February 2018 - openSUSE Security Announce

[security-announce] SUSE-SU-2018:0455-1: important: Security update for quagga
by opensuse-security＠opensuse.org 16 Feb '18

16 Feb '18

SUSE Security Update: Security update for quagga ______________________________________________________________________________ Announcement ID: SUSE-SU-2018:0455-1 Rating: important References: #1021669 #1065641 #1079798 #1079799 #1079800 #1079801 Cross-References: CVE-2017-16227 CVE-2017-5495 CVE-2018-5378 CVE-2018-5379 CVE-2018-5380 CVE-2018-5381 Affected Products: SUSE OpenStack Cloud 6 SUSE Linux Enterprise Server for SAP 12-SP1 SUSE Linux Enterprise Server 12-SP1-LTSS SUSE Linux Enterprise Server 12-LTSS ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for quagga fixes the following security issues: - The Quagga BGP daemon contained a bug in the AS_PATH size calculation that could have been exploited to facilitate a remote denial-of-service attack via specially crafted BGP UPDATE messages. [CVE-2017-16227, bsc#1065641] - The Quagga BGP daemon did not check whether data sent to peers via NOTIFY had an invalid attribute length. It was possible to exploit this issue and cause the bgpd process to leak sensitive information over the network to a configured peer. [CVE-2018-5378, bsc#1079798] - The Quagga BGP daemon used to double-free memory when processing certain forms of UPDATE messages. This issue could be exploited by sending an optional/transitive UPDATE attribute that all conforming eBGP speakers should pass along. Consequently, a single UPDATE message could have affected many bgpd processes across a wide area of a network. Through this vulnerability, attackers could potentially have taken over control of affected bgpd processes remotely. [CVE-2018-5379, bsc#1079799] - It was possible to overrun internal BGP code-to-string conversion tables in the Quagga BGP daemon. Configured peers could have exploited this issue and cause bgpd to emit debug and warning messages into the logs that would contained arbitrary bytes. [CVE-2018-5380, bsc#1079800] - The Quagga BGP daemon could have entered an infinite loop if sent an invalid OPEN message by a configured peer. If this issue was exploited, then bgpd would cease to respond to any other events. BGP sessions would have been dropped and not be reestablished. The CLI interface would have been unresponsive. The bgpd daemon would have stayed in this state until restarted. [CVE-2018-5381, bsc#1079801] - The Quagga daemon's telnet "vty" CLI contains an unbounded memory allocation bug that could be exploited for a denial-of-service attack on the daemon. This issue has been fixed. [CVE-2017-5495, bsc#1021669] - The telnet "vty" CLI of the Quagga daemon is no longer enabled by default, because the passwords in the default "zebra.conf" config file are now disabled. The vty interface is available via "vtysh" utility using pam authentication to permit management access for root without password. [bsc#1021669] Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud 6: zypper in -t patch SUSE-OpenStack-Cloud-6-2018-315=1 - SUSE Linux Enterprise Server for SAP 12-SP1: zypper in -t patch SUSE-SLE-SAP-12-SP1-2018-315=1 - SUSE Linux Enterprise Server 12-SP1-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-SP1-2018-315=1 - SUSE Linux Enterprise Server 12-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-2018-315=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE OpenStack Cloud 6 (x86_64): quagga-0.99.22.1-16.4.1 quagga-debuginfo-0.99.22.1-16.4.1 quagga-debugsource-0.99.22.1-16.4.1 - SUSE Linux Enterprise Server for SAP 12-SP1 (ppc64le x86_64): quagga-0.99.22.1-16.4.1 quagga-debuginfo-0.99.22.1-16.4.1 quagga-debugsource-0.99.22.1-16.4.1 - SUSE Linux Enterprise Server 12-SP1-LTSS (ppc64le s390x x86_64): quagga-0.99.22.1-16.4.1 quagga-debuginfo-0.99.22.1-16.4.1 quagga-debugsource-0.99.22.1-16.4.1 - SUSE Linux Enterprise Server 12-LTSS (ppc64le s390x x86_64): quagga-0.99.22.1-16.4.1 quagga-debuginfo-0.99.22.1-16.4.1 quagga-debugsource-0.99.22.1-16.4.1 References: https://www.suse.com/security/cve/CVE-2017-16227.html https://www.suse.com/security/cve/CVE-2017-5495.html https://www.suse.com/security/cve/CVE-2018-5378.html https://www.suse.com/security/cve/CVE-2018-5379.html https://www.suse.com/security/cve/CVE-2018-5380.html https://www.suse.com/security/cve/CVE-2018-5381.html https://bugzilla.suse.com/1021669 https://bugzilla.suse.com/1065641 https://bugzilla.suse.com/1079798 https://bugzilla.suse.com/1079799 https://bugzilla.suse.com/1079800 https://bugzilla.suse.com/1079801 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:0454-1: important: Security update for chromium
by opensuse-security＠opensuse.org 15 Feb '18

15 Feb '18

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:0454-1 Rating: important References: #1080920 Cross-References: CVE-2018-6056 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for chromium to version 64.0.3282.167 fixes the following issue: * CVE-2018-6056: Incorrect derived class instantiation in V8 (bsc#1080920) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2018-165=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): chromedriver-64.0.3282.167-52.1 chromium-64.0.3282.167-52.1 References: https://www.suse.com/security/cve/CVE-2018-6056.html https://bugzilla.suse.com/1080920 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:0453-1: important: Security update for chromium
by opensuse-security＠opensuse.org 15 Feb '18

15 Feb '18

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:0453-1 Rating: important References: #1080920 Cross-References: CVE-2018-6056 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for chromium to version 64.0.3282.167 fixes the following issue: * CVE-2018-6056: Incorrect derived class instantiation in V8 (bsc#1080920) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-165=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (x86_64): chromedriver-64.0.3282.167-141.1 chromedriver-debuginfo-64.0.3282.167-141.1 chromium-64.0.3282.167-141.1 chromium-debuginfo-64.0.3282.167-141.1 chromium-debugsource-64.0.3282.167-141.1 References: https://www.suse.com/security/cve/CVE-2018-6056.html https://bugzilla.suse.com/1080920 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2018:0451-1: important: Security update for glibc
by opensuse-security＠opensuse.org 15 Feb '18

