- openSUSE Security Announce

[security-announce] SUSE-SU-2015:0743-1: important: Security update for mariadb
by opensuse-security＠opensuse.org 21 Apr '15

21 Apr '15

SUSE Security Update: Security update for mariadb ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:0743-1 Rating: important References: #873351 #876282 #880891 #896400 #904627 #906117 #906194 #911442 #911556 #915911 #915912 #915913 #915914 #919229 Cross-References: CVE-2010-5298 CVE-2012-5615 CVE-2014-0195 CVE-2014-0198 CVE-2014-0221 CVE-2014-0224 CVE-2014-2494 CVE-2014-3470 CVE-2014-4207 CVE-2014-4258 CVE-2014-4260 CVE-2014-4274 CVE-2014-4287 CVE-2014-6463 CVE-2014-6464 CVE-2014-6469 CVE-2014-6474 CVE-2014-6478 CVE-2014-6484 CVE-2014-6489 CVE-2014-6491 CVE-2014-6494 CVE-2014-6495 CVE-2014-6496 CVE-2014-6500 CVE-2014-6505 CVE-2014-6507 CVE-2014-6520 CVE-2014-6530 CVE-2014-6551 CVE-2014-6555 CVE-2014-6559 CVE-2014-6564 CVE-2014-6568 CVE-2015-0374 CVE-2015-0381 CVE-2015-0382 CVE-2015-0391 CVE-2015-0411 CVE-2015-0432 Affected Products: SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Desktop 12 ______________________________________________________________________________ An update that fixes 40 vulnerabilities is now available. Description: mariadb was updated to version 10.0.16 to fix 40 security issues. These security issues were fixed: - CVE-2015-0411: Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier, allowed remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Server : Security : Encryption (bnc#915911). - CVE-2015-0382: Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allowed remote attackers to affect availability via unknown vectors related to Server : Replication, a different vulnerability than CVE-2015-0381 (bnc#915911). - CVE-2015-0381: Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allowed remote attackers to affect availability via unknown vectors related to Server : Replication, a different vulnerability than CVE-2015-0382 (bnc#915911). - CVE-2015-0432: Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier allowed remote authenticated users to affect availability via vectors related to Server : InnoDB : DDL : Foreign Key (bnc#915911). - CVE-2014-6568: Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier, allowed remote authenticated users to affect availability via vectors related to Server : InnoDB : DML (bnc#915911). - CVE-2015-0374: Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allowed remote authenticated users to affect confidentiality via unknown vectors related to Server : Security : Privileges : Foreign Key (bnc#915911). - CVE-2014-6507: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allowed remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SERVER:DML (bnc#915912). - CVE-2014-6491: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allowed remote attackers to affect confidentiality, integrity, and availability via vectors related to SERVER:SSL:yaSSL, a different vulnerability than CVE-2014-6500 (bnc#915912). - CVE-2014-6500: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allowed remote attackers to affect confidentiality, integrity, and availability via vectors related to SERVER:SSL:yaSSL, a different vulnerability than CVE-2014-6491 (bnc#915912). - CVE-2014-6469: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and eariler and 5.6.20 and earlier allowed remote authenticated users to affect availability via vectors related to SERVER:OPTIMIZER (bnc#915912). - CVE-2014-6555: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allowed remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SERVER:DML (bnc#915912). - CVE-2014-6559: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allowed remote attackers to affect confidentiality via vectors related to C API SSL CERTIFICATE HANDLING (bnc#915912). - CVE-2014-6494: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allowed remote attackers to affect availability via vectors related to CLIENT:SSL:yaSSL, a different vulnerability than CVE-2014-6496 (bnc#915912). - CVE-2014-6496: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allowed remote attackers to affect availability via vectors related to CLIENT:SSL:yaSSL, a different vulnerability than CVE-2014-6494 (bnc#915912). - CVE-2014-6464: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allowed remote authenticated users to affect availability via vectors related to SERVER:INNODB DML FOREIGN KEYS (bnc#915912). - CVE-2010-5298: Race condition in the ssl3_read_bytes function in s3_pkt.c in OpenSSL through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, allowed remote attackers to inject data across sessions or cause a denial of service (use-after-free and parsing error) via an SSL connection in a multithreaded environment (bnc#873351). - CVE-2014-0195: The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h did not properly validate fragment lengths in DTLS ClientHello messages, which allowed remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via a long non-initial fragment (bnc#880891). - CVE-2014-0198: The do_ssl3_write function in s3_pkt.c in OpenSSL 1.x through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, did not properly manage a buffer pointer during certain recursive calls, which allowed remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors that trigger an alert condition (bnc#876282). - CVE-2014-0221: The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allowed remote attackers to cause a denial of service (recursion and client crash) via a DTLS hello message in an invalid DTLS handshake (bnc#915913). - CVE-2014-0224: OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h did not properly restrict processing of ChangeCipherSpec messages, which allowed man-in-the-middle attackers to trigger use of a zero-length master key in certain OpenSSL-to-OpenSSL communications, and consequently hijack sessions or obtain sensitive information, via a crafted TLS handshake, aka the "CCS Injection" vulnerability (bnc#915913). - CVE-2014-3470: The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an anonymous ECDH cipher suite is used, allowed remote attackers to cause a denial of service (NULL pointer dereference and client crash) by triggering a NULL certificate value (bnc#915913). - CVE-2014-6474: Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allowed remote authenticated users to affect availability via vectors related to SERVER:MEMCACHED (bnc#915913). - CVE-2014-6489: Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allowed remote authenticated users to affect integrity and availability via vectors related to SERVER:SP (bnc#915913). - CVE-2014-6564: Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allowed remote authenticated users to affect availability via vectors related to SERVER:INNODB FULLTEXT SEARCH DML (bnc#915913). - CVE-2012-5615: Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates different error messages with different time delays depending on whether a user name exists, which allowed remote attackers to enumerate valid usernames (bnc#915913). - CVE-2014-4274: Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allowed local users to affect confidentiality, integrity, and availability via vectors related to SERVER:MyISAM (bnc#896400). - CVE-2014-4287: Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allowed remote authenticated users to affect availability via vectors related to SERVER:CHARACTER SETS (bnc#915913). - CVE-2014-6463: Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allowed remote authenticated users to affect availability via vectors related to SERVER:REPLICATION ROW FORMAT BINARY LOG DML (bnc#915913). - CVE-2014-6478: Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allowed remote attackers to affect integrity via vectors related to SERVER:SSL:yaSSL (bnc#915913). - CVE-2014-6484: Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allowed remote authenticated users to affect availability via vectors related to SERVER:DML (bnc#915913). - CVE-2014-6495: Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allowed remote attackers to affect availability via vectors related to SERVER:SSL:yaSSL (bnc#915913). - CVE-2014-6505: Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allowed remote authenticated users to affect availability via vectors related to SERVER:MEMORY STORAGE ENGINE (bnc#915913). - CVE-2014-6520: Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier allowed remote authenticated users to affect availability via vectors related to SERVER:DDL (bnc#915913). - CVE-2014-6530: Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allowed remote authenticated users to affect confidentiality, integrity, and availability via vectors related to CLIENT:MYSQLDUMP (bnc#915913). - CVE-2014-6551: Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allowed local users to affect confidentiality via vectors related to CLIENT:MYSQLADMIN (bnc#915913). - CVE-2015-0391: Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allowed remote authenticated users to affect availability via vectors related to DDL (bnc#915913). - CVE-2014-4258: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.17 and earlier allowed remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SRINFOSC (bnc#915914). - CVE-2014-4260: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier, and 5.6.17 and earlier, allowed remote authenticated users to affect integrity and availability via vectors related to SRCHAR (bnc#915914). - CVE-2014-2494: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allowed remote authenticated users to affect availability via vectors related to ENARC (bnc#915914). - CVE-2014-4207: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allowed remote authenticated users to affect availability via vectors related to SROPTZR (bnc#915914). These non-security issues were fixed: - Get query produced incorrect results in MariaDB 10.0.11 vs MySQL 5.5 - SLES12 (bnc#906194). - After update to version 10.0.14 mariadb did not start - Job for mysql.service failed (bnc#911442). - Fix crash when disk full situation is reached on alter table (bnc#904627). - Allow md5 in FIPS mode (bnc#911556). - Fixed a situation when bit and hex string literals unintentionally changed column names (bnc#919229). Release notes: https://kb.askmonty.org/en/mariadb-10016-release-notes/ Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Workstation Extension 12: zypper in -t patch SUSE-SLE-WE-12-2015-170=1 - SUSE Linux Enterprise Software Development Kit 12: zypper in -t patch SUSE-SLE-SDK-12-2015-170=1 - SUSE Linux Enterprise Server 12: zypper in -t patch SUSE-SLE-SERVER-12-2015-170=1 - SUSE Linux Enterprise Desktop 12: zypper in -t patch SUSE-SLE-DESKTOP-12-2015-170=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Workstation Extension 12 (x86_64): libmysqlclient_r18-10.0.16-15.1 libmysqlclient_r18-32bit-10.0.16-15.1 mariadb-debuginfo-10.0.16-15.1 mariadb-debugsource-10.0.16-15.1 - SUSE Linux Enterprise Software Development Kit 12 (ppc64le s390x x86_64): libmysqlclient-devel-10.0.16-15.1 libmysqlclient_r18-10.0.16-15.1 libmysqld-devel-10.0.16-15.1 libmysqld18-10.0.16-15.1 libmysqld18-debuginfo-10.0.16-15.1 mariadb-debuginfo-10.0.16-15.1 mariadb-debugsource-10.0.16-15.1 - SUSE Linux Enterprise Server 12 (ppc64le s390x x86_64): libmysqlclient18-10.0.16-15.1 libmysqlclient18-debuginfo-10.0.16-15.1 mariadb-10.0.16-15.1 mariadb-client-10.0.16-15.1 mariadb-client-debuginfo-10.0.16-15.1 mariadb-debuginfo-10.0.16-15.1 mariadb-debugsource-10.0.16-15.1 mariadb-errormessages-10.0.16-15.1 mariadb-tools-10.0.16-15.1 mariadb-tools-debuginfo-10.0.16-15.1 - SUSE Linux Enterprise Server 12 (s390x x86_64): libmysqlclient18-32bit-10.0.16-15.1 libmysqlclient18-debuginfo-32bit-10.0.16-15.1 - SUSE Linux Enterprise Desktop 12 (x86_64): libmysqlclient18-10.0.16-15.1 libmysqlclient18-32bit-10.0.16-15.1 libmysqlclient18-debuginfo-10.0.16-15.1 libmysqlclient18-debuginfo-32bit-10.0.16-15.1 libmysqlclient_r18-10.0.16-15.1 libmysqlclient_r18-32bit-10.0.16-15.1 mariadb-10.0.16-15.1 mariadb-client-10.0.16-15.1 mariadb-client-debuginfo-10.0.16-15.1 mariadb-debuginfo-10.0.16-15.1 mariadb-debugsource-10.0.16-15.1 mariadb-errormessages-10.0.16-15.1 References: https://www.suse.com/security/cve/CVE-2010-5298.html https://www.suse.com/security/cve/CVE-2012-5615.html https://www.suse.com/security/cve/CVE-2014-0195.html https://www.suse.com/security/cve/CVE-2014-0198.html https://www.suse.com/security/cve/CVE-2014-0221.html https://www.suse.com/security/cve/CVE-2014-0224.html https://www.suse.com/security/cve/CVE-2014-2494.html https://www.suse.com/security/cve/CVE-2014-3470.html https://www.suse.com/security/cve/CVE-2014-4207.html https://www.suse.com/security/cve/CVE-2014-4258.html https://www.suse.com/security/cve/CVE-2014-4260.html https://www.suse.com/security/cve/CVE-2014-4274.html https://www.suse.com/security/cve/CVE-2014-4287.html https://www.suse.com/security/cve/CVE-2014-6463.html https://www.suse.com/security/cve/CVE-2014-6464.html https://www.suse.com/security/cve/CVE-2014-6469.html https://www.suse.com/security/cve/CVE-2014-6474.html https://www.suse.com/security/cve/CVE-2014-6478.html https://www.suse.com/security/cve/CVE-2014-6484.html https://www.suse.com/security/cve/CVE-2014-6489.html https://www.suse.com/security/cve/CVE-2014-6491.html https://www.suse.com/security/cve/CVE-2014-6494.html https://www.suse.com/security/cve/CVE-2014-6495.html https://www.suse.com/security/cve/CVE-2014-6496.html https://www.suse.com/security/cve/CVE-2014-6500.html https://www.suse.com/security/cve/CVE-2014-6505.html https://www.suse.com/security/cve/CVE-2014-6507.html https://www.suse.com/security/cve/CVE-2014-6520.html https://www.suse.com/security/cve/CVE-2014-6530.html https://www.suse.com/security/cve/CVE-2014-6551.html https://www.suse.com/security/cve/CVE-2014-6555.html https://www.suse.com/security/cve/CVE-2014-6559.html https://www.suse.com/security/cve/CVE-2014-6564.html https://www.suse.com/security/cve/CVE-2014-6568.html https://www.suse.com/security/cve/CVE-2015-0374.html https://www.suse.com/security/cve/CVE-2015-0381.html https://www.suse.com/security/cve/CVE-2015-0382.html https://www.suse.com/security/cve/CVE-2015-0391.html https://www.suse.com/security/cve/CVE-2015-0411.html https://www.suse.com/security/cve/CVE-2015-0432.html https://bugzilla.suse.com/873351 https://bugzilla.suse.com/876282 https://bugzilla.suse.com/880891 https://bugzilla.suse.com/896400 https://bugzilla.suse.com/904627 https://bugzilla.suse.com/906117 https://bugzilla.suse.com/906194 https://bugzilla.suse.com/911442 https://bugzilla.suse.com/911556 https://bugzilla.suse.com/915911 https://bugzilla.suse.com/915912 https://bugzilla.suse.com/915913 https://bugzilla.suse.com/915914 https://bugzilla.suse.com/919229 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:0736-1: important: Security update for Real Time Linux Kernel
by opensuse-security＠opensuse.org 20 Apr '15

