May 2017 - openSUSE Security Announce - openSUSE Mailing Lists

[security-announce] SUSE-SU-2017:1404-1: important: Security update for ghostscript
by opensuse-security＠opensuse.org 24 May '17

24 May '17

SUSE Security Update: Security update for ghostscript ______________________________________________________________________________ Announcement ID: SUSE-SU-2017:1404-1 Rating: important References: #1018128 #1030263 #1032114 #1032120 #1036453 Cross-References: CVE-2016-10220 CVE-2016-9601 CVE-2017-5951 CVE-2017-7207 CVE-2017-8291 Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP2 SUSE Linux Enterprise Software Development Kit 12-SP1 SUSE Linux Enterprise Server for SAP 12 SUSE Linux Enterprise Server for Raspberry Pi 12-SP2 SUSE Linux Enterprise Server 12-SP2 SUSE Linux Enterprise Server 12-SP1 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Desktop 12-SP2 SUSE Linux Enterprise Desktop 12-SP1 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for ghostscript fixes the following security vulnerabilities: - CVE-2017-8291: A remote command execution and a -dSAFER bypass via a crafted .eps document were exploited in the wild. (bsc#1036453) - CVE-2016-9601: An integer overflow in the bundled jbig2dec library could have been misused to cause a Denial-of-Service. (bsc#1018128) - CVE-2016-10220: A NULL pointer dereference in the PDF Transparency module allowed remote attackers to cause a Denial-of-Service. (bsc#1032120) - CVE-2017-5951: A NULL pointer dereference allowed remote attackers to cause a denial of service via a crafted PostScript document. (bsc#1032114) - CVE-2017-7207: A NULL pointer dereference allowed remote attackers to cause a denial of service via a crafted PostScript document. (bsc#1030263) This is a reissue of the previous update to also include SUSE Linux Enterprise 12 GA LTSS packages. Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 12-SP2: zypper in -t patch SUSE-SLE-SDK-12-SP2-2017-866=1 - SUSE Linux Enterprise Software Development Kit 12-SP1: zypper in -t patch SUSE-SLE-SDK-12-SP1-2017-866=1 - SUSE Linux Enterprise Server for SAP 12: zypper in -t patch SUSE-SLE-SAP-12-2017-866=1 - SUSE Linux Enterprise Server for Raspberry Pi 12-SP2: zypper in -t patch SUSE-SLE-RPI-12-SP2-2017-866=1 - SUSE Linux Enterprise Server 12-SP2: zypper in -t patch SUSE-SLE-SERVER-12-SP2-2017-866=1 - SUSE Linux Enterprise Server 12-SP1: zypper in -t patch SUSE-SLE-SERVER-12-SP1-2017-866=1 - SUSE Linux Enterprise Server 12-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-2017-866=1 - SUSE Linux Enterprise Desktop 12-SP2: zypper in -t patch SUSE-SLE-DESKTOP-12-SP2-2017-866=1 - SUSE Linux Enterprise Desktop 12-SP1: zypper in -t patch SUSE-SLE-DESKTOP-12-SP1-2017-866=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 12-SP2 (aarch64 ppc64le s390x x86_64): ghostscript-debuginfo-9.15-22.1 ghostscript-debugsource-9.15-22.1 ghostscript-devel-9.15-22.1 - SUSE Linux Enterprise Software Development Kit 12-SP1 (ppc64le s390x x86_64): ghostscript-debuginfo-9.15-22.1 ghostscript-debugsource-9.15-22.1 ghostscript-devel-9.15-22.1 - SUSE Linux Enterprise Server for SAP 12 (x86_64): ghostscript-9.15-22.1 ghostscript-debuginfo-9.15-22.1 ghostscript-debugsource-9.15-22.1 ghostscript-x11-9.15-22.1 ghostscript-x11-debuginfo-9.15-22.1 - SUSE Linux Enterprise Server for Raspberry Pi 12-SP2 (aarch64): ghostscript-9.15-22.1 ghostscript-debuginfo-9.15-22.1 ghostscript-debugsource-9.15-22.1 ghostscript-x11-9.15-22.1 ghostscript-x11-debuginfo-9.15-22.1 - SUSE Linux Enterprise Server 12-SP2 (aarch64 ppc64le x86_64): ghostscript-9.15-22.1 ghostscript-debuginfo-9.15-22.1 ghostscript-debugsource-9.15-22.1 ghostscript-x11-9.15-22.1 ghostscript-x11-debuginfo-9.15-22.1 - SUSE Linux Enterprise Server 12-SP1 (ppc64le s390x x86_64): ghostscript-9.15-22.1 ghostscript-debuginfo-9.15-22.1 ghostscript-debugsource-9.15-22.1 ghostscript-x11-9.15-22.1 ghostscript-x11-debuginfo-9.15-22.1 - SUSE Linux Enterprise Server 12-LTSS (ppc64le s390x x86_64): ghostscript-9.15-22.1 ghostscript-debuginfo-9.15-22.1 ghostscript-debugsource-9.15-22.1 ghostscript-x11-9.15-22.1 ghostscript-x11-debuginfo-9.15-22.1 - SUSE Linux Enterprise Desktop 12-SP2 (x86_64): ghostscript-9.15-22.1 ghostscript-debuginfo-9.15-22.1 ghostscript-debugsource-9.15-22.1 ghostscript-x11-9.15-22.1 ghostscript-x11-debuginfo-9.15-22.1 - SUSE Linux Enterprise Desktop 12-SP1 (x86_64): ghostscript-9.15-22.1 ghostscript-debuginfo-9.15-22.1 ghostscript-debugsource-9.15-22.1 ghostscript-x11-9.15-22.1 ghostscript-x11-debuginfo-9.15-22.1 References: https://www.suse.com/security/cve/CVE-2016-10220.html https://www.suse.com/security/cve/CVE-2016-9601.html https://www.suse.com/security/cve/CVE-2017-5951.html https://www.suse.com/security/cve/CVE-2017-7207.html https://www.suse.com/security/cve/CVE-2017-8291.html https://bugzilla.suse.com/1018128 https://bugzilla.suse.com/1030263 https://bugzilla.suse.com/1032114 https://bugzilla.suse.com/1032120 https://bugzilla.suse.com/1036453 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2017:1401-1: important: Security update for samba
by opensuse-security＠opensuse.org 24 May '17