15 Feb '18

SUSE Security Update: Security update for glibc ______________________________________________________________________________ Announcement ID: SUSE-SU-2018:0451-1 Rating: important References: #1037930 #1051791 #1073990 #1074293 #1079036 Cross-References: CVE-2017-12132 CVE-2017-8804 CVE-2018-1000001 CVE-2018-6485 CVE-2018-6551 Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP3 SUSE Linux Enterprise Software Development Kit 12-SP2 SUSE Linux Enterprise Server for Raspberry Pi 12-SP2 SUSE Linux Enterprise Server 12-SP3 SUSE Linux Enterprise Server 12-SP2 SUSE Linux Enterprise Desktop 12-SP3 SUSE Linux Enterprise Desktop 12-SP2 SUSE CaaS Platform ALL OpenStack Cloud Magnum Orchestration 7 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for glibc fixes the following issues: Security issues fixed: - CVE-2017-8804: Fix memory leak after deserialization failure in xdr_bytes, xdr_string (bsc#1037930) - CVE-2017-12132: Reduce EDNS payload size to 1200 bytes (bsc#1051791) - CVE-2018-6485,CVE-2018-6551: Fix integer overflows in internal memalign and malloc functions (bsc#1079036) - CVE-2018-1000001: Avoid underflow of malloced area (bsc#1074293) Non security bugs fixed: - Release read lock after resetting timeout (bsc#1073990) Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 12-SP3: zypper in -t patch SUSE-SLE-SDK-12-SP3-2018-314=1 - SUSE Linux Enterprise Software Development Kit 12-SP2: zypper in -t patch SUSE-SLE-SDK-12-SP2-2018-314=1 - SUSE Linux Enterprise Server for Raspberry Pi 12-SP2: zypper in -t patch SUSE-SLE-RPI-12-SP2-2018-314=1 - SUSE Linux Enterprise Server 12-SP3: zypper in -t patch SUSE-SLE-SERVER-12-SP3-2018-314=1 - SUSE Linux Enterprise Server 12-SP2: zypper in -t patch SUSE-SLE-SERVER-12-SP2-2018-314=1 - SUSE Linux Enterprise Desktop 12-SP3: zypper in -t patch SUSE-SLE-DESKTOP-12-SP3-2018-314=1 - SUSE Linux Enterprise Desktop 12-SP2: zypper in -t patch SUSE-SLE-DESKTOP-12-SP2-2018-314=1 - SUSE CaaS Platform ALL: zypper in -t patch SUSE-CAASP-ALL-2018-314=1 - OpenStack Cloud Magnum Orchestration 7: zypper in -t patch SUSE-OpenStack-Cloud-Magnum-Orchestration-7-2018-314=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 12-SP3 (aarch64 ppc64le s390x x86_64): glibc-debuginfo-2.22-62.6.2 glibc-debugsource-2.22-62.6.2 glibc-devel-static-2.22-62.6.2 - SUSE Linux Enterprise Software Development Kit 12-SP3 (noarch): glibc-info-2.22-62.6.2 - SUSE Linux Enterprise Software Development Kit 12-SP2 (aarch64 ppc64le s390x x86_64): glibc-debuginfo-2.22-62.6.2 glibc-debugsource-2.22-62.6.2 glibc-devel-static-2.22-62.6.2 - SUSE Linux Enterprise Software Development Kit 12-SP2 (noarch): glibc-info-2.22-62.6.2 - SUSE Linux Enterprise Server for Raspberry Pi 12-SP2 (aarch64): glibc-2.22-62.6.2 glibc-debuginfo-2.22-62.6.2 glibc-debugsource-2.22-62.6.2 glibc-devel-2.22-62.6.2 glibc-devel-debuginfo-2.22-62.6.2 glibc-locale-2.22-62.6.2 glibc-locale-debuginfo-2.22-62.6.2 glibc-profile-2.22-62.6.2 nscd-2.22-62.6.2 nscd-debuginfo-2.22-62.6.2 - SUSE Linux Enterprise Server for Raspberry Pi 12-SP2 (noarch): glibc-html-2.22-62.6.2 glibc-i18ndata-2.22-62.6.2 glibc-info-2.22-62.6.2 - SUSE Linux Enterprise Server 12-SP3 (aarch64 ppc64le s390x x86_64): glibc-2.22-62.6.2 glibc-debuginfo-2.22-62.6.2 glibc-debugsource-2.22-62.6.2 glibc-devel-2.22-62.6.2 glibc-devel-debuginfo-2.22-62.6.2 glibc-locale-2.22-62.6.2 glibc-locale-debuginfo-2.22-62.6.2 glibc-profile-2.22-62.6.2 nscd-2.22-62.6.2 nscd-debuginfo-2.22-62.6.2 - SUSE Linux Enterprise Server 12-SP3 (s390x x86_64): glibc-32bit-2.22-62.6.2 glibc-debuginfo-32bit-2.22-62.6.2 glibc-devel-32bit-2.22-62.6.2 glibc-devel-debuginfo-32bit-2.22-62.6.2 glibc-locale-32bit-2.22-62.6.2 glibc-locale-debuginfo-32bit-2.22-62.6.2 glibc-profile-32bit-2.22-62.6.2 - SUSE Linux Enterprise Server 12-SP3 (noarch): glibc-html-2.22-62.6.2 glibc-i18ndata-2.22-62.6.2 glibc-info-2.22-62.6.2 - SUSE Linux Enterprise Server 12-SP2 (aarch64 ppc64le s390x x86_64): glibc-2.22-62.6.2 glibc-debuginfo-2.22-62.6.2 glibc-debugsource-2.22-62.6.2 glibc-devel-2.22-62.6.2 glibc-devel-debuginfo-2.22-62.6.2 glibc-locale-2.22-62.6.2 glibc-locale-debuginfo-2.22-62.6.2 glibc-profile-2.22-62.6.2 nscd-2.22-62.6.2 nscd-debuginfo-2.22-62.6.2 - SUSE Linux Enterprise Server 12-SP2 (s390x x86_64): glibc-32bit-2.22-62.6.2 glibc-debuginfo-32bit-2.22-62.6.2 glibc-devel-32bit-2.22-62.6.2 glibc-devel-debuginfo-32bit-2.22-62.6.2 glibc-locale-32bit-2.22-62.6.2 glibc-locale-debuginfo-32bit-2.22-62.6.2 glibc-profile-32bit-2.22-62.6.2 - SUSE Linux Enterprise Server 12-SP2 (noarch): glibc-html-2.22-62.6.2 glibc-i18ndata-2.22-62.6.2 glibc-info-2.22-62.6.2 - SUSE Linux Enterprise Desktop 12-SP3 (x86_64): glibc-2.22-62.6.2 glibc-32bit-2.22-62.6.2 glibc-debuginfo-2.22-62.6.2 glibc-debuginfo-32bit-2.22-62.6.2 glibc-debugsource-2.22-62.6.2 glibc-devel-2.22-62.6.2 glibc-devel-32bit-2.22-62.6.2 glibc-devel-debuginfo-2.22-62.6.2 glibc-devel-debuginfo-32bit-2.22-62.6.2 glibc-locale-2.22-62.6.2 glibc-locale-32bit-2.22-62.6.2 glibc-locale-debuginfo-2.22-62.6.2 glibc-locale-debuginfo-32bit-2.22-62.6.2 nscd-2.22-62.6.2 nscd-debuginfo-2.22-62.6.2 - SUSE Linux Enterprise Desktop 12-SP3 (noarch): glibc-i18ndata-2.22-62.6.2 - SUSE Linux Enterprise Desktop 12-SP2 (noarch): glibc-i18ndata-2.22-62.6.2 - SUSE Linux Enterprise Desktop 12-SP2 (x86_64): glibc-2.22-62.6.2 glibc-32bit-2.22-62.6.2 glibc-debuginfo-2.22-62.6.2 glibc-debuginfo-32bit-2.22-62.6.2 glibc-debugsource-2.22-62.6.2 glibc-devel-2.22-62.6.2 glibc-devel-32bit-2.22-62.6.2 glibc-devel-debuginfo-2.22-62.6.2 glibc-devel-debuginfo-32bit-2.22-62.6.2 glibc-locale-2.22-62.6.2 glibc-locale-32bit-2.22-62.6.2 glibc-locale-debuginfo-2.22-62.6.2 glibc-locale-debuginfo-32bit-2.22-62.6.2 nscd-2.22-62.6.2 nscd-debuginfo-2.22-62.6.2 - SUSE CaaS Platform ALL (x86_64): glibc-2.22-62.6.2 glibc-debuginfo-2.22-62.6.2 glibc-debugsource-2.22-62.6.2 glibc-locale-2.22-62.6.2 glibc-locale-debuginfo-2.22-62.6.2 - OpenStack Cloud Magnum Orchestration 7 (x86_64): glibc-2.22-62.6.2 glibc-debuginfo-2.22-62.6.2 glibc-debugsource-2.22-62.6.2 glibc-locale-2.22-62.6.2 glibc-locale-debuginfo-2.22-62.6.2 References: https://www.suse.com/security/cve/CVE-2017-12132.html https://www.suse.com/security/cve/CVE-2017-8804.html https://www.suse.com/security/cve/CVE-2018-1000001.html https://www.suse.com/security/cve/CVE-2018-6485.html https://www.suse.com/security/cve/CVE-2018-6551.html https://bugzilla.suse.com/1037930 https://bugzilla.suse.com/1051791 https://bugzilla.suse.com/1073990 https://bugzilla.suse.com/1074293 https://bugzilla.suse.com/1079036 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2018:0446-1: important: Security update for libreoffice
by opensuse-security＠opensuse.org 15 Feb '18