20 Apr '15

SUSE Security Update: Security update for Real Time Linux Kernel ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:0736-1 Rating: important References: #771619 #816099 #829110 #833588 #833820 #846656 #853040 #856760 #864401 #864404 #864409 #864411 #865419 #875051 #876086 #876594 #877593 #882470 #883948 #884817 #887597 #891277 #894213 #895841 #896484 #900279 #900644 #902232 #902349 #902351 #902675 #903096 #903640 #904053 #904242 #904659 #904671 #905304 #905312 #905799 #906586 #907196 #907338 #907551 #907611 #907818 #908069 #908163 #908393 #908550 #908551 #908572 #908825 #909077 #909078 #909088 #909092 #909093 #909095 #909264 #909565 #909740 #909846 #910013 #910150 #910159 #910251 #910321 #910322 #910517 #911181 #911325 #911326 #912171 #912705 #913059 #914355 #914423 #914726 #915209 #915322 #915335 #915791 #915826 #916515 #916982 #917839 #917884 #920250 #924282 Cross-References: CVE-2013-7263 CVE-2014-0181 CVE-2014-3687 CVE-2014-3688 CVE-2014-3690 CVE-2014-4608 CVE-2014-7822 CVE-2014-7842 CVE-2014-7970 CVE-2014-8133 CVE-2014-8134 CVE-2014-8160 CVE-2014-8369 CVE-2014-8559 CVE-2014-9090 CVE-2014-9322 CVE-2014-9419 CVE-2014-9420 CVE-2014-9584 CVE-2014-9585 CVE-2015-1593 Affected Products: SUSE Linux Enterprise Real Time Extension 11 SP3 ______________________________________________________________________________ An update that solves 21 vulnerabilities and has 69 fixes is now available. It includes one version update. Description: The SUSE Linux Enterprise 11 SP3 Realtime kernel was updated to receive various security and bugfixes. The following security bugs have been fixed: * CVE-2015-1593: An integer overflow in the stack randomization on 64-bit systems lead to less effective stack ASLR on those systems. (bsc#917839) * CVE-2014-8160: iptables rules could be bypassed if the specific network protocol module was not loaded, allowing e.g. SCTP to bypass the firewall if the sctp protocol was not enabled. (bsc#913059) * CVE-2014-7822: A flaw was found in the way the Linux kernels splice() system call validated its parameters. On certain file systems, a local, unprivileged user could have used this flaw to write past the maximum file size, and thus crash the system. (bnc#915322) * CVE-2014-9419: The __switch_to function in arch/x86/kernel/process_64.c in the Linux kernel did not ensure that Thread Local Storage (TLS) descriptors are loaded before proceeding with other steps, which made it easier for local users to bypass the ASLR protection mechanism via a crafted application that reads a TLS base address (bnc#911326). * CVE-2014-9584: The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel did not validate a length value in the Extensions Reference (ER) System Use Field, which allowed local users to obtain sensitive information from kernel memory via a crafted iso9660 image (bnc#912654). * CVE-2014-9585: The vdso_addr function in arch/x86/vdso/vma.c in the Linux kernel did not properly choose memory locations for the vDSO area, which made it easier for local users to bypass the ASLR protection mechanism by guessing a location at the end of a PMD (bnc#912705). * CVE-2014-8559: The d_walk function in fs/dcache.c in the Linux kernel did not properly maintain the semantics of rename_lock, which allowed local users to cause a denial of service (deadlock and system hang) via a crafted application (bnc#903640). * CVE-2014-9420: The rock_continue function in fs/isofs/rock.c in the Linux kernel did not restrict the number of Rock Ridge continuation entries, which allowed local users to cause a denial of service (infinite loop, and system crash or hang) via a crafted iso9660 image (bsc#911325). * CVE-2014-8134: The paravirt_ops_setup function in arch/x86/kernel/kvm.c in the Linux kernel used an improper paravirt_enabled setting for KVM guest kernels, which made it easier for guest OS users to bypass the ASLR protection mechanism via a crafted application that reads a 16-bit value (bnc#907818 909077 909078). * CVE-2014-8369: The kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux kernel miscalculated the number of pages during the handling of a mapping failure, which allowed guest OS users to cause a denial of service (host OS page unpinning) or possibly have unspecified other impact by leveraging guest OS privileges. NOTE: this vulnerability exists because of an incorrect fix for CVE-2014-3601 (bsc#902675). * CVE-2014-3690: arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel on Intel processors did not ensure that the value in the CR4 control register remains the same after a VM entry, which allowed host OS users to kill arbitrary processes or cause a denial of service (system disruption) by leveraging /dev/kvm access, as demonstrated by PR_SET_TSC prctl calls within a modified copy of QEMU (bnc#902232). * CVE-2014-7842: Race condition in arch/x86/kvm/x86.c in the Linux kernel allowed guest OS users to cause a denial of service (guest OS crash) via a crafted application that performs an MMIO transaction or a PIO transaction to trigger a guest userspace emulation error report, a similar issue to CVE-2010-5313 (bnc#905312). * CVE-2014-0181: The Netlink implementation in the Linux kernel did not provide a mechanism for authorizing socket operations based on the opener of a socket, which allowed local users to bypass intended access restrictions and modify network configurations by using a Netlink socket for the (1) stdout or (2) stderr of a setuid program (bnc#875051). * CVE-2014-3688: The SCTP implementation in the Linux kernel allowed remote attackers to cause a denial of service (memory consumption) by triggering a large number of chunks in an associations output queue, as demonstrated by ASCONF probes, related to net/sctp/inqueue.c and net/sctp/sm_statefuns.c (bnc#902351). * CVE-2014-7970: The pivot_root implementation in fs/namespace.c in the Linux kernel did not properly interact with certain locations of a chroot directory, which allowed local users to cause a denial of service (mount-tree loop) via . (dot) values in both arguments to the pivot_root system call (bnc#900644). * CVE-2014-3687: The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel allowed remote attackers to cause a denial of service (panic) via duplicate ASCONF chunks that trigger an incorrect uncork within the side-effect interpreter (bnc#902349 904899). The following non-security bugs have been fixed: * ACPI idle: permit sparse C-state sub-state numbers (bnc#908550,FATE#317933). * ALSA : hda - not use assigned converters for all unused pins (FATE#317933). * ALSA: hda - Add Device IDs for Intel Wildcat Point-LP PCH (FATE#317347). * ALSA: hda - Fix onboard audio on Intel H97/Z97 chipsets (FATE#317347). * ALSA: hda - add PCI IDs for Intel BayTrail (FATE#317347). * ALSA: hda - add PCI IDs for Intel Braswell (FATE#317347). * ALSA: hda - add codec ID for Braswell display audio codec (FATE#317933). * ALSA: hda - add codec ID for Broadwell display audio codec (FATE#317933). * ALSA: hda - add codec ID for Valleyview2 display codec (FATE#317933). * ALSA: hda - define is_haswell() to check if a display audio codec is Haswell (FATE#317933). * ALSA: hda - hdmi: Re-setup pin and infoframe on plug-in on all codecs (FATE#317933). * ALSA: hda - not choose assigned converters for unused pins of Valleyview (FATE#317933). * ALSA: hda - rename function not_share_unassigned_cvt() (FATE#317933). * ALSA: hda - unmute pin amplifier in infoframe setup for Haswell (FATE#317933). * ALSA: hda - verify pin:converter connection on unsol event for HSW and VLV (FATE#317933). * ALSA: hda - verify pin:cvt connection on preparing a stream for Intel HDMI codec (FATE#317933). * ALSA: hda/hdmi - apply Valleyview fix-ups to Cherryview display codec (FATE#317933). * ALSA: hda/hdmi - apply all Haswell fix-ups to Broadwell display codec (FATE#317933). * ALSA: hda_intel: Add Device IDs for Intel Sunrise Point PCH (FATE#317347). * ALSA: hda_intel: Add DeviceIDs for Sunrise Point-LP (FATE#317347). * Add support for AdvancedSilicon HID multitouch screen (2149:36b1) (FATE#317933). * Disable switching to bootsplash at oops/panic (bnc#877593). * Do not trigger congestion wait on dirty-but-not-writeout pages (VM Performance, bnc#909093, bnc#910517). * Fix HDIO_DRIVE_* ioctl() regression (bnc#833588, bnc#905799) * Fix Module.supported handling for external modules (bnc#905304). * Fix zero freq if frequency is requested too quickly in a row (bnc#908572). * Fix zero freq if frequency is requested too quickly in a row (bnc#908572). * Fixup kABI after patches.fixes/writeback-do-not-sync-data-dirtied-after-sync-start.patch (bn c#833820). * Force native backlight for HP POS machines (bnc#908551,FATE#317933). * HID: use multi input quirk for 22b9:2968 (FATE#317933). * IPoIB: Use a private hash table for path lookup in xmit path (bsc#907196). * Import kabi files from kernel 3.0.101-0.40 * KEYS: Fix stale key registration at error path (bnc#908163). * NFS: Add sequence_priviliged_ops for nfs4_proc_sequence() (bnc#864401). * NFS: do not use STABLE writes during writeback (bnc#816099). * NFSv4.1 handle DS stateid errors (bnc#864401). * NFSv4.1: Do not decode skipped layoutgets (bnc#864411). * NFSv4.1: Fix a race in the pNFS return-on-close code (bnc#864409). * NFSv4.1: Fix an ABBA locking issue with session and state serialisation (bnc#864409). * NFSv4.1: We must release the sequence id when we fail to get a session slot (bnc#864401). * NFSv4: Do not accept delegated opens when a delegation recall is in effect (bnc#864409). * NFSv4: Ensure correct locking when accessing the "^a" list (bnc#864401). * NFSv4: Fix another reboot recovery race (bnc#916982). * Preserve kabi checksum of path_is_under(). * Refresh patches.drivers/HID-multitouch-add-support-for-Atmel-212c. Fix the non-working touchsreen (bnc#909740) * Revert "drm/i915: Calculate correct stolen size for GEN7+" (bnc#908550,FATE#317933). * SUNRPC: Do not allow low priority tasks to pre-empt higher priority ones (bnc#864401). * SUNRPC: When changing the queue priority, ensure that we change the owner (bnc#864401). * Setting rbd and libceph as supported drivers (bsc#917884) * The bug number in patches.fixes/timekeeping-avoid-possible-deadlock-from-clock_was_set.patch changed from bsc#771619 to bsc#915335. * audit: efficiency fix 1: only wake up if queue shorter than backlog limit (bnc#908393). * audit: efficiency fix 2: request exclusive wait since all need same resource (bnc#908393). * audit: fix endless wait in audit_log_start() (bnc#908393). * audit: make use of remaining sleep time from wait_for_auditd (bnc#908393). * audit: refactor hold queue flush (bnc#908393). * audit: reset audit backlog wait time after error recovery (bnc#908393). * audit: wait_for_auditd() should use TASK_UNINTERRUPTIBLE (bnc#908393). * block: rbd: use NULL instead of 0 (FATE#318328 bsc#917884). * block: replace strict_strtoul() with kstrtoul() (FATE#318328 bsc#917884). * bonding: propagate LRO disabling down to slaves (bnc#829110 bnc#891277 bnc#904053). * cciss: fix broken mutex usage in ioctl (bnc#910013). * ceph: Add necessary clean up if invalid reply received in handle_reply() (FATE#318328 bsc#917884). * ceph: remove bogus extern (FATE#318328 bsc#917884). * config: Disable CONFIG_RCU_FAST_NO_HZ (bnc#884817) This option has been verified to be racy vs hotplug, and is irrelevant to SLE in any case. * coredump: ensure the fpu state is flushed for proper multi-threaded core dump (bnc#904671). * crush: CHOOSE_LEAF -> CHOOSELEAF throughout (FATE#318328 bsc#917884). * crush: add SET_CHOOSE_TRIES rule step (FATE#318328 bsc#917884). * crush: add note about r in recursive choose (FATE#318328 bsc#917884). * crush: add set_choose_local_[fallback_]tries steps (FATE#318328 bsc#917884). * crush: apply chooseleaf_tries to firstn mode too (FATE#318328 bsc#917884). * crush: attempts -> tries (FATE#318328 bsc#917884). * crush: clarify numrep vs endpos (FATE#318328 bsc#917884). * crush: eliminate CRUSH_MAX_SET result size limitation (FATE#318328 bsc#917884). * crush: factor out (trivial) crush_destroy_rule() (FATE#318328 bsc#917884). * crush: fix crush_choose_firstn comment (FATE#318328 bsc#917884). * crush: fix some comments (FATE#318328 bsc#917884). * crush: generalize descend_once (FATE#318328 bsc#917884). * crush: new SET_CHOOSE_LEAF_TRIES command (FATE#318328 bsc#917884). * crush: pass parent r value for indep call (FATE#318328 bsc#917884). * crush: pass weight vector size to map function (FATE#318328 bsc#917884). * crush: reduce scope of some local variables (FATE#318328 bsc#917884). * crush: return CRUSH_ITEM_UNDEF for failed placements with indep (FATE#318328 bsc#917884). * crush: strip firstn conditionals out of crush_choose, rename (FATE#318328 bsc#917884). * crush: use breadth-first search for indep mode (FATE#318328 bsc#917884). * crypto: add missing crypto module aliases (bsc#914423). * crypto: include crypto- module prefix in template (bsc#914423). * crypto: kernel oops at insmod of the z90crypt device driver (bnc#909088, LTC#119591). * crypto: prefix module autoloading with "crypto-" (bsc#914423). * dm raid: add region_size parameter (bnc#895841). * do not do blind d_drop() in nfs_prime_dcache() (bnc#908069 bnc#896484). * drm/cirrus: Fix cirrus drm driver for fbdev + qemu (bsc#909846,bnc#856760). * drm/i915: split PCI IDs out into i915_drm.h v4 (bnc#908550,FATE#317933). * fix dcache exit scaling (bnc#876594). * infiniband: ipoib: Sanitize neighbour handling in ipoib_main.c (bsc#907196). * iommu/vt-d: Fix an off-by-one bug in __domain_mapping() (bsc#908825). * ipoib: Convert over to dev_lookup_neigh_skb() (bsc#907196). * ipoib: Need to do dst_neigh_lookup_skb() outside of priv->lock (bsc#907196). * ipv6: fix net reference leak in IPv6 conntrack reassembly (bnc#865419). * isofs: Fix unchecked printing of ER records. * kABI: protect console include in consolemap. * kabi fix (bnc#864404). * kabi, mm: prevent endless growth of anon_vma hierarchy (bnc#904242). * kernel/audit.c: avoid negative sleep durations (bnc#908393). * kernel: 3215 tty close crash (bnc#915209, LTC#120873). * kernel: incorrect clock_gettime result (bnc#915209, LTC#121184). * kvm: Do not expose MONITOR cpuid as available (bnc#887597) * kvm: iommu: Add cond_resched to legacy device assignment code (bnc#910159). * libceph: CEPH_OSD_FLAG_* enum update (FATE#318328 bsc#917884). * libceph: add ceph_kv{malloc,free}() and switch to them (FATE#318328 bsc#917884). * libceph: add ceph_pg_pool_by_id() (FATE#318328 bsc#917884). * libceph: add function to ensure notifies are complete (FATE#318328 bsc#917884). * libceph: add process_one_ticket() helper (FATE#318328 bsc#917884). * libceph: all features fields must be u64 (FATE#318328 bsc#917884). * libceph: block I/O when PAUSE or FULL osd map flags are set (FATE#318328 bsc#917884). * libceph: call r_unsafe_callback when unsafe reply is received (FATE#318328 bsc#917884). * libceph: create_singlethread_workqueue() does not return ERR_PTRs (FATE#318328 bsc#917884). * libceph: do not hard code max auth ticket len (FATE#318328 bsc#917884). * libceph: dout() is missing a newline (FATE#318328 bsc#917884). * libceph: factor out logic from ceph_osdc_start_request() (FATE#318328 bsc#917884). * libceph: fix error handling in ceph_osdc_init() (FATE#318328 bsc#917884). * libceph: fix preallocation check in get_reply() (FATE#318328 bsc#917884). * libceph: fix safe completion (FATE#318328 bsc#917884). * libceph: follow redirect replies from osds (FATE#318328 bsc#917884). * libceph: follow {read,write}_tier fields on osd request submission (FATE#318328 bsc#917884). * libceph: gracefully handle large reply messages from the mon (FATE#318328 bsc#917884). * libceph: introduce and start using oid abstraction (FATE#318328 bsc#917884). * libceph: rename MAX_OBJ_NAME_SIZE to CEPH_MAX_OID_NAME_LEN (FATE#318328 bsc#917884). * libceph: rename ceph_msg::front_max to front_alloc_len (FATE#318328 bsc#917884). * libceph: rename ceph_osd_request::r_{oloc,oid} to r_base_{oloc,oid} (FATE#318328 bsc#917884). * libceph: rename front to front_len in get_reply() (FATE#318328 bsc#917884). * libceph: replace ceph_calc_ceph_pg() with ceph_oloc_oid_to_pg() (FATE#318328 bsc#917884). * libceph: resend all writes after the osdmap loses the full flag (FATE#318328 bsc#917884). * libceph: start using oloc abstraction (FATE#318328 bsc#917884). * libceph: take map_sem for read in handle_reply() (FATE#318328 bsc#917884). * libceph: update ceph_features.h (FATE#318328 bsc#917884). * libceph: use CEPH_MON_PORT when the specified port is 0 (FATE#318328 bsc#917884). * libiscsi: Added new boot entries in the session sysfs (FATE#316723 bsc#914355) * mei: ME hardware reset needs to be synchronized (bnc#876086). * mei: add 9 series PCH mei device ids (bnc#876086). * mei: add hw start callback (bnc#876086). * mei: cancel stall timers in mei_reset (bnc#876086). * mei: do not have to clean the state on power up (bnc#876086). * mei: limit the number of consecutive resets (bnc#876086). * mei: me: add Lynx Point Wellsburg work station device id (bnc#876086). * mei: me: clear interrupts on the resume path (bnc#876086). * mei: me: do not load the driver if the FW does not support MEI interface (bnc#876086). * mei: me: fix hardware reset flow (bnc#876086). * mei: me: read H_CSR after asserting reset (bnc#876086). * mm, vmscan: prevent kswapd livelock due to pfmemalloc-throttled process being killed (VM Functionality bnc#910150). * mm: fix BUG in __split_huge_page_pmd (bnc#906586). * mm: fix corner case in anon_vma endless growing prevention (bnc#904242). * mm: prevent endless growth of anon_vma hierarchy (bnc#904242). * mm: vmscan: count only dirty pages as congested (VM Performance, bnc#910517). * net, sunrpc: suppress allocation warning in rpc_malloc() (bnc#904659). * net: 8021q/bluetooth/bridge/can/ceph: Remove extern from function prototypes (FATE#318328 bsc#917884). * net: handle more general stacking in dev_disable_lro() (bnc#829110 bnc#891277 bnc#904053). * netfilter: do not drop packet on insert collision (bnc#907611). * nf_conntrack: avoid reference leak in __ipv6_conntrack_in() (bnc#865419). * nfs_prime_dcache needs fh to be set (bnc#908069 bnc#896484). * nfsd: fix EXDEV checking in rename (bnc#915791). * pnfs: defer release of pages in layoutget (bnc#864411). * proc_sys_revalidate: fix Oops on NULL nameidata (bnc#907551). * qlge: fix an "&&" vs "||" bug (bsc#912171). * rbd: Fix error recovery in rbd_obj_read_sync() (FATE#318328 bsc#917884). * rbd: Use min_t() to fix comparison of distinct pointer types warning (FATE#318328 bsc#917884). * rbd: add "minor" sysfs rbd device attribute (FATE#318328 bsc#917884). * rbd: add support for single-major device number allocation scheme (FATE#318328 bsc#917884). * rbd: clean up a few things in the refresh path (FATE#318328 bsc#917884). * rbd: complete notifies before cleaning up osd_client and rbd_dev (FATE#318328 bsc#917884). * rbd: do not destroy ceph_opts in rbd_add() (FATE#318328 bsc#917884). * rbd: do not hold ctl_mutex to get/put device (FATE#318328 bsc#917884). * rbd: drop an unsafe assertion (FATE#318328 bsc#917884). * rbd: drop original request earlier for existence check (FATE#318328 bsc#917884). * rbd: enable extended devt in single-major mode (FATE#318328 bsc#917884). * rbd: fetch object order before using it (FATE#318328 bsc#917884). * rbd: fix I/O error propagation for reads (FATE#318328 bsc#917884). * rbd: fix a couple warnings (FATE#318328 bsc#917884). * rbd: fix buffer size for writes to images with snapshots (FATE#318328 bsc#917884). * rbd: fix cleanup in rbd_add() (FATE#318328 bsc#917884). * rbd: fix error handling from rbd_snap_name() (FATE#318328 bsc#917884). * rbd: fix error paths in rbd_img_request_fill() (FATE#318328 bsc#917884). * rbd: fix null dereference in dout (FATE#318328 bsc#917884). * rbd: fix use-after free of rbd_dev->disk (FATE#318328 bsc#917884). * rbd: flush dcache after zeroing page data (FATE#318328 bsc#917884). * rbd: ignore unmapped snapshots that no longer exist (FATE#318328 bsc#917884). * rbd: introduce rbd_dev_header_unwatch_sync() and switch to it (FATE#318328 bsc#917884). * rbd: make rbd_obj_notify_ack() synchronous (FATE#318328 bsc#917884). * rbd: protect against concurrent unmaps (FATE#318328 bsc#917884). * rbd: protect against duplicate client creation (FATE#318328 bsc#917884). * rbd: rbd_device::dev_id is an int, format it as such (FATE#318328 bsc#917884). * rbd: refactor rbd_init() a bit (FATE#318328 bsc#917884). * rbd: send snapshot context with writes (FATE#318328 bsc#917884). * rbd: set removing flag while holding list lock (FATE#318328 bsc#917884). * rbd: switch to ida for rbd id assignments (FATE#318328 bsc#917884). * rbd: take a little credit (FATE#318328 bsc#917884). * rbd: tear down watch request if rbd_dev_device_setup() fails (FATE#318328 bsc#917884). * rbd: tweak "loaded" message and module description (FATE#318328 bsc#917884). * rbd: use reference counts for image requests (FATE#318328 bsc#917884). * rbd: use rwsem to protect header updates (FATE#318328 bsc#917884). * rbd: use the correct length for format 2 object names (FATE#318328 bsc#917884). * rpm/kernel-binary.spec.in: Own the modules directory in the devel package (bnc#910322) * scsi_dh_alua: add missing hunk in alua_set_params() (bnc#846656). * scsifront: avoid acquiring same lock twice if ring is full. * sd: medium access timeout counter fails to reset (bnc#894213). * storvsc: ring buffer failures may result in I/O freeze * swap: fix shmem swapping when more than 8 areas (bnc#903096). * timekeeping: Avoid possible deadlock from clock_was_set_delayed (bsc#771619). * tty: Fix memory leak in virtual console when enable unicode translation (bnc#916515). * udf: Check component length before reading it. * udf: Check path length when reading symlink. * udf: Verify i_size when loading inode. * udf: Verify symlink size before loading it. * udp: Add MIB counters for rcvbuferrors (bnc#909565). * usb: xhci: rework root port wake bits if controller is not allowed to wakeup (bsc#909264). * virtio_net: drop dst reference before transmitting a packet (bnc#882470). * vt: push the tty_lock down into the map handling (bnc#915826). * workqueue: Make rescuer thread process more works (bnc#900279). * x86, xsave: remove thread_has_fpu() bug check in __sanitize_i387_state() (bnc#904671). * x86-64/MCE: flip CPU and bank numbers in log message. * x86/UV: Fix NULL pointer dereference in uv_flush_tlb_others() if the "^a" boot option is used (bsc#909092). * x86/UV: Fix conditional in gru_exit() (bsc#909095). * x86/early quirk: use gen6 stolen detection for VLV (bnc#908550,FATE#317933). * x86/gpu: Print the Intel graphics stolen memory range (bnc#908550). * x86/hpet: Make boot_hpet_disable extern (bnc#908550,FATE#317933). * x86/intel: Add quirk to disable HPET for the Baytrail platform (bnc#908550,FATE#317933). * x86/uv: Fix UV2 BAU legacy mode (bsc#909092). * x86/uv: Fix the UV BAU destination timeout period (bsc#909092). * x86/uv: Implement UV BAU runtime enable and disable control via /proc/sgi_uv/ (bsc#909092). * x86/uv: Update the UV3 TLB shootdown logic (bsc#909092). * x86/uv: Work around UV2 BAU hangs (bsc#909092). * x86: UV BAU: Avoid NULL pointer reference in ptc_seq_show (bsc#911181). * x86: UV BAU: Increase maximum CPUs per socket/hub (bsc#911181). * x86: add early quirk for reserving Intel graphics stolen memory v5 (bnc#908550,FATE#317933). * x86: irq: Check for valid irq descriptor in check_irq_vectors_for_cpu_disable (bnc#914726). * xen-privcmd-hcall-preemption: Fix EFLAGS.IF access. * xfs: re-enable non-blocking behaviour in xfs_map_blocks (bnc#900279). * xfs: recheck buffer pinned status after push trylock failure (bnc#907338). * xfs: remove log force from xfs_buf_trylock() (bnc#907338). * xhci: fix incorrect type in assignment in handle_device_notification() (bsc#910321). * zcrypt: Number of supported ap domains is not retrievable (bnc#915209, LTC#120788). Security Issues: * CVE-2013-7263 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7263> * CVE-2014-0181 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0181> * CVE-2014-3687 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3687> * CVE-2014-3688 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3688> * CVE-2014-3690 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3690> * CVE-2014-4608 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4608> * CVE-2014-7822 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7822> * CVE-2014-7842 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7842> * CVE-2014-7970 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7970> * CVE-2014-8133 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8133> * CVE-2014-8134 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8134> * CVE-2014-8160 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8160> * CVE-2014-8369 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8369> * CVE-2014-8559 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8559> * CVE-2014-9090 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9090> * CVE-2014-9322 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9322> * CVE-2014-9419 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9419> * CVE-2014-9420 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9420> * CVE-2014-9584 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9584> * CVE-2014-9585 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9585> * CVE-2015-1593 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1593> Indications: Everyone using the Real Time Linux Kernel on x86_64 architecture should update. Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Real Time Extension 11 SP3: zypper in -t patch slertesp3-kernel=10569 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Real Time Extension 11 SP3 (x86_64) [New Version: 3.0.101.rt130]: cluster-network-kmp-rt-1.4_3.0.101_rt130_0.33.36-2.28.1.14 cluster-network-kmp-rt_trace-1.4_3.0.101_rt130_0.33.36-2.28.1.14 drbd-kmp-rt-8.4.4_3.0.101_rt130_0.33.36-0.23.1.14 drbd-kmp-rt_trace-8.4.4_3.0.101_rt130_0.33.36-0.23.1.14 iscsitarget-kmp-rt-1.4.20_3.0.101_rt130_0.33.36-0.39.1.14 iscsitarget-kmp-rt_trace-1.4.20_3.0.101_rt130_0.33.36-0.39.1.14 kernel-rt-3.0.101.rt130-0.33.36.1 kernel-rt-base-3.0.101.rt130-0.33.36.1 kernel-rt-devel-3.0.101.rt130-0.33.36.1 kernel-rt_trace-3.0.101.rt130-0.33.36.1 kernel-rt_trace-base-3.0.101.rt130-0.33.36.1 kernel-rt_trace-devel-3.0.101.rt130-0.33.36.1 kernel-source-rt-3.0.101.rt130-0.33.36.1 kernel-syms-rt-3.0.101.rt130-0.33.36.1 lttng-modules-kmp-rt-2.1.1_3.0.101_rt130_0.33.36-0.12.1.13 lttng-modules-kmp-rt_trace-2.1.1_3.0.101_rt130_0.33.36-0.12.1.13 ocfs2-kmp-rt-1.6_3.0.101_rt130_0.33.36-0.21.1.14 ocfs2-kmp-rt_trace-1.6_3.0.101_rt130_0.33.36-0.21.1.14 ofed-kmp-rt-1.5.4.1_3.0.101_rt130_0.33.36-0.14.1.14 ofed-kmp-rt_trace-1.5.4.1_3.0.101_rt130_0.33.36-0.14.1.14 References: https://www.suse.com/security/cve/CVE-2013-7263.html https://www.suse.com/security/cve/CVE-2014-0181.html https://www.suse.com/security/cve/CVE-2014-3687.html https://www.suse.com/security/cve/CVE-2014-3688.html https://www.suse.com/security/cve/CVE-2014-3690.html https://www.suse.com/security/cve/CVE-2014-4608.html https://www.suse.com/security/cve/CVE-2014-7822.html https://www.suse.com/security/cve/CVE-2014-7842.html https://www.suse.com/security/cve/CVE-2014-7970.html https://www.suse.com/security/cve/CVE-2014-8133.html https://www.suse.com/security/cve/CVE-2014-8134.html https://www.suse.com/security/cve/CVE-2014-8160.html https://www.suse.com/security/cve/CVE-2014-8369.html https://www.suse.com/security/cve/CVE-2014-8559.html https://www.suse.com/security/cve/CVE-2014-9090.html https://www.suse.com/security/cve/CVE-2014-9322.html https://www.suse.com/security/cve/CVE-2014-9419.html https://www.suse.com/security/cve/CVE-2014-9420.html https://www.suse.com/security/cve/CVE-2014-9584.html https://www.suse.com/security/cve/CVE-2014-9585.html https://www.suse.com/security/cve/CVE-2015-1593.html https://bugzilla.suse.com/771619 https://bugzilla.suse.com/816099 https://bugzilla.suse.com/829110 https://bugzilla.suse.com/833588 https://bugzilla.suse.com/833820 https://bugzilla.suse.com/846656 https://bugzilla.suse.com/853040 https://bugzilla.suse.com/856760 https://bugzilla.suse.com/864401 https://bugzilla.suse.com/864404 https://bugzilla.suse.com/864409 https://bugzilla.suse.com/864411 https://bugzilla.suse.com/865419 https://bugzilla.suse.com/875051 https://bugzilla.suse.com/876086 https://bugzilla.suse.com/876594 https://bugzilla.suse.com/877593 https://bugzilla.suse.com/882470 https://bugzilla.suse.com/883948 https://bugzilla.suse.com/884817 https://bugzilla.suse.com/887597 https://bugzilla.suse.com/891277 https://bugzilla.suse.com/894213 https://bugzilla.suse.com/895841 https://bugzilla.suse.com/896484 https://bugzilla.suse.com/900279 https://bugzilla.suse.com/900644 https://bugzilla.suse.com/902232 https://bugzilla.suse.com/902349 https://bugzilla.suse.com/902351 https://bugzilla.suse.com/902675 https://bugzilla.suse.com/903096 https://bugzilla.suse.com/903640 https://bugzilla.suse.com/904053 https://bugzilla.suse.com/904242 https://bugzilla.suse.com/904659 https://bugzilla.suse.com/904671 https://bugzilla.suse.com/905304 https://bugzilla.suse.com/905312 https://bugzilla.suse.com/905799 https://bugzilla.suse.com/906586 https://bugzilla.suse.com/907196 https://bugzilla.suse.com/907338 https://bugzilla.suse.com/907551 https://bugzilla.suse.com/907611 https://bugzilla.suse.com/907818 https://bugzilla.suse.com/908069 https://bugzilla.suse.com/908163 https://bugzilla.suse.com/908393 https://bugzilla.suse.com/908550 https://bugzilla.suse.com/908551 https://bugzilla.suse.com/908572 https://bugzilla.suse.com/908825 https://bugzilla.suse.com/909077 https://bugzilla.suse.com/909078 https://bugzilla.suse.com/909088 https://bugzilla.suse.com/909092 https://bugzilla.suse.com/909093 https://bugzilla.suse.com/909095 https://bugzilla.suse.com/909264 https://bugzilla.suse.com/909565 https://bugzilla.suse.com/909740 https://bugzilla.suse.com/909846 https://bugzilla.suse.com/910013 https://bugzilla.suse.com/910150 https://bugzilla.suse.com/910159 https://bugzilla.suse.com/910251 https://bugzilla.suse.com/910321 https://bugzilla.suse.com/910322 https://bugzilla.suse.com/910517 https://bugzilla.suse.com/911181 https://bugzilla.suse.com/911325 https://bugzilla.suse.com/911326 https://bugzilla.suse.com/912171 https://bugzilla.suse.com/912705 https://bugzilla.suse.com/913059 https://bugzilla.suse.com/914355 https://bugzilla.suse.com/914423 https://bugzilla.suse.com/914726 https://bugzilla.suse.com/915209 https://bugzilla.suse.com/915322 https://bugzilla.suse.com/915335 https://bugzilla.suse.com/915791 https://bugzilla.suse.com/915826 https://bugzilla.suse.com/916515 https://bugzilla.suse.com/916982 https://bugzilla.suse.com/917839 https://bugzilla.suse.com/917884 https://bugzilla.suse.com/920250 https://bugzilla.suse.com/924282 https://download.suse.com/patch/finder/?keywords=6ac65f6e9ab5fc78350f4042c5… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2015:0732-1: important: Security update for xen
by opensuse-security＠opensuse.org 20 Apr '15