24 May '17

openSUSE Security Update: Security update for samba ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1401-1 Rating: important References: #1038231 Cross-References: CVE-2017-7494 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for samba fixes the following issue: - An unprivileged user with access to the samba server could cause smbd to load a specially crafted shared library, which then had the ability to execute arbitrary code on the server as 'root'. [CVE-2017-7494, bso#12780, bsc#1038231] This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-613=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): ctdb-4.4.2-11.9.1 ctdb-debuginfo-4.4.2-11.9.1 ctdb-tests-4.4.2-11.9.1 ctdb-tests-debuginfo-4.4.2-11.9.1 libdcerpc-binding0-4.4.2-11.9.1 libdcerpc-binding0-debuginfo-4.4.2-11.9.1 libdcerpc-devel-4.4.2-11.9.1 libdcerpc-samr-devel-4.4.2-11.9.1 libdcerpc-samr0-4.4.2-11.9.1 libdcerpc-samr0-debuginfo-4.4.2-11.9.1 libdcerpc0-4.4.2-11.9.1 libdcerpc0-debuginfo-4.4.2-11.9.1 libndr-devel-4.4.2-11.9.1 libndr-krb5pac-devel-4.4.2-11.9.1 libndr-krb5pac0-4.4.2-11.9.1 libndr-krb5pac0-debuginfo-4.4.2-11.9.1 libndr-nbt-devel-4.4.2-11.9.1 libndr-nbt0-4.4.2-11.9.1 libndr-nbt0-debuginfo-4.4.2-11.9.1 libndr-standard-devel-4.4.2-11.9.1 libndr-standard0-4.4.2-11.9.1 libndr-standard0-debuginfo-4.4.2-11.9.1 libndr0-4.4.2-11.9.1 libndr0-debuginfo-4.4.2-11.9.1 libnetapi-devel-4.4.2-11.9.1 libnetapi0-4.4.2-11.9.1 libnetapi0-debuginfo-4.4.2-11.9.1 libsamba-credentials-devel-4.4.2-11.9.1 libsamba-credentials0-4.4.2-11.9.1 libsamba-credentials0-debuginfo-4.4.2-11.9.1 libsamba-errors-devel-4.4.2-11.9.1 libsamba-errors0-4.4.2-11.9.1 libsamba-errors0-debuginfo-4.4.2-11.9.1 libsamba-hostconfig-devel-4.4.2-11.9.1 libsamba-hostconfig0-4.4.2-11.9.1 libsamba-hostconfig0-debuginfo-4.4.2-11.9.1 libsamba-passdb-devel-4.4.2-11.9.1 libsamba-passdb0-4.4.2-11.9.1 libsamba-passdb0-debuginfo-4.4.2-11.9.1 libsamba-policy-devel-4.4.2-11.9.1 libsamba-policy0-4.4.2-11.9.1 libsamba-policy0-debuginfo-4.4.2-11.9.1 libsamba-util-devel-4.4.2-11.9.1 libsamba-util0-4.4.2-11.9.1 libsamba-util0-debuginfo-4.4.2-11.9.1 libsamdb-devel-4.4.2-11.9.1 libsamdb0-4.4.2-11.9.1 libsamdb0-debuginfo-4.4.2-11.9.1 libsmbclient-devel-4.4.2-11.9.1 libsmbclient0-4.4.2-11.9.1 libsmbclient0-debuginfo-4.4.2-11.9.1 libsmbconf-devel-4.4.2-11.9.1 libsmbconf0-4.4.2-11.9.1 libsmbconf0-debuginfo-4.4.2-11.9.1 libsmbldap-devel-4.4.2-11.9.1 libsmbldap0-4.4.2-11.9.1 libsmbldap0-debuginfo-4.4.2-11.9.1 libtevent-util-devel-4.4.2-11.9.1 libtevent-util0-4.4.2-11.9.1 libtevent-util0-debuginfo-4.4.2-11.9.1 libwbclient-devel-4.4.2-11.9.1 libwbclient0-4.4.2-11.9.1 libwbclient0-debuginfo-4.4.2-11.9.1 samba-4.4.2-11.9.1 samba-client-4.4.2-11.9.1 samba-client-debuginfo-4.4.2-11.9.1 samba-core-devel-4.4.2-11.9.1 samba-debuginfo-4.4.2-11.9.1 samba-debugsource-4.4.2-11.9.1 samba-libs-4.4.2-11.9.1 samba-libs-debuginfo-4.4.2-11.9.1 samba-pidl-4.4.2-11.9.1 samba-python-4.4.2-11.9.1 samba-python-debuginfo-4.4.2-11.9.1 samba-test-4.4.2-11.9.1 samba-test-debuginfo-4.4.2-11.9.1 samba-winbind-4.4.2-11.9.1 samba-winbind-debuginfo-4.4.2-11.9.1 - openSUSE Leap 42.2 (noarch): samba-doc-4.4.2-11.9.1 - openSUSE Leap 42.2 (x86_64): libdcerpc-binding0-32bit-4.4.2-11.9.1 libdcerpc-binding0-debuginfo-32bit-4.4.2-11.9.1 libdcerpc-samr0-32bit-4.4.2-11.9.1 libdcerpc-samr0-debuginfo-32bit-4.4.2-11.9.1 libdcerpc0-32bit-4.4.2-11.9.1 libdcerpc0-debuginfo-32bit-4.4.2-11.9.1 libndr-krb5pac0-32bit-4.4.2-11.9.1 libndr-krb5pac0-debuginfo-32bit-4.4.2-11.9.1 libndr-nbt0-32bit-4.4.2-11.9.1 libndr-nbt0-debuginfo-32bit-4.4.2-11.9.1 libndr-standard0-32bit-4.4.2-11.9.1 libndr-standard0-debuginfo-32bit-4.4.2-11.9.1 libndr0-32bit-4.4.2-11.9.1 libndr0-debuginfo-32bit-4.4.2-11.9.1 libnetapi0-32bit-4.4.2-11.9.1 libnetapi0-debuginfo-32bit-4.4.2-11.9.1 libsamba-credentials0-32bit-4.4.2-11.9.1 libsamba-credentials0-debuginfo-32bit-4.4.2-11.9.1 libsamba-errors0-32bit-4.4.2-11.9.1 libsamba-errors0-debuginfo-32bit-4.4.2-11.9.1 libsamba-hostconfig0-32bit-4.4.2-11.9.1 libsamba-hostconfig0-debuginfo-32bit-4.4.2-11.9.1 libsamba-passdb0-32bit-4.4.2-11.9.1 libsamba-passdb0-debuginfo-32bit-4.4.2-11.9.1 libsamba-policy0-32bit-4.4.2-11.9.1 libsamba-policy0-debuginfo-32bit-4.4.2-11.9.1 libsamba-util0-32bit-4.4.2-11.9.1 libsamba-util0-debuginfo-32bit-4.4.2-11.9.1 libsamdb0-32bit-4.4.2-11.9.1 libsamdb0-debuginfo-32bit-4.4.2-11.9.1 libsmbclient0-32bit-4.4.2-11.9.1 libsmbclient0-debuginfo-32bit-4.4.2-11.9.1 libsmbconf0-32bit-4.4.2-11.9.1 libsmbconf0-debuginfo-32bit-4.4.2-11.9.1 libsmbldap0-32bit-4.4.2-11.9.1 libsmbldap0-debuginfo-32bit-4.4.2-11.9.1 libtevent-util0-32bit-4.4.2-11.9.1 libtevent-util0-debuginfo-32bit-4.4.2-11.9.1 libwbclient0-32bit-4.4.2-11.9.1 libwbclient0-debuginfo-32bit-4.4.2-11.9.1 samba-client-32bit-4.4.2-11.9.1 samba-client-debuginfo-32bit-4.4.2-11.9.1 samba-libs-32bit-4.4.2-11.9.1 samba-libs-debuginfo-32bit-4.4.2-11.9.1 samba-winbind-32bit-4.4.2-11.9.1 samba-winbind-debuginfo-32bit-4.4.2-11.9.1 References: https://www.suse.com/security/cve/CVE-2017-7494.html https://bugzilla.suse.com/1038231 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2017:1400-1: important: Security update for java-1_7_0-openjdk
by opensuse-security＠opensuse.org 24 May '17