15 Feb '18

openSUSE Security Update: Security update for libreoffice ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:0446-1 Rating: important References: #1080249 Cross-References: CVE-2018-6871 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libreoffice fixes the following issues: LibreOffice was updated to 5.4.5.1: - CVE-2018-6871: Fixes data exposure when using WEBSERVICE (bsc#1080249) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-162=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (x86_64): libreoffice-5.4.5.1-15.1 libreoffice-base-5.4.5.1-15.1 libreoffice-base-debuginfo-5.4.5.1-15.1 libreoffice-base-drivers-mysql-5.4.5.1-15.1 libreoffice-base-drivers-mysql-debuginfo-5.4.5.1-15.1 libreoffice-base-drivers-postgresql-5.4.5.1-15.1 libreoffice-base-drivers-postgresql-debuginfo-5.4.5.1-15.1 libreoffice-calc-5.4.5.1-15.1 libreoffice-calc-debuginfo-5.4.5.1-15.1 libreoffice-calc-extensions-5.4.5.1-15.1 libreoffice-debuginfo-5.4.5.1-15.1 libreoffice-debugsource-5.4.5.1-15.1 libreoffice-draw-5.4.5.1-15.1 libreoffice-draw-debuginfo-5.4.5.1-15.1 libreoffice-filters-optional-5.4.5.1-15.1 libreoffice-gnome-5.4.5.1-15.1 libreoffice-gnome-debuginfo-5.4.5.1-15.1 libreoffice-gtk3-5.4.5.1-15.1 libreoffice-gtk3-debuginfo-5.4.5.1-15.1 libreoffice-impress-5.4.5.1-15.1 libreoffice-impress-debuginfo-5.4.5.1-15.1 libreoffice-kde4-5.4.5.1-15.1 libreoffice-kde4-debuginfo-5.4.5.1-15.1 libreoffice-mailmerge-5.4.5.1-15.1 libreoffice-math-5.4.5.1-15.1 libreoffice-math-debuginfo-5.4.5.1-15.1 libreoffice-officebean-5.4.5.1-15.1 libreoffice-officebean-debuginfo-5.4.5.1-15.1 libreoffice-pyuno-5.4.5.1-15.1 libreoffice-pyuno-debuginfo-5.4.5.1-15.1 libreoffice-sdk-5.4.5.1-15.1 libreoffice-sdk-debuginfo-5.4.5.1-15.1 libreoffice-sdk-doc-5.4.5.1-15.1 libreoffice-writer-5.4.5.1-15.1 libreoffice-writer-debuginfo-5.4.5.1-15.1 libreoffice-writer-extensions-5.4.5.1-15.1 libreofficekit-5.4.5.1-15.1 libreofficekit-devel-5.4.5.1-15.1 - openSUSE Leap 42.3 (noarch): libreoffice-branding-upstream-5.4.5.1-15.1 libreoffice-gdb-pretty-printers-5.4.5.1-15.1 libreoffice-glade-5.4.5.1-15.1 libreoffice-icon-theme-breeze-5.4.5.1-15.1 libreoffice-icon-theme-galaxy-5.4.5.1-15.1 libreoffice-icon-theme-hicontrast-5.4.5.1-15.1 libreoffice-icon-theme-sifr-5.4.5.1-15.1 libreoffice-icon-theme-tango-5.4.5.1-15.1 libreoffice-l10n-af-5.4.5.1-15.1 libreoffice-l10n-ar-5.4.5.1-15.1 libreoffice-l10n-as-5.4.5.1-15.1 libreoffice-l10n-bg-5.4.5.1-15.1 libreoffice-l10n-bn-5.4.5.1-15.1 libreoffice-l10n-br-5.4.5.1-15.1 libreoffice-l10n-ca-5.4.5.1-15.1 libreoffice-l10n-cs-5.4.5.1-15.1 libreoffice-l10n-cy-5.4.5.1-15.1 libreoffice-l10n-da-5.4.5.1-15.1 libreoffice-l10n-de-5.4.5.1-15.1 libreoffice-l10n-dz-5.4.5.1-15.1 libreoffice-l10n-el-5.4.5.1-15.1 libreoffice-l10n-en-5.4.5.1-15.1 libreoffice-l10n-eo-5.4.5.1-15.1 libreoffice-l10n-es-5.4.5.1-15.1 libreoffice-l10n-et-5.4.5.1-15.1 libreoffice-l10n-eu-5.4.5.1-15.1 libreoffice-l10n-fa-5.4.5.1-15.1 libreoffice-l10n-fi-5.4.5.1-15.1 libreoffice-l10n-fr-5.4.5.1-15.1 libreoffice-l10n-ga-5.4.5.1-15.1 libreoffice-l10n-gl-5.4.5.1-15.1 libreoffice-l10n-gu-5.4.5.1-15.1 libreoffice-l10n-he-5.4.5.1-15.1 libreoffice-l10n-hi-5.4.5.1-15.1 libreoffice-l10n-hr-5.4.5.1-15.1 libreoffice-l10n-hu-5.4.5.1-15.1 libreoffice-l10n-it-5.4.5.1-15.1 libreoffice-l10n-ja-5.4.5.1-15.1 libreoffice-l10n-kk-5.4.5.1-15.1 libreoffice-l10n-kn-5.4.5.1-15.1 libreoffice-l10n-ko-5.4.5.1-15.1 libreoffice-l10n-lt-5.4.5.1-15.1 libreoffice-l10n-lv-5.4.5.1-15.1 libreoffice-l10n-mai-5.4.5.1-15.1 libreoffice-l10n-ml-5.4.5.1-15.1 libreoffice-l10n-mr-5.4.5.1-15.1 libreoffice-l10n-nb-5.4.5.1-15.1 libreoffice-l10n-nl-5.4.5.1-15.1 libreoffice-l10n-nn-5.4.5.1-15.1 libreoffice-l10n-nr-5.4.5.1-15.1 libreoffice-l10n-nso-5.4.5.1-15.1 libreoffice-l10n-or-5.4.5.1-15.1 libreoffice-l10n-pa-5.4.5.1-15.1 libreoffice-l10n-pl-5.4.5.1-15.1 libreoffice-l10n-pt_BR-5.4.5.1-15.1 libreoffice-l10n-pt_PT-5.4.5.1-15.1 libreoffice-l10n-ro-5.4.5.1-15.1 libreoffice-l10n-ru-5.4.5.1-15.1 libreoffice-l10n-si-5.4.5.1-15.1 libreoffice-l10n-sk-5.4.5.1-15.1 libreoffice-l10n-sl-5.4.5.1-15.1 libreoffice-l10n-sr-5.4.5.1-15.1 libreoffice-l10n-ss-5.4.5.1-15.1 libreoffice-l10n-st-5.4.5.1-15.1 libreoffice-l10n-sv-5.4.5.1-15.1 libreoffice-l10n-ta-5.4.5.1-15.1 libreoffice-l10n-te-5.4.5.1-15.1 libreoffice-l10n-th-5.4.5.1-15.1 libreoffice-l10n-tn-5.4.5.1-15.1 libreoffice-l10n-tr-5.4.5.1-15.1 libreoffice-l10n-ts-5.4.5.1-15.1 libreoffice-l10n-uk-5.4.5.1-15.1 libreoffice-l10n-ve-5.4.5.1-15.1 libreoffice-l10n-xh-5.4.5.1-15.1 libreoffice-l10n-zh_CN-5.4.5.1-15.1 libreoffice-l10n-zh_TW-5.4.5.1-15.1 libreoffice-l10n-zu-5.4.5.1-15.1 References: https://www.suse.com/security/cve/CVE-2018-6871.html https://bugzilla.suse.com/1080249 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2018:0443-1: important: Security update for libreoffice
by opensuse-security＠opensuse.org 14 Feb '18