20 Apr '15

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0732-1 Rating: important References: #861318 #895528 #901488 #903680 #910254 #918995 #918998 #919098 #919464 #919663 #922705 #922706 Cross-References: CVE-2014-3615 CVE-2015-2044 CVE-2015-2045 CVE-2015-2151 CVE-2015-2152 CVE-2015-2752 CVE-2015-2756 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that solves 7 vulnerabilities and has 5 fixes is now available. Description: Xen was updated to 4.3.4 to fix multiple vulnerabities and non-security bugs. The following vulnerabilities were fixed: - Long latency MMIO mapping operations are not preemptible (XSA-125 CVE-2015-2752 bnc#922705) - Unmediated PCI command register access in qemu (XSA-126 CVE-2015-2756 bnc#922706) - Hypervisor memory corruption due to x86 emulator flaw (bnc#919464 CVE-2015-2151 XSA-123) - Information leak through version information hypercall (bnc#918998 CVE-2015-2045 XSA-122) - Information leak via internal x86 system device emulation (bnc#918995 (CVE-2015-2044 XSA-121) - HVM qemu unexpectedly enabling emulated VGA graphics backends (bnc#919663 CVE-2015-2152 XSA-119) - information leakage when guest sets high resolution (bnc#895528 CVE-2014-3615) The following non-security bugs were fixed: - L3: XEN blktap device intermittently fails to connect (bnc#919098) - Problems with detecting free loop devices on Xen guest startup (bnc#903680) - xentop reports "Found interface vif101.0 but domain 101 does not exist." (bnc#861318) - Intel ixgbe driver assigns rx/tx queues per core resulting in irq problems on servers with a large amount of CPU cores (bnc#901488) - SLES11 SP3 Xen VT-d igb NIC doesn't work (bnc#910254) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-314=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): xen-debugsource-4.3.4_02-41.1 xen-devel-4.3.4_02-41.1 xen-kmp-default-4.3.4_02_k3.11.10_29-41.1 xen-kmp-default-debuginfo-4.3.4_02_k3.11.10_29-41.1 xen-kmp-desktop-4.3.4_02_k3.11.10_29-41.1 xen-kmp-desktop-debuginfo-4.3.4_02_k3.11.10_29-41.1 xen-libs-4.3.4_02-41.1 xen-libs-debuginfo-4.3.4_02-41.1 xen-tools-domU-4.3.4_02-41.1 xen-tools-domU-debuginfo-4.3.4_02-41.1 - openSUSE 13.1 (x86_64): xen-4.3.4_02-41.1 xen-doc-html-4.3.4_02-41.1 xen-libs-32bit-4.3.4_02-41.1 xen-libs-debuginfo-32bit-4.3.4_02-41.1 xen-tools-4.3.4_02-41.1 xen-tools-debuginfo-4.3.4_02-41.1 xen-xend-tools-4.3.4_02-41.1 xen-xend-tools-debuginfo-4.3.4_02-41.1 - openSUSE 13.1 (i586): xen-kmp-pae-4.3.4_02_k3.11.10_29-41.1 xen-kmp-pae-debuginfo-4.3.4_02_k3.11.10_29-41.1 References: https://www.suse.com/security/cve/CVE-2014-3615.html https://www.suse.com/security/cve/CVE-2015-2044.html https://www.suse.com/security/cve/CVE-2015-2045.html https://www.suse.com/security/cve/CVE-2015-2151.html https://www.suse.com/security/cve/CVE-2015-2152.html https://www.suse.com/security/cve/CVE-2015-2752.html https://www.suse.com/security/cve/CVE-2015-2756.html https://bugzilla.suse.com/861318 https://bugzilla.suse.com/895528 https://bugzilla.suse.com/901488 https://bugzilla.suse.com/903680 https://bugzilla.suse.com/910254 https://bugzilla.suse.com/918995 https://bugzilla.suse.com/918998 https://bugzilla.suse.com/919098 https://bugzilla.suse.com/919464 https://bugzilla.suse.com/919663 https://bugzilla.suse.com/922705 https://bugzilla.suse.com/922706 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2015:0725-1: important: Security update for Adobe Flash Player
by opensuse-security＠opensuse.org 16 Apr '15

16 Apr '15

openSUSE Security Update: Security update for Adobe Flash Player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0725-1 Rating: important References: #856386 #901334 #905032 #907257 #909219 #913057 #914333 #914463 #922033 #927089 Cross-References: CVE-2014-0558 CVE-2014-0564 CVE-2014-0569 CVE-2014-0573 CVE-2014-0574 CVE-2014-0576 CVE-2014-0577 CVE-2014-0581 CVE-2014-0582 CVE-2014-0583 CVE-2014-0584 CVE-2014-0585 CVE-2014-0586 CVE-2014-0588 CVE-2014-0589 CVE-2014-0590 CVE-2014-8437 CVE-2014-8438 CVE-2014-8440 CVE-2014-8441 CVE-2014-8442 CVE-2015-0331 CVE-2015-0332 CVE-2015-0346 CVE-2015-0347 CVE-2015-0348 CVE-2015-0349 CVE-2015-0350 CVE-2015-0351 CVE-2015-0352 CVE-2015-0353 CVE-2015-0354 CVE-2015-0355 CVE-2015-0356 CVE-2015-0357 CVE-2015-0358 CVE-2015-0359 CVE-2015-0360 CVE-2015-3038 CVE-2015-3039 CVE-2015-3040 CVE-2015-3041 CVE-2015-3042 CVE-2015-3043 CVE-2015-3044 Affected Products: openSUSE Evergreen 11.4 ______________________________________________________________________________ An update that fixes 45 vulnerabilities is now available. Description: Adobe Flash Player was updated to 11.2.202.457 to fix several security issues that could lead to remote code execution. An exploit for CVE-2015-3043 was reported to exist in the wild. The following vulnerabilities were fixed: * Memory corruption vulnerabilities that could lead to code execution (CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, CVE-2015-3043). * Type confusion vulnerability that could lead to code execution (CVE-2015-0356). * Buffer overflow vulnerability that could lead to code execution (CVE-2015-0348). * Use-after-free vulnerabilities that could lead to code execution (CVE-2015-0349, CVE-2015-0351, CVE-2015-0358, CVE-2015-3039). * Double-free vulnerabilities that could lead to code execution (CVE-2015-0346, CVE-2015-0359). * Memory leak vulnerabilities that could be used to bypass ASLR (CVE-2015-0357, CVE-2015-3040). * Security bypass vulnerability that could lead to information disclosure (CVE-2015-3044) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Evergreen 11.4: zypper in -t patch 2015-13=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Evergreen 11.4 (i586 x86_64): flash-player-11.2.202.457-158.1 flash-player-gnome-11.2.202.457-158.1 flash-player-kde4-11.2.202.457-158.1 References: https://www.suse.com/security/cve/CVE-2014-0558.html https://www.suse.com/security/cve/CVE-2014-0564.html https://www.suse.com/security/cve/CVE-2014-0569.html https://www.suse.com/security/cve/CVE-2014-0573.html https://www.suse.com/security/cve/CVE-2014-0574.html https://www.suse.com/security/cve/CVE-2014-0576.html https://www.suse.com/security/cve/CVE-2014-0577.html https://www.suse.com/security/cve/CVE-2014-0581.html https://www.suse.com/security/cve/CVE-2014-0582.html https://www.suse.com/security/cve/CVE-2014-0583.html https://www.suse.com/security/cve/CVE-2014-0584.html https://www.suse.com/security/cve/CVE-2014-0585.html https://www.suse.com/security/cve/CVE-2014-0586.html https://www.suse.com/security/cve/CVE-2014-0588.html https://www.suse.com/security/cve/CVE-2014-0589.html https://www.suse.com/security/cve/CVE-2014-0590.html https://www.suse.com/security/cve/CVE-2014-8437.html https://www.suse.com/security/cve/CVE-2014-8438.html https://www.suse.com/security/cve/CVE-2014-8440.html https://www.suse.com/security/cve/CVE-2014-8441.html https://www.suse.com/security/cve/CVE-2014-8442.html https://www.suse.com/security/cve/CVE-2015-0331.html https://www.suse.com/security/cve/CVE-2015-0332.html https://www.suse.com/security/cve/CVE-2015-0346.html https://www.suse.com/security/cve/CVE-2015-0347.html https://www.suse.com/security/cve/CVE-2015-0348.html https://www.suse.com/security/cve/CVE-2015-0349.html https://www.suse.com/security/cve/CVE-2015-0350.html https://www.suse.com/security/cve/CVE-2015-0351.html https://www.suse.com/security/cve/CVE-2015-0352.html https://www.suse.com/security/cve/CVE-2015-0353.html https://www.suse.com/security/cve/CVE-2015-0354.html https://www.suse.com/security/cve/CVE-2015-0355.html https://www.suse.com/security/cve/CVE-2015-0356.html https://www.suse.com/security/cve/CVE-2015-0357.html https://www.suse.com/security/cve/CVE-2015-0358.html https://www.suse.com/security/cve/CVE-2015-0359.html https://www.suse.com/security/cve/CVE-2015-0360.html https://www.suse.com/security/cve/CVE-2015-3038.html https://www.suse.com/security/cve/CVE-2015-3039.html https://www.suse.com/security/cve/CVE-2015-3040.html https://www.suse.com/security/cve/CVE-2015-3041.html https://www.suse.com/security/cve/CVE-2015-3042.html https://www.suse.com/security/cve/CVE-2015-3043.html https://www.suse.com/security/cve/CVE-2015-3044.html https://bugzilla.suse.com/856386 https://bugzilla.suse.com/901334 https://bugzilla.suse.com/905032 https://bugzilla.suse.com/907257 https://bugzilla.suse.com/909219 https://bugzilla.suse.com/913057 https://bugzilla.suse.com/914333 https://bugzilla.suse.com/914463 https://bugzilla.suse.com/922033 https://bugzilla.suse.com/927089 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:0723-1: important: Security update for flash-player
by opensuse-security＠opensuse.org 16 Apr '15

