January 2018 - openSUSE Security Announce

[security-announce] SUSE-SU-2018:0073-1: important: Security update for tiff
by opensuse-security＠opensuse.org 12 Jan '18

12 Jan '18

SUSE Security Update: Security update for tiff ______________________________________________________________________________ Announcement ID: SUSE-SU-2018:0073-1 Rating: important References: #1017690 #1069213 #960341 #969783 #983436 Cross-References: CVE-2014-8128 CVE-2015-7554 CVE-2016-10095 CVE-2016-5318 CVE-2017-16232 Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP3 SUSE Linux Enterprise Software Development Kit 12-SP2 SUSE Linux Enterprise Server for Raspberry Pi 12-SP2 SUSE Linux Enterprise Server 12-SP3 SUSE Linux Enterprise Server 12-SP2 SUSE Linux Enterprise Desktop 12-SP3 SUSE Linux Enterprise Desktop 12-SP2 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for tiff to version 4.0.9 fixes the following issues: Security issues fixed: - CVE-2014-8128: Fix out-of-bounds read with malformed TIFF image in multiple tools (bsc#969783). - CVE-2015-7554: Fix invalid write in tiffsplit / _TIFFVGetField (bsc#960341). - CVE-2016-10095: Fix stack-based buffer overflow in _TIFFVGetField (tif_dir.c) (bsc#1017690). - CVE-2016-5318: Fix stackoverflow in thumbnail (bsc#983436). - CVE-2017-16232: Fix memory-based DoS in tiff2bw (bsc#1069213). Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 12-SP3: zypper in -t patch SUSE-SLE-SDK-12-SP3-2018-59=1 - SUSE Linux Enterprise Software Development Kit 12-SP2: zypper in -t patch SUSE-SLE-SDK-12-SP2-2018-59=1 - SUSE Linux Enterprise Server for Raspberry Pi 12-SP2: zypper in -t patch SUSE-SLE-RPI-12-SP2-2018-59=1 - SUSE Linux Enterprise Server 12-SP3: zypper in -t patch SUSE-SLE-SERVER-12-SP3-2018-59=1 - SUSE Linux Enterprise Server 12-SP2: zypper in -t patch SUSE-SLE-SERVER-12-SP2-2018-59=1 - SUSE Linux Enterprise Desktop 12-SP3: zypper in -t patch SUSE-SLE-DESKTOP-12-SP3-2018-59=1 - SUSE Linux Enterprise Desktop 12-SP2: zypper in -t patch SUSE-SLE-DESKTOP-12-SP2-2018-59=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 12-SP3 (aarch64 ppc64le s390x x86_64): libtiff-devel-4.0.9-44.7.1 tiff-debuginfo-4.0.9-44.7.1 tiff-debugsource-4.0.9-44.7.1 - SUSE Linux Enterprise Software Development Kit 12-SP2 (aarch64 ppc64le s390x x86_64): libtiff-devel-4.0.9-44.7.1 tiff-debuginfo-4.0.9-44.7.1 tiff-debugsource-4.0.9-44.7.1 - SUSE Linux Enterprise Server for Raspberry Pi 12-SP2 (aarch64): libtiff5-4.0.9-44.7.1 libtiff5-debuginfo-4.0.9-44.7.1 tiff-4.0.9-44.7.1 tiff-debuginfo-4.0.9-44.7.1 tiff-debugsource-4.0.9-44.7.1 - SUSE Linux Enterprise Server 12-SP3 (aarch64 ppc64le s390x x86_64): libtiff5-4.0.9-44.7.1 libtiff5-debuginfo-4.0.9-44.7.1 tiff-4.0.9-44.7.1 tiff-debuginfo-4.0.9-44.7.1 tiff-debugsource-4.0.9-44.7.1 - SUSE Linux Enterprise Server 12-SP3 (s390x x86_64): libtiff5-32bit-4.0.9-44.7.1 libtiff5-debuginfo-32bit-4.0.9-44.7.1 - SUSE Linux Enterprise Server 12-SP2 (aarch64 ppc64le s390x x86_64): libtiff5-4.0.9-44.7.1 libtiff5-debuginfo-4.0.9-44.7.1 tiff-4.0.9-44.7.1 tiff-debuginfo-4.0.9-44.7.1 tiff-debugsource-4.0.9-44.7.1 - SUSE Linux Enterprise Server 12-SP2 (s390x x86_64): libtiff5-32bit-4.0.9-44.7.1 libtiff5-debuginfo-32bit-4.0.9-44.7.1 - SUSE Linux Enterprise Desktop 12-SP3 (x86_64): libtiff5-32bit-4.0.9-44.7.1 libtiff5-4.0.9-44.7.1 libtiff5-debuginfo-32bit-4.0.9-44.7.1 libtiff5-debuginfo-4.0.9-44.7.1 tiff-debuginfo-4.0.9-44.7.1 tiff-debugsource-4.0.9-44.7.1 - SUSE Linux Enterprise Desktop 12-SP2 (x86_64): libtiff5-32bit-4.0.9-44.7.1 libtiff5-4.0.9-44.7.1 libtiff5-debuginfo-32bit-4.0.9-44.7.1 libtiff5-debuginfo-4.0.9-44.7.1 tiff-debuginfo-4.0.9-44.7.1 tiff-debugsource-4.0.9-44.7.1 References: https://www.suse.com/security/cve/CVE-2014-8128.html https://www.suse.com/security/cve/CVE-2015-7554.html https://www.suse.com/security/cve/CVE-2016-10095.html https://www.suse.com/security/cve/CVE-2016-5318.html https://www.suse.com/security/cve/CVE-2017-16232.html https://bugzilla.suse.com/1017690 https://bugzilla.suse.com/1069213 https://bugzilla.suse.com/960341 https://bugzilla.suse.com/969783 https://bugzilla.suse.com/983436 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2018:0071-1: important: Security update for glibc
by opensuse-security＠opensuse.org 12 Jan '18