14 Feb '18

SUSE Security Update: Security update for libreoffice ______________________________________________________________________________ Announcement ID: SUSE-SU-2018:0443-1 Rating: important References: #1080249 Cross-References: CVE-2018-6871 Affected Products: SUSE Linux Enterprise Workstation Extension 12-SP3 SUSE Linux Enterprise Software Development Kit 12-SP3 SUSE Linux Enterprise Desktop 12-SP3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libreoffice fixes the following issues: LibreOffice was updated to 5.4.5.1: - CVE-2018-6871: Fixes data exposure when using WEBSERVICE (bsc#1080249) Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Workstation Extension 12-SP3: zypper in -t patch SUSE-SLE-WE-12-SP3-2018-305=1 - SUSE Linux Enterprise Software Development Kit 12-SP3: zypper in -t patch SUSE-SLE-SDK-12-SP3-2018-305=1 - SUSE Linux Enterprise Desktop 12-SP3: zypper in -t patch SUSE-SLE-DESKTOP-12-SP3-2018-305=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Workstation Extension 12-SP3 (noarch): libreoffice-icon-theme-galaxy-5.4.5.1-43.19.1 libreoffice-icon-theme-tango-5.4.5.1-43.19.1 libreoffice-l10n-af-5.4.5.1-43.19.1 libreoffice-l10n-ar-5.4.5.1-43.19.1 libreoffice-l10n-bg-5.4.5.1-43.19.1 libreoffice-l10n-ca-5.4.5.1-43.19.1 libreoffice-l10n-cs-5.4.5.1-43.19.1 libreoffice-l10n-da-5.4.5.1-43.19.1 libreoffice-l10n-de-5.4.5.1-43.19.1 libreoffice-l10n-en-5.4.5.1-43.19.1 libreoffice-l10n-es-5.4.5.1-43.19.1 libreoffice-l10n-fi-5.4.5.1-43.19.1 libreoffice-l10n-fr-5.4.5.1-43.19.1 libreoffice-l10n-gu-5.4.5.1-43.19.1 libreoffice-l10n-hi-5.4.5.1-43.19.1 libreoffice-l10n-hr-5.4.5.1-43.19.1 libreoffice-l10n-hu-5.4.5.1-43.19.1 libreoffice-l10n-it-5.4.5.1-43.19.1 libreoffice-l10n-ja-5.4.5.1-43.19.1 libreoffice-l10n-ko-5.4.5.1-43.19.1 libreoffice-l10n-lt-5.4.5.1-43.19.1 libreoffice-l10n-nb-5.4.5.1-43.19.1 libreoffice-l10n-nl-5.4.5.1-43.19.1 libreoffice-l10n-nn-5.4.5.1-43.19.1 libreoffice-l10n-pl-5.4.5.1-43.19.1 libreoffice-l10n-pt_BR-5.4.5.1-43.19.1 libreoffice-l10n-pt_PT-5.4.5.1-43.19.1 libreoffice-l10n-ro-5.4.5.1-43.19.1 libreoffice-l10n-ru-5.4.5.1-43.19.1 libreoffice-l10n-sk-5.4.5.1-43.19.1 libreoffice-l10n-sv-5.4.5.1-43.19.1 libreoffice-l10n-uk-5.4.5.1-43.19.1 libreoffice-l10n-xh-5.4.5.1-43.19.1 libreoffice-l10n-zh_CN-5.4.5.1-43.19.1 libreoffice-l10n-zh_TW-5.4.5.1-43.19.1 libreoffice-l10n-zu-5.4.5.1-43.19.1 - SUSE Linux Enterprise Workstation Extension 12-SP3 (x86_64): libreoffice-5.4.5.1-43.19.1 libreoffice-base-5.4.5.1-43.19.1 libreoffice-base-debuginfo-5.4.5.1-43.19.1 libreoffice-base-drivers-mysql-5.4.5.1-43.19.1 libreoffice-base-drivers-mysql-debuginfo-5.4.5.1-43.19.1 libreoffice-base-drivers-postgresql-5.4.5.1-43.19.1 libreoffice-base-drivers-postgresql-debuginfo-5.4.5.1-43.19.1 libreoffice-calc-5.4.5.1-43.19.1 libreoffice-calc-debuginfo-5.4.5.1-43.19.1 libreoffice-calc-extensions-5.4.5.1-43.19.1 libreoffice-debuginfo-5.4.5.1-43.19.1 libreoffice-debugsource-5.4.5.1-43.19.1 libreoffice-draw-5.4.5.1-43.19.1 libreoffice-draw-debuginfo-5.4.5.1-43.19.1 libreoffice-filters-optional-5.4.5.1-43.19.1 libreoffice-gnome-5.4.5.1-43.19.1 libreoffice-gnome-debuginfo-5.4.5.1-43.19.1 libreoffice-impress-5.4.5.1-43.19.1 libreoffice-impress-debuginfo-5.4.5.1-43.19.1 libreoffice-mailmerge-5.4.5.1-43.19.1 libreoffice-math-5.4.5.1-43.19.1 libreoffice-math-debuginfo-5.4.5.1-43.19.1 libreoffice-officebean-5.4.5.1-43.19.1 libreoffice-officebean-debuginfo-5.4.5.1-43.19.1 libreoffice-pyuno-5.4.5.1-43.19.1 libreoffice-pyuno-debuginfo-5.4.5.1-43.19.1 libreoffice-writer-5.4.5.1-43.19.1 libreoffice-writer-debuginfo-5.4.5.1-43.19.1 libreoffice-writer-extensions-5.4.5.1-43.19.1 libreofficekit-5.4.5.1-43.19.1 - SUSE Linux Enterprise Software Development Kit 12-SP3 (aarch64 x86_64): libreoffice-debuginfo-5.4.5.1-43.19.1 libreoffice-debugsource-5.4.5.1-43.19.1 libreoffice-sdk-5.4.5.1-43.19.1 libreoffice-sdk-debuginfo-5.4.5.1-43.19.1 - SUSE Linux Enterprise Desktop 12-SP3 (noarch): libreoffice-icon-theme-galaxy-5.4.5.1-43.19.1 libreoffice-icon-theme-tango-5.4.5.1-43.19.1 libreoffice-l10n-af-5.4.5.1-43.19.1 libreoffice-l10n-ar-5.4.5.1-43.19.1 libreoffice-l10n-ca-5.4.5.1-43.19.1 libreoffice-l10n-cs-5.4.5.1-43.19.1 libreoffice-l10n-da-5.4.5.1-43.19.1 libreoffice-l10n-de-5.4.5.1-43.19.1 libreoffice-l10n-en-5.4.5.1-43.19.1 libreoffice-l10n-es-5.4.5.1-43.19.1 libreoffice-l10n-fi-5.4.5.1-43.19.1 libreoffice-l10n-fr-5.4.5.1-43.19.1 libreoffice-l10n-gu-5.4.5.1-43.19.1 libreoffice-l10n-hi-5.4.5.1-43.19.1 libreoffice-l10n-hu-5.4.5.1-43.19.1 libreoffice-l10n-it-5.4.5.1-43.19.1 libreoffice-l10n-ja-5.4.5.1-43.19.1 libreoffice-l10n-ko-5.4.5.1-43.19.1 libreoffice-l10n-nb-5.4.5.1-43.19.1 libreoffice-l10n-nl-5.4.5.1-43.19.1 libreoffice-l10n-nn-5.4.5.1-43.19.1 libreoffice-l10n-pl-5.4.5.1-43.19.1 libreoffice-l10n-pt_BR-5.4.5.1-43.19.1 libreoffice-l10n-pt_PT-5.4.5.1-43.19.1 libreoffice-l10n-ro-5.4.5.1-43.19.1 libreoffice-l10n-ru-5.4.5.1-43.19.1 libreoffice-l10n-sk-5.4.5.1-43.19.1 libreoffice-l10n-sv-5.4.5.1-43.19.1 libreoffice-l10n-xh-5.4.5.1-43.19.1 libreoffice-l10n-zh_CN-5.4.5.1-43.19.1 libreoffice-l10n-zh_TW-5.4.5.1-43.19.1 libreoffice-l10n-zu-5.4.5.1-43.19.1 - SUSE Linux Enterprise Desktop 12-SP3 (x86_64): libreoffice-5.4.5.1-43.19.1 libreoffice-base-5.4.5.1-43.19.1 libreoffice-base-debuginfo-5.4.5.1-43.19.1 libreoffice-base-drivers-mysql-5.4.5.1-43.19.1 libreoffice-base-drivers-mysql-debuginfo-5.4.5.1-43.19.1 libreoffice-base-drivers-postgresql-5.4.5.1-43.19.1 libreoffice-base-drivers-postgresql-debuginfo-5.4.5.1-43.19.1 libreoffice-calc-5.4.5.1-43.19.1 libreoffice-calc-debuginfo-5.4.5.1-43.19.1 libreoffice-calc-extensions-5.4.5.1-43.19.1 libreoffice-debuginfo-5.4.5.1-43.19.1 libreoffice-debugsource-5.4.5.1-43.19.1 libreoffice-draw-5.4.5.1-43.19.1 libreoffice-draw-debuginfo-5.4.5.1-43.19.1 libreoffice-filters-optional-5.4.5.1-43.19.1 libreoffice-gnome-5.4.5.1-43.19.1 libreoffice-gnome-debuginfo-5.4.5.1-43.19.1 libreoffice-impress-5.4.5.1-43.19.1 libreoffice-impress-debuginfo-5.4.5.1-43.19.1 libreoffice-mailmerge-5.4.5.1-43.19.1 libreoffice-math-5.4.5.1-43.19.1 libreoffice-math-debuginfo-5.4.5.1-43.19.1 libreoffice-officebean-5.4.5.1-43.19.1 libreoffice-officebean-debuginfo-5.4.5.1-43.19.1 libreoffice-pyuno-5.4.5.1-43.19.1 libreoffice-pyuno-debuginfo-5.4.5.1-43.19.1 libreoffice-writer-5.4.5.1-43.19.1 libreoffice-writer-debuginfo-5.4.5.1-43.19.1 libreoffice-writer-extensions-5.4.5.1-43.19.1 libreofficekit-5.4.5.1-43.19.1 References: https://www.suse.com/security/cve/CVE-2018-6871.html https://bugzilla.suse.com/1080249 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2018:0438-1: important: Security update for xen
by opensuse-security＠opensuse.org 14 Feb '18