24 May '17

SUSE Security Update: Security update for java-1_7_0-openjdk ______________________________________________________________________________ Announcement ID: SUSE-SU-2017:1400-1 Rating: important References: #1034849 Cross-References: CVE-2017-3289 CVE-2017-3509 CVE-2017-3511 CVE-2017-3512 CVE-2017-3514 CVE-2017-3526 CVE-2017-3533 CVE-2017-3539 CVE-2017-3544 Affected Products: SUSE Linux Enterprise Server for Raspberry Pi 12-SP2 SUSE Linux Enterprise Server 12-SP2 SUSE Linux Enterprise Server 12-SP1 SUSE Linux Enterprise Desktop 12-SP2 SUSE Linux Enterprise Desktop 12-SP1 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: This update for java-1_7_0-openjdk fixes the following issues: - Update to 2.6.10 - OpenJDK 7u141 (bsc#1034849) * Security fixes - S8163520, CVE-2017-3509: Reuse cache entries - S8163528, CVE-2017-3511: Better library loading - S8165626, CVE-2017-3512: Improved window framing - S8167110, CVE-2017-3514: Windows peering issue - S8169011, CVE-2017-3526: Resizing XML parse trees - S8170222, CVE-2017-3533: Better transfers of files - S8171121, CVE-2017-3539: Enhancing jar checking - S8171533, CVE-2017-3544: Better email transfer - S8172299: Improve class processing * New features - PR3347: jstack.stp should support AArch64 * Import of OpenJDK 7 u141 build 0 - S4717864: setFont() does not update Fonts of Menus already on screen - S6474807: (smartcardio) CardTerminal.connect() throws CardException instead of CardNotPresentException - S6518907: cleanup IA64 specific code in Hotspot - S6869327: Add new C2 flag to keep safepoints in counted loops. - S7112912: Message "Error occurred during initialization of VM" on boxes with lots of RAM - S7124213: [macosx] pack() does ignore size of a component; doesn't on the other platforms - S7124219: [macosx] Unable to draw images to fullscreen - S7124552: [macosx] NullPointerException in getBufferStrategy() - S7148275: [macosx] setIconImages() not working correctly (distorted icon when minimized) - S7154841: [macosx] Popups appear behind taskbar - S7155957: closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java hangs on win 64 bit with jdk8 - S7160627: [macosx] TextArea has wrong initial size - S7167293: FtpURLConnection connection leak on FileNotFoundException - S7168851: [macosx] Netbeans crashes in CImage.nativeCreateNSImageFromArray - S7197203: sun/misc/URLClassPath/ClassnameCharTest.sh failed, compile error - S8005255: [macosx] Cleanup warnings in sun.lwawt - S8006088: Incompatible heap size flags accepted by VM - S8007295: Reduce number of warnings in awt classes - S8010722: assert: failed: heap size is too big for compressed oops - S8011059: [macosx] Support automatic @2x images loading on Mac OS X - S8014058: Regression tests for 8006088 - S8014489: tests/gc/arguments/Test(Serial|CMS|Parallel|G1)HeapSizeFlags jtreg tests invoke wrong class - S8016302: Change type of the number of GC workers to unsigned int (2) - S8024662: gc/arguments/TestUseCompressedOopsErgo.java does not compile. - S8024669: Native OOME when allocating after changes to maximum heap supporting Coops sizing on sparcv9 - S8024926: [macosx] AquaIcon HiDPI support - S8025974: l10n for policytool - S8027025: [macosx] getLocationOnScreen returns 0 if parent invisible - S8028212: Custom cursor HiDPI support - S8028471: PPC64 (part 215): opto: Extend ImplicitNullCheck optimization. - S8031573: [macosx] Checkmarks of JCheckBoxMenuItems aren't rendered in high resolution on Retina - S8033534: [macosx] Get MultiResolution image from native system - S8033786: White flashing when opening Dialogs and Menus using Nimbus with dark background - S8035568: [macosx] Cursor management unification - S8041734: JFrame in full screen mode leaves empty workspace after close - S8059803: Update use of GetVersionEx to get correct Windows version in hs_err files - S8066504: GetVersionEx in java.base/windows/native/libjava/java_props_md.c might not get correct Windows version 0 - S8079595: Resizing dialog which is JWindow parent makes JVM crash - S8080729: [macosx] java 7 and 8 JDialogs on multiscreen jump to parent frame on focus - S8130769: The new menu can't be shown on the menubar after clicking the "Add" button. - S8133357: 8u65 l10n resource file translation update - S8146602: jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test fails with NullPointerException - S8147842: IME Composition Window is displayed at incorrect location - S8147910: Cache initial active_processor_count - S8150490: Update OS detection code to recognize Windows Server 2016 - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is enabled - S8161195: Regression: closed/javax/swing/text/FlowView/LayoutTest.java - S8161993: G1 crashes if active_processor_count changes during startup - S8162603: Unrecognized VM option 'UseCountedLoopSafepoints' - S8162876: [TEST_BUG] sun/net/www/protocol/http/HttpInputStream.java fails intermittently - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java failed with "Error while cleaning up threads after test" - S8167179: Make XSL generated namespace prefixes local to transformation process - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections - S8169589: [macosx] Activating a JDialog puts to back another dialog - S8170307: Stack size option -Xss is ignored - S8170316: (tz) Support tzdata2016j - S8170814: Reuse cache entries (part II) - S8171388: Update JNDI Thread contexts - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with error: The bitwise mask Frame.ICONIFIED is not setwhen the frame is in ICONIFIED state - S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog test fails as DummyButton on Dialog did not gain focus when clicked. - S8173931: 8u131 L10n resource file update - S8174844: Incorrect GPL header causes RE script to miss swap to commercial header for licensee source bundle - S8175087: [bsd] Fix build after "8024900: PPC64: Enable new build on AIX (jdk part)" - S8175163: [bsd] Fix build after "8005629: javac warnings compiling java.awt.EventDispatchThread..." - S8176044: (tz) Support tzdata2017a * Import of OpenJDK 7 u141 build 1 - S8043723: max_heap_for_compressed_oops() declared with size_t, but defined with uintx * Import of OpenJDK 7 u141 build 2 - S8011123: serialVersionUID of java.awt.dnd.InvalidDnDOperationException changed in JDK8-b82 * Backports - S6515172, PR3362: Runtime.availableProcessors() ignores Linux taskset command - S8022284, PR3209: Hide internal data structure in PhaseCFG - S8023003, PR3209: Cleanup the public interface to PhaseCFG - S8023691, PR3209: Create interface for nodes in class Block - S8023988, PR3209: Move local scheduling of nodes to the CFG creation and code motion phase (PhaseCFG) - S8043780, PR3369: Use open(O_CLOEXEC) instead of fcntl(FD_CLOEXEC) - S8157306, PR3209: Random infrequent null pointer exceptions in javac - S8173783, PR3329: IllegalArgumentException: jdk.tls.namedGroups - S8173941, PR3330: SA does not work if executable is DSO - S8174729, PR3361: Race Condition in java.lang.reflect.WeakCache * Bug fixes - PR3349: Architectures unsupported by SystemTap tapsets throw a parse error - PR3370: Disable ARM32 JIT by default in jdk_generic_profile.sh - PR3379: Perl should be mandatory - PR3390: javac.in and javah.in should use @PERL@ rather than a hardcoded path * CACAO - PR2732: Raise javadoc memory limits for CACAO again! * AArch64 port - S8177661, PR3367: Correct ad rule output register types from iRegX to iRegXNoSp - Get ecj.jar path from gcj, use the gcc variant that provides Java to build C code to make sure jni.h is available. - S8167104, CVE-2017-3289: Additional class construction - S6253144: Long narrowing conversion should describe the - S6328537: Improve javadocs for Socket class by adding - S6978886: javadoc shows stacktrace after print error - S6995421: Eliminate the static dependency to - S7027045: (doc) java/awt/Window.java has several typos in - S7054969: Null-check-in-finally pattern in java/security - S7072353: JNDI libraries do not build with javac -Xlint:all - S7092447: Clarify the default locale used in each locale - S7103570: AtomicIntegerFieldUpdater does not work when - S7187144: JavaDoc for ScriptEngineFactory.getProgram() - S8000418: javadoc should used a standard "generated by - S8000666: javadoc should write directly to Writer instead of - S8000970: break out auxiliary classes that will prevent - S8001669: javadoc internal DocletAbortException should set - S8011402: Move blacklisting certificate logic from hard code - S8011547: Update XML Signature implementation to Apache - S8012288: XML DSig API allows wrong tag names and extra - S8017325: Cleanup of the javadoc <code> tag in - S8017326: Cleanup of the javadoc <code> tag in - S8019772: Fix doclint issues in javax.crypto and - S8020688: Broken links in documentation at - S8021108: Clean up doclint warnings and errors in java.text - S8022120: JCK test api/javax_xml/crypto/dsig/TransformService/index_ParamMethods - S8025409: Fix javadoc comments errors and warning reported by - S8026021: more fix of javadoc errors and warnings reported by - S8037099: [macosx] Remove all references to GC from native - S8038184: XMLSignature throws StringIndexOutOfBoundsException - S8038349: Signing XML with DSA throws Exception when key is - S8049244: XML Signature performance issue caused by - S8050893: (smartcardio) Invert reset argument in tests in - S8059212: Modify sun/security/smartcardio manual regression - S8068279: (typo in the spec) - S8068491: Update the protocol for references of - S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs - S8076369: Introduce the jdk.tls.client.protocols system - S8139565: Restrict certificates with DSA keys less than 1024 - S8140422: Add mechanism to allow non default root CAs to be - S8140587: Atomic*FieldUpdaters should use Class.isInstance - S8149029: Secure validation of XML based digital signature - S8151893: Add security property to configure XML Signature - S8161228: URL objects with custom protocol handlers have port - S8163304: jarsigner -verbose -verify should print the - S8164908: ReflectionFactory support for IIOP and custom - S8165230: RMIConnection addNotificationListeners failing with - S8166393: disabledAlgorithms property should not be strictly - S8166591: [macos 10.12] Trackpad scrolling of text on OS X - S8166739: Improve extensibility of ObjectInputFilter - S8167356: Follow up fix for jdk8 backport of 8164143. Changes - S8167459: Add debug output for indicating if a chosen - S8168861: AnchorCertificates uses hardcoded password for - S8169688: Backout (remove) MD5 from - S8169911: Enhanced tests for jarsigner -verbose -verify after - S8170131: Certificates not being blocked by - S8173854: [TEST] Update DHEKeySizing test case following - S7102489, PR3316, RH1390708: RFE: cleanup jlong typedef on - S8000351, PR3316, RH1390708: Tenuring threshold should be - S8153711, PR3315, RH1284948: [REDO] JDWP: Memory Leak: - S8170888, PR3316, RH1390708: [linux] Experimental support for - PR3318: Replace 'infinality' with 'improved font rendering' - PR3324: Fix NSS_LIBDIR substitution in - S8165673, PR3320: AArch64: Fix JNI floating point argument + S6604109, PR3162: - Add -fno-delete-null-pointer-checks -fno-lifetime-dse to try to directory to be specified versions of IcedTea Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server for Raspberry Pi 12-SP2: zypper in -t patch SUSE-SLE-RPI-12-SP2-2017-864=1 - SUSE Linux Enterprise Server 12-SP2: zypper in -t patch SUSE-SLE-SERVER-12-SP2-2017-864=1 - SUSE Linux Enterprise Server 12-SP1: zypper in -t patch SUSE-SLE-SERVER-12-SP1-2017-864=1 - SUSE Linux Enterprise Desktop 12-SP2: zypper in -t patch SUSE-SLE-DESKTOP-12-SP2-2017-864=1 - SUSE Linux Enterprise Desktop 12-SP1: zypper in -t patch SUSE-SLE-DESKTOP-12-SP1-2017-864=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Server for Raspberry Pi 12-SP2 (aarch64): java-1_7_0-openjdk-1.7.0.141-42.1 java-1_7_0-openjdk-debuginfo-1.7.0.141-42.1 java-1_7_0-openjdk-debugsource-1.7.0.141-42.1 java-1_7_0-openjdk-demo-1.7.0.141-42.1 java-1_7_0-openjdk-demo-debuginfo-1.7.0.141-42.1 java-1_7_0-openjdk-devel-1.7.0.141-42.1 java-1_7_0-openjdk-devel-debuginfo-1.7.0.141-42.1 java-1_7_0-openjdk-headless-1.7.0.141-42.1 java-1_7_0-openjdk-headless-debuginfo-1.7.0.141-42.1 - SUSE Linux Enterprise Server 12-SP2 (aarch64 ppc64le x86_64): java-1_7_0-openjdk-1.7.0.141-42.1 java-1_7_0-openjdk-debuginfo-1.7.0.141-42.1 java-1_7_0-openjdk-debugsource-1.7.0.141-42.1 java-1_7_0-openjdk-demo-1.7.0.141-42.1 java-1_7_0-openjdk-demo-debuginfo-1.7.0.141-42.1 java-1_7_0-openjdk-devel-1.7.0.141-42.1 java-1_7_0-openjdk-devel-debuginfo-1.7.0.141-42.1 java-1_7_0-openjdk-headless-1.7.0.141-42.1 java-1_7_0-openjdk-headless-debuginfo-1.7.0.141-42.1 - SUSE Linux Enterprise Server 12-SP1 (ppc64le s390x x86_64): java-1_7_0-openjdk-1.7.0.141-42.1 java-1_7_0-openjdk-debuginfo-1.7.0.141-42.1 java-1_7_0-openjdk-debugsource-1.7.0.141-42.1 java-1_7_0-openjdk-demo-1.7.0.141-42.1 java-1_7_0-openjdk-demo-debuginfo-1.7.0.141-42.1 java-1_7_0-openjdk-devel-1.7.0.141-42.1 java-1_7_0-openjdk-devel-debuginfo-1.7.0.141-42.1 java-1_7_0-openjdk-headless-1.7.0.141-42.1 java-1_7_0-openjdk-headless-debuginfo-1.7.0.141-42.1 - SUSE Linux Enterprise Desktop 12-SP2 (x86_64): java-1_7_0-openjdk-1.7.0.141-42.1 java-1_7_0-openjdk-debuginfo-1.7.0.141-42.1 java-1_7_0-openjdk-debugsource-1.7.0.141-42.1 java-1_7_0-openjdk-headless-1.7.0.141-42.1 java-1_7_0-openjdk-headless-debuginfo-1.7.0.141-42.1 - SUSE Linux Enterprise Desktop 12-SP1 (x86_64): java-1_7_0-openjdk-1.7.0.141-42.1 java-1_7_0-openjdk-debuginfo-1.7.0.141-42.1 java-1_7_0-openjdk-debugsource-1.7.0.141-42.1 java-1_7_0-openjdk-headless-1.7.0.141-42.1 java-1_7_0-openjdk-headless-debuginfo-1.7.0.141-42.1 References: https://www.suse.com/security/cve/CVE-2017-3289.html https://www.suse.com/security/cve/CVE-2017-3509.html https://www.suse.com/security/cve/CVE-2017-3511.html https://www.suse.com/security/cve/CVE-2017-3512.html https://www.suse.com/security/cve/CVE-2017-3514.html https://www.suse.com/security/cve/CVE-2017-3526.html https://www.suse.com/security/cve/CVE-2017-3533.html https://www.suse.com/security/cve/CVE-2017-3539.html https://www.suse.com/security/cve/CVE-2017-3544.html https://bugzilla.suse.com/1034849 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] Heads up: todays Samba update
by Marcus Meissner 24 May '17