12 Jan '18

SUSE Security Update: Security update for glibc ______________________________________________________________________________ Announcement ID: SUSE-SU-2018:0071-1 Rating: important References: #1074293 Cross-References: CVE-2018-1000001 Affected Products: SUSE OpenStack Cloud 6 SUSE Linux Enterprise Server for SAP 12-SP1 SUSE Linux Enterprise Server 12-SP1-LTSS ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for glibc fixes the following issues: - A privilege escalation bug in the realpath() function has been fixed. [CVE-2018-1000001, bsc#1074293] Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud 6: zypper in -t patch SUSE-OpenStack-Cloud-6-2018-56=1 - SUSE Linux Enterprise Server for SAP 12-SP1: zypper in -t patch SUSE-SLE-SAP-12-SP1-2018-56=1 - SUSE Linux Enterprise Server 12-SP1-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-SP1-2018-56=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE OpenStack Cloud 6 (noarch): glibc-html-2.19-40.9.5 glibc-i18ndata-2.19-40.9.5 glibc-info-2.19-40.9.5 - SUSE OpenStack Cloud 6 (x86_64): glibc-2.19-40.9.5 glibc-32bit-2.19-40.9.5 glibc-debuginfo-2.19-40.9.5 glibc-debuginfo-32bit-2.19-40.9.5 glibc-debugsource-2.19-40.9.5 glibc-devel-2.19-40.9.5 glibc-devel-32bit-2.19-40.9.5 glibc-devel-debuginfo-2.19-40.9.5 glibc-devel-debuginfo-32bit-2.19-40.9.5 glibc-locale-2.19-40.9.5 glibc-locale-32bit-2.19-40.9.5 glibc-locale-debuginfo-2.19-40.9.5 glibc-locale-debuginfo-32bit-2.19-40.9.5 glibc-profile-2.19-40.9.5 glibc-profile-32bit-2.19-40.9.5 nscd-2.19-40.9.5 nscd-debuginfo-2.19-40.9.5 - SUSE Linux Enterprise Server for SAP 12-SP1 (ppc64le x86_64): glibc-2.19-40.9.5 glibc-debuginfo-2.19-40.9.5 glibc-debugsource-2.19-40.9.5 glibc-devel-2.19-40.9.5 glibc-devel-debuginfo-2.19-40.9.5 glibc-locale-2.19-40.9.5 glibc-locale-debuginfo-2.19-40.9.5 glibc-profile-2.19-40.9.5 nscd-2.19-40.9.5 nscd-debuginfo-2.19-40.9.5 - SUSE Linux Enterprise Server for SAP 12-SP1 (x86_64): glibc-32bit-2.19-40.9.5 glibc-debuginfo-32bit-2.19-40.9.5 glibc-devel-32bit-2.19-40.9.5 glibc-devel-debuginfo-32bit-2.19-40.9.5 glibc-locale-32bit-2.19-40.9.5 glibc-locale-debuginfo-32bit-2.19-40.9.5 glibc-profile-32bit-2.19-40.9.5 - SUSE Linux Enterprise Server for SAP 12-SP1 (noarch): glibc-html-2.19-40.9.5 glibc-i18ndata-2.19-40.9.5 glibc-info-2.19-40.9.5 - SUSE Linux Enterprise Server 12-SP1-LTSS (ppc64le s390x x86_64): glibc-2.19-40.9.5 glibc-debuginfo-2.19-40.9.5 glibc-debugsource-2.19-40.9.5 glibc-devel-2.19-40.9.5 glibc-devel-debuginfo-2.19-40.9.5 glibc-locale-2.19-40.9.5 glibc-locale-debuginfo-2.19-40.9.5 glibc-profile-2.19-40.9.5 nscd-2.19-40.9.5 nscd-debuginfo-2.19-40.9.5 - SUSE Linux Enterprise Server 12-SP1-LTSS (s390x x86_64): glibc-32bit-2.19-40.9.5 glibc-debuginfo-32bit-2.19-40.9.5 glibc-devel-32bit-2.19-40.9.5 glibc-devel-debuginfo-32bit-2.19-40.9.5 glibc-locale-32bit-2.19-40.9.5 glibc-locale-debuginfo-32bit-2.19-40.9.5 glibc-profile-32bit-2.19-40.9.5 - SUSE Linux Enterprise Server 12-SP1-LTSS (noarch): glibc-html-2.19-40.9.5 glibc-i18ndata-2.19-40.9.5 glibc-info-2.19-40.9.5 References: https://www.suse.com/security/cve/CVE-2018-1000001.html https://bugzilla.suse.com/1074293 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2018:0069-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 11 Jan '18