14 Feb '18

SUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: SUSE-SU-2018:0438-1 Rating: important References: #1027519 #1035442 #1051729 #1061081 #1067317 #1068032 #1070158 #1070159 #1070160 #1070163 #1074562 #1076116 #1076180 Cross-References: CVE-2017-15595 CVE-2017-17563 CVE-2017-17564 CVE-2017-17565 CVE-2017-17566 CVE-2017-18030 CVE-2017-5715 CVE-2017-5753 CVE-2017-5754 CVE-2018-5683 Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP3 SUSE Linux Enterprise Server 12-SP3 SUSE Linux Enterprise Desktop 12-SP3 SUSE CaaS Platform ALL ______________________________________________________________________________ An update that solves 10 vulnerabilities and has three fixes is now available. Description: This update for xen fixes several issues. These security issues were fixed: - CVE-2017-5753, CVE-2017-5715, CVE-2017-5754: Prevent information leaks via side effects of speculative execution, aka "Spectre" and "Meltdown" attacks (bsc#1074562, bsc#1068032) - CVE-2017-15595: x86 PV guest OS users were able to cause a DoS (unbounded recursion, stack consumption, and hypervisor crash) or possibly gain privileges via crafted page-table stacking (bsc#1061081) - CVE-2017-17566: Prevent PV guest OS users to cause a denial of service (host OS crash) or gain host OS privileges in shadow mode by mapping a certain auxiliary page (bsc#1070158). - CVE-2017-17563: Prevent guest OS users to cause a denial of service (host OS crash) or gain host OS privileges by leveraging an incorrect mask for reference-count overflow checking in shadow mode (bsc#1070159). - CVE-2017-17564: Prevent guest OS users to cause a denial of service (host OS crash) or gain host OS privileges by leveraging incorrect error handling for reference counting in shadow mode (bsc#1070160). - CVE-2017-17565: Prevent PV guest OS users to cause a denial of service (host OS crash) if shadow mode and log-dirty mode are in place, because of an incorrect assertion related to M2P (bsc#1070163). - CVE-2018-5683: The vga_draw_text function allowed local OS guest privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) by leveraging improper memory address validation (bsc#1076116). - CVE-2017-18030: The cirrus_invalidate_region function allowed local OS guest privileged users to cause a denial of service (out-of-bounds array access and QEMU process crash) via vectors related to negative pitch (bsc#1076180). These non-security issues were fixed: - bsc#1067317: pass cache=writeback|unsafe|directsync to qemu depending on the libxl disk settings - bsc#1051729: Prevent invalid symlinks after install of SLES 12 SP2 - bsc#1035442: Increased the value of LIBXL_DESTROY_TIMEOUT from 10 to 100 seconds. If many domUs shutdown in parallel the backends couldn't keep up - bsc#1027519: Added several upstream patches Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 12-SP3: zypper in -t patch SUSE-SLE-SDK-12-SP3-2018-302=1 - SUSE Linux Enterprise Server 12-SP3: zypper in -t patch SUSE-SLE-SERVER-12-SP3-2018-302=1 - SUSE Linux Enterprise Desktop 12-SP3: zypper in -t patch SUSE-SLE-DESKTOP-12-SP3-2018-302=1 - SUSE CaaS Platform ALL: zypper in -t patch SUSE-CAASP-ALL-2018-302=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 12-SP3 (aarch64 x86_64): xen-debugsource-4.9.1_08-3.26.1 xen-devel-4.9.1_08-3.26.1 - SUSE Linux Enterprise Server 12-SP3 (x86_64): xen-4.9.1_08-3.26.1 xen-debugsource-4.9.1_08-3.26.1 xen-doc-html-4.9.1_08-3.26.1 xen-libs-32bit-4.9.1_08-3.26.1 xen-libs-4.9.1_08-3.26.1 xen-libs-debuginfo-32bit-4.9.1_08-3.26.1 xen-libs-debuginfo-4.9.1_08-3.26.1 xen-tools-4.9.1_08-3.26.1 xen-tools-debuginfo-4.9.1_08-3.26.1 xen-tools-domU-4.9.1_08-3.26.1 xen-tools-domU-debuginfo-4.9.1_08-3.26.1 - SUSE Linux Enterprise Desktop 12-SP3 (x86_64): xen-4.9.1_08-3.26.1 xen-debugsource-4.9.1_08-3.26.1 xen-libs-32bit-4.9.1_08-3.26.1 xen-libs-4.9.1_08-3.26.1 xen-libs-debuginfo-32bit-4.9.1_08-3.26.1 xen-libs-debuginfo-4.9.1_08-3.26.1 - SUSE CaaS Platform ALL (x86_64): xen-debugsource-4.9.1_08-3.26.1 xen-libs-4.9.1_08-3.26.1 xen-libs-debuginfo-4.9.1_08-3.26.1 xen-tools-domU-4.9.1_08-3.26.1 xen-tools-domU-debuginfo-4.9.1_08-3.26.1 References: https://www.suse.com/security/cve/CVE-2017-15595.html https://www.suse.com/security/cve/CVE-2017-17563.html https://www.suse.com/security/cve/CVE-2017-17564.html https://www.suse.com/security/cve/CVE-2017-17565.html https://www.suse.com/security/cve/CVE-2017-17566.html https://www.suse.com/security/cve/CVE-2017-18030.html https://www.suse.com/security/cve/CVE-2017-5715.html https://www.suse.com/security/cve/CVE-2017-5753.html https://www.suse.com/security/cve/CVE-2017-5754.html https://www.suse.com/security/cve/CVE-2018-5683.html https://bugzilla.suse.com/1027519 https://bugzilla.suse.com/1035442 https://bugzilla.suse.com/1051729 https://bugzilla.suse.com/1061081 https://bugzilla.suse.com/1067317 https://bugzilla.suse.com/1068032 https://bugzilla.suse.com/1070158 https://bugzilla.suse.com/1070159 https://bugzilla.suse.com/1070160 https://bugzilla.suse.com/1070163 https://bugzilla.suse.com/1074562 https://bugzilla.suse.com/1076116 https://bugzilla.suse.com/1076180 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2018:0437-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 13 Feb '18