24 May '17

Hi folks, We have released Samba updates for all supported Enterprise and openSUSE versions, fixing a remote code execution possibility for authenticated users. The advisory of the Samba team is here: https://www.samba.org/samba/security/CVE-2017-7494.html There is a workaround in the configuration listed, also some impact can be avoided if the writeable share is "noexec" mounted and/or protected using the generated AppArmor share profiles on newer products. SUSE recommends to install these updates as soon as possible. Ciao, Marcus

1 0

[security-announce] SUSE-SU-2017:1393-1: important: Security update for samba
by opensuse-security＠opensuse.org 24 May '17

24 May '17

SUSE Security Update: Security update for samba ______________________________________________________________________________ Announcement ID: SUSE-SU-2017:1393-1 Rating: important References: #1038231 Cross-References: CVE-2017-7494 Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP2 SUSE Linux Enterprise Server for Raspberry Pi 12-SP2 SUSE Linux Enterprise Server 12-SP2 SUSE Linux Enterprise High Availability 12-SP2 SUSE Linux Enterprise Desktop 12-SP2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for samba fixes the following issue: - An unprivileged user with access to the samba server could cause smbd to load a specially crafted shared library, which then had the ability to execute arbitrary code on the server as 'root'. [CVE-2017-7494, bso#12780, bsc#1038231] Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 12-SP2: zypper in -t patch SUSE-SLE-SDK-12-SP2-2017-853=1 - SUSE Linux Enterprise Server for Raspberry Pi 12-SP2: zypper in -t patch SUSE-SLE-RPI-12-SP2-2017-853=1 - SUSE Linux Enterprise Server 12-SP2: zypper in -t patch SUSE-SLE-SERVER-12-SP2-2017-853=1 - SUSE Linux Enterprise High Availability 12-SP2: zypper in -t patch SUSE-SLE-HA-12-SP2-2017-853=1 - SUSE Linux Enterprise Desktop 12-SP2: zypper in -t patch SUSE-SLE-DESKTOP-12-SP2-2017-853=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 12-SP2 (aarch64 ppc64le s390x x86_64): libsmbclient-devel-4.4.2-38.6.1 libwbclient-devel-4.4.2-38.6.1 samba-debuginfo-4.4.2-38.6.1 samba-debugsource-4.4.2-38.6.1 - SUSE Linux Enterprise Server for Raspberry Pi 12-SP2 (aarch64): libdcerpc-binding0-4.4.2-38.6.1 libdcerpc-binding0-debuginfo-4.4.2-38.6.1 libdcerpc0-4.4.2-38.6.1 libdcerpc0-debuginfo-4.4.2-38.6.1 libndr-krb5pac0-4.4.2-38.6.1 libndr-krb5pac0-debuginfo-4.4.2-38.6.1 libndr-nbt0-4.4.2-38.6.1 libndr-nbt0-debuginfo-4.4.2-38.6.1 libndr-standard0-4.4.2-38.6.1 libndr-standard0-debuginfo-4.4.2-38.6.1 libndr0-4.4.2-38.6.1 libndr0-debuginfo-4.4.2-38.6.1 libnetapi0-4.4.2-38.6.1 libnetapi0-debuginfo-4.4.2-38.6.1 libsamba-credentials0-4.4.2-38.6.1 libsamba-credentials0-debuginfo-4.4.2-38.6.1 libsamba-errors0-4.4.2-38.6.1 libsamba-errors0-debuginfo-4.4.2-38.6.1 libsamba-hostconfig0-4.4.2-38.6.1 libsamba-hostconfig0-debuginfo-4.4.2-38.6.1 libsamba-passdb0-4.4.2-38.6.1 libsamba-passdb0-debuginfo-4.4.2-38.6.1 libsamba-util0-4.4.2-38.6.1 libsamba-util0-debuginfo-4.4.2-38.6.1 libsamdb0-4.4.2-38.6.1 libsamdb0-debuginfo-4.4.2-38.6.1 libsmbclient0-4.4.2-38.6.1 libsmbclient0-debuginfo-4.4.2-38.6.1 libsmbconf0-4.4.2-38.6.1 libsmbconf0-debuginfo-4.4.2-38.6.1 libsmbldap0-4.4.2-38.6.1 libsmbldap0-debuginfo-4.4.2-38.6.1 libtevent-util0-4.4.2-38.6.1 libtevent-util0-debuginfo-4.4.2-38.6.1 libwbclient0-4.4.2-38.6.1 libwbclient0-debuginfo-4.4.2-38.6.1 samba-4.4.2-38.6.1 samba-client-4.4.2-38.6.1 samba-client-debuginfo-4.4.2-38.6.1 samba-debuginfo-4.4.2-38.6.1 samba-debugsource-4.4.2-38.6.1 samba-libs-4.4.2-38.6.1 samba-libs-debuginfo-4.4.2-38.6.1 samba-winbind-4.4.2-38.6.1 samba-winbind-debuginfo-4.4.2-38.6.1 - SUSE Linux Enterprise Server for Raspberry Pi 12-SP2 (noarch): samba-doc-4.4.2-38.6.1 - SUSE Linux Enterprise Server 12-SP2 (aarch64 ppc64le x86_64): libdcerpc-binding0-4.4.2-38.6.1 libdcerpc-binding0-debuginfo-4.4.2-38.6.1 libdcerpc0-4.4.2-38.6.1 libdcerpc0-debuginfo-4.4.2-38.6.1 libndr-krb5pac0-4.4.2-38.6.1 libndr-krb5pac0-debuginfo-4.4.2-38.6.1 libndr-nbt0-4.4.2-38.6.1 libndr-nbt0-debuginfo-4.4.2-38.6.1 libndr-standard0-4.4.2-38.6.1 libndr-standard0-debuginfo-4.4.2-38.6.1 libndr0-4.4.2-38.6.1 libndr0-debuginfo-4.4.2-38.6.1 libnetapi0-4.4.2-38.6.1 libnetapi0-debuginfo-4.4.2-38.6.1 libsamba-credentials0-4.4.2-38.6.1 libsamba-credentials0-debuginfo-4.4.2-38.6.1 libsamba-errors0-4.4.2-38.6.1 libsamba-errors0-debuginfo-4.4.2-38.6.1 libsamba-hostconfig0-4.4.2-38.6.1 libsamba-hostconfig0-debuginfo-4.4.2-38.6.1 libsamba-passdb0-4.4.2-38.6.1 libsamba-passdb0-debuginfo-4.4.2-38.6.1 libsamba-util0-4.4.2-38.6.1 libsamba-util0-debuginfo-4.4.2-38.6.1 libsamdb0-4.4.2-38.6.1 libsamdb0-debuginfo-4.4.2-38.6.1 libsmbclient0-4.4.2-38.6.1 libsmbclient0-debuginfo-4.4.2-38.6.1 libsmbconf0-4.4.2-38.6.1 libsmbconf0-debuginfo-4.4.2-38.6.1 libsmbldap0-4.4.2-38.6.1 libsmbldap0-debuginfo-4.4.2-38.6.1 libtevent-util0-4.4.2-38.6.1 libtevent-util0-debuginfo-4.4.2-38.6.1 libwbclient0-4.4.2-38.6.1 libwbclient0-debuginfo-4.4.2-38.6.1 samba-4.4.2-38.6.1 samba-client-4.4.2-38.6.1 samba-client-debuginfo-4.4.2-38.6.1 samba-debuginfo-4.4.2-38.6.1 samba-debugsource-4.4.2-38.6.1 samba-libs-4.4.2-38.6.1 samba-libs-debuginfo-4.4.2-38.6.1 samba-winbind-4.4.2-38.6.1 samba-winbind-debuginfo-4.4.2-38.6.1 - SUSE Linux Enterprise Server 12-SP2 (noarch): samba-doc-4.4.2-38.6.1 - SUSE Linux Enterprise Server 12-SP2 (x86_64): libdcerpc-binding0-32bit-4.4.2-38.6.1 libdcerpc-binding0-debuginfo-32bit-4.4.2-38.6.1 libdcerpc0-32bit-4.4.2-38.6.1 libdcerpc0-debuginfo-32bit-4.4.2-38.6.1 libndr-krb5pac0-32bit-4.4.2-38.6.1 libndr-krb5pac0-debuginfo-32bit-4.4.2-38.6.1 libndr-nbt0-32bit-4.4.2-38.6.1 libndr-nbt0-debuginfo-32bit-4.4.2-38.6.1 libndr-standard0-32bit-4.4.2-38.6.1 libndr-standard0-debuginfo-32bit-4.4.2-38.6.1 libndr0-32bit-4.4.2-38.6.1 libndr0-debuginfo-32bit-4.4.2-38.6.1 libnetapi0-32bit-4.4.2-38.6.1 libnetapi0-debuginfo-32bit-4.4.2-38.6.1 libsamba-credentials0-32bit-4.4.2-38.6.1 libsamba-credentials0-debuginfo-32bit-4.4.2-38.6.1 libsamba-errors0-32bit-4.4.2-38.6.1 libsamba-errors0-debuginfo-32bit-4.4.2-38.6.1 libsamba-hostconfig0-32bit-4.4.2-38.6.1 libsamba-hostconfig0-debuginfo-32bit-4.4.2-38.6.1 libsamba-passdb0-32bit-4.4.2-38.6.1 libsamba-passdb0-debuginfo-32bit-4.4.2-38.6.1 libsamba-util0-32bit-4.4.2-38.6.1 libsamba-util0-debuginfo-32bit-4.4.2-38.6.1 libsamdb0-32bit-4.4.2-38.6.1 libsamdb0-debuginfo-32bit-4.4.2-38.6.1 libsmbclient0-32bit-4.4.2-38.6.1 libsmbclient0-debuginfo-32bit-4.4.2-38.6.1 libsmbconf0-32bit-4.4.2-38.6.1 libsmbconf0-debuginfo-32bit-4.4.2-38.6.1 libsmbldap0-32bit-4.4.2-38.6.1 libsmbldap0-debuginfo-32bit-4.4.2-38.6.1 libtevent-util0-32bit-4.4.2-38.6.1 libtevent-util0-debuginfo-32bit-4.4.2-38.6.1 libwbclient0-32bit-4.4.2-38.6.1 libwbclient0-debuginfo-32bit-4.4.2-38.6.1 samba-client-32bit-4.4.2-38.6.1 samba-client-debuginfo-32bit-4.4.2-38.6.1 samba-libs-32bit-4.4.2-38.6.1 samba-libs-debuginfo-32bit-4.4.2-38.6.1 samba-winbind-32bit-4.4.2-38.6.1 samba-winbind-debuginfo-32bit-4.4.2-38.6.1 - SUSE Linux Enterprise High Availability 12-SP2 (ppc64le s390x x86_64): ctdb-4.4.2-38.6.1 ctdb-debuginfo-4.4.2-38.6.1 samba-debuginfo-4.4.2-38.6.1 samba-debugsource-4.4.2-38.6.1 - SUSE Linux Enterprise Desktop 12-SP2 (noarch): samba-doc-4.4.2-38.6.1 - SUSE Linux Enterprise Desktop 12-SP2 (x86_64): libdcerpc-binding0-32bit-4.4.2-38.6.1 libdcerpc-binding0-4.4.2-38.6.1 libdcerpc-binding0-debuginfo-32bit-4.4.2-38.6.1 libdcerpc-binding0-debuginfo-4.4.2-38.6.1 libdcerpc0-32bit-4.4.2-38.6.1 libdcerpc0-4.4.2-38.6.1 libdcerpc0-debuginfo-32bit-4.4.2-38.6.1 libdcerpc0-debuginfo-4.4.2-38.6.1 libndr-krb5pac0-32bit-4.4.2-38.6.1 libndr-krb5pac0-4.4.2-38.6.1 libndr-krb5pac0-debuginfo-32bit-4.4.2-38.6.1 libndr-krb5pac0-debuginfo-4.4.2-38.6.1 libndr-nbt0-32bit-4.4.2-38.6.1 libndr-nbt0-4.4.2-38.6.1 libndr-nbt0-debuginfo-32bit-4.4.2-38.6.1 libndr-nbt0-debuginfo-4.4.2-38.6.1 libndr-standard0-32bit-4.4.2-38.6.1 libndr-standard0-4.4.2-38.6.1 libndr-standard0-debuginfo-32bit-4.4.2-38.6.1 libndr-standard0-debuginfo-4.4.2-38.6.1 libndr0-32bit-4.4.2-38.6.1 libndr0-4.4.2-38.6.1 libndr0-debuginfo-32bit-4.4.2-38.6.1 libndr0-debuginfo-4.4.2-38.6.1 libnetapi0-32bit-4.4.2-38.6.1 libnetapi0-4.4.2-38.6.1 libnetapi0-debuginfo-32bit-4.4.2-38.6.1 libnetapi0-debuginfo-4.4.2-38.6.1 libsamba-credentials0-32bit-4.4.2-38.6.1 libsamba-credentials0-4.4.2-38.6.1 libsamba-credentials0-debuginfo-32bit-4.4.2-38.6.1 libsamba-credentials0-debuginfo-4.4.2-38.6.1 libsamba-errors0-32bit-4.4.2-38.6.1 libsamba-errors0-4.4.2-38.6.1 libsamba-errors0-debuginfo-32bit-4.4.2-38.6.1 libsamba-errors0-debuginfo-4.4.2-38.6.1 libsamba-hostconfig0-32bit-4.4.2-38.6.1 libsamba-hostconfig0-4.4.2-38.6.1 libsamba-hostconfig0-debuginfo-32bit-4.4.2-38.6.1 libsamba-hostconfig0-debuginfo-4.4.2-38.6.1 libsamba-passdb0-32bit-4.4.2-38.6.1 libsamba-passdb0-4.4.2-38.6.1 libsamba-passdb0-debuginfo-32bit-4.4.2-38.6.1 libsamba-passdb0-debuginfo-4.4.2-38.6.1 libsamba-util0-32bit-4.4.2-38.6.1 libsamba-util0-4.4.2-38.6.1 libsamba-util0-debuginfo-32bit-4.4.2-38.6.1 libsamba-util0-debuginfo-4.4.2-38.6.1 libsamdb0-32bit-4.4.2-38.6.1 libsamdb0-4.4.2-38.6.1 libsamdb0-debuginfo-32bit-4.4.2-38.6.1 libsamdb0-debuginfo-4.4.2-38.6.1 libsmbclient0-32bit-4.4.2-38.6.1 libsmbclient0-4.4.2-38.6.1 libsmbclient0-debuginfo-32bit-4.4.2-38.6.1 libsmbclient0-debuginfo-4.4.2-38.6.1 libsmbconf0-32bit-4.4.2-38.6.1 libsmbconf0-4.4.2-38.6.1 libsmbconf0-debuginfo-32bit-4.4.2-38.6.1 libsmbconf0-debuginfo-4.4.2-38.6.1 libsmbldap0-32bit-4.4.2-38.6.1 libsmbldap0-4.4.2-38.6.1 libsmbldap0-debuginfo-32bit-4.4.2-38.6.1 libsmbldap0-debuginfo-4.4.2-38.6.1 libtevent-util0-32bit-4.4.2-38.6.1 libtevent-util0-4.4.2-38.6.1 libtevent-util0-debuginfo-32bit-4.4.2-38.6.1 libtevent-util0-debuginfo-4.4.2-38.6.1 libwbclient0-32bit-4.4.2-38.6.1 libwbclient0-4.4.2-38.6.1 libwbclient0-debuginfo-32bit-4.4.2-38.6.1 libwbclient0-debuginfo-4.4.2-38.6.1 samba-4.4.2-38.6.1 samba-client-32bit-4.4.2-38.6.1 samba-client-4.4.2-38.6.1 samba-client-debuginfo-32bit-4.4.2-38.6.1 samba-client-debuginfo-4.4.2-38.6.1 samba-debuginfo-4.4.2-38.6.1 samba-debugsource-4.4.2-38.6.1 samba-libs-32bit-4.4.2-38.6.1 samba-libs-4.4.2-38.6.1 samba-libs-debuginfo-32bit-4.4.2-38.6.1 samba-libs-debuginfo-4.4.2-38.6.1 samba-winbind-32bit-4.4.2-38.6.1 samba-winbind-4.4.2-38.6.1 samba-winbind-debuginfo-32bit-4.4.2-38.6.1 samba-winbind-debuginfo-4.4.2-38.6.1 References: https://www.suse.com/security/cve/CVE-2017-7494.html https://bugzilla.suse.com/1038231 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2017:1392-1: important: Security update for samba
by opensuse-security＠opensuse.org 24 May '17