11 Jan '18

SUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: SUSE-SU-2018:0069-1 Rating: important References: #1068032 Cross-References: CVE-2017-5715 CVE-2017-5753 Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP2 SUSE Linux Enterprise Server 12-SP2 SUSE Linux Enterprise High Availability 12-SP2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes. This update is only provided as a fix update for IBM Z platform. - CVE-2017-5753 / "Spectre Attack": IBM Z fixes were included but not enabled in the previous update. This update enables those fixes. - CVE-2017-5715 / "Spectre Attack": IBM Z fixes were already included in the previous update. A bugfix for the patches has been applied on top. - CVE-2017-5754: The IBM Z architecture is not affected by the "Meltdown" attack. Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 12-SP2: zypper in -t patch SUSE-SLE-SDK-12-SP2-2018-48=1 - SUSE Linux Enterprise Server 12-SP2: zypper in -t patch SUSE-SLE-SERVER-12-SP2-2018-48=1 - SUSE Linux Enterprise High Availability 12-SP2: zypper in -t patch SUSE-SLE-HA-12-SP2-2018-48=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 12-SP2 (noarch): kernel-docs-4.4.103-92.59.1 - SUSE Linux Enterprise Software Development Kit 12-SP2 (s390x): kernel-obs-build-4.4.103-92.59.1 kernel-obs-build-debugsource-4.4.103-92.59.1 - SUSE Linux Enterprise Server 12-SP2 (noarch): kernel-devel-4.4.103-92.59.1 kernel-macros-4.4.103-92.59.1 kernel-source-4.4.103-92.59.1 - SUSE Linux Enterprise Server 12-SP2 (s390x): kernel-default-4.4.103-92.59.1 kernel-default-base-4.4.103-92.59.1 kernel-default-base-debuginfo-4.4.103-92.59.1 kernel-default-debuginfo-4.4.103-92.59.1 kernel-default-debugsource-4.4.103-92.59.1 kernel-default-devel-4.4.103-92.59.1 kernel-default-man-4.4.103-92.59.1 kernel-syms-4.4.103-92.59.1 - SUSE Linux Enterprise High Availability 12-SP2 (s390x): cluster-md-kmp-default-4.4.103-92.59.1 cluster-md-kmp-default-debuginfo-4.4.103-92.59.1 cluster-network-kmp-default-4.4.103-92.59.1 cluster-network-kmp-default-debuginfo-4.4.103-92.59.1 dlm-kmp-default-4.4.103-92.59.1 dlm-kmp-default-debuginfo-4.4.103-92.59.1 gfs2-kmp-default-4.4.103-92.59.1 gfs2-kmp-default-debuginfo-4.4.103-92.59.1 kernel-default-debuginfo-4.4.103-92.59.1 kernel-default-debugsource-4.4.103-92.59.1 ocfs2-kmp-default-4.4.103-92.59.1 ocfs2-kmp-default-debuginfo-4.4.103-92.59.1 References: https://www.suse.com/security/cve/CVE-2017-5715.html https://www.suse.com/security/cve/CVE-2017-5753.html https://bugzilla.suse.com/1068032 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2018:0068-1: important: Security update for microcode_ctl
by opensuse-security＠opensuse.org 11 Jan '18

