415). - CVE-2017-2636: Race condition in drivers/tty/n_hdlc.c in the Linux kernel allowed local users to gain privileges or cause a denial of service (double free) by setting the HDLC line discipline (bnc#1027565). - CVE-2017-6345: The LLC subsystem in the Linux kernel did not ensure that a certain destructor exists in required circumstances, which allowed local users to cause a denial of service (BUG_ON) or possibly have unspecified other impact via crafted system calls (bnc#1027190). - CVE-2017-6346: Race condition in net/packet/af_packet.c in the Linux kernel allowed local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via a multithreaded application that made PACKET_FANOUT setsockopt system calls (bnc#1027189). - CVE-2017-6353: net/sctp/socket.c in the Linux kernel did not properly restrict association peel-off operations during certain wait states, which allowed local users to cause a denial of service (invalid unlock and double free) via a multithreaded application. NOTE: this vulnerability exists because of an incorrect fix for CVE-2017-5986 (bnc#1025235). - CVE-2017-6214: The tcp_splice_read function in net/ipv4/tcp.c in the Linux kernel allowed remote attackers to cause a denial of service (infinite loop and soft lockup) via vectors involving a TCP packet with the URG flag (bnc#1026722). - CVE-2016-2117: The atl2_probe function in drivers/net/ethernet/atheros/atlx/atl2.c in the Linux kernel incorrectly enables scatter/gather I/O, which allowed remote attackers to obtain sensitive information from kernel memory by reading packet data (bnc#968697). - CVE-2017-6347: The ip_cmsg_recv_checksum function in net/ipv4/ip_sockglue.c in the Linux kernel has incorrect expectations about skb data layout, which allowed local users to cause a denial of service (buffer over-read) or possibly have unspecified other impact via crafted system calls, as demonstrated by use of the MSG_MORE flag in conjunction with loopback UDP transmission (bnc#1027179). - CVE-2016-9191: The cgroup offline implementation in the Linux kernel mishandled certain drain operations, which allowed local users to cause a denial of service (system hang) by leveraging access to a container environment for executing a crafted application, as demonstrated by trinity (bnc#1008842). - CVE-2017-2596: The nested_vmx_check_vmptr function in arch/x86/kvm/vmx.c in the Linux kernel improperly emulates the VMXON instruction, which allowed KVM L1 guest OS users to cause a denial of service (host OS memory consumption) by leveraging the mishandling of page references (bnc#1022785). The following non-security bugs were fixed: - ACPI: Do not create a platform_device for IOAPIC/IOxAPIC (bsc#1028819). - ACPI, ioapic: Clear on-stack resource before using it (bsc#1028819). - ACPI: Remove platform devices from a bus on removal (bsc#1028819). - add mainline tag to one hyperv patch - bnx2x: allow adding VLANs while interface is down (bsc#1027273). - btrfs: backref: Fix soft lockup in __merge_refs function (bsc#1017641). - btrfs: incremental send, do not delay rename when parent inode is new (bsc#1028325). - btrfs: incremental send, do not issue invalid rmdir operations (bsc#1028325). - btrfs: qgroup: Move half of the qgroup accounting time out of commit trans (bsc#1017461). - btrfs: send, fix failure to rename top level inode due to name collision (bsc#1028325). - btrfs: serialize subvolume mounts with potentially mismatching rw flags (bsc#951844 bsc#1024015) - crypto: algif_hash - avoid zero-sized array (bnc#1007962). - cxgb4vf: do not offload Rx checksums for IPv6 