24 May '17

SUSE Security Update: Security update for samba ______________________________________________________________________________ Announcement ID: SUSE-SU-2017:1392-1 Rating: important References: #1038231 Cross-References: CVE-2017-7494 Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP2 SUSE Linux Enterprise Software Development Kit 12-SP1 SUSE Linux Enterprise Server for Raspberry Pi 12-SP2 SUSE Linux Enterprise Server 12-SP2 SUSE Linux Enterprise Server 12-SP1 SUSE Linux Enterprise High Availability 12-SP1 SUSE Linux Enterprise Desktop 12-SP2 SUSE Linux Enterprise Desktop 12-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for samba fixes the following issue: - An unprivileged user with access to the samba server could cause smbd to load a specially crafted shared library, which then had the ability to execute arbitrary code on the server as 'root'. [CVE-2017-7494, bso#12780, bsc#1038231] Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 12-SP2: zypper in -t patch SUSE-SLE-SDK-12-SP2-2017-854=1 - SUSE Linux Enterprise Software Development Kit 12-SP1: zypper in -t patch SUSE-SLE-SDK-12-SP1-2017-854=1 - SUSE Linux Enterprise Server for Raspberry Pi 12-SP2: zypper in -t patch SUSE-SLE-RPI-12-SP2-2017-854=1 - SUSE Linux Enterprise Server 12-SP2: zypper in -t patch SUSE-SLE-SERVER-12-SP2-2017-854=1 - SUSE Linux Enterprise Server 12-SP1: zypper in -t patch SUSE-SLE-SERVER-12-SP1-2017-854=1 - SUSE Linux Enterprise High Availability 12-SP1: zypper in -t patch SUSE-SLE-HA-12-SP1-2017-854=1 - SUSE Linux Enterprise Desktop 12-SP2: zypper in -t patch SUSE-SLE-DESKTOP-12-SP2-2017-854=1 - SUSE Linux Enterprise Desktop 12-SP1: zypper in -t patch SUSE-SLE-DESKTOP-12-SP1-2017-854=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 12-SP2 (aarch64 ppc64le s390x x86_64): samba-test-devel-4.2.4-28.14.1 - SUSE Linux Enterprise Software Development Kit 12-SP1 (ppc64le s390x x86_64): ctdb-debuginfo-4.2.4-28.14.1 ctdb-devel-4.2.4-28.14.1 libdcerpc-atsvc-devel-4.2.4-28.14.1 libdcerpc-atsvc0-4.2.4-28.14.1 libdcerpc-atsvc0-debuginfo-4.2.4-28.14.1 libdcerpc-devel-4.2.4-28.14.1 libdcerpc-samr-devel-4.2.4-28.14.1 libdcerpc-samr0-4.2.4-28.14.1 libdcerpc-samr0-debuginfo-4.2.4-28.14.1 libgensec-devel-4.2.4-28.14.1 libndr-devel-4.2.4-28.14.1 libndr-krb5pac-devel-4.2.4-28.14.1 libndr-nbt-devel-4.2.4-28.14.1 libndr-standard-devel-4.2.4-28.14.1 libnetapi-devel-4.2.4-28.14.1 libregistry-devel-4.2.4-28.14.1 libsamba-credentials-devel-4.2.4-28.14.1 libsamba-hostconfig-devel-4.2.4-28.14.1 libsamba-passdb-devel-4.2.4-28.14.1 libsamba-policy-devel-4.2.4-28.14.1 libsamba-policy0-4.2.4-28.14.1 libsamba-policy0-debuginfo-4.2.4-28.14.1 libsamba-util-devel-4.2.4-28.14.1 libsamdb-devel-4.2.4-28.14.1 libsmbclient-devel-4.2.4-28.14.1 libsmbclient-raw-devel-4.2.4-28.14.1 libsmbconf-devel-4.2.4-28.14.1 libsmbldap-devel-4.2.4-28.14.1 libtevent-util-devel-4.2.4-28.14.1 libwbclient-devel-4.2.4-28.14.1 samba-core-devel-4.2.4-28.14.1 samba-debuginfo-4.2.4-28.14.1 samba-debugsource-4.2.4-28.14.1 samba-test-devel-4.2.4-28.14.1 - SUSE Linux Enterprise Server for Raspberry Pi 12-SP2 (aarch64): libdcerpc-atsvc0-4.2.4-28.14.1 libdcerpc-atsvc0-debuginfo-4.2.4-28.14.1 - SUSE Linux Enterprise Server 12-SP2 (aarch64 ppc64le x86_64): libdcerpc-atsvc0-4.2.4-28.14.1 libdcerpc-atsvc0-debuginfo-4.2.4-28.14.1 - SUSE Linux Enterprise Server 12-SP1 (ppc64le s390x x86_64): libdcerpc-binding0-4.2.4-28.14.1 libdcerpc-binding0-debuginfo-4.2.4-28.14.1 libdcerpc0-4.2.4-28.14.1 libdcerpc0-debuginfo-4.2.4-28.14.1 libgensec0-4.2.4-28.14.1 libgensec0-debuginfo-4.2.4-28.14.1 libndr-krb5pac0-4.2.4-28.14.1 libndr-krb5pac0-debuginfo-4.2.4-28.14.1 libndr-nbt0-4.2.4-28.14.1 libndr-nbt0-debuginfo-4.2.4-28.14.1 libndr-standard0-4.2.4-28.14.1 libndr-standard0-debuginfo-4.2.4-28.14.1 libndr0-4.2.4-28.14.1 libndr0-debuginfo-4.2.4-28.14.1 libnetapi0-4.2.4-28.14.1 libnetapi0-debuginfo-4.2.4-28.14.1 libregistry0-4.2.4-28.14.1 libregistry0-debuginfo-4.2.4-28.14.1 libsamba-credentials0-4.2.4-28.14.1 libsamba-credentials0-debuginfo-4.2.4-28.14.1 libsamba-hostconfig0-4.2.4-28.14.1 libsamba-hostconfig0-debuginfo-4.2.4-28.14.1 libsamba-passdb0-4.2.4-28.14.1 libsamba-passdb0-debuginfo-4.2.4-28.14.1 libsamba-util0-4.2.4-28.14.1 libsamba-util0-debuginfo-4.2.4-28.14.1 libsamdb0-4.2.4-28.14.1 libsamdb0-debuginfo-4.2.4-28.14.1 libsmbclient-raw0-4.2.4-28.14.1 libsmbclient-raw0-debuginfo-4.2.4-28.14.1 libsmbclient0-4.2.4-28.14.1 libsmbclient0-debuginfo-4.2.4-28.14.1 libsmbconf0-4.2.4-28.14.1 libsmbconf0-debuginfo-4.2.4-28.14.1 libsmbldap0-4.2.4-28.14.1 libsmbldap0-debuginfo-4.2.4-28.14.1 libtevent-util0-4.2.4-28.14.1 libtevent-util0-debuginfo-4.2.4-28.14.1 libwbclient0-4.2.4-28.14.1 libwbclient0-debuginfo-4.2.4-28.14.1 samba-4.2.4-28.14.1 samba-client-4.2.4-28.14.1 samba-client-debuginfo-4.2.4-28.14.1 samba-debuginfo-4.2.4-28.14.1 samba-debugsource-4.2.4-28.14.1 samba-libs-4.2.4-28.14.1 samba-libs-debuginfo-4.2.4-28.14.1 samba-winbind-4.2.4-28.14.1 samba-winbind-debuginfo-4.2.4-28.14.1 - SUSE Linux Enterprise Server 12-SP1 (s390x x86_64): libdcerpc-binding0-32bit-4.2.4-28.14.1 libdcerpc-binding0-debuginfo-32bit-4.2.4-28.14.1 libdcerpc0-32bit-4.2.4-28.14.1 libdcerpc0-debuginfo-32bit-4.2.4-28.14.1 libgensec0-32bit-4.2.4-28.14.1 libgensec0-debuginfo-32bit-4.2.4-28.14.1 libndr-krb5pac0-32bit-4.2.4-28.14.1 libndr-krb5pac0-debuginfo-32bit-4.2.4-28.14.1 libndr-nbt0-32bit-4.2.4-28.14.1 libndr-nbt0-debuginfo-32bit-4.2.4-28.14.1 libndr-standard0-32bit-4.2.4-28.14.1 