11 Jan '18

SUSE Security Update: Security update for microcode_ctl ______________________________________________________________________________ Announcement ID: SUSE-SU-2018:0068-1 Rating: important References: #1075262 Cross-References: CVE-2017-5715 Affected Products: SUSE Linux Enterprise Server 11-SP4 SUSE Linux Enterprise Server 11-SP3-LTSS SUSE Linux Enterprise Point of Sale 11-SP3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Update to Intel microcode version 20180108 (bsc#1075262 CVE-2017-5715) - The pre-released microcode fixing some important security issues is now officially published (and included in the added tarball). Among other updates it contains: - IVT C0 (06-3e-04:ed) 428->42a - SKL-U/Y D0 (06-4e-03:c0) ba->c2 - BDW-U/Y E/F (06-3d-04:c0) 25->28 - HSW-ULT Cx/Dx (06-45-01:72) 20->21 - Crystalwell Cx (06-46-01:32) 17->18 - BDW-H E/G (06-47-01:22) 17->1b - HSX-EX E0 (06-3f-04:80) 0f->10 - SKL-H/S R0 (06-5e-03:36) ba->c2 - HSW Cx/Dx (06-3c-03:32) 22->23 - HSX C0 (06-3f-02:6f) 3a->3b - BDX-DE V0/V1 (06-56-02:10) 0f->14 - BDX-DE V2 (06-56-03:10) 700000d->7000011 - KBL-U/Y H0 (06-8e-09:c0) 62->80 - KBL Y0 / CFL D0 (06-8e-0a:c0) 70->80 - KBL-H/S B0 (06-9e-09:2a) 5e->80 - CFL U0 (06-9e-0a:22) 70->80 - CFL B0 (06-9e-0b:02) 72->80 - SKX H0 (06-55-04:b7) 2000035->200003c - GLK B0 (06-7a-01:01) 1e->22 Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 11-SP4: zypper in -t patch slessp4-microcode_ctl-13406=1 - SUSE Linux Enterprise Server 11-SP3-LTSS: zypper in -t patch slessp3-microcode_ctl-13406=1 - SUSE Linux Enterprise Point of Sale 11-SP3: zypper in -t patch sleposp3-microcode_ctl-13406=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Server 11-SP4 (i586 x86_64): microcode_ctl-1.17-102.83.9.1 - SUSE Linux Enterprise Server 11-SP3-LTSS (i586 x86_64): microcode_ctl-1.17-102.83.9.1 - SUSE Linux Enterprise Point of Sale 11-SP3 (i586): microcode_ctl-1.17-102.83.9.1 References: https://www.suse.com/security/cve/CVE-2017-5715.html https://bugzilla.suse.com/1075262 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2018:0067-1: important: Security update for ucode-intel
by opensuse-security＠opensuse.org 11 Jan '18