16 Apr '15

SUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:0723-1 Rating: important References: #927089 Cross-References: CVE-2015-0346 CVE-2015-0347 CVE-2015-0348 CVE-2015-0349 CVE-2015-0350 CVE-2015-0351 CVE-2015-0352 CVE-2015-0353 CVE-2015-0354 CVE-2015-0355 CVE-2015-0356 CVE-2015-0357 CVE-2015-0358 CVE-2015-0359 CVE-2015-0360 CVE-2015-3038 CVE-2015-3039 CVE-2015-3040 CVE-2015-3041 CVE-2015-3042 CVE-2015-3043 CVE-2015-3044 Affected Products: SUSE Linux Enterprise Desktop 11 SP3 ______________________________________________________________________________ An update that fixes 22 vulnerabilities is now available. It includes one version update. Description: Adobe Flash Player was updated to version 11.2.202.457 to fix several security issues that could have lead to remote code execution. An exploit for CVE-2015-3043 was reported to exist in the wild. The following vulnerabilities have been fixed: * Memory corruption vulnerabilities that could have lead to code execution (CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, CVE-2015-3043). * Type confusion vulnerability that could have lead to code execution (CVE-2015-0356). * Buffer overflow vulnerability that could have lead to code execution (CVE-2015-0348). * Use-after-free vulnerabilities that could have lead to code execution (CVE-2015-0349, CVE-2015-0351, CVE-2015-0358, CVE-2015-3039). * Double-free vulnerabilities that could have lead to code execution (CVE-2015-0346, CVE-2015-0359). * Memory leak vulnerabilities that could have been used to bypass ASLR (CVE-2015-0357, CVE-2015-3040). * Security bypass vulnerability that could have lead to information disclosure (CVE-2015-3044). Security Issues: * CVE-2015-0346 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0346> * CVE-2015-0347 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0347> * CVE-2015-0348 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0348> * CVE-2015-0349 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0349> * CVE-2015-0350 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0350> * CVE-2015-0351 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0351> * CVE-2015-0352 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0352> * CVE-2015-0353 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0353> * CVE-2015-0354 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0354> * CVE-2015-0355 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0355> * CVE-2015-0356 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0356> * CVE-2015-0357 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0357> * CVE-2015-0358 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0358> * CVE-2015-0359 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0359> * CVE-2015-0360 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0360> * CVE-2015-3038 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3038> * CVE-2015-3039 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3039> * CVE-2015-3040 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3040> * CVE-2015-3041 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3041> * CVE-2015-3042 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3042> * CVE-2015-3043 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3043> * CVE-2015-3044 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3044> Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Desktop 11 SP3: zypper in -t patch sledsp3-flash-player=10615 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Desktop 11 SP3 (i586 x86_64) [New Version: 11.2.202.457]: flash-player-11.2.202.457-0.3.1 flash-player-gnome-11.2.202.457-0.3.1 flash-player-kde4-11.2.202.457-0.3.1 References: https://www.suse.com/security/cve/CVE-2015-0346.html https://www.suse.com/security/cve/CVE-2015-0347.html https://www.suse.com/security/cve/CVE-2015-0348.html https://www.suse.com/security/cve/CVE-2015-0349.html https://www.suse.com/security/cve/CVE-2015-0350.html https://www.suse.com/security/cve/CVE-2015-0351.html https://www.suse.com/security/cve/CVE-2015-0352.html https://www.suse.com/security/cve/CVE-2015-0353.html https://www.suse.com/security/cve/CVE-2015-0354.html https://www.suse.com/security/cve/CVE-2015-0355.html https://www.suse.com/security/cve/CVE-2015-0356.html https://www.suse.com/security/cve/CVE-2015-0357.html https://www.suse.com/security/cve/CVE-2015-0358.html https://www.suse.com/security/cve/CVE-2015-0359.html https://www.suse.com/security/cve/CVE-2015-0360.html https://www.suse.com/security/cve/CVE-2015-3038.html https://www.suse.com/security/cve/CVE-2015-3039.html https://www.suse.com/security/cve/CVE-2015-3040.html https://www.suse.com/security/cve/CVE-2015-3041.html https://www.suse.com/security/cve/CVE-2015-3042.html https://www.suse.com/security/cve/CVE-2015-3043.html https://www.suse.com/security/cve/CVE-2015-3044.html https://bugzilla.suse.com/927089 https://download.suse.com/patch/finder/?keywords=93ace65cf2a9138aed0ed06c86… -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:0722-1: important: Security update for Adobe Flash Player
by opensuse-security＠opensuse.org 15 Apr '15

15 Apr '15

SUSE Security Update: Security update for Adobe Flash Player ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:0722-1 Rating: important References: #927089 Cross-References: CVE-2015-0346 CVE-2015-0347 CVE-2015-0348 CVE-2015-0349 CVE-2015-0350 CVE-2015-0351 CVE-2015-0352 CVE-2015-0353 CVE-2015-0354 CVE-2015-0355 CVE-2015-0356 CVE-2015-0357 CVE-2015-0358 CVE-2015-0359 CVE-2015-0360 CVE-2015-3038 CVE-2015-3039 CVE-2015-3040 CVE-2015-3041 CVE-2015-3042 CVE-2015-3043 CVE-2015-3044 Affected Products: SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Desktop 12 ______________________________________________________________________________ An update that fixes 22 vulnerabilities is now available. Description: Adobe Flash Player was updated to 11.2.202.457 to fix several security issues that could lead to remote code execution. An exploit for CVE-2015-3043 was reported to exist in the wild. The following vulnerabilities were fixed: * Memory corruption vulnerabilities that could lead to code execution (CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, CVE-2015-3043). * Type confusion vulnerability that could lead to code execution (CVE-2015-0356). * Buffer overflow vulnerability that could lead to code execution (CVE-2015-0348). * Use-after-free vulnerabilities that could lead to code execution (CVE-2015-0349, CVE-2015-0351, CVE-2015-0358, CVE-2015-3039). * Double-free vulnerabilities that could lead to code execution (CVE-2015-0346, CVE-2015-0359). * Memory leak vulnerabilities that could be used to bypass ASLR (CVE-2015-0357, CVE-2015-3040). * Security bypass vulnerability that could lead to information disclosure (CVE-2015-3044). Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Workstation Extension 12: zypper in -t patch SUSE-SLE-WE-12-2015-167=1 - SUSE Linux Enterprise Desktop 12: zypper in -t patch SUSE-SLE-DESKTOP-12-2015-167=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Workstation Extension 12 (i586 x86_64): flash-player-11.2.202.457-80.1 flash-player-gnome-11.2.202.457-80.1 - SUSE Linux Enterprise Desktop 12 (i586 x86_64): flash-player-11.2.202.457-80.1 flash-player-gnome-11.2.202.457-80.1 References: https://www.suse.com/security/cve/CVE-2015-0346.html https://www.suse.com/security/cve/CVE-2015-0347.html https://www.suse.com/security/cve/CVE-2015-0348.html https://www.suse.com/security/cve/CVE-2015-0349.html https://www.suse.com/security/cve/CVE-2015-0350.html https://www.suse.com/security/cve/CVE-2015-0351.html https://www.suse.com/security/cve/CVE-2015-0352.html https://www.suse.com/security/cve/CVE-2015-0353.html https://www.suse.com/security/cve/CVE-2015-0354.html https://www.suse.com/security/cve/CVE-2015-0355.html https://www.suse.com/security/cve/CVE-2015-0356.html https://www.suse.com/security/cve/CVE-2015-0357.html https://www.suse.com/security/cve/CVE-2015-0358.html https://www.suse.com/security/cve/CVE-2015-0359.html https://www.suse.com/security/cve/CVE-2015-0360.html https://www.suse.com/security/cve/CVE-2015-3038.html https://www.suse.com/security/cve/CVE-2015-3039.html https://www.suse.com/security/cve/CVE-2015-3040.html https://www.suse.com/security/cve/CVE-2015-3041.html https://www.suse.com/security/cve/CVE-2015-3042.html https://www.suse.com/security/cve/CVE-2015-3043.html https://www.suse.com/security/cve/CVE-2015-3044.html https://bugzilla.suse.com/927089 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2015:0718-1: important: Security update for Adobe Flash Player
by opensuse-security＠opensuse.org 15 Apr '15

15 Apr '15

openSUSE Security Update: Security update for Adobe Flash Player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0718-1 Rating: important References: #927089 Cross-References: CVE-2015-0346 CVE-2015-0347 CVE-2015-0348 CVE-2015-0349 CVE-2015-0350 CVE-2015-0351 CVE-2015-0352 CVE-2015-0353 CVE-2015-0354 CVE-2015-0355 CVE-2015-0356 CVE-2015-0357 CVE-2015-0358 CVE-2015-0359 CVE-2015-0360 CVE-2015-3038 CVE-2015-3039 CVE-2015-3040 CVE-2015-3041 CVE-2015-3042 CVE-2015-3043 CVE-2015-3044 Affected Products: openSUSE 13.2:NonFree openSUSE 13.1:NonFree ______________________________________________________________________________ An update that fixes 22 vulnerabilities is now available. Description: Adobe Flash Player was updated to 11.2.202.457 to fix several security issues that could lead to remote code execution. An exploit for CVE-2015-3043 was reported to exist in the wild. The following vulnerabilities were fixed: * Memory corruption vulnerabilities that could lead to code execution (CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, CVE-2015-3043). * Type confusion vulnerability that could lead to code execution (CVE-2015-0356). * Buffer overflow vulnerability that could lead to code execution (CVE-2015-0348). * Use-after-free vulnerabilities that could lead to code execution (CVE-2015-0349, CVE-2015-0351, CVE-2015-0358, CVE-2015-3039). * Double-free vulnerabilities that could lead to code execution (CVE-2015-0346, CVE-2015-0359). * Memory leak vulnerabilities that could be used to bypass ASLR (CVE-2015-0357, CVE-2015-3040). * Security bypass vulnerability that could lead to information disclosure (CVE-2015-3044). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2:NonFree: zypper in -t patch openSUSE-2015-304=1 - openSUSE 13.1:NonFree: zypper in -t patch openSUSE-2015-304=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2:NonFree (i586 x86_64): flash-player-11.2.202.457-2.48.1 flash-player-gnome-11.2.202.457-2.48.1 flash-player-kde4-11.2.202.457-2.48.1 - openSUSE 13.1:NonFree (i586 x86_64): flash-player-11.2.202.457-113.1 flash-player-gnome-11.2.202.457-113.1 flash-player-kde4-11.2.202.457-113.1 References: https://www.suse.com/security/cve/CVE-2015-0346.html https://www.suse.com/security/cve/CVE-2015-0347.html https://www.suse.com/security/cve/CVE-2015-0348.html https://www.suse.com/security/cve/CVE-2015-0349.html https://www.suse.com/security/cve/CVE-2015-0350.html https://www.suse.com/security/cve/CVE-2015-0351.html https://www.suse.com/security/cve/CVE-2015-0352.html https://www.suse.com/security/cve/CVE-2015-0353.html https://www.suse.com/security/cve/CVE-2015-0354.html https://www.suse.com/security/cve/CVE-2015-0355.html https://www.suse.com/security/cve/CVE-2015-0356.html https://www.suse.com/security/cve/CVE-2015-0357.html https://www.suse.com/security/cve/CVE-2015-0358.html https://www.suse.com/security/cve/CVE-2015-0359.html https://www.suse.com/security/cve/CVE-2015-0360.html https://www.suse.com/security/cve/CVE-2015-3038.html https://www.suse.com/security/cve/CVE-2015-3039.html https://www.suse.com/security/cve/CVE-2015-3040.html https://www.suse.com/security/cve/CVE-2015-3041.html https://www.suse.com/security/cve/CVE-2015-3042.html https://www.suse.com/security/cve/CVE-2015-3043.html https://www.suse.com/security/cve/CVE-2015-3044.html https://bugzilla.suse.com/927089 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2015:0714-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 13 Apr '15