13 Feb '18

SUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: SUSE-SU-2018:0437-1 Rating: important References: #1012382 #1047626 #1068032 #1070623 #1073311 #1073792 #1073874 #1075091 #1075908 #1075994 #1076017 #1076110 #1076154 #1076278 #1077355 #1077560 #1077922 #893777 #893949 #902893 #951638 Cross-References: CVE-2015-1142857 CVE-2017-13215 CVE-2017-17741 CVE-2017-17805 CVE-2017-17806 CVE-2017-18079 CVE-2017-5715 CVE-2018-1000004 Affected Products: SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Module for Public Cloud 12 ______________________________________________________________________________ An update that solves 8 vulnerabilities and has 13 fixes is now available. Description: The SUSE Linux Enterprise 12 GA LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-5715: Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis (bnc#1068032). The previous fix using CPU Microcode has been complemented by building the Linux Kernel with return trampolines aka "retpolines". - CVE-2017-18079: drivers/input/serio/i8042.c allowed attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact because the port->exists value can change after it is validated (bnc#1077922) - CVE-2015-1142857: Prevent guests from sending ethernet flow control pause frames via the PF (bnc#1077355) - CVE-2017-17741: KVM allowed attackers to obtain potentially sensitive information from kernel memory, aka a write_mmio stack-based out-of-bounds read (bnc#1073311) - CVE-2017-13215: Prevent elevation of privilege (bnc#1075908) - CVE-2018-1000004: Prevent race condition in the sound system, this could have lead a deadlock and denial of service condition (bnc#1076017) - CVE-2017-17806: The HMAC implementation did not validate that the underlying cryptographic hash algorithm is unkeyed, allowing a local attacker able to use the AF_ALG-based hash interface (CONFIG_CRYPTO_USER_API_HASH) and the SHA-3 hash algorithm (CONFIG_CRYPTO_SHA3) to cause a kernel stack buffer overflow by executing a crafted sequence of system calls that encounter a missing SHA-3 initialization (bnc#1073874) - CVE-2017-17805: The Salsa20 encryption algorithm did not correctly handle zero-length inputs, allowing a local attacker able to use the AF_ALG-based skcipher interface (CONFIG_CRYPTO_USER_API_SKCIPHER) to cause a denial of service (uninitialized-memory free and kernel crash) or have unspecified other impact by executing a crafted sequence of system calls that use the blkcipher_walk API. Both the generic implementation (crypto/salsa20_generic.c) and x86 implementation (arch/x86/crypto/salsa20_glue.c) of Salsa20 were vulnerable (bnc#1073792) The following non-security bugs were fixed: - bcache allocator: send discards with correct size (bsc#1047626). - bcache.txt: standardize document format (bsc#1076110). - bcache: Abstract out stuff needed for sorting (bsc#1076110). - bcache: Add a cond_resched() call to gc (bsc#1076110). - bcache: Add a real GC_MARK_RECLAIMABLE (bsc#1076110). - bcache: Add bch_bkey_equal_header() (bsc#1076110). - bcache: Add bch_btree_keys_u64s_remaining() (bsc#1076110). - bcache: Add bch_keylist_init_single() (bsc#1047626). - bcache: Add btree_insert_node() (bnc#951638). - bcache: Add btree_map() functions (bsc#1047626). - bcache: Add btree_node_write_sync() (bsc#1076110). - bcache: Add explicit keylist arg to btree_insert() (bnc#951638). - bcache: Add make_btree_freeing_key() (bsc#1076110). - bcache: Add on error panic/unregister setting (bsc#1047626). - bcache: Add struct bset_sort_state (bsc#1076110). - bcache: Add struct btree_keys (bsc#1076110). - bcache: Allocate bounce buffers with GFP_NOWAIT (bsc#1076110). - bcache: Avoid deadlocking in garbage collection (bsc#1076110). - bcache: Avoid nested function definition (bsc#1076110). - bcache: Better alloc tracepoints (bsc#1076110). - bcache: Better full stripe scanning (bsc#1076110). - bcache: Bkey indexing renaming (bsc#1076110). - bcache: Break up struct search (bsc#1076110). - bcache: Btree verify code improvements (bsc#1076110). - bcache: Bypass torture test (bsc#1076110). - bcache: Change refill_dirty() to always scan entire disk if necessary (bsc#1076110). - bcache: Clean up cache_lookup_fn (bsc#1076110). - bcache: Clean up keylist code (bnc#951638). - bcache: Convert bch_btree_insert() to bch_btree_map_leaf_nodes() (bsc#1076110). - bcache: Convert bch_btree_read_async() to bch_btree_map_keys() (bsc#1076110). - bcache: Convert btree_insert_check_key() to btree_insert_node() (bnc#951638). - bcache: Convert btree_iter to struct btree_keys (bsc#1076110). - bcache: Convert bucket_wait to wait_queue_head_t (bnc#951638). - bcache: Convert debug code to btree_keys (bsc#1076110). - bcache: Convert gc to a kthread (bsc#1047626). - bcache: Convert sorting to btree_keys (bsc#1076110). - bcache: Convert try_wait to wait_queue_head_t (bnc#951638). - bcache: Convert writeback to a kthread (bsc#1076110). - bcache: Correct return value for sysfs attach errors (bsc#1076110). - bcache: Debug code improvements (bsc#1076110). - bcache: Delete some slower inline asm (bsc#1047626). - bcache: Do bkey_put() in btree_split() error path (bsc#1076110). - bcache: Do not bother with bucket refcount for btree node allocations (bsc#1076110). - bcache: Do not reinvent the wheel but use existing llist API (bsc#1076110). - bcache: Do not return -EINTR when insert finished (bsc#1076110). - bcache: Do not touch bucket gen for dirty ptrs (bsc#1076110). - bcache: Do not use op->insert_collision (bsc#1076110). - bcache: Drop some closure stuff (bsc#1076110). - bcache: Drop unneeded blk_sync_queue() calls (bsc#1047626). - bcache: Explicitly track btree node's parent (bnc#951638). - bcache: Fix a bug recovering from unclean shutdown (bsc#1047626). - bcache: Fix a bug when detaching (bsc#951638). - bcache: Fix a journal replay bug (bsc#1076110). - bcache: Fix a journalling performance bug (bnc#893777). - bcache: Fix a journalling reclaim after recovery bug (bsc#1047626). - bcache: Fix a lockdep splat (bnc#893777). - bcache: Fix a lockdep splat in an error path (bnc#951638). - bcache: Fix a null ptr deref in journal replay (bsc#1047626). - bcache: Fix a race when freeing btree nodes (bsc#1076110). - bcache: Fix a shutdown bug (bsc#951638). - bcache: Fix an infinite loop in journal replay (bsc#1047626). - bcache: Fix another bug recovering from unclean shutdown (bsc#1076110). - bcache: Fix another compiler warning on m68k (bsc#1076110). - bcache: Fix auxiliary search trees for key size > cacheline size (bsc#1076110). - bcache: Fix bch_ptr_bad() (bsc#1047626). - bcache: Fix building error on MIPS (bsc#1076110). - bcache: Fix dirty_data accounting (bsc#1076110). - bcache: Fix discard granularity (bsc#1047626). - bcache: Fix flash_dev_cache_miss() for real this time (bsc#1076110). - bcache: Fix for can_attach_cache() (bsc#1047626). - bcache: Fix heap_peek() macro (bsc#1047626). - bcache: Fix leak of bdev reference (bsc#1076110). - bcache: Fix more early shutdown bugs (bsc#951638). - bcache: Fix moving_gc deadlocking with a foreground write (bsc#1076110). - bcache: Fix moving_pred() (bsc#1047626). - bcache: Fix sysfs splat on shutdown with flash only devs (bsc#951638). - bcache: Fix to remove the rcu_sched stalls (bsc#1047626). - bcache: Have btree_split() insert into parent directly (bsc#1076110). - bcache: Improve bucket_prio() calculation (bsc#1047626). - bcache: Improve priority_stats (bsc#1047626). - bcache: Incremental gc (bsc#1076110). - bcache: Insert multiple keys at a time (bnc#951638). - bcache: Kill bch_next_recurse_key() (bsc#1076110). - bcache: Kill btree_io_wq (bsc#1076110). - bcache: Kill bucket->gc_gen (bsc#1076110). - bcache: Kill dead cgroup code (bsc#1076110). - bcache: Kill op->cl (bsc#1076110). - bcache: Kill op->replace (bsc#1076110). - bcache: Kill sequential_merge option (bsc#1076110). - bcache: Kill unaligned bvec hack (bsc#1076110). - bcache: Kill unused freelist (bsc#1076110). - bcache: Make bch_keylist_realloc() take u64s, not nptrs (bsc#1076110). - bcache: Make gc wakeup sane, remove set_task_state() (bsc#1076110). - bcache: Minor btree cache fix (bsc#1047626). - bcache: Minor fixes from kbuild robot (bsc#1076110). - bcache: Move insert_fixup() to btree_keys_ops (bsc#1076110). - bcache: Move keylist out of btree_op (bsc#1047626). - bcache: Move sector allocator to alloc.c (bsc#1076110). - bcache: Move some stuff to btree.c (bsc#1076110). - bcache: Move spinlock into struct time_stats (bsc#1076110). - bcache: New writeback PD controller (bsc#1047626). - bcache: PRECEDING_KEY() (bsc#1047626). - bcache: Performance fix for when journal entry is full (bsc#1047626). - bcache: Prune struct btree_op (bsc#1076110). - bcache: Pull on disk data structures out into a separate header (bsc#1076110). - bcache: RESERVE_PRIO is too small by one when prio_buckets() is a power of two (bsc#1076110). - bcache: Really show state of work pending bit (bsc#1076110). - bcache: Refactor bset_tree sysfs stats (bsc#1076110). - bcache: Refactor journalling flow control (bnc#951638). - bcache: Refactor read request code a bit (bsc#1076110). - bcache: Refactor request_write() (bnc#951638). - bcache: Remove deprecated create_workqueue (bsc#1076110). - bcache: Remove redundant block_size assignment (bsc#1047626). - bcache: Remove redundant parameter for cache_alloc() (bsc#1047626). - bcache: Remove redundant set_capacity (bsc#1076110). - bcache: Remove unnecessary check in should_split() (bsc#1076110). - bcache: Remove/fix some header dependencies (bsc#1047626). - bcache: Rename/shuffle various code around (bsc#1076110). - bcache: Rework allocator reserves (bsc#1076110). - bcache: Rework btree cache reserve handling (bsc#1076110). - bcache: Split out sort_extent_cmp() (bsc#1076110). - bcache: Stripe size isn't necessarily a power of two (bnc#893949). - bcache: Trivial error handling fix (bsc#1047626). - bcache: Update continue_at() documentation (bsc#1076110). - bcache: Use a mempool for mergesort temporary space (bsc#1076110). - bcache: Use blkdev_issue_discard() (bnc#951638). - bcache: Use ida for bcache block dev minor (bsc#1047626). - bcache: Use uninterruptible sleep in writeback (bsc#1076110). - bcache: Zero less memory (bsc#1076110). - bcache: add a comment in journal bucket reading (bsc#1076110). - bcache: add mutex lock for bch_is_open (bnc#902893). - bcache: allows use of register in udev to avoid "device_busy" error (bsc#1047626). - bcache: bcache_write tracepoint was crashing (bsc#1076110). - bcache: bch_(btree|extent)_ptr_invalid() (bsc#1076110). - bcache: bch_allocator_thread() is not freezable (bsc#1047626). - bcache: bch_gc_thread() is not freezable (bsc#1047626). - bcache: bch_writeback_thread() is not freezable (bsc#1076110). - bcache: btree locking rework (bsc#1076110). - bcache: bugfix - gc thread now gets woken when cache is full (bsc#1047626). - bcache: bugfix - moving_gc now moves only correct buckets (bsc#1047626). - bcache: bugfix for race between moving_gc and bucket_invalidate (bsc#1076110). - bcache: check ca->alloc_thread initialized before wake up it (bsc#1076110). - bcache: check return value of register_shrinker (bsc#1076110). - bcache: cleaned up error handling around register_cache() (bsc#1047626). - bcache: clear BCACHE_DEV_UNLINK_DONE flag when attaching a backing device (bsc#1047626). - bcache: correct cache_dirty_target in __update_writeback_rate() (bsc#1076110). - bcache: defensively handle format strings (bsc#1047626). - bcache: do not embed 'return' statements in closure macros (bsc#1076110). - bcache: do not subtract sectors_to_gc for bypassed IO (bsc#1076110). - bcache: do not write back data if reading it failed (bsc#1076110). - bcache: documentation formatting, edited for clarity, stripe alignment notes (bsc#1076110). - bcache: documentation updates and corrections (bsc#1076110). - bcache: explicitly destroy mutex while exiting (bsc#1076110). - bcache: fix BUG_ON due to integer overflow with GC_SECTORS_USED (bsc#1047626). - bcache: fix a comments typo in bch_alloc_sectors() (bsc#1076110). - bcache: fix a livelock when we cause a huge number of cache misses (bsc#1047626). - bcache: fix bch_hprint crash and improve output (bsc#1076110). - bcache: fix crash in bcache_btree_node_alloc_fail tracepoint (bsc#1047626). - bcache: fix crash on shutdown in passthrough mode (bsc#1076110). - bcache: fix for gc and write-back race (bsc#1076110). - bcache: fix for gc and writeback race (bsc#1047626). - bcache: fix for gc crashing when no sectors are used (bsc#1047626). - bcache: fix lockdep warnings on shutdown (bsc#1047626). - bcache: fix race of writeback thread starting before complete initialization (bsc#1076110). - bcache: fix sequential large write IO bypass (bsc#1076110). - bcache: fix sparse non static symbol warning (bsc#1076110). - bcache: fix typo in bch_bkey_equal_header (bsc#1076110). - bcache: fix uninterruptible sleep in writeback thread (bsc#1076110). - bcache: fix use-after-free in btree_gc_coalesce() (bsc#1076110). - bcache: fix wrong cache_misses statistics (bsc#1076110). - bcache: gc does not work when triggering by manual command (bsc#1076110). - bcache: implement PI controller for writeback rate (bsc#1076110). - bcache: increase the number of open buckets (bsc#1076110). - bcache: initialize dirty stripes in flash_dev_run() (bsc#1076110). - bcache: kill closure locking code (bsc#1076110). - bcache: kill closure locking usage (bnc#951638). - bcache: kill index() (bsc#1047626). - bcache: kthread do not set writeback task to INTERUPTIBLE (bsc#1076110). - bcache: only permit to recovery read error when cache device is clean (bsc#1076110). - bcache: partition support: add 16 minors per bcacheN device (bsc#1076110). - bcache: pr_err: more meaningful error message when nr_stripes is invalid (bsc#1076110). - bcache: prevent crash on changing writeback_running (bsc#1076110). - bcache: rearrange writeback main thread ratelimit (bsc#1076110). - bcache: recover data from backing when data is clean (bsc#1076110). - bcache: register_bcache(): call blkdev_put() when cache_alloc() fails (bsc#1047626). - bcache: remove nested function usage (bsc#1076110). - bcache: remove unused parameter (bsc#1076110). - bcache: rewrite multiple partitions support (bsc#1076110). - bcache: safeguard a dangerous addressing in closure_queue (bsc#1076110). - bcache: silence static checker warning (bsc#1076110). - bcache: smooth writeback rate control (bsc#1076110). - bcache: stop moving_gc marking buckets that can't be moved (bsc#1047626). - bcache: try to set b->parent properly (bsc#1076110). - bcache: update bch_bkey_try_merge (bsc#1076110). - bcache: update bio->bi_opf bypass/writeback REQ_ flag hints (bsc#1076110). - bcache: update bucket_in_use in real time (bsc#1076110). - bcache: update document info (bsc#1076110). - bcache: use kmalloc to allocate bio in bch_data_verify() (bsc#1076110). - bcache: use kvfree() in various places (bsc#1076110). - bcache: use llist_for_each_entry_safe() in __closure_wake_up() (bsc#1076110). - bcache: wait for buckets when allocating new btree root (bsc#1076110). - bcache: writeback rate clamping: make 32 bit safe (bsc#1076110). - bcache: writeback rate shouldn't artifically clamp (bsc#1076110). - fork: clear thread stack upon allocation (bsc#1077560). - gcov: disable for COMPILE_TEST (bnc#1012382). - kaiser: Set _PAGE_NX only if supported (bnc#1012382, bnc#1076154). - kaiser: Set _PAGE_NX only if supported (bnc#1012382, bnc#1076278). - md: more open-coded offset_in_page() (bsc#1076110). - nfsd: do not share group_info among threads (bsc@1070623). - sysfs/cpu: Add vulnerability folder (bnc#1012382). - sysfs: spectre_v2, handle spec_ctrl (bsc#1075994 bsc#1075091). - x86/cpu: Implement CPU vulnerabilites sysfs functions (bnc#1012382). - x86/cpufeatures: Add X86_BUG_CPU_INSECURE (bnc#1012382). - x86/cpufeatures: Add X86_BUG_SPECTRE_V[12] (bnc#1012382). - x86/cpufeatures: Make CPU bugs sticky (bnc#1012382). - x86/pti: Rename BUG_CPU_INSECURE to BUG_CPU_MELTDOWN (bnc#1012382). - x86/retpolines/spec_ctrl: disable IBRS on !SKL if retpolines are active (bsc#1068032). - x86/spectre_v2: fix ordering in IBRS initialization (bsc#1075994 bsc#1075091). - x86/spectre_v2: nospectre_v2 means nospec too (bsc#1075994 bsc#1075091). Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 12-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-2018-301=1 - SUSE Linux Enterprise Module for Public Cloud 12: zypper in -t patch SUSE-SLE-Module-Public-Cloud-12-2018-301=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Server 12-LTSS (ppc64le s390x x86_64): kernel-default-3.12.61-52.119.1 kernel-default-base-3.12.61-52.119.1 kernel-default-base-debuginfo-3.12.61-52.119.1 kernel-default-debuginfo-3.12.61-52.119.1 kernel-default-debugsource-3.12.61-52.119.1 kernel-default-devel-3.12.61-52.119.1 kernel-syms-3.12.61-52.119.1 - SUSE Linux Enterprise Server 12-LTSS (noarch): kernel-devel-3.12.61-52.119.1 kernel-macros-3.12.61-52.119.1 kernel-source-3.12.61-52.119.1 - SUSE Linux Enterprise Server 12-LTSS (x86_64): kernel-xen-3.12.61-52.119.1 kernel-xen-base-3.12.61-52.119.1 kernel-xen-base-debuginfo-3.12.61-52.119.1 kernel-xen-debuginfo-3.12.61-52.119.1 kernel-xen-debugsource-3.12.61-52.119.1 kernel-xen-devel-3.12.61-52.119.1 kgraft-patch-3_12_61-52_119-default-1-1.7.1 kgraft-patch-3_12_61-52_119-xen-1-1.7.1 - SUSE Linux Enterprise Server 12-LTSS (s390x): kernel-default-man-3.12.61-52.119.1 - SUSE Linux Enterprise Module for Public Cloud 12 (x86_64): kernel-ec2-3.12.61-52.119.1 kernel-ec2-debuginfo-3.12.61-52.119.1 kernel-ec2-debugsource-3.12.61-52.119.1 kernel-ec2-devel-3.12.61-52.119.1 kernel-ec2-extra-3.12.61-52.119.1 kernel-ec2-extra-debuginfo-3.12.61-52.119.1 References: https://www.suse.com/security/cve/CVE-2015-1142857.html https://www.suse.com/security/cve/CVE-2017-13215.html https://www.suse.com/security/cve/CVE-2017-17741.html https://www.suse.com/security/cve/CVE-2017-17805.html https://www.suse.com/security/cve/CVE-2017-17806.html https://www.suse.com/security/cve/CVE-2017-18079.html https://www.suse.com/security/cve/CVE-2017-5715.html https://www.suse.com/security/cve/CVE-2018-1000004.html https://bugzilla.suse.com/1012382 https://bugzilla.suse.com/1047626 https://bugzilla.suse.com/1068032 https://bugzilla.suse.com/1070623 https://bugzilla.suse.com/1073311 https://bugzilla.suse.com/1073792 https://bugzilla.suse.com/1073874 https://bugzilla.suse.com/1075091 https://bugzilla.suse.com/1075908 https://bugzilla.suse.com/1075994 https://bugzilla.suse.com/1076017 https://bugzilla.suse.com/1076110 https://bugzilla.suse.com/1076154 https://bugzilla.suse.com/1076278 https://bugzilla.suse.com/1077355 https://bugzilla.suse.com/1077560 https://bugzilla.suse.com/1077922 https://bugzilla.suse.com/893777 https://bugzilla.suse.com/893949 https://bugzilla.suse.com/902893 https://bugzilla.suse.com/951638 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2018:0436-1: important: Security update for the Linux Kernel (Live Patch 7 for SLE 12 SP3)
by opensuse-security＠opensuse.org 13 Feb '18