11 Jan '18

SUSE Security Update: Security update for ucode-intel ______________________________________________________________________________ Announcement ID: SUSE-SU-2018:0067-1 Rating: important References: #1075262 Cross-References: CVE-2017-5715 Affected Products: SUSE OpenStack Cloud 6 SUSE Linux Enterprise Server for SAP 12-SP1 SUSE Linux Enterprise Server 12-SP3 SUSE Linux Enterprise Server 12-SP2 SUSE Linux Enterprise Server 12-SP1-LTSS SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Desktop 12-SP3 SUSE Linux Enterprise Desktop 12-SP2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ucode-intel fixes the following issues: Updated to Intel CPU Microcode version 20180108 (bsc#1075262) The pre-released microcode fixing some important security issues is now officially published (and included in the added tarball). New firmware updates since last version (20170707) are avail for these Intel processors: - IVT C0 (06-3e-04:ed) 428->42a - SKL-U/Y D0 (06-4e-03:c0) ba->c2 - BDW-U/Y E/F (06-3d-04:c0) 25->28 - HSW-ULT Cx/Dx (06-45-01:72) 20->21 - Crystalwell Cx (06-46-01:32) 17->18 - BDW-H E/G (06-47-01:22) 17->1b - HSX-EX E0 (06-3f-04:80) 0f->10 - SKL-H/S R0 (06-5e-03:36) ba->c2 - HSW Cx/Dx (06-3c-03:32) 22->23 - HSX C0 (06-3f-02:6f) 3a->3b - BDX-DE V0/V1 (06-56-02:10) 0f->14 - BDX-DE V2 (06-56-03:10) 700000d->7000011 - KBL-U/Y H0 (06-8e-09:c0) 62->80 - KBL Y0 / CFL D0 (06-8e-0a:c0) 70->80 - KBL-H/S B0 (06-9e-09:2a) 5e->80 - CFL U0 (06-9e-0a:22) 70->80 - CFL B0 (06-9e-0b:02) 72->80 - SKX H0 (06-55-04:b7) 2000035->200003c - GLK B0 (06-7a-01:01) 1e->22 Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud 6: zypper in -t patch SUSE-OpenStack-Cloud-6-2018-50=1 - SUSE Linux Enterprise Server for SAP 12-SP1: zypper in -t patch SUSE-SLE-SAP-12-SP1-2018-50=1 - SUSE Linux Enterprise Server 12-SP3: zypper in -t patch SUSE-SLE-SERVER-12-SP3-2018-50=1 - SUSE Linux Enterprise Server 12-SP2: zypper in -t patch SUSE-SLE-SERVER-12-SP2-2018-50=1 - SUSE Linux Enterprise Server 12-SP1-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-SP1-2018-50=1 - SUSE Linux Enterprise Server 12-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-2018-50=1 - SUSE Linux Enterprise Desktop 12-SP3: zypper in -t patch SUSE-SLE-DESKTOP-12-SP3-2018-50=1 - SUSE Linux Enterprise Desktop 12-SP2: zypper in -t patch SUSE-SLE-DESKTOP-12-SP2-2018-50=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE OpenStack Cloud 6 (x86_64): ucode-intel-20180108-13.11.1 ucode-intel-debuginfo-20180108-13.11.1 ucode-intel-debugsource-20180108-13.11.1 - SUSE Linux Enterprise Server for SAP 12-SP1 (x86_64): ucode-intel-20180108-13.11.1 ucode-intel-debuginfo-20180108-13.11.1 ucode-intel-debugsource-20180108-13.11.1 - SUSE Linux Enterprise Server 12-SP3 (x86_64): ucode-intel-20180108-13.11.1 ucode-intel-debuginfo-20180108-13.11.1 ucode-intel-debugsource-20180108-13.11.1 - SUSE Linux Enterprise Server 12-SP2 (x86_64): ucode-intel-20180108-13.11.1 ucode-intel-debuginfo-20180108-13.11.1 ucode-intel-debugsource-20180108-13.11.1 - SUSE Linux Enterprise Server 12-SP1-LTSS (x86_64): ucode-intel-20180108-13.11.1 ucode-intel-debuginfo-20180108-13.11.1 ucode-intel-debugsource-20180108-13.11.1 - SUSE Linux Enterprise Server 12-LTSS (x86_64): ucode-intel-20180108-13.11.1 ucode-intel-debuginfo-20180108-13.11.1 ucode-intel-debugsource-20180108-13.11.1 - SUSE Linux Enterprise Desktop 12-SP3 (x86_64): ucode-intel-20180108-13.11.1 ucode-intel-debuginfo-20180108-13.11.1 ucode-intel-debugsource-20180108-13.11.1 - SUSE Linux Enterprise Desktop 12-SP2 (x86_64): ucode-intel-20180108-13.11.1 ucode-intel-debuginfo-20180108-13.11.1 ucode-intel-debugsource-20180108-13.11.1 References: https://www.suse.com/security/cve/CVE-2017-5715.html https://bugzilla.suse.com/1075262 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:0066-1: important: Security update for ucode-intel
by opensuse-security＠opensuse.org 11 Jan '18

11 Jan '18

openSUSE Security Update: Security update for ucode-intel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:0066-1 Rating: important References: #1075262 Cross-References: CVE-2017-5715 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ucode-intel fixes the following issues: Update to Intel CPU Microcode version 20180108 (boo#1075262) - The pre-released microcode fixing some important security issues is now officially published (and included in the added tarball). New firmware updates since last version (20170707) are available for these Intel processors: - IVT C0 (06-3e-04:ed) 428->42a - SKL-U/Y D0 (06-4e-03:c0) ba->c2 - BDW-U/Y E/F (06-3d-04:c0) 25->28 - HSW-ULT Cx/Dx (06-45-01:72) 20->21 - Crystalwell Cx (06-46-01:32) 17->18 - BDW-H E/G (06-47-01:22) 17->1b - HSX-EX E0 (06-3f-04:80) 0f->10 - SKL-H/S R0 (06-5e-03:36) ba->c2 - HSW Cx/Dx (06-3c-03:32) 22->23 - HSX C0 (06-3f-02:6f) 3a->3b - BDX-DE V0/V1 (06-56-02:10) 0f->14 - BDX-DE V2 (06-56-03:10) 700000d->7000011 - KBL-U/Y H0 (06-8e-09:c0) 62->80 - KBL Y0 / CFL D0 (06-8e-0a:c0) 70->80 - KBL-H/S B0 (06-9e-09:2a) 5e->80 - CFL U0 (06-9e-0a:22) 70->80 - CFL B0 (06-9e-0b:02) 72->80 - SKX H0 (06-55-04:b7) 2000035->200003c - GLK B0 (06-7a-01:01) 1e->22 Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-24=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2018-24=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): ucode-intel-20180108-16.1 ucode-intel-blob-20180108-16.1 ucode-intel-debuginfo-20180108-16.1 ucode-intel-debugsource-20180108-16.1 - openSUSE Leap 42.2 (i586 x86_64): ucode-intel-20180108-7.12.1 ucode-intel-blob-20180108-7.12.1 ucode-intel-debuginfo-20180108-7.12.1 ucode-intel-debugsource-20180108-7.12.1 References: https://www.suse.com/security/cve/CVE-2017-5715.html https://bugzilla.suse.com/1075262 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2018:0065-1: important: Fixing security issues on OBS toolchain
by opensuse-security＠opensuse.org 11 Jan '18