13 Apr '15

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0714-1 Rating: important References: #903640 #904899 #907988 #909078 #910150 #911325 #911326 #912202 #912654 #912705 #913059 #913695 #914175 #915322 #917839 #920901 Cross-References: CVE-2014-7822 CVE-2014-8134 CVE-2014-8160 CVE-2014-8173 CVE-2014-8559 CVE-2014-9419 CVE-2014-9420 CVE-2014-9529 CVE-2014-9584 CVE-2014-9585 CVE-2015-1593 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that solves 11 vulnerabilities and has 5 fixes is now available. Description: The Linux kernel was updated to fix various bugs and security issues. Following security issues were fixed: - CVE-2014-8173: A NULL pointer dereference flaw was found in the way the Linux kernels madvise MADV_WILLNEED functionality handled page table locking. A local, unprivileged user could have used this flaw to crash the system. - CVE-2015-1593: A integer overflow reduced the effectiveness of the stack randomization on 64-bit systems. - CVE-2014-7822: A flaw was found in the way the Linux kernels splice() system call validated its parameters. On certain file systems, a local, unprivileged user could have used this flaw to write past the maximum file size, and thus crash the system. - CVE-2014-9419: The __switch_to function in arch/x86/kernel/process_64.c in the Linux kernel did not ensure that Thread Local Storage (TLS) descriptors are loaded before proceeding with other steps, which made it easier for local users to bypass the ASLR protection mechanism via a crafted application that reads a TLS base address. - CVE-2014-8134: The paravirt_ops_setup function in arch/x86/kernel/kvm.c in the Linux kernel used an improper paravirt_enabled setting for KVM guest kernels, which made it easier for guest OS users to bypass the ASLR protection mechanism via a crafted application that reads a 16-bit value. - CVE-2014-8160: net/netfilter/nf_conntrack_proto_generic.c in the Linux kernel generated incorrect conntrack entries during handling of certain iptables rule sets for the SCTP, DCCP, GRE, and UDP-Lite protocols, which allowed remote attackers to bypass intended access restrictions via packets with disallowed port numbers. - CVE-2014-9529: Race condition in the key_gc_unused_keys function in security/keys/gc.c in the Linux kernel allowed local users to cause a denial of service (memory corruption or panic) or possibly have unspecified other impact via keyctl commands that trigger access to a key structure member during garbage collection of a key. - CVE-2014-8559: The d_walk function in fs/dcache.c in the Linux kernel through did not properly maintain the semantics of rename_lock, which allowed local users to cause a denial of service (deadlock and system hang) via a crafted application. - CVE-2014-9420: The rock_continue function in fs/isofs/rock.c in the Linux kernel did not restrict the number of Rock Ridge continuation entries, which allowed local users to cause a denial of service (infinite loop, and system crash or hang) via a crafted iso9660 image. - CVE-2014-9584: The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel did not validate a length value in the Extensions Reference (ER) System Use Field, which allowed local users to obtain sensitive information from kernel memory via a crafted iso9660 image. - CVE-2014-9585: The vdso_addr function in arch/x86/vdso/vma.c in the Linux kernel did not properly choose memory locations for the vDSO area, which made it easier for local users to bypass the ASLR protection mechanism by guessing a location at the end of a PMD. Following bugs were fixed: - HID: usbhid: enable always-poll quirk for Elan Touchscreen 0103 (bnc#920901). - HID: usbhid: enable always-poll quirk for Elan Touchscreen 016f (bnc#920901). - HID: usbhid: enable always-poll quirk for Elan Touchscreen 009b (bnc#920901). - HID: usbhid: add another mouse that needs QUIRK_ALWAYS_POLL (bnc#920901). - HID: usbhid: fix PIXART optical mouse (bnc#920901). - HID: usbhid: enable always-poll quirk for Elan Touchscreen (bnc#920901). - HID: usbhid: add always-poll quirk (bnc#920901). - storvsc: ring buffer failures may result in I/O freeze (bnc#914175). - mm, vmscan: prevent kswapd livelock due to pfmemalloc-throttled process being killed (VM Functionality bnc#910150). - Input: evdev - fix EVIOCG{type} ioctl (bnc#904899). - mnt: Implicitly add MNT_NODEV on remount when it was implicitly added by mount (bsc#907988). - DocBook: Do not exceed argument list limit. - DocBook: Make mandocs parallel-safe. - mm: free compound page with correct order (bnc#913695). - udf: Check component length before reading it. - udf: Check path length when reading symlink. - udf: Verify symlink size before loading it. - udf: Verify i_size when loading inode. - xfs: remote attribute overwrite causes transaction overrun. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-301=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i686 x86_64): kernel-debug-3.11.10-29.1 kernel-debug-base-3.11.10-29.1 kernel-debug-base-debuginfo-3.11.10-29.1 kernel-debug-debuginfo-3.11.10-29.1 kernel-debug-debugsource-3.11.10-29.1 kernel-debug-devel-3.11.10-29.1 kernel-debug-devel-debuginfo-3.11.10-29.1 kernel-desktop-3.11.10-29.1 kernel-desktop-base-3.11.10-29.1 kernel-desktop-base-debuginfo-3.11.10-29.1 kernel-desktop-debuginfo-3.11.10-29.1 kernel-desktop-debugsource-3.11.10-29.1 kernel-desktop-devel-3.11.10-29.1 kernel-desktop-devel-debuginfo-3.11.10-29.1 kernel-ec2-3.11.10-29.1 kernel-ec2-base-3.11.10-29.1 kernel-ec2-base-debuginfo-3.11.10-29.1 kernel-ec2-debuginfo-3.11.10-29.1 kernel-ec2-debugsource-3.11.10-29.1 kernel-ec2-devel-3.11.10-29.1 kernel-ec2-devel-debuginfo-3.11.10-29.1 kernel-trace-3.11.10-29.1 kernel-trace-base-3.11.10-29.1 kernel-trace-base-debuginfo-3.11.10-29.1 kernel-trace-debuginfo-3.11.10-29.1 kernel-trace-debugsource-3.11.10-29.1 kernel-trace-devel-3.11.10-29.1 kernel-trace-devel-debuginfo-3.11.10-29.1 kernel-vanilla-3.11.10-29.1 kernel-vanilla-debuginfo-3.11.10-29.1 kernel-vanilla-debugsource-3.11.10-29.1 kernel-vanilla-devel-3.11.10-29.1 kernel-vanilla-devel-debuginfo-3.11.10-29.1 kernel-xen-3.11.10-29.1 kernel-xen-base-3.11.10-29.1 kernel-xen-base-debuginfo-3.11.10-29.1 kernel-xen-debuginfo-3.11.10-29.1 kernel-xen-debugsource-3.11.10-29.1 kernel-xen-devel-3.11.10-29.1 kernel-xen-devel-debuginfo-3.11.10-29.1 - openSUSE 13.1 (i586 x86_64): cloop-2.639-11.19.1 cloop-debuginfo-2.639-11.19.1 cloop-debugsource-2.639-11.19.1 cloop-kmp-default-2.639_k3.11.10_29-11.19.1 cloop-kmp-default-debuginfo-2.639_k3.11.10_29-11.19.1 cloop-kmp-desktop-2.639_k3.11.10_29-11.19.1 cloop-kmp-desktop-debuginfo-2.639_k3.11.10_29-11.19.1 cloop-kmp-xen-2.639_k3.11.10_29-11.19.1 cloop-kmp-xen-debuginfo-2.639_k3.11.10_29-11.19.1 crash-7.0.2-2.19.1 crash-debuginfo-7.0.2-2.19.1 crash-debugsource-7.0.2-2.19.1 crash-devel-7.0.2-2.19.1 crash-doc-7.0.2-2.19.1 crash-eppic-7.0.2-2.19.1 crash-eppic-debuginfo-7.0.2-2.19.1 crash-gcore-7.0.2-2.19.1 crash-gcore-debuginfo-7.0.2-2.19.1 crash-kmp-default-7.0.2_k3.11.10_29-2.19.1 crash-kmp-default-debuginfo-7.0.2_k3.11.10_29-2.19.1 crash-kmp-desktop-7.0.2_k3.11.10_29-2.19.1 crash-kmp-desktop-debuginfo-7.0.2_k3.11.10_29-2.19.1 crash-kmp-xen-7.0.2_k3.11.10_29-2.19.1 crash-kmp-xen-debuginfo-7.0.2_k3.11.10_29-2.19.1 hdjmod-debugsource-1.28-16.19.1 hdjmod-kmp-default-1.28_k3.11.10_29-16.19.1 hdjmod-kmp-default-debuginfo-1.28_k3.11.10_29-16.19.1 hdjmod-kmp-desktop-1.28_k3.11.10_29-16.19.1 hdjmod-kmp-desktop-debuginfo-1.28_k3.11.10_29-16.19.1 hdjmod-kmp-xen-1.28_k3.11.10_29-16.19.1 hdjmod-kmp-xen-debuginfo-1.28_k3.11.10_29-16.19.1 ipset-6.21.1-2.23.1 ipset-debuginfo-6.21.1-2.23.1 ipset-debugsource-6.21.1-2.23.1 ipset-devel-6.21.1-2.23.1 ipset-kmp-default-6.21.1_k3.11.10_29-2.23.1 ipset-kmp-default-debuginfo-6.21.1_k3.11.10_29-2.23.1 ipset-kmp-desktop-6.21.1_k3.11.10_29-2.23.1 ipset-kmp-desktop-debuginfo-6.21.1_k3.11.10_29-2.23.1 ipset-kmp-xen-6.21.1_k3.11.10_29-2.23.1 ipset-kmp-xen-debuginfo-6.21.1_k3.11.10_29-2.23.1 iscsitarget-1.4.20.3-13.19.1 iscsitarget-debuginfo-1.4.20.3-13.19.1 iscsitarget-debugsource-1.4.20.3-13.19.1 iscsitarget-kmp-default-1.4.20.3_k3.11.10_29-13.19.1 iscsitarget-kmp-default-debuginfo-1.4.20.3_k3.11.10_29-13.19.1 iscsitarget-kmp-desktop-1.4.20.3_k3.11.10_29-13.19.1 iscsitarget-kmp-desktop-debuginfo-1.4.20.3_k3.11.10_29-13.19.1 iscsitarget-kmp-xen-1.4.20.3_k3.11.10_29-13.19.1 iscsitarget-kmp-xen-debuginfo-1.4.20.3_k3.11.10_29-13.19.1 kernel-default-3.11.10-29.1 kernel-default-base-3.11.10-29.1 kernel-default-base-debuginfo-3.11.10-29.1 kernel-default-debuginfo-3.11.10-29.1 kernel-default-debugsource-3.11.10-29.1 kernel-default-devel-3.11.10-29.1 kernel-default-devel-debuginfo-3.11.10-29.1 kernel-syms-3.11.10-29.1 libipset3-6.21.1-2.23.1 libipset3-debuginfo-6.21.1-2.23.1 ndiswrapper-1.58-19.1 ndiswrapper-debuginfo-1.58-19.1 ndiswrapper-debugsource-1.58-19.1 ndiswrapper-kmp-default-1.58_k3.11.10_29-19.1 ndiswrapper-kmp-default-debuginfo-1.58_k3.11.10_29-19.1 ndiswrapper-kmp-desktop-1.58_k3.11.10_29-19.1 ndiswrapper-kmp-desktop-debuginfo-1.58_k3.11.10_29-19.1 pcfclock-0.44-258.19.1 pcfclock-debuginfo-0.44-258.19.1 pcfclock-debugsource-0.44-258.19.1 pcfclock-kmp-default-0.44_k3.11.10_29-258.19.1 pcfclock-kmp-default-debuginfo-0.44_k3.11.10_29-258.19.1 pcfclock-kmp-desktop-0.44_k3.11.10_29-258.19.1 pcfclock-kmp-desktop-debuginfo-0.44_k3.11.10_29-258.19.1 python-virtualbox-4.2.28-2.28.1 python-virtualbox-debuginfo-4.2.28-2.28.1 vhba-kmp-debugsource-20130607-2.20.1 vhba-kmp-default-20130607_k3.11.10_29-2.20.1 vhba-kmp-default-debuginfo-20130607_k3.11.10_29-2.20.1 vhba-kmp-desktop-20130607_k3.11.10_29-2.20.1 vhba-kmp-desktop-debuginfo-20130607_k3.11.10_29-2.20.1 vhba-kmp-xen-20130607_k3.11.10_29-2.20.1 vhba-kmp-xen-debuginfo-20130607_k3.11.10_29-2.20.1 virtualbox-4.2.28-2.28.1 virtualbox-debuginfo-4.2.28-2.28.1 virtualbox-debugsource-4.2.28-2.28.1 virtualbox-devel-4.2.28-2.28.1 virtualbox-guest-kmp-default-4.2.28_k3.11.10_29-2.28.1 virtualbox-guest-kmp-default-debuginfo-4.2.28_k3.11.10_29-2.28.1 virtualbox-guest-kmp-desktop-4.2.28_k3.11.10_29-2.28.1 virtualbox-guest-kmp-desktop-debuginfo-4.2.28_k3.11.10_29-2.28.1 virtualbox-guest-tools-4.2.28-2.28.1 virtualbox-guest-tools-debuginfo-4.2.28-2.28.1 virtualbox-guest-x11-4.2.28-2.28.1 virtualbox-guest-x11-debuginfo-4.2.28-2.28.1 virtualbox-host-kmp-default-4.2.28_k3.11.10_29-2.28.1 virtualbox-host-kmp-default-debuginfo-4.2.28_k3.11.10_29-2.28.1 virtualbox-host-kmp-desktop-4.2.28_k3.11.10_29-2.28.1 virtualbox-host-kmp-desktop-debuginfo-4.2.28_k3.11.10_29-2.28.1 virtualbox-qt-4.2.28-2.28.1 virtualbox-qt-debuginfo-4.2.28-2.28.1 virtualbox-websrv-4.2.28-2.28.1 virtualbox-websrv-debuginfo-4.2.28-2.28.1 xen-debugsource-4.3.3_04-37.1 xen-devel-4.3.3_04-37.1 xen-kmp-default-4.3.3_04_k3.11.10_29-37.1 xen-kmp-default-debuginfo-4.3.3_04_k3.11.10_29-37.1 xen-kmp-desktop-4.3.3_04_k3.11.10_29-37.1 xen-kmp-desktop-debuginfo-4.3.3_04_k3.11.10_29-37.1 xen-libs-4.3.3_04-37.1 xen-libs-debuginfo-4.3.3_04-37.1 xen-tools-domU-4.3.3_04-37.1 xen-tools-domU-debuginfo-4.3.3_04-37.1 xtables-addons-2.3-2.19.1 xtables-addons-debuginfo-2.3-2.19.1 xtables-addons-debugsource-2.3-2.19.1 xtables-addons-kmp-default-2.3_k3.11.10_29-2.19.1 xtables-addons-kmp-default-debuginfo-2.3_k3.11.10_29-2.19.1 xtables-addons-kmp-desktop-2.3_k3.11.10_29-2.19.1 xtables-addons-kmp-desktop-debuginfo-2.3_k3.11.10_29-2.19.1 xtables-addons-kmp-xen-2.3_k3.11.10_29-2.19.1 xtables-addons-kmp-xen-debuginfo-2.3_k3.11.10_29-2.19.1 - openSUSE 13.1 (noarch): kernel-devel-3.11.10-29.1 kernel-docs-3.11.10-29.2 kernel-source-3.11.10-29.1 kernel-source-vanilla-3.11.10-29.1 - openSUSE 13.1 (x86_64): xen-4.3.3_04-37.1 xen-doc-html-4.3.3_04-37.1 xen-libs-32bit-4.3.3_04-37.1 xen-libs-debuginfo-32bit-4.3.3_04-37.1 xen-tools-4.3.3_04-37.1 xen-tools-debuginfo-4.3.3_04-37.1 xen-xend-tools-4.3.3_04-37.1 xen-xend-tools-debuginfo-4.3.3_04-37.1 - openSUSE 13.1 (i686): kernel-pae-3.11.10-29.1 kernel-pae-base-3.11.10-29.1 kernel-pae-base-debuginfo-3.11.10-29.1 kernel-pae-debuginfo-3.11.10-29.1 kernel-pae-debugsource-3.11.10-29.1 kernel-pae-devel-3.11.10-29.1 kernel-pae-devel-debuginfo-3.11.10-29.1 - openSUSE 13.1 (i586): cloop-kmp-pae-2.639_k3.11.10_29-11.19.1 cloop-kmp-pae-debuginfo-2.639_k3.11.10_29-11.19.1 crash-kmp-pae-7.0.2_k3.11.10_29-2.19.1 crash-kmp-pae-debuginfo-7.0.2_k3.11.10_29-2.19.1 hdjmod-kmp-pae-1.28_k3.11.10_29-16.19.1 hdjmod-kmp-pae-debuginfo-1.28_k3.11.10_29-16.19.1 ipset-kmp-pae-6.21.1_k3.11.10_29-2.23.1 ipset-kmp-pae-debuginfo-6.21.1_k3.11.10_29-2.23.1 iscsitarget-kmp-pae-1.4.20.3_k3.11.10_29-13.19.1 iscsitarget-kmp-pae-debuginfo-1.4.20.3_k3.11.10_29-13.19.1 ndiswrapper-kmp-pae-1.58_k3.11.10_29-19.1 ndiswrapper-kmp-pae-debuginfo-1.58_k3.11.10_29-19.1 pcfclock-kmp-pae-0.44_k3.11.10_29-258.19.1 pcfclock-kmp-pae-debuginfo-0.44_k3.11.10_29-258.19.1 vhba-kmp-pae-20130607_k3.11.10_29-2.20.1 vhba-kmp-pae-debuginfo-20130607_k3.11.10_29-2.20.1 virtualbox-guest-kmp-pae-4.2.28_k3.11.10_29-2.28.1 virtualbox-guest-kmp-pae-debuginfo-4.2.28_k3.11.10_29-2.28.1 virtualbox-host-kmp-pae-4.2.28_k3.11.10_29-2.28.1 virtualbox-host-kmp-pae-debuginfo-4.2.28_k3.11.10_29-2.28.1 xen-kmp-pae-4.3.3_04_k3.11.10_29-37.1 xen-kmp-pae-debuginfo-4.3.3_04_k3.11.10_29-37.1 xtables-addons-kmp-pae-2.3_k3.11.10_29-2.19.1 xtables-addons-kmp-pae-debuginfo-2.3_k3.11.10_29-2.19.1 References: https://www.suse.com/security/cve/CVE-2014-7822.html https://www.suse.com/security/cve/CVE-2014-8134.html https://www.suse.com/security/cve/CVE-2014-8160.html https://www.suse.com/security/cve/CVE-2014-8173.html https://www.suse.com/security/cve/CVE-2014-8559.html https://www.suse.com/security/cve/CVE-2014-9419.html https://www.suse.com/security/cve/CVE-2014-9420.html https://www.suse.com/security/cve/CVE-2014-9529.html https://www.suse.com/security/cve/CVE-2014-9584.html https://www.suse.com/security/cve/CVE-2014-9585.html https://www.suse.com/security/cve/CVE-2015-1593.html https://bugzilla.suse.com/903640 https://bugzilla.suse.com/904899 https://bugzilla.suse.com/907988 https://bugzilla.suse.com/909078 https://bugzilla.suse.com/910150 https://bugzilla.suse.com/911325 https://bugzilla.suse.com/911326 https://bugzilla.suse.com/912202 https://bugzilla.suse.com/912654 https://bugzilla.suse.com/912705 https://bugzilla.suse.com/913059 https://bugzilla.suse.com/913695 https://bugzilla.suse.com/914175 https://bugzilla.suse.com/915322 https://bugzilla.suse.com/917839 https://bugzilla.suse.com/920901 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2015:0713-1: important: Security update for Linux Kernel
by opensuse-security＠opensuse.org 13 Apr '15