fragments (bsc#1026692). - drivers: hv: vmbus: Prevent sending data on a rescinded channel (fate#320485, bug#1028217). - drm/i915: Add intel_uncore_suspend / resume functions (bsc#1011913). - drm/i915: Listen for PMIC bus access notifications (bsc#1011913). - drm/mgag200: Added support for the new device G200eH3 (bsc#1007959, fate#322780) - ext4: fix fencepost in s_first_meta_bg validation (bsc#1029986). - Fix kABI breakage of dccp in 4.4.56 (stable-4.4.56). - futex: Add missing error handling to FUTEX_REQUEUE_PI (bsc#969755). - futex: Fix potential use-after-free in FUTEX_REQUEUE_PI (bsc#969755). - i2c: designware-baytrail: Acquire P-Unit access on bus acquire (bsc#1011913). - i2c: designware-baytrail: Call pmic_bus_access_notifier_chain (bsc#1011913). - i2c: designware-baytrail: Fix race when resetting the semaphore (bsc#1011913). - i2c: designware-baytrail: Only check iosf_mbi_available() for shared hosts (bsc#1011913). - i2c: designware: Disable pm for PMIC i2c-bus even if there is no _SEM method (bsc#1011913). - i2c-designware: increase timeout (bsc#1011913). - i2c: designware: Never suspend i2c-busses used for accessing the system PMIC (bsc#1011913). - i2c: designware: Rename accessor_flags to flags (bsc#1011913). - kABI: protect struct iscsi_conn (kabi). - kABI: protect struct se_node_acl (kabi). - kABI: restore can_rx_register parameters (kabi). - kgr/module: make a taint flag module-specific (fate#313296). - kgr: remove all arch-specific kgraft header files (fate#313296). - l2tp: fix address test in __l2tp_ip6_bind_lookup() (bsc#1028415). - l2tp: fix lookup for sockets not bound to a device in l2tp_ip (bsc#1028415). - l2tp: fix racy socket lookup in l2tp_ip and l2tp_ip6 bind() (bsc#1028415). - l2tp: hold socket before dropping lock in l2tp_ip{, 6}_recv() (bsc#1028415). - l2tp: lock socket before checking flags in connect() (bsc#1028415). - md/raid1: add rcu protection to rdev in fix_read_error (References: bsc#998106,bsc#1020048,bsc#982783). - md/raid1: fix a use-after-free bug (bsc#998106,bsc#1020048,bsc#982783). - md/raid1: handle flush request correctly (bsc#998106,bsc#1020048,bsc#982783). - md/raid1: Refactor raid1_make_request (bsc#998106,bsc#1020048,bsc#982783). - mm: fix set pageblock migratetype in deferred struct page init (bnc#1027195). - mm/page_alloc: Remove useless parameter of __free_pages_boot_core (bnc#1027195). - module: move add_taint_module() to a header file (fate#313296). - net/ena: change condition for host attribute configuration (bsc#1026509). - net/ena: change driver's default timeouts (bsc#1026509). - net: ena: change the return type of ena_set_push_mode() to be void (bsc#1026509). - net: ena: Fix error return code in ena_device_init() (bsc#1026509). - net/ena: fix ethtool RSS flow configuration (bsc#1026509). - net/ena: fix NULL dereference when removing the driver after device reset failed (bsc#1026509). - net/ena: fix potential access to freed memory during device reset (bsc#1026509). - net/ena: fix queues number calculation (bsc#1026509). - net/ena: fix RSS default hash configuration (bsc#1026509). - net/ena: reduce the severity of ena printouts (bsc#1026509). - net/ena: refactor ena_get_stats64 to be atomic context safe (bsc#1026509). - net/ena: remove ntuple filter support from device feature list (bsc#1026509). - net: ena: remove superfluous check in ena_remove() (bsc#1026509). - net: ena: Remove unnecessary pci_set_drvdata() (bsc#1026509). - net/ena: update driver version to 1.1.2 (bsc#1026509). - net/ena: use READ_ONCE to access completion descriptors (bsc#1026509). - net: ena: use setup_timer() and mod_timer() (bsc#1026509). - net/mlx4_core: Avoid command timeouts during VF driver device shutdown (bsc#1028017). - net/mlx4_core: Avoid delays during VF driver device shutdown (bsc#1028017). - net/mlx4_core: Fix racy CQ (Completion Queue) free (bsc#1028017). - net/mlx4_core: Fix when to save some qp context flags for dynamic VST to VGT transitions (bsc#1028017). - net/mlx4_core: Use cq quota in SRIOV when creating completion EQs (bsc#1028017). - net/mlx4_en: Fix bad WQE issue (bsc#1028017). - NFS: do not try to cross a mountpount when there isn't one there (bsc#1028041). - nvme: Do not suspend admin queue that wasn't created (bsc#1026505). - nvme: Suspend all queues before deletion (bsc#1026505). - PCI: hv: Fix wslot_to_devfn() to fix warnings on device removal (fate#320485, bug#1028217). - PCI: hv: Use device serial number as PCI domain (fate#320485, bug#1028217). - powerpc: Blacklist GCC 5.4 6.1 and 6.2 (boo#1028895). - RAID1: a new I/O barrier implementation to remove resync window (bsc#998106,bsc#1020048,bsc#982783). - RAID1: avoid unnecessary spin locks in I/O barrier code (bsc#998106,bsc#1020048,bsc#982783). - Revert "give up on gcc ilog2() constant optimizations" (kabi). - Revert "net: introduce device min_header_len" (kabi). - Revert "net/mlx4_en: Avoid unregister_netdev at shutdown flow" (bsc#1028017). - Revert "nfit, libnvdimm: fix interleave set cookie calculation" (kabi). - Revert "RDMA/core: Fix incorrect structure packing for booleans" (kabi). - Revert "target: Fix NULL dereference during LUN lookup + active I/O shutdown" (kabi). - rtlwifi: rtl_usb: Fix missing entry in USB driver's private data (bsc#1026462). - s390/kmsg: add missing kmsg descriptions (bnc#1025683, LTC#151573). - s390/mm: fix zone calculation in arch_add_memory() (bnc#1025683, LTC#152318). - sched/loadavg: Avoid loadavg spikes caused by delayed NO_HZ accounting (bsc#1018419). - scsi_dh_alua: Do not modify the interval value for retries (bsc#1012910). - scsi: do not print 'reservation conflict' for TEST UNIT READY (bsc#1027054). - softirq: Let ksoftirqd do its job (bsc#1019618). - supported.conf: Add tcp_westwood as supported module (fate#322432) - taint/module: Clean up global and module taint flags handling (fate#313296). - Update mainline reference in patches.drivers/drm-ast-Fix-memleaks-in-error-path-in-ast_fb_create.patch S ee (bsc#1028158) for the context in which this was discovered upstream. - x86/apic/uv: Silence a shift wrapping warning (bsc#1023866). - x86/mce: Do not print MCEs when mcelog is active (bsc#1013994). - x86, mm: fix gup_pte_range() vs DAX mappings (bsc#1026405). - x86/mm/gup: Simplify get_user_pages() PTE bit handling (bsc#1026405). - x86/platform/intel/iosf_mbi: Add a mutex for P-Unit access (bsc#1011913). - x86/platform/intel/iosf_mbi: Add a PMIC bus access notifier (bsc#1011913). - x86/platform: Remove warning message for duplicate NMI handlers (bsc#1029220). - x86/platform/UV: Add basic CPU NMI health check (bsc#1023866). - x86/platform/UV: Add Support for UV4 Hubless NMIs (bsc#1023866). - x86/platform/UV: Add Support for UV4 Hubless systems (bsc#1023866). - x86/platform/UV: Clean up the NMI code to match current coding style (bsc#1023866). - x86/platform/UV: Clean up the UV APIC code (bsc#1023866). - x86/platform/UV: Ensure uv_system_init is called when necessary (bsc#1023866). - x86/platform/UV: Fix 2 socket config problem (bsc#1023866). - x86/platform/UV: Fix panic with missing UVsystab support (bsc#1023866). - x86/platform/UV: Initialize PCH GPP_D_0 NMI Pin to be NMI source (bsc#1023866). - x86/platform/UV: Verify NMI action is valid, default is standard (bsc#1023866). - xen-blkfront: correct maximum segment accounting (bsc#1018263). - xen-blkfront: do not call talk_to_blkback when already connected to blkback. - xen/blkfront: Fix crash if backend does not follow the right states. - xen-blkfront: free resources if xlvbd_alloc_gendisk fails. - xen/netback: set default upper limit of tx/rx queues to 8 (bnc#1019163). - xen/netfront: set default upper limit of tx/rx queues to 8 (bnc#1019163). - xfs: do not take the IOLOCK exclusive for direct I/O page invalidation (bsc#1015609). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-418=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): kernel-devel-4.4.57-18.3.1 kernel-docs-4.4.57-18.3.2 kernel-docs-html-4.4.57-18.3.2 kernel-docs-pdf-4.4.57-18.3.2 kernel-macros-4.4.57-18.3.1 kernel-source-4.4.57-18.3.1 kernel-source-vanilla-4.4.57-18.3.1 - openSUSE Leap 42.2 (x86_64): kernel-debug-4.4.57-18.3.1 kernel-debug-base-4.4.57-18.3.1 kernel-debug-base-debuginfo-4.4.57-18.3.1 kernel-debug-debuginfo-4.4.57-18.3.1 kernel-debug-debugsource-4.4.57-18.3.1 kernel-debug-devel-4.4.57-18.3.1 kernel-debug-devel-debuginfo-4.4.57-18.3.1 kernel-default-4.4.57-18.3.1 kernel-default-base-4.4.57-18.3.1 kernel-default-base-debuginfo-4.4.57-18.3.1 kernel-default-debuginfo-4.4.57-18.3.1 kernel-default-debugsource-4.4.57-18.3.1 kernel-default-devel-4.4.57-18.3.1 kernel-obs-build-4.4.57-18.3.1 kernel-obs-build-debugsource-4.4.57-18.3.1 kernel-obs-qa-4.4.57-18.3.1 kernel-syms-4.4.57-18.3.1 kernel-vanilla-4.4.57-18.3.1 kernel-vanilla-base-4.4.57-18.3.1 kernel-vanilla-base-debuginfo-4.4.57-18.3.1 kernel-vanilla-debuginfo-4.4.57-18.3.1 kernel-vanilla-debugsource-4.4.57-18.3.1 kernel-vanilla-devel-4.4.57-18.3.1 References: https://www.suse.com/security/cve/CVE-2016-10200.html https://www.suse.com/security/cve/CVE-2016-2117.html https://www.suse.com/security/cve/CVE-2016-9191.html https://www.suse.com/security/cve/CVE-2017-2596.html https://www.suse.com/security/cve/CVE-2017-2636.html https://www.suse.com/security/cve/CVE-2017-6214.html https://www.suse.com/security/cve/CVE-2017-6345.html https://www.suse.com/security/cve/CVE-2017-6346.html https://www.suse.com/security/cve/CVE-2017-6347.html https://www.suse.com/security/cve/CVE-2017-6353.html https://www.suse.com/security/cve/CVE-2017-7184.html https://bugzilla.suse.com/1007959 https://bugzilla.suse.com/1007962 https://bugzilla.suse.com/1008842 https://bugzilla.suse.com/1011913 https://bugzilla.suse.com/1012910 https://bugzilla.suse.com/1013994 https://bugzilla.suse.com/1015609 https://bugzilla.suse.com/1017461 https://bugzilla.suse.com/1017641 https://bugzilla.suse.com/1018263 https://bugzilla.suse.com/1018419 https://bugzilla.suse.com/1019163 https://bugzilla.suse.com/1019618 https://bugzilla.suse.com/1020048 https://bugzilla.suse.com/1022785 https://bugzilla.suse.com/1023866 https://bugzilla.suse.com/1024015 https://bugzilla.suse.com/1025235 https://bugzilla.suse.com/1025683 https://bugzilla.suse.com/1026405 https://bugzilla.suse.com/1026462 https://bugzilla.suse.com/1026505 https://bugzilla.suse.com/1026509 https://bugzilla.suse.com/1026692 https://bugzilla.suse.com/1026722 https://bugzilla.suse.com/1027054 https://bugzilla.suse.com/1027066 https://bugzilla.suse.com/1027179 https://bugzilla.suse.com/1027189 https://bugzilla.suse.com/1027190 https://bugzilla.suse.com/1027195 https://bugzilla.suse.com/1027273 https://bugzilla.suse.com/1027565 https://bugzilla.suse.com/1027575 https://bugzilla.suse.com/1028017 