11 Jan '18

SUSE Security Update: Fixing security issues on OBS toolchain ______________________________________________________________________________ Announcement ID: SUSE-SU-2018:0065-1 Rating: important References: #1059858 #1069904 #796918 #827480 #891829 #938556 #967265 #967610 Cross-References: CVE-2016-4007 CVE-2017-14804 CVE-2017-9274 Affected Products: SUSE Linux Enterprise Software Development Kit 11-SP4 ______________________________________________________________________________ An update that solves three vulnerabilities and has 5 fixes is now available. Description: This OBS toolchain update fixes the following issues: Package 'build': - CVE-2017-14804: Improve file name check extractbuild (bsc#1069904) - Fixed Dockerfile repository parsing Package 'obs-service-source_validator': - CVE-2017-9274: Don't use rpmbuild to extract sources, patches etc. from a spec (bnc#938556). - CVE-2016-4007: Several maintained source services are vulnerable to code/paramter injection (bsc#967265) - Update to version 0.7. - Use spec_query instead of output_versions using the specfile parser from the build package (boo#1059858) - obs-service-source_validator: several occurrences of uninitialized value (bsc#967610) - hack for util-linux specfiles (bnc#891829) - fix dependency to gnupg2 for Fedora (bnc#827480) - exit if tmpdir creation fails (bnc#796918) Package 'osc': - Update to version 0.162.0. Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11-SP4: zypper in -t patch sdksp4-build-13404=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11-SP4 (i586 ia64 ppc64 s390x x86_64): osc-0.162.1-7.4.1 - SUSE Linux Enterprise Software Development Kit 11-SP4 (noarch): build-20171128-8.3.3 References: https://www.suse.com/security/cve/CVE-2016-4007.html https://www.suse.com/security/cve/CVE-2017-14804.html https://www.suse.com/security/cve/CVE-2017-9274.html https://bugzilla.suse.com/1059858 https://bugzilla.suse.com/1069904 https://bugzilla.suse.com/796918 https://bugzilla.suse.com/827480 https://bugzilla.suse.com/891829 https://bugzilla.suse.com/938556 https://bugzilla.suse.com/967265 https://bugzilla.suse.com/967610 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2018:0061-1: important: Security update for java-1_7_0-ibm
by opensuse-security＠opensuse.org 10 Jan '18

10 Jan '18

SUSE Security Update: Security update for java-1_7_0-ibm ______________________________________________________________________________ Announcement ID: SUSE-SU-2018:0061-1 Rating: important References: #1070162 Cross-References: CVE-2016-10165 CVE-2016-9841 CVE-2017-10281 CVE-2017-10285 CVE-2017-10293 CVE-2017-10295 CVE-2017-10345 CVE-2017-10346 CVE-2017-10347 CVE-2017-10348 CVE-2017-10349 CVE-2017-10350 CVE-2017-10355 CVE-2017-10356 CVE-2017-10357 CVE-2017-10388 Affected Products: SUSE Linux Enterprise Server 11-SP3-LTSS SUSE Linux Enterprise Point of Sale 11-SP3 ______________________________________________________________________________ An update that fixes 16 vulnerabilities is now available. Description: This update for java-1_7_0-ibm fixes the following issues: - Security update to version 7.0.10.15 (bsc#1070162): * CVE-2017-10346 CVE-2017-10285 CVE-2017-10388 CVE-2017-10356 CVE-2017-10293 CVE-2016-9841 CVE-2016-10165 CVE-2017-10355 CVE-2017-10357 CVE-2017-10348 CVE-2017-10349 CVE-2017-10347 CVE-2017-10350 CVE-2017-10281 CVE-2017-10295 CVE-2017-10345 Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 11-SP3-LTSS: zypper in -t patch slessp3-java-1_7_0-ibm-13401=1 - SUSE Linux Enterprise Point of Sale 11-SP3: zypper in -t patch sleposp3-java-1_7_0-ibm-13401=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Server 11-SP3-LTSS (i586 s390x x86_64): java-1_7_0-ibm-1.7.0_sr10.15-65.8.1 java-1_7_0-ibm-devel-1.7.0_sr10.15-65.8.1 java-1_7_0-ibm-jdbc-1.7.0_sr10.15-65.8.1 - SUSE Linux Enterprise Server 11-SP3-LTSS (i586 x86_64): java-1_7_0-ibm-alsa-1.7.0_sr10.15-65.8.1 java-1_7_0-ibm-plugin-1.7.0_sr10.15-65.8.1 - SUSE Linux Enterprise Point of Sale 11-SP3 (i586): java-1_7_0-ibm-1.7.0_sr10.15-65.8.1 java-1_7_0-ibm-alsa-1.7.0_sr10.15-65.8.1 java-1_7_0-ibm-devel-1.7.0_sr10.15-65.8.1 java-1_7_0-ibm-jdbc-1.7.0_sr10.15-65.8.1 java-1_7_0-ibm-plugin-1.7.0_sr10.15-65.8.1 References: https://www.suse.com/security/cve/CVE-2016-10165.html https://www.suse.com/security/cve/CVE-2016-9841.html https://www.suse.com/security/cve/CVE-2017-10281.html https://www.suse.com/security/cve/CVE-2017-10285.html https://www.suse.com/security/cve/CVE-2017-10293.html https://www.suse.com/security/cve/CVE-2017-10295.html https://www.suse.com/security/cve/CVE-2017-10345.html https://www.suse.com/security/cve/CVE-2017-10346.html https://www.suse.com/security/cve/CVE-2017-10347.html https://www.suse.com/security/cve/CVE-2017-10348.html https://www.suse.com/security/cve/CVE-2017-10349.html https://www.suse.com/security/cve/CVE-2017-10350.html https://www.suse.com/security/cve/CVE-2017-10355.html https://www.suse.com/security/cve/CVE-2017-10356.html https://www.suse.com/security/cve/CVE-2017-10357.html https://www.suse.com/security/cve/CVE-2017-10388.html https://bugzilla.suse.com/1070162 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:0059-1: important: Security update for qemu
by opensuse-security＠opensuse.org 10 Jan '18