libndr-standard0-debuginfo-32bit-4.2.4-28.14.1 libndr0-32bit-4.2.4-28.14.1 libndr0-debuginfo-32bit-4.2.4-28.14.1 libnetapi0-32bit-4.2.4-28.14.1 libnetapi0-debuginfo-32bit-4.2.4-28.14.1 libsamba-credentials0-32bit-4.2.4-28.14.1 libsamba-credentials0-debuginfo-32bit-4.2.4-28.14.1 libsamba-hostconfig0-32bit-4.2.4-28.14.1 libsamba-hostconfig0-debuginfo-32bit-4.2.4-28.14.1 libsamba-passdb0-32bit-4.2.4-28.14.1 libsamba-passdb0-debuginfo-32bit-4.2.4-28.14.1 libsamba-util0-32bit-4.2.4-28.14.1 libsamba-util0-debuginfo-32bit-4.2.4-28.14.1 libsamdb0-32bit-4.2.4-28.14.1 libsamdb0-debuginfo-32bit-4.2.4-28.14.1 libsmbclient-raw0-32bit-4.2.4-28.14.1 libsmbclient-raw0-debuginfo-32bit-4.2.4-28.14.1 libsmbclient0-32bit-4.2.4-28.14.1 libsmbclient0-debuginfo-32bit-4.2.4-28.14.1 libsmbconf0-32bit-4.2.4-28.14.1 libsmbconf0-debuginfo-32bit-4.2.4-28.14.1 libsmbldap0-32bit-4.2.4-28.14.1 libsmbldap0-debuginfo-32bit-4.2.4-28.14.1 libtevent-util0-32bit-4.2.4-28.14.1 libtevent-util0-debuginfo-32bit-4.2.4-28.14.1 libwbclient0-32bit-4.2.4-28.14.1 libwbclient0-debuginfo-32bit-4.2.4-28.14.1 samba-32bit-4.2.4-28.14.1 samba-client-32bit-4.2.4-28.14.1 samba-client-debuginfo-32bit-4.2.4-28.14.1 samba-debuginfo-32bit-4.2.4-28.14.1 samba-libs-32bit-4.2.4-28.14.1 samba-libs-debuginfo-32bit-4.2.4-28.14.1 samba-winbind-32bit-4.2.4-28.14.1 samba-winbind-debuginfo-32bit-4.2.4-28.14.1 - SUSE Linux Enterprise Server 12-SP1 (noarch): samba-doc-4.2.4-28.14.1 - SUSE Linux Enterprise High Availability 12-SP1 (ppc64le s390x x86_64): ctdb-4.2.4-28.14.1 ctdb-debuginfo-4.2.4-28.14.1 - SUSE Linux Enterprise Desktop 12-SP2 (x86_64): libdcerpc-atsvc0-4.2.4-28.14.1 libdcerpc-atsvc0-debuginfo-4.2.4-28.14.1 - SUSE Linux Enterprise Desktop 12-SP1 (noarch): samba-doc-4.2.4-28.14.1 - SUSE Linux Enterprise Desktop 12-SP1 (x86_64): libdcerpc-binding0-32bit-4.2.4-28.14.1 libdcerpc-binding0-4.2.4-28.14.1 libdcerpc-binding0-debuginfo-32bit-4.2.4-28.14.1 libdcerpc-binding0-debuginfo-4.2.4-28.14.1 libdcerpc0-32bit-4.2.4-28.14.1 libdcerpc0-4.2.4-28.14.1 libdcerpc0-debuginfo-32bit-4.2.4-28.14.1 libdcerpc0-debuginfo-4.2.4-28.14.1 libgensec0-32bit-4.2.4-28.14.1 libgensec0-4.2.4-28.14.1 libgensec0-debuginfo-32bit-4.2.4-28.14.1 libgensec0-debuginfo-4.2.4-28.14.1 libndr-krb5pac0-32bit-4.2.4-28.14.1 libndr-krb5pac0-4.2.4-28.14.1 libndr-krb5pac0-debuginfo-32bit-4.2.4-28.14.1 libndr-krb5pac0-debuginfo-4.2.4-28.14.1 libndr-nbt0-32bit-4.2.4-28.14.1 libndr-nbt0-4.2.4-28.14.1 libndr-nbt0-debuginfo-32bit-4.2.4-28.14.1 libndr-nbt0-debuginfo-4.2.4-28.14.1 libndr-standard0-32bit-4.2.4-28.14.1 libndr-standard0-4.2.4-28.14.1 libndr-standard0-debuginfo-32bit-4.2.4-28.14.1 libndr-standard0-debuginfo-4.2.4-28.14.1 libndr0-32bit-4.2.4-28.14.1 libndr0-4.2.4-28.14.1 libndr0-debuginfo-32bit-4.2.4-28.14.1 libndr0-debuginfo-4.2.4-28.14.1 libnetapi0-32bit-4.2.4-28.14.1 libnetapi0-4.2.4-28.14.1 libnetapi0-debuginfo-32bit-4.2.4-28.14.1 libnetapi0-debuginfo-4.2.4-28.14.1 libregistry0-4.2.4-28.14.1 libregistry0-debuginfo-4.2.4-28.14.1 libsamba-credentials0-32bit-4.2.4-28.14.1 libsamba-credentials0-4.2.4-28.14.1 libsamba-credentials0-debuginfo-32bit-4.2.4-28.14.1 libsamba-credentials0-debuginfo-4.2.4-28.14.1 libsamba-hostconfig0-32bit-4.2.4-28.14.1 libsamba-hostconfig0-4.2.4-28.14.1 libsamba-hostconfig0-debuginfo-32bit-4.2.4-28.14.1 libsamba-hostconfig0-debuginfo-4.2.4-28.14.1 libsamba-passdb0-32bit-4.2.4-28.14.1 libsamba-passdb0-4.2.4-28.14.1 libsamba-passdb0-debuginfo-32bit-4.2.4-28.14.1 libsamba-passdb0-debuginfo-4.2.4-28.14.1 libsamba-util0-32bit-4.2.4-28.14.1 libsamba-util0-4.2.4-28.14.1 libsamba-util0-debuginfo-32bit-4.2.4-28.14.1 libsamba-util0-debuginfo-4.2.4-28.14.1 libsamdb0-32bit-4.2.4-28.14.1 libsamdb0-4.2.4-28.14.1 libsamdb0-debuginfo-32bit-4.2.4-28.14.1 libsamdb0-debuginfo-4.2.4-28.14.1 libsmbclient-raw0-32bit-4.2.4-28.14.1 libsmbclient-raw0-4.2.4-28.14.1 libsmbclient-raw0-debuginfo-32bit-4.2.4-28.14.1 libsmbclient-raw0-debuginfo-4.2.4-28.14.1 libsmbclient0-32bit-4.2.4-28.14.1 libsmbclient0-4.2.4-28.14.1 libsmbclient0-debuginfo-32bit-4.2.4-28.14.1 libsmbclient0-debuginfo-4.2.4-28.14.1 libsmbconf0-32bit-4.2.4-28.14.1 libsmbconf0-4.2.4-28.14.1 libsmbconf0-debuginfo-32bit-4.2.4-28.14.1 libsmbconf0-debuginfo-4.2.4-28.14.1 libsmbldap0-32bit-4.2.4-28.14.1 libsmbldap0-4.2.4-28.14.1 libsmbldap0-debuginfo-32bit-4.2.4-28.14.1 libsmbldap0-debuginfo-4.2.4-28.14.1 libtevent-util0-32bit-4.2.4-28.14.1 libtevent-util0-4.2.4-28.14.1 libtevent-util0-debuginfo-32bit-4.2.4-28.14.1 libtevent-util0-debuginfo-4.2.4-28.14.1 libwbclient0-32bit-4.2.4-28.14.1 libwbclient0-4.2.4-28.14.1 libwbclient0-debuginfo-32bit-4.2.4-28.14.1 libwbclient0-debuginfo-4.2.4-28.14.1 samba-32bit-4.2.4-28.14.1 samba-4.2.4-28.14.1 samba-client-32bit-4.2.4-28.14.1 samba-client-4.2.4-28.14.1 samba-client-debuginfo-32bit-4.2.4-28.14.1 samba-client-debuginfo-4.2.4-28.14.1 samba-debuginfo-32bit-4.2.4-28.14.1 samba-debuginfo-4.2.4-28.14.1 samba-debugsource-4.2.4-28.14.1 samba-libs-32bit-4.2.4-28.14.1 samba-libs-4.2.4-28.14.1 samba-libs-debuginfo-32bit-4.2.4-28.14.1 samba-libs-debuginfo-4.2.4-28.14.1 samba-winbind-32bit-4.2.4-28.14.1 samba-winbind-4.2.4-28.14.1 samba-winbind-debuginfo-32bit-4.2.4-28.14.1 samba-winbind-debuginfo-4.2.4-28.14.1 References: https://www.suse.com/security/cve/CVE-2017-7494.html https://bugzilla.suse.com/1038231 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2017:1391-1: important: Security update for samba
by opensuse-security＠opensuse.org 24 May '17