https://bugzilla.suse.com/1028041 https://bugzilla.suse.com/1028158 https://bugzilla.suse.com/1028217 https://bugzilla.suse.com/1028325 https://bugzilla.suse.com/1028372 https://bugzilla.suse.com/1028415 https://bugzilla.suse.com/1028819 https://bugzilla.suse.com/1028895 https://bugzilla.suse.com/1029220 https://bugzilla.suse.com/1029986 https://bugzilla.suse.com/1030573 https://bugzilla.suse.com/1030575 https://bugzilla.suse.com/951844 https://bugzilla.suse.com/968697 https://bugzilla.suse.com/969755 https://bugzilla.suse.com/982783 https://bugzilla.suse.com/998106 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2017:0906-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 01 Apr '17

01 Apr '17

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0906-1 Rating: important References: #1019851 #1020602 #1022785 #1023377 #1025235 #1026722 #1026914 #1027066 #1027178 #1027179 #1027189 #1027190 #1027565 #1028415 #1029986 #1030118 #1030573 #968697 Cross-References: CVE-2016-10200 CVE-2016-10208 CVE-2016-2117 CVE-2017-2583 CVE-2017-2584 CVE-2017-2596 CVE-2017-2636 CVE-2017-5669 CVE-2017-6214 CVE-2017-6345 CVE-2017-6346 CVE-2017-6347 CVE-2017-6348 CVE-2017-6353 CVE-2017-7184 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves 15 vulnerabilities and has three fixes is now available. Description: ====================================================================== Still left to do: - Check CVE descriptions. They need to be written in the past tense. They are processed automatically, THERE CAN BE ERRORS IN THERE! - Remove version numbers from the CVE descriptions - Check the capitalization of the subsystems, then sort again - For each CVE: Check the corresponding bug if everything is okay - If you remove CVEs or bugs: Do not forget to change the meta information - Determine which of the bugs after the CVE lines is the right one ====================================================================== The openSUSE Leap 42.1 kernel was updated to 4.1.39 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-5669: The do_shmat function in ipc/shm.c in the Linux kernel did not restrict the address calculated by a certain rounding operation, which allowed local users to map page zero, and consequently bypass a protection mechanism that exists for the mmap system call, by making crafted shmget and shmat system calls in a privileged context (bnc#1026914). - CVE-2017-6348: The hashbin_delete function in net/irda/irqueue.c in the Linux kernel improperly manages lock dropping, which allowed local users to cause a denial of service (deadlock) via crafted operations on IrDA devices (bnc#1027178). - CVE-2017-7184: The xfrm_replay_verify_len function in net/xfrm/xfrm_user.c in the Linux kernel did not validate certain size data after an XFRM_MSG_NEWAE update, which allowed local users to obtain root privileges or cause a denial of service (heap-based out-of-bounds access) by leveraging the CAP_NET_ADMIN capability, as demonstrated during a Pwn2Own competition at CanSecWest 2017 for the Ubuntu 16.10 linux-image-* package 4.8.0.41.52 (bnc#1030573). - CVE-2016-10200: Race condition in the L2TPv3 IP Encapsulation feature in the Linux kernel allowed local users to gain privileges or cause a denial of service (use-after-free) by making multiple bind system calls without properly ascertaining whether a socket has the SOCK_ZAPPED status, related to net/l2tp/l2tp_ip.c and net/l2tp/l2tp_ip6.c (bnc#1028415). - CVE-2017-2636: Race condition in drivers/tty/n_hdlc.c in the Linux kernel allowed local users to gain privileges or cause a denial