10 Jan '18

openSUSE Security Update: Security update for qemu ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:0059-1 Rating: important References: #1068032 Cross-References: CVE-2017-5715 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for qemu fixes the following issues: This update for qemu fixes the following issues: A mitigation for a security flaw has been applied: - CVE-2017-5715: QEMU was updated to allow passing through new MSR and CPUID flags from the host VM to the CPU, to allow enabling/disabling branch prediction features in the Intel CPU. (bsc#1068032) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2018-20=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): qemu-2.6.2-31.18.1 qemu-arm-2.6.2-31.18.1 qemu-arm-debuginfo-2.6.2-31.18.1 qemu-block-curl-2.6.2-31.18.1 qemu-block-curl-debuginfo-2.6.2-31.18.1 qemu-block-dmg-2.6.2-31.18.1 qemu-block-dmg-debuginfo-2.6.2-31.18.1 qemu-block-iscsi-2.6.2-31.18.1 qemu-block-iscsi-debuginfo-2.6.2-31.18.1 qemu-block-ssh-2.6.2-31.18.1 qemu-block-ssh-debuginfo-2.6.2-31.18.1 qemu-debugsource-2.6.2-31.18.1 qemu-extra-2.6.2-31.18.1 qemu-extra-debuginfo-2.6.2-31.18.1 qemu-guest-agent-2.6.2-31.18.1 qemu-guest-agent-debuginfo-2.6.2-31.18.1 qemu-kvm-2.6.2-31.18.1 qemu-lang-2.6.2-31.18.1 qemu-linux-user-2.6.2-31.18.1 qemu-linux-user-debuginfo-2.6.2-31.18.1 qemu-linux-user-debugsource-2.6.2-31.18.1 qemu-ppc-2.6.2-31.18.1 qemu-ppc-debuginfo-2.6.2-31.18.1 qemu-s390-2.6.2-31.18.1 qemu-s390-debuginfo-2.6.2-31.18.1 qemu-testsuite-2.6.2-31.18.1 qemu-tools-2.6.2-31.18.1 qemu-tools-debuginfo-2.6.2-31.18.1 qemu-x86-2.6.2-31.18.1 qemu-x86-debuginfo-2.6.2-31.18.1 - openSUSE Leap 42.2 (x86_64): qemu-block-rbd-2.6.2-31.18.1 qemu-block-rbd-debuginfo-2.6.2-31.18.1 - openSUSE Leap 42.2 (noarch): qemu-ipxe-1.0.0-31.18.1 qemu-seabios-1.9.1-31.18.1 qemu-sgabios-8-31.18.1 qemu-vgabios-1.9.1-31.18.1 References: https://www.suse.com/security/cve/CVE-2017-5715.html https://bugzilla.suse.com/1068032 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2018:0056-1: important: Security update for qemu
by opensuse-security＠opensuse.org 09 Jan '18