24 May '17

SUSE Security Update: Security update for samba ______________________________________________________________________________ Announcement ID: SUSE-SU-2017:1391-1 Rating: important References: #1038231 Cross-References: CVE-2017-7494 Affected Products: SUSE Linux Enterprise Software Development Kit 11-SP4 SUSE Linux Enterprise Server 11-SP4 SUSE Linux Enterprise Server 11-SP3-LTSS SUSE Linux Enterprise Point of Sale 11-SP3 SUSE Linux Enterprise Debuginfo 11-SP4 SUSE Linux Enterprise Debuginfo 11-SP3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for samba fixes the following issue: - An unprivileged user with access to the samba server could cause smbd to load a specially crafted shared library, which then had the ability to execute arbitrary code on the server as 'root'. [CVE-2017-7494, bso#12780, bsc#1038231] Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11-SP4: zypper in -t patch sdksp4-samba-13127=1 - SUSE Linux Enterprise Server 11-SP4: zypper in -t patch slessp4-samba-13127=1 - SUSE Linux Enterprise Server 11-SP3-LTSS: zypper in -t patch slessp3-samba-13127=1 - SUSE Linux Enterprise Point of Sale 11-SP3: zypper in -t patch sleposp3-samba-13127=1 - SUSE Linux Enterprise Debuginfo 11-SP4: zypper in -t patch dbgsp4-samba-13127=1 - SUSE Linux Enterprise Debuginfo 11-SP3: zypper in -t patch dbgsp3-samba-13127=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11-SP4 (i586 ia64 ppc64 s390x x86_64): libldb-devel-3.6.3-93.1 libnetapi-devel-3.6.3-93.1 libnetapi0-3.6.3-93.1 libsmbclient-devel-3.6.3-93.1 libsmbsharemodes-devel-3.6.3-93.1 libsmbsharemodes0-3.6.3-93.1 libtalloc-devel-3.6.3-93.1 libtdb-devel-3.6.3-93.1 libtevent-devel-3.6.3-93.1 libwbclient-devel-3.6.3-93.1 samba-devel-3.6.3-93.1 samba-test-3.6.3-93.1 - SUSE Linux Enterprise Server 11-SP4 (i586 ia64 ppc64 s390x x86_64): ldapsmb-1.34b-93.1 libldb1-3.6.3-93.1 libsmbclient0-3.6.3-93.1 libtalloc2-3.6.3-93.1 libtdb1-3.6.3-93.1 libtevent0-3.6.3-93.1 libwbclient0-3.6.3-93.1 samba-3.6.3-93.1 samba-client-3.6.3-93.1 samba-krb-printing-3.6.3-93.1 samba-winbind-3.6.3-93.1 - SUSE Linux Enterprise Server 11-SP4 (ppc64 s390x x86_64): libsmbclient0-32bit-3.6.3-93.1 libtalloc2-32bit-3.6.3-93.1 libtdb1-32bit-3.6.3-93.1 libtevent0-32bit-3.6.3-93.1 libwbclient0-32bit-3.6.3-93.1 samba-32bit-3.6.3-93.1 samba-client-32bit-3.6.3-93.1 samba-winbind-32bit-3.6.3-93.1 - SUSE Linux Enterprise Server 11-SP4 (noarch): samba-doc-3.6.3-93.1 - SUSE Linux Enterprise Server 11-SP4 (ia64): libsmbclient0-x86-3.6.3-93.1 libtalloc2-x86-3.6.3-93.1 libtdb1-x86-3.6.3-93.1 libtevent0-x86-3.6.3-93.1 libwbclient0-x86-3.6.3-93.1 samba-client-x86-3.6.3-93.1 samba-winbind-x86-3.6.3-93.1 samba-x86-3.6.3-93.1 - SUSE Linux Enterprise Server 11-SP3-LTSS (i586 s390x x86_64): ldapsmb-1.34b-93.1 libldb1-3.6.3-93.1 libsmbclient0-3.6.3-93.1 libtalloc2-3.6.3-93.1 libtdb1-3.6.3-93.1 libtevent0-3.6.3-93.1 libwbclient0-3.6.3-93.1 samba-3.6.3-93.1 samba-client-3.6.3-93.1 samba-krb-printing-3.6.3-93.1 samba-winbind-3.6.3-93.1 - SUSE Linux Enterprise Server 11-SP3-LTSS (s390x x86_64): libsmbclient0-32bit-3.6.3-93.1 libtalloc2-32bit-3.6.3-93.1 libtdb1-32bit-3.6.3-93.1 libtevent0-32bit-3.6.3-93.1 libwbclient0-32bit-3.6.3-93.1 samba-32bit-3.6.3-93.1 samba-client-32bit-3.6.3-93.1 samba-winbind-32bit-3.6.3-93.1 - SUSE Linux Enterprise Server 11-SP3-LTSS (noarch): samba-doc-3.6.3-93.1 - SUSE Linux Enterprise Point of Sale 11-SP3 (noarch): samba-doc-3.6.3-93.1 - SUSE Linux Enterprise Point of Sale 11-SP3 (i586): ldapsmb-1.34b-93.1 libldb1-3.6.3-93.1 libsmbclient0-3.6.3-93.1 libtalloc2-3.6.3-93.1 libtdb1-3.6.3-93.1 libtevent0-3.6.3-93.1 libwbclient0-3.6.3-93.1 samba-3.6.3-93.1 samba-client-3.6.3-93.1 samba-krb-printing-3.6.3-93.1 samba-winbind-3.6.3-93.1 - SUSE Linux Enterprise Debuginfo 11-SP4 (i586 ia64 ppc64 s390x x86_64): samba-debuginfo-3.6.3-93.1 samba-debugsource-3.6.3-93.1 - SUSE Linux Enterprise Debuginfo 11-SP4 (ppc64 s390x x86_64): samba-debuginfo-32bit-3.6.3-93.1 - SUSE Linux Enterprise Debuginfo 11-SP4 (ia64): samba-debuginfo-x86-3.6.3-93.1 - SUSE Linux Enterprise Debuginfo 11-SP3 (i586 s390x x86_64): samba-debuginfo-3.6.3-93.1 samba-debugsource-3.6.3-93.1 - SUSE Linux Enterprise Debuginfo 11-SP3 (s390x): samba-debuginfo-32bit-3.6.3-93.1 References: https://www.suse.com/security/cve/CVE-2017-7494.html https://bugzilla.suse.com/1038231 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2017:1387-1: important: Security update for java-1_7_1-ibm
by opensuse-security＠opensuse.org 23 May '17