13 Apr '15

openSUSE Security Update: Security update for Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0713-1 Rating: important References: #867199 #893428 #895797 #900811 #901925 #903589 #903640 #904899 #905681 #907039 #907818 #907988 #908582 #908588 #908589 #908592 #908593 #908594 #908596 #908598 #908603 #908604 #908605 #908606 #908608 #908610 #908612 #909077 #909078 #909477 #909634 #910150 #910322 #910440 #911311 #911325 #911326 #911356 #911438 #911578 #911835 #912061 #912202 #912429 #912705 #913059 #913466 #913695 #914175 #915425 #915454 #915456 #915577 #915858 #916608 #917830 #917839 #918954 #918970 #919463 #920581 #920604 #921313 #922542 #922944 Cross-References: CVE-2014-8134 CVE-2014-8160 CVE-2014-8559 CVE-2014-9419 CVE-2014-9420 CVE-2014-9428 CVE-2014-9529 CVE-2014-9584 CVE-2014-9585 CVE-2015-0777 CVE-2015-1421 CVE-2015-1593 CVE-2015-2150 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that solves 13 vulnerabilities and has 52 fixes is now available. Description: The Linux kernel was updated to fix bugs and security issues: Following security issues were fixed: - CVE-2015-1421: Use-after-free vulnerability in the sctp_assoc_update function in net/sctp/associola.c in the Linux kernel allowed remote attackers to cause a denial of service (slab corruption and panic) or possibly have unspecified other impact by triggering an INIT collision that leads to improper handling of shared-key data. - CVE-2015-2150: XSA-120: Guests were permitted to modify all bits of the PCI command register of passed through cards, which could lead to Host system crashes. - CVE-2015-0777: The XEN usb backend could leak information to the guest system due to copying uninitialized memory. - CVE-2015-1593: A integer overflow reduced the effectiveness of the stack randomization on 64-bit systems. - CVE-2014-9419: The __switch_to function in arch/x86/kernel/process_64.c in the Linux kernel did not ensure that Thread Local Storage (TLS) descriptors are loaded before proceeding with other steps, which made it easier for local users to bypass the ASLR protection mechanism via a crafted application that reads a TLS base address. - CVE-2014-9428: The batadv_frag_merge_packets function in net/batman-adv/fragmentation.c in the B.A.T.M.A.N. implementation in the Linux kernel used an incorrect length field during a calculation of an amount of memory, which allowed remote attackers to cause a denial of service (mesh-node system crash) via fragmented packets. - CVE-2014-8160: net/netfilter/nf_conntrack_proto_generic.c in the Linux kernel generated incorrect conntrack entries during handling of certain iptables rule sets for the SCTP, DCCP, GRE, and UDP-Lite protocols, which allowed remote attackers to bypass intended access restrictions via packets with disallowed port numbers. - CVE-2014-9529: Race condition in the key_gc_unused_keys function in security/keys/gc.c in the Linux kernel allowed local users to cause a denial of service (memory corruption or panic) or possibly have unspecified other impact via keyctl commands that trigger access to a key structure member during garbage collection of a key. - CVE-2014-9420: The rock_continue function in fs/isofs/rock.c in the Linux kernel did not restrict the number of Rock Ridge continuation entries, which allowed local users to cause a denial of service (infinite loop, and system crash or hang) via a crafted iso9660 image. - CVE-2014-9584: The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel did not validate a length value in the Extensions Reference (ER) System Use Field, which allowed local users to obtain sensitive information from kernel memory via a crafted iso9660 image. - CVE-2014-9585: The vdso_addr function in arch/x86/vdso/vma.c in the Linux kernel did not properly choose memory locations for the vDSO area, which made it easier for local users to bypass the ASLR protection mechanism by guessing a location at the end of a PMD. - CVE-2014-8559: The d_walk function in fs/dcache.c in the Linux kernel through did not properly maintain the semantics of rename_lock, which allowed local users to cause a denial of service (deadlock and system hang) via a crafted application. - CVE-2014-8134: The paravirt_ops_setup function in arch/x86/kernel/kvm.c in the Linux kernel used an improper paravirt_enabled setting for KVM guest kernels, which made it easier for guest OS users to bypass the ASLR protection mechanism via a crafted application that reads a 16-bit value. Following bugs were fixed: - powerpc/pci: Fix IO space breakage after of_pci_range_to_resource() change (bnc#922542). - cifs: fix use-after-free bug in find_writable_file (bnc#909477). - usb: Do not allow usb_alloc_streams on unconfigured devices (bsc#920581). - fuse: honour max_read and max_write in direct_io mode (bnc#918954). - switch iov_iter_get_pages() to passing maximal number of pages (bnc#918954). - bcache: fix a livelock in btree lock v2 (bnc#910440) (bnc#910440). Updated because another version went upstream - drm/i915: Initialise userptr mmu_notifier serial to 1 (bnc#918970). - NFS: Don't try to reclaim delegation open state if recovery failed (boo#909634). - NFSv4: Ensure that we call FREE_STATEID when NFSv4.x stateids are revoked (boo#909634). - NFSv4: Fix races between nfs_remove_bad_delegation() and delegation return (boo#909634). - NFSv4: Ensure that we remove NFSv4.0 delegations when state has expired (boo#909634). - Fixing lease renewal (boo#909634). - bcache: Fix a bug when detaching (bsc#908582). - fix a leak in bch_cached_dev_run() (bnc#910440). - bcache: unregister reboot notifier when bcache fails to register a block device (bnc#910440). - bcache: fix a livelock in btree lock (bnc#910440). - bcache: [BUG] clear BCACHE_DEV_UNLINK_DONE flag when attaching a backing device (bnc#910440). - bcache: Add a cond_resched() call to gc (bnc#910440). - storvsc: ring buffer failures may result in I/O freeze (bnc#914175). - ALSA: seq-dummy: remove deadlock-causing events on close (boo#916608). - ALSA: pcm: Zero-clear reserved fields of PCM status ioctl in compat mode (boo#916608). - ALSA: bebob: Uninitialized id returned by saffirepro_both_clk_src_get (boo#916608). - ALSA: hda - Fix built-in mic on Compaq Presario CQ60 (bnc#920604). - ALSA: hda - Fix regression of HD-audio controller fallback modes (bsc#921313). - [media] sound: Update au0828 quirks table (boo#916608). - [media] sound: simplify au0828 quirk table (boo#916608). - ALSA: usb-audio: Add mic volume fix quirk for Logitech Webcam C210 (boo#916608). - ALSA: usb-audio: extend KEF X300A FU 10 tweak to Arcam rPAC (boo#916608). - ALSA: usb-audio: Add ctrl message delay quirk for Marantz/Denon devices (boo#916608). - ALSA: usb-audio: Fix memory leak in FTU quirk (boo#916608). - ALSA: usb-audio: Fix device_del() sysfs warnings at disconnect (boo#916608). - ALSA: hda - Add new GPU codec ID 0x10de0072 to snd-hda (boo#916608). - ALSA: hda - Fix wrong gpio_dir & gpio_mask hint setups for IDT/STAC codecs (boo#916608). - ALSA: hda/realtek - New codec support for ALC298 (boo#916608). - ALSA: hda/realtek - New codec support for ALC256 (boo#916608). - ALSA: hda/realtek - Add new Dell desktop for ALC3234 headset mode (boo#916608). - ALSA: hda - Add EAPD fixup for ASUS Z99He laptop (boo#916608). - ALSA: hda - Fix built-in mic at resume on Lenovo Ideapad S210 (boo#916608). - ALSA: hda/realtek - Add headset Mic support for new Dell machine (boo#916608). - ALSA: hda_intel: Add DeviceIDs for Sunrise Point-LP (boo#916608). - ALSA: hda_intel: Add Device IDs for Intel Sunrise Point PCH (boo#916608). - ALSA: hda - add codec ID for Braswell display audio codec (boo#916608). - ALSA: hda - add PCI IDs for Intel Braswell (boo#916608). - ALSA: hda - Add dock support for Thinkpad T440 (17aa:2212) (boo#916608). - ALSA: hda - Set up GPIO for Toshiba Satellite S50D (bnc#915858). - rpm/kernel-binary.spec.in: Fix build if there is no *.crt file - mm, vmscan: prevent kswapd livelock due to pfmemalloc-throttled process being killed (VM Functionality bnc#910150). - Input: evdev - fix EVIOCG{type} ioctl (bnc#904899). - mnt: Implicitly add MNT_NODEV on remount when it was implicitly added by mount (bsc#907988). - Btrfs: fix scrub race leading to use-after-free (bnc#915456). - Btrfs: fix setup_leaf_for_split() to avoid leaf corruption (bnc#915454). - Btrfs: fix fsync log replay for inodes with a mix of regular refs and extrefs (bnc#915425). - Btrfs: fix fsync when extend references are added to an inode (bnc#915425). - Btrfs: fix directory inconsistency after fsync log replay (bnc#915425). - Btrfs: make xattr replace operations atomic (bnc#913466). - Btrfs: fix directory recovery from fsync log (bnc#895797). - bcache: add mutex lock for bch_is_open (bnc#908612). - bcache: Correct printing of btree_gc_max_duration_ms (bnc#908610). - bcache: fix crash with incomplete cache set (bnc#908608). - bcache: fix memory corruption in init error path (bnc#908606). - bcache: Fix more early shutdown bugs (bnc#908605). - bcache: fix use-after-free in btree_gc_coalesce() (bnc#908604). - bcache: Fix an infinite loop in journal replay (bnc#908603). - bcache: fix typo in bch_bkey_equal_header (bnc#908598). - bcache: Make sure to pass GFP_WAIT to mempool_alloc() (bnc#908596). - bcache: fix crash on shutdown in passthrough mode (bnc#908594). - bcache: fix lockdep warnings on shutdown (bnc#908593). - bcache allocator: send