09 Jan '18

SUSE Security Update: Security update for qemu ______________________________________________________________________________ Announcement ID: SUSE-SU-2018:0056-1 Rating: important References: #1068032 Cross-References: CVE-2017-5715 Affected Products: SUSE OpenStack Cloud 6 SUSE Linux Enterprise Server for SAP 12-SP1 SUSE Linux Enterprise Server 12-SP1-LTSS ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for qemu fixes the following issues: A mitigation for a security flaw has been applied: - CVE-2017-5715: QEMU was updated to allow passing through new MSR and CPUID flags from the host VM to the CPU, to allow enabling/disabling branch prediction features in the Intel CPU. (bsc#1068032) Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud 6: zypper in -t patch SUSE-OpenStack-Cloud-6-2018-39=1 - SUSE Linux Enterprise Server for SAP 12-SP1: zypper in -t patch SUSE-SLE-SAP-12-SP1-2018-39=1 - SUSE Linux Enterprise Server 12-SP1-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-SP1-2018-39=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE OpenStack Cloud 6 (noarch): qemu-ipxe-1.0.0-33.6.1 qemu-seabios-1.8.1-33.6.1 qemu-sgabios-8-33.6.1 qemu-vgabios-1.8.1-33.6.1 - SUSE OpenStack Cloud 6 (x86_64): qemu-2.3.1-33.6.1 qemu-block-curl-2.3.1-33.6.1 qemu-block-curl-debuginfo-2.3.1-33.6.1 qemu-block-rbd-2.3.1-33.6.1 qemu-block-rbd-debuginfo-2.3.1-33.6.1 qemu-debugsource-2.3.1-33.6.1 qemu-guest-agent-2.3.1-33.6.1 qemu-guest-agent-debuginfo-2.3.1-33.6.1 qemu-kvm-2.3.1-33.6.1 qemu-lang-2.3.1-33.6.1 qemu-tools-2.3.1-33.6.1 qemu-tools-debuginfo-2.3.1-33.6.1 qemu-x86-2.3.1-33.6.1 - SUSE Linux Enterprise Server for SAP 12-SP1 (ppc64le x86_64): qemu-2.3.1-33.6.1 qemu-block-curl-2.3.1-33.6.1 qemu-block-curl-debuginfo-2.3.1-33.6.1 qemu-debugsource-2.3.1-33.6.1 qemu-guest-agent-2.3.1-33.6.1 qemu-guest-agent-debuginfo-2.3.1-33.6.1 qemu-lang-2.3.1-33.6.1 qemu-tools-2.3.1-33.6.1 qemu-tools-debuginfo-2.3.1-33.6.1 - SUSE Linux Enterprise Server for SAP 12-SP1 (ppc64le): qemu-ppc-2.3.1-33.6.1 qemu-ppc-debuginfo-2.3.1-33.6.1 - SUSE Linux Enterprise Server for SAP 12-SP1 (x86_64): qemu-block-rbd-2.3.1-33.6.1 qemu-block-rbd-debuginfo-2.3.1-33.6.1 qemu-kvm-2.3.1-33.6.1 qemu-x86-2.3.1-33.6.1 - SUSE Linux Enterprise Server for SAP 12-SP1 (noarch): qemu-ipxe-1.0.0-33.6.1 qemu-seabios-1.8.1-33.6.1 qemu-sgabios-8-33.6.1 qemu-vgabios-1.8.1-33.6.1 - SUSE Linux Enterprise Server 12-SP1-LTSS (ppc64le s390x x86_64): qemu-2.3.1-33.6.1 qemu-block-curl-2.3.1-33.6.1 qemu-block-curl-debuginfo-2.3.1-33.6.1 qemu-debugsource-2.3.1-33.6.1 qemu-guest-agent-2.3.1-33.6.1 qemu-guest-agent-debuginfo-2.3.1-33.6.1 qemu-lang-2.3.1-33.6.1 qemu-tools-2.3.1-33.6.1 qemu-tools-debuginfo-2.3.1-33.6.1 - SUSE Linux Enterprise Server 12-SP1-LTSS (s390x x86_64): qemu-kvm-2.3.1-33.6.1 - SUSE Linux Enterprise Server 12-SP1-LTSS (ppc64le): qemu-ppc-2.3.1-33.6.1 qemu-ppc-debuginfo-2.3.1-33.6.1 - SUSE Linux Enterprise Server 12-SP1-LTSS (x86_64): qemu-block-rbd-2.3.1-33.6.1 qemu-block-rbd-debuginfo-2.3.1-33.6.1 qemu-x86-2.3.1-33.6.1 - SUSE Linux Enterprise Server 12-SP1-LTSS (noarch): qemu-ipxe-1.0.0-33.6.1 qemu-seabios-1.8.1-33.6.1 qemu-sgabios-8-33.6.1 qemu-vgabios-1.8.1-33.6.1 - SUSE Linux Enterprise Server 12-SP1-LTSS (s390x): qemu-s390-2.3.1-33.6.1 qemu-s390-debuginfo-2.3.1-33.6.1 References: https://www.suse.com/security/cve/CVE-2017-5715.html https://bugzilla.suse.com/1068032 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0