of service (double free) by setting the HDLC line discipline (bnc#1027565). - CVE-2017-6345: The LLC subsystem in the Linux kernel did not ensure that a certain destructor exists in required circumstances, which allowed local users to cause a denial of service (BUG_ON) or possibly have unspecified other impact via crafted system calls (bnc#1027190). - CVE-2017-6346: Race condition in net/packet/af_packet.c in the Linux kernel allowed local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via a multithreaded application that made PACKET_FANOUT setsockopt system calls (bnc#1027189). - CVE-2017-6347: The ip_cmsg_recv_checksum function in net/ipv4/ip_sockglue.c in the Linux kernel has incorrect expectations about skb data layout, which allowed local users to cause a denial of service (buffer over-read) or possibly have unspecified other impact via crafted system calls, as demonstrated by use of the MSG_MORE flag in conjunction with loopback UDP transmission (bnc#1027179). - CVE-2017-6353: net/sctp/socket.c in the Linux kernel did not properly restrict association peel-off operations during certain wait states, which allowed local users to cause a denial of service (invalid unlock and double free) via a multithreaded application. NOTE: this vulnerability exists because of an incorrect fix for CVE-2017-5986 (bnc#1025235). - CVE-2017-6214: The tcp_splice_read function in net/ipv4/tcp.c in the Linux kernel allowed remote attackers to cause a denial of service (infinite loop and soft lockup) via vectors involving a TCP packet with the URG flag (bnc#1026722). - CVE-2016-2117: The atl2_probe function in drivers/net/ethernet/atheros/atlx/atl2.c in the Linux kernel incorrectly enables scatter/gather I/O, which allowed remote attackers to obtain sensitive information from kernel memory by reading packet data (bnc#968697). - CVE-2016-10208: The ext4_fill_super function in fs/ext4/super.c in the Linux kernel did not properly validate meta block groups, which allowed physically proximate attackers to cause a denial of service (out-of-bounds read and system crash) via a crafted ext4 image (bnc#1023377). - CVE-2017-2596: The nested_vmx_check_vmptr function in arch/x86/kvm/vmx.c in the Linux kernel improperly emulates the VMXON instruction, which allowed KVM L1 guest OS users to cause a denial of service (host OS memory consumption) by leveraging the mishandling of page references (bnc#1022785). - CVE-2017-2583: The load_segment_descriptor implementation in arch/x86/kvm/emulate.c in the Linux kernel improperly emulates a "MOV SS, NULL selector" instruction, which allowed guest OS users to cause a denial of service (guest OS crash) or gain guest OS privileges via a crafted application (bnc#1020602). - CVE-2017-2584: arch/x86/kvm/emulate.c in the Linux kernel allowed local users to obtain sensitive information from kernel memory or cause a denial of service (use-after-free) via a crafted application that leverages instruction emulation for fxrstor, fxsave, sgdt, and sidt (bnc#1019851). The following non-security bugs were fixed: - Fix kABI breakage of musb struct in 4.1.39 (stable 4.1.39). - Revert "ptrace: Capture the ptracer's creds not PT_PTRACE_CAP" (stable 4.1.39). - ext4: fix fencepost in s_first_meta_bg validation (bsc#1029986). - ext4: validate s_first_meta_bg at mount time (bsc#1023377). - kabi/severities: Ignore x86/kvm kABI changes for 4.1.39 - l2tp: fix address test in __l2tp_ip6_bind_lookup() (bsc#1028415). - l2tp: fix lookup for sockets not bound to a device in l2tp_ip (bsc#1028415). - l2tp: fix racy socket lookup in l2tp_ip and l2tp_ip6 bind() (bsc#1028415). - l2tp: hold socket before dropping lock in l2tp_ip{, 6}_recv() (bsc#1028415). - l2tp: lock socket before checking flags in connect() (bsc#1028415). - mm/huge_memory.c: respect FOLL_FORCE/FOLL_COW for thp (bsc#1030118). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-419=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): kernel-default-4.1.39-53.1 kernel-default-base-4.1.39-53.1 kernel-default-base-debuginfo-4.1.39-53.1 kernel-default-debuginfo-4.1.39-53.1 kernel-default-debugsource-4.1.39-53.1 kernel-default-devel-4.1.39-53.1 kernel-obs-build-4.1.39-53.1 kernel-obs-build-debugsource-4.1.39-53.1 kernel-obs-qa-4.1.39-53.1 kernel-syms-4.1.39-53.1 - openSUSE Leap 42.1 (i686 x86_64): kernel-debug-4.1.39-53.1 kernel-debug-base-4.1.39-53.1 kernel-debug-base-debuginfo-4.1.39-53.1 kernel-debug-debuginfo-4.1.39-53.1 kernel-debug-debugsource-4.1.39-53.1 kernel-debug-devel-4.1.39-53.1 kernel-debug-devel-debuginfo-4.1.39-53.1 kernel-ec2-4.1.39-53.1 kernel-ec2-base-4.1.39-53.1 kernel-ec2-base-debuginfo-4.1.39-53.1 kernel-ec2-debuginfo-4.1.39-53.1 kernel-ec2-debugsource-4.1.39-53.1 kernel-ec2-devel-4.1.39-53.1 kernel-pv-4.1.39-53.1 kernel-pv-base-4.1.39-53.1 kernel-pv-base-debuginfo-4.1.39-53.1 kernel-pv-debuginfo-4.1.39-53.1 kernel-pv-debugsource-4.1.39-53.1 kernel-pv-devel-4.1.39-53.1 kernel-vanilla-4.1.39-53.1 kernel-vanilla-debuginfo-4.1.39-53.1 kernel-vanilla-debugsource-4.1.39-53.1 kernel-vanilla-devel-4.1.39-53.1 kernel-xen-4.1.39-53.1 kernel-xen-base-4.1.39-53.1 kernel-xen-base-debuginfo-4.1.39-53.1 kernel-xen-debuginfo-4.1.39-53.1 kernel-xen-debugsource-4.1.39-53.1 kernel-xen-devel-4.1.39-53.1 - openSUSE Leap 42.1 (noarch): kernel-devel-4.1.39-53.1 kernel-docs-4.1.39-53.2 kernel-docs-html-4.1.39-53.2 kernel-docs-pdf-4.1.39-53.2 kernel-macros-4.1.39-53.1 kernel-source-4.1.39-53.1 kernel-source-vanilla-4.1.39-53.1 - openSUSE Leap 42.1 (i686): kernel-pae-4.1.39-53.1 kernel-pae-base-4.1.39-53.1 kernel-pae-base-debuginfo-4.1.39-53.1 kernel-pae-debuginfo-4.1.39-53.1 kernel-pae-debugsource-4.1.39-53.1 kernel-pae-devel-4.1.39-53.1 References: https://www.suse.com/security/cve/CVE-2016-10200.html https://www.suse.com/security/cve/CVE-2016-10208.html https://www.suse.com/security/cve/CVE-2016-2117.html https://www.suse.com/security/cve/CVE-2017-2583.html https://www.suse.com/security/cve/CVE-2017-2584.html https://www.suse.com/security/cve/CVE-2017-2596.html https://www.suse.com/security/cve/CVE-2017-2636.html https://www.suse.com/security/cve/CVE-2017-5669.html https://www.suse.com/security/cve/CVE-2017-6214.html https://www.suse.com/security/cve/CVE-2017-6345.html https://www.suse.com/security/cve/CVE-2017-6346.html https://www.suse.com/security/cve/CVE-2017-6347.html https://www.suse.com/security/cve/CVE-2017-6348.html https://www.suse.com/security/cve/CVE-2017-6353.html https://www.suse.com/security/cve/CVE-2017-7184.html https://bugzilla.suse.com/1019851 https://bugzilla.suse.com/1020602 https://bugzilla.suse.com/1022785 https://bugzilla.suse.com/1023377 https://bugzilla.suse.com/1025235 https://bugzilla.suse.com/1026722 https://bugzilla.suse.com/1026914 https://bugzilla.suse.com/1027066 https://bugzilla.suse.com/1027178 https://bugzilla.suse.com/1027179 https://bugzilla.suse.com/1027189 https://bugzilla.suse.com/1027190 https://bugzilla.suse.com/1027565 https://bugzilla.suse.com/1028415 https://bugzilla.suse.com/1029986 https://bugzilla.suse.com/1030118 https://bugzilla.suse.com/1030573 https://bugzilla.suse.com/968697 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0