13 Feb '18

SUSE Security Update: Security update for the Linux Kernel (Live Patch 7 for SLE 12 SP3) ______________________________________________________________________________ Announcement ID: SUSE-SU-2018:0436-1 Rating: important References: #1073230 Cross-References: CVE-2017-17712 Affected Products: SUSE Linux Enterprise Live Patching 12-SP3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for the Linux Kernel 4.4.103-6_38 fixes one issue. The following security issue was fixed: - CVE-2017-17712: The raw_sendmsg() function had a race condition that lead to uninitialized stack pointer usage. This allowed a local user to execute code and gain privileges (bsc#1073230). Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Live Patching 12-SP3: zypper in -t patch SUSE-SLE-Live-Patching-12-SP3-2018-299=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Live Patching 12-SP3 (ppc64le x86_64): kgraft-patch-4_4_103-6_38-default-2-2.1 kgraft-patch-4_4_103-6_38-default-debuginfo-2-2.1 References: https://www.suse.com/security/cve/CVE-2017-17712.html https://bugzilla.suse.com/1073230 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2018:0433-1: important: Security update for the Linux Kernel (Live Patch 6 for SLE 12 SP3)
by opensuse-security＠opensuse.org 13 Feb '18

13 Feb '18

SUSE Security Update: Security update for the Linux Kernel (Live Patch 6 for SLE 12 SP3) ______________________________________________________________________________ Announcement ID: SUSE-SU-2018:0433-1 Rating: important References: #1073230 Cross-References: CVE-2017-17712 Affected Products: SUSE Linux Enterprise Live Patching 12-SP3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for the Linux Kernel 4.4.103-6_33 fixes one issue. The following security issue was fixed: - CVE-2017-17712: The raw_sendmsg() function had a race condition that lead to uninitialized stack pointer usage. This allowed a local user to execute code and gain privileges (bsc#1073230). Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Live Patching 12-SP3: zypper in -t patch SUSE-SLE-Live-Patching-12-SP3-2018-298=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Live Patching 12-SP3 (ppc64le x86_64): kgraft-patch-4_4_103-6_33-default-2-2.1 kgraft-patch-4_4_103-6_33-default-debuginfo-2-2.1 References: https://www.suse.com/security/cve/CVE-2017-17712.html https://bugzilla.suse.com/1073230 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0