23 May '17

SUSE Security Update: Security update for java-1_7_1-ibm ______________________________________________________________________________ Announcement ID: SUSE-SU-2017:1387-1 Rating: important References: #1038505 Cross-References: CVE-2016-9840 CVE-2016-9841 CVE-2016-9842 CVE-2016-9843 CVE-2017-1289 CVE-2017-3509 CVE-2017-3511 CVE-2017-3533 CVE-2017-3539 CVE-2017-3544 Affected Products: SUSE Linux Enterprise Software Development Kit 11-SP4 SUSE Linux Enterprise Server 11-SP4 ______________________________________________________________________________ An update that fixes 10 vulnerabilities is now available. Description: This update for java-1_7_1-ibm fixes the following issues: Version update to 7.1-4.5 bsc#1038505 - CVE-2016-9840: zlib: Out-of-bounds pointer arithmetic in inftrees.c - CVE-2016-9841: zlib: Out-of-bounds pointer arithmetic in inffast.c - CVE-2016-9842: zlib: Undefined left shift of negative number - CVE-2016-9843: zlib: Big-endian out-of-bounds pointer - CVE-2017-1289: IBM JDK: XML External Entity Injection (XXE) error when processing XML data - CVE-2017-3509: OpenJDK: improper re-use of NTLM authenticated connections - CVE-2017-3511: OpenJDK: untrusted extension directories search path in Launcher - CVE-2017-3539: OpenJDK: MD5 allowed for jar verification - CVE-2017-3533: OpenJDK: newline injection in the FTP client - CVE-2017-3544: OpenJDK: newline injection in the SMTP client Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11-SP4: zypper in -t patch sdksp4-java-1_7_1-ibm-13123=1 - SUSE Linux Enterprise Server 11-SP4: zypper in -t patch slessp4-java-1_7_1-ibm-13123=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11-SP4 (i586 ppc64 s390x x86_64): java-1_7_1-ibm-devel-1.7.1_sr4.5-25.1 - SUSE Linux Enterprise Server 11-SP4 (i586 ppc64 s390x x86_64): java-1_7_1-ibm-1.7.1_sr4.5-25.1 java-1_7_1-ibm-jdbc-1.7.1_sr4.5-25.1 - SUSE Linux Enterprise Server 11-SP4 (i586 x86_64): java-1_7_1-ibm-alsa-1.7.1_sr4.5-25.1 java-1_7_1-ibm-plugin-1.7.1_sr4.5-25.1 References: https://www.suse.com/security/cve/CVE-2016-9840.html https://www.suse.com/security/cve/CVE-2016-9841.html https://www.suse.com/security/cve/CVE-2016-9842.html https://www.suse.com/security/cve/CVE-2016-9843.html https://www.suse.com/security/cve/CVE-2017-1289.html https://www.suse.com/security/cve/CVE-2017-3509.html https://www.suse.com/security/cve/CVE-2017-3511.html https://www.suse.com/security/cve/CVE-2017-3533.html https://www.suse.com/security/cve/CVE-2017-3539.html https://www.suse.com/security/cve/CVE-2017-3544.html https://bugzilla.suse.com/1038505 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2017:1386-1: important: Security update for java-1_8_0-ibm
by opensuse-security＠opensuse.org 23 May '17

23 May '17

SUSE Security Update: Security update for java-1_8_0-ibm ______________________________________________________________________________ Announcement ID: SUSE-SU-2017:1386-1 Rating: important References: #1038505 Cross-References: CVE-2016-9840 CVE-2016-9841 CVE-2016-9842 CVE-2016-9843 CVE-2017-1289 CVE-2017-3509 CVE-2017-3511 CVE-2017-3533 CVE-2017-3539 CVE-2017-3544 Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP2 SUSE Linux Enterprise Software Development Kit 12-SP1 SUSE Linux Enterprise Server 12-SP2 SUSE Linux Enterprise Server 12-SP1 ______________________________________________________________________________ An update that fixes 10 vulnerabilities is now available. Description: This update for java-1_8_0-ibm fixes the following issues: Version update bsc#1038505: - CVE-2016-9840: zlib: Out-of-bounds pointer arithmetic in inftrees.c - CVE-2016-9841: zlib: Out-of-bounds pointer arithmetic in inffast.c - CVE-2016-9842: zlib: Undefined left shift of negative number - CVE-2016-9843: zlib: Big-endian out-of-bounds pointer - CVE-2017-3544: OpenJDK: newline injection in the SMTP client - CVE-2017-3509: OpenJDK: improper re-use of NTLM authenticated connections - CVE-2017-3511: OpenJDK: untrusted extension directories search path in Launcher - CVE-2017-3533: OpenJDK: newline injection in the FTP client - CVE-2017-3539: OpenJDK: MD5 allowed for jar verification - CVE-2017-1289: IBM JDK: XML External Entity Injection (XXE) error when processing XML data Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 12-SP2: zypper in -t patch SUSE-SLE-SDK-12-SP2-2017-844=1 - SUSE Linux Enterprise Software Development Kit 12-SP1: zypper in -t patch SUSE-SLE-SDK-12-SP1-2017-844=1 - SUSE Linux Enterprise Server 12-SP2: zypper in -t patch SUSE-SLE-SERVER-12-SP2-2017-844=1 - SUSE Linux Enterprise Server 12-SP1: zypper in -t patch SUSE-SLE-SERVER-12-SP1-2017-844=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 12-SP2 (ppc64le s390x x86_64): java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1 - SUSE Linux Enterprise Software Development Kit 12-SP1 (ppc64le s390x x86_64): java-1_8_0-ibm-devel-1.8.0_sr4.5-29.1 - SUSE Linux Enterprise Server 12-SP2 (ppc64le x86_64): java-1_8_0-ibm-1.8.0_sr4.5-29.1 - SUSE Linux Enterprise Server 12-SP2 (x86_64): java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1 java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1 - SUSE Linux Enterprise Server 12-SP1 (ppc64le s390x x86_64): java-1_8_0-ibm-1.8.0_sr4.5-29.1 - SUSE Linux Enterprise Server 12-SP1 (x86_64): java-1_8_0-ibm-alsa-1.8.0_sr4.5-29.1 java-1_8_0-ibm-plugin-1.8.0_sr4.5-29.1 References: https://www.suse.com/security/cve/CVE-2016-9840.html https://www.suse.com/security/cve/CVE-2016-9841.html https://www.suse.com/security/cve/CVE-2016-9842.html https://www.suse.com/security/cve/CVE-2016-9843.html https://www.suse.com/security/cve/CVE-2017-1289.html https://www.suse.com/security/cve/CVE-2017-3509.html https://www.suse.com/security/cve/CVE-2017-3511.html https://www.suse.com/security/cve/CVE-2017-3533.html https://www.suse.com/security/cve/CVE-2017-3539.html https://www.suse.com/security/cve/CVE-2017-3544.html https://bugzilla.suse.com/1038505 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2017:1384-1: important: Security update for java-1_7_0-ibm
by opensuse-security＠opensuse.org 23 May '17

23 May '17

SUSE Security Update: Security update for java-1_7_0-ibm ______________________________________________________________________________ Announcement ID: SUSE-SU-2017:1384-1 Rating: important References: #1038505 Cross-References: CVE-2016-9840 CVE-2016-9841 CVE-2016-9842 CVE-2016-9843 CVE-2017-1289 CVE-2017-3509 CVE-2017-3511 CVE-2017-3533 CVE-2017-3539 CVE-2017-3544 Affected Products: SUSE Linux Enterprise Server 11-SP3-LTSS SUSE Linux Enterprise Point of Sale 11-SP3 ______________________________________________________________________________ An update that fixes 10 vulnerabilities is now available. Description: This update for java-1_7_0-ibm fixes the following issues: Version update to 7.0-10.5 bsc#1038505 - CVE-2016-9840: zlib: Out-of-bounds pointer arithmetic in inftrees.c - CVE-2016-9841: zlib: Out-of-bounds pointer arithmetic in inffast.c - CVE-2016-9842: zlib: Undefined left shift of negative number - CVE-2016-9843: zlib: Big-endian out-of-bounds pointer - CVE-2017-1289: IBM JDK: XML External Entity Injection (XXE) error when processing XML data - CVE-2017-3509: OpenJDK: improper re-use of NTLM authenticated connections - CVE-2017-3511: OpenJDK: untrusted extension directories search path in Launcher - CVE-2017-3539: OpenJDK: MD5 allowed for jar verification - CVE-2017-3533: OpenJDK: newline injection in the FTP client - CVE-2017-3544: OpenJDK: newline injection in the SMTP client Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 11-SP3-LTSS: zypper in -t patch slessp3-java-1_7_0-ibm-13124=1 - SUSE Linux Enterprise Point of Sale 11-SP3: zypper in -t patch sleposp3-java-1_7_0-ibm-13124=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Server 11-SP3-LTSS (i586 s390x x86_64): java-1_7_0-ibm-1.7.0_sr10.5-64.1 java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1 java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1 - SUSE Linux Enterprise Server 11-SP3-LTSS (i586 x86_64): java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1 java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1 - SUSE Linux Enterprise Point of Sale 11-SP3 (i586): java-1_7_0-ibm-1.7.0_sr10.5-64.1 java-1_7_0-ibm-alsa-1.7.0_sr10.5-64.1 java-1_7_0-ibm-devel-1.7.0_sr10.5-64.1 java-1_7_0-ibm-jdbc-1.7.0_sr10.5-64.1 java-1_7_0-ibm-plugin-1.7.0_sr10.5-64.1 References: https://www.suse.com/security/cve/CVE-2016-9840.html https://www.suse.com/security/cve/CVE-2016-9841.html https://www.suse.com/security/cve/CVE-2016-9842.html https://www.suse.com/security/cve/CVE-2016-9843.html https://www.suse.com/security/cve/CVE-2017-1289.html https://www.suse.com/security/cve/CVE-2017-3509.html https://www.suse.com/security/cve/CVE-2017-3511.html https://www.suse.com/security/cve/CVE-2017-3533.html https://www.suse.com/security/cve/CVE-2017-3539.html https://www.suse.com/security/cve/CVE-2017-3544.html https://bugzilla.suse.com/1038505 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0