discards with correct size (bnc#908592). - bcache: Fix to remove the rcu_sched stalls (bnc#908589). - bcache: Fix a journal replay bug (bnc#908588). - Update x86_64 config files: CONFIG_SENSORS_NCT6683=m The nct6683 driver is already enabled on i386 and history suggests that it not being enabled on x86_64 is by mistake. - rpm/kernel-binary.spec.in: Own the modules directory in the devel package (bnc#910322) - Revert "iwlwifi: mvm: treat EAPOLs like mgmt frames wrt rate" (bnc#900811). - mm: free compound page with correct order (bnc#913695). - drm/i915: More cautious with pch fifo underruns (boo#907039). - Refresh patches.arch/arm64-0039-generic-pci.patch (fix PCI bridge support) - x86/microcode/intel: Fish out the stashed microcode for the BSP (bsc#903589). - x86, microcode: Reload microcode on resume (bsc#903589). - x86, microcode: Don't initialize microcode code on paravirt (bsc#903589). - x86, microcode, intel: Drop unused parameter (bsc#903589). - x86, microcode, AMD: Do not use smp_processor_id() in preemtible context (bsc#903589). - x86, microcode: Update BSPs microcode on resume (bsc#903589). - x86, microcode, AMD: Fix ucode patch stashing on 32-bit (bsc#903589). - x86, microcode: Fix accessing dis_ucode_ldr on 32-bit (bsc#903589). - x86, microcode, AMD: Fix early ucode loading on 32-bit (bsc#903589). - Bluetooth: Add support for Broadcom BCM20702A0 variants firmware download (bnc#911311). - drm/radeon: fix sad_count check for dce3 (bnc#911356). - drm/i915: Don't call intel_prepare_page_flip() multiple times on gen2-4 (bnc#911835). - udf: Check component length before reading it. - udf: Check path length when reading symlink. - udf: Verify symlink size before loading it. - udf: Verify i_size when loading inode. - arm64: Enable DRM - arm64: Enable generic PHB driver (bnc#912061). - ACPI / video: Add some Samsung models to disable_native_backlight list (boo#905681). - asus-nb-wmi: Add another wapf=4 quirk (boo#911438). - asus-nb-wmi: Add wapf4 quirk for the X550VB (boo#911438). - asus-nb-wmi: Add wapf4 quirk for the U32U (boo#911438). - asus-nb-wmi: Add wapf4 quirk for the X550CC (boo#911438). - asus-nb-wmi: Constify asus_quirks DMI table (boo#911438). - asus-nb-wmi: Add wapf4 quirk for the X550CL (boo#911438). - asus-nb-wmi.c: Rename x401u quirk to wapf4 (boo#911438). - asus-nb-wmi: Add ASUSTeK COMPUTER INC. X200CA (boo#911438). - WAPF 4 for ASUSTeK COMPUTER INC. X75VBP WLAN ON (boo#911438). - Input: synaptics - gate forcepad support by DMI check (bnc#911578). - ext4: introduce aging to extent status tree (bnc#893428). - ext4: cleanup flag definitions for extent status tree (bnc#893428). - ext4: limit number of scanned extents in status tree shrinker (bnc#893428). - ext4: move handling of list of shrinkable inodes into extent status code (bnc#893428). - ext4: change LRU to round-robin in extent status tree shrinker (bnc#893428). - ext4: cache extent hole in extent status tree for ext4_da_map_blocks() (bnc#893428). - ext4: fix block reservation for bigalloc filesystems (bnc#893428). - ext4: track extent status tree shrinker delay statictics (bnc#893428). - ext4: improve extents status tree trace point (bnc#893428). - rpm/kernel-binary.spec.in: Provide name-version-release for kgraft packages (bnc#901925) - rpm/kernel-binary.spec.in: Fix including the secure boot cert in /etc/uefi/certs - doc/README.SUSE: update Solid Driver team contacts - rpm/kernel-binary.spec.in: Do not sign firmware files (bnc#867199) - Port module signing changes from SLE11-SP3 (fate#314508) - doc/README.PATCH-POLICY.SUSE: add patch policy / best practices document after installation. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-302=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i686 x86_64): kernel-debug-3.16.7-13.2 kernel-debug-base-3.16.7-13.2 kernel-debug-base-debuginfo-3.16.7-13.2 kernel-debug-debuginfo-3.16.7-13.2 kernel-debug-debugsource-3.16.7-13.2 kernel-debug-devel-3.16.7-13.2 kernel-debug-devel-debuginfo-3.16.7-13.2 kernel-desktop-3.16.7-13.2 kernel-desktop-base-3.16.7-13.2 kernel-desktop-base-debuginfo-3.16.7-13.2 kernel-desktop-debuginfo-3.16.7-13.2 kernel-desktop-debugsource-3.16.7-13.2 kernel-desktop-devel-3.16.7-13.2 kernel-ec2-3.16.7-13.2 kernel-ec2-base-3.16.7-13.2 kernel-ec2-base-debuginfo-3.16.7-13.2 kernel-ec2-debuginfo-3.16.7-13.2 kernel-ec2-debugsource-3.16.7-13.2 kernel-ec2-devel-3.16.7-13.2 kernel-vanilla-3.16.7-13.2 kernel-vanilla-debuginfo-3.16.7-13.2 kernel-vanilla-debugsource-3.16.7-13.2 kernel-vanilla-devel-3.16.7-13.2 kernel-xen-3.16.7-13.2 kernel-xen-base-3.16.7-13.2 kernel-xen-base-debuginfo-3.16.7-13.2 kernel-xen-debuginfo-3.16.7-13.2 kernel-xen-debugsource-3.16.7-13.2 kernel-xen-devel-3.16.7-13.2 - openSUSE 13.2 (i586 x86_64): bbswitch-0.8-3.6.6 bbswitch-debugsource-0.8-3.6.6 bbswitch-kmp-default-0.8_k3.16.7_13-3.6.6 bbswitch-kmp-default-debuginfo-0.8_k3.16.7_13-3.6.6 bbswitch-kmp-desktop-0.8_k3.16.7_13-3.6.6 bbswitch-kmp-desktop-debuginfo-0.8_k3.16.7_13-3.6.6 bbswitch-kmp-xen-0.8_k3.16.7_13-3.6.6 bbswitch-kmp-xen-debuginfo-0.8_k3.16.7_13-3.6.6 cloop-2.639-14.6.6 cloop-debuginfo-2.639-14.6.6 cloop-debugsource-2.639-14.6.6 cloop-kmp-default-2.639_k3.16.7_13-14.6.6 cloop-kmp-default-debuginfo-2.639_k3.16.7_13-14.6.6 cloop-kmp-desktop-2.639_k3.16.7_13-14.6.6 cloop-kmp-desktop-debuginfo-2.639_k3.16.7_13-14.6.6 cloop-kmp-xen-2.639_k3.16.7_13-14.6.6 cloop-kmp-xen-debuginfo-2.639_k3.16.7_13-14.6.6 crash-7.0.8-6.6 crash-debuginfo-7.0.8-6.6 crash-debugsource-7.0.8-6.6 crash-devel-7.0.8-6.6 crash-doc-7.0.8-6.6 crash-eppic-7.0.8-6.6 crash-eppic-debuginfo-7.0.8-6.6 crash-gcore-7.0.8-6.6 crash-gcore-debuginfo-7.0.8-6.6 crash-kmp-default-7.0.8_k3.16.7_13-6.6 crash-kmp-default-debuginfo-7.0.8_k3.16.7_13-6.6 crash-kmp-desktop-7.0.8_k3.16.7_13-6.6 crash-kmp-desktop-debuginfo-7.0.8_k3.16.7_13-6.6 crash-kmp-xen-7.0.8_k3.16.7_13-6.6 crash-kmp-xen-debuginfo-7.0.8_k3.16.7_13-6.6 hdjmod-debugsource-1.28-18.7.6 hdjmod-kmp-default-1.28_k3.16.7_13-18.7.6 hdjmod-kmp-default-debuginfo-1.28_k3.16.7_13-18.7.6 hdjmod-kmp-desktop-1.28_k3.16.7_13-18.7.6 hdjmod-kmp-desktop-debuginfo-1.28_k3.16.7_13-18.7.6 hdjmod-kmp-xen-1.28_k3.16.7_13-18.7.6 hdjmod-kmp-xen-debuginfo-1.28_k3.16.7_13-18.7.6 ipset-6.23-6.6 ipset-debuginfo-6.23-6.6 ipset-debugsource-6.23-6.6 ipset-devel-6.23-6.6 ipset-kmp-default-6.23_k3.16.7_13-6.6 ipset-kmp-default-debuginfo-6.23_k3.16.7_13-6.6 ipset-kmp-desktop-6.23_k3.16.7_13-6.6 ipset-kmp-desktop-debuginfo-6.23_k3.16.7_13-6.6 ipset-kmp-xen-6.23_k3.16.7_13-6.6 ipset-kmp-xen-debuginfo-6.23_k3.16.7_13-6.6 kernel-default-3.16.7-13.3 kernel-default-base-3.16.7-13.3 kernel-default-base-debuginfo-3.16.7-13.3 kernel-default-debuginfo-3.16.7-13.3 kernel-default-debugsource-3.16.7-13.3 kernel-default-devel-3.16.7-13.3 kernel-obs-build-3.16.7-13.7 kernel-obs-build-debugsource-3.16.7-13.7 kernel-obs-qa-3.16.7-13.1 kernel-obs-qa-xen-3.16.7-13.1 kernel-syms-3.16.7-13.1 libipset3-6.23-6.6 libipset3-debuginfo-6.23-6.6 pcfclock-0.44-260.6.2 pcfclock-debuginfo-0.44-260.6.2 pcfclock-debugsource-0.44-260.6.2 pcfclock-kmp-default-0.44_k3.16.7_13-260.6.2 pcfclock-kmp-default-debuginfo-0.44_k3.16.7_13-260.6.2 pcfclock-kmp-desktop-0.44_k3.16.7_13-260.6.2 pcfclock-kmp-desktop-debuginfo-0.44_k3.16.7_13-260.6.2 python-virtualbox-4.3.20-10.2 python-virtualbox-debuginfo-4.3.20-10.2 vhba-kmp-debugsource-20140629-2.6.2 vhba-kmp-default-20140629_k3.16.7_13-2.6.2 vhba-kmp-default-debuginfo-20140629_k3.16.7_13-2.6.2 vhba-kmp-desktop-20140629_k3.16.7_13-2.6.2 vhba-kmp-desktop-debuginfo-20140629_k3.16.7_13-2.6.2 vhba-kmp-xen-20140629_k3.16.7_13-2.6.2 vhba-kmp-xen-debuginfo-20140629_k3.16.7_13-2.6.2 virtualbox-4.3.20-10.2 virtualbox-debuginfo-4.3.20-10.2 virtualbox-debugsource-4.3.20-10.2 virtualbox-devel-4.3.20-10.2 virtualbox-guest-kmp-default-4.3.20_k3.16.7_13-10.2 virtualbox-guest-kmp-default-debuginfo-4.3.20_k3.16.7_13-10.2 virtualbox-guest-kmp-desktop-4.3.20_k3.16.7_13-10.2 virtualbox-guest-kmp-desktop-debuginfo-4.3.20_k3.16.7_13-10.2 virtualbox-guest-tools-4.3.20-10.2 virtualbox-guest-tools-debuginfo-4.3.20-10.2 virtualbox-guest-x11-4.3.20-10.2 virtualbox-guest-x11-debuginfo-4.3.20-10.2 virtualbox-host-kmp-default-4.3.20_k3.16.7_13-10.2 virtualbox-host-kmp-default-debuginfo-4.3.20_k3.16.7_13-10.2 virtualbox-host-kmp-desktop-4.3.20_k3.16.7_13-10.2 virtualbox-host-kmp-desktop-debuginfo-4.3.20_k3.16.7_13-10.2 virtualbox-qt-4.3.20-10.2 virtualbox-qt-debuginfo-4.3.20-10.2 virtualbox-websrv-4.3.20-10.2 virtualbox-websrv-debuginfo-4.3.20-10.2 xen-debugsource-4.4.1_08-12.2 xen-devel-4.4.1_08-12.2 xen-libs-4.4.1_08-12.2 xen-libs-debuginfo-4.4.1_08-12.2 xen-tools-domU-4.4.1_08-12.2 xen-tools-domU-debuginfo-4.4.1_08-12.2 xtables-addons-2.6-6.2 xtables-addons-debuginfo-2.6-6.2 xtables-addons-debugsource-2.6-6.2 xtables-addons-kmp-default-2.6_k3.16.7_13-6.2 xtables-addons-kmp-default-debuginfo-2.6_k3.16.7_13-6.2 xtables-addons-kmp-desktop-2.6_k3.16.7_13-6.2 xtables-addons-kmp-desktop-debuginfo-2.6_k3.16.7_13-6.2 xtables-addons-kmp-xen-2.6_k3.16.7_13-6.2 xtables-addons-kmp-xen-debuginfo-2.6_k3.16.7_13-6.2 - openSUSE 13.2 (noarch): kernel-devel-3.16.7-13.1 kernel-docs-3.16.7-13.2 kernel-macros-3.16.7-13.1 kernel-source-3.16.7-13.1 kernel-source-vanilla-3.16.7-13.1 virtualbox-guest-desktop-icons-4.3.20-10.2 - openSUSE 13.2 (x86_64): xen-4.4.1_08-12.2 xen-doc-html-4.4.1_08-12.2 xen-kmp-default-4.4.1_08_k3.16.7_13-12.2 xen-kmp-default-debuginfo-4.4.1_08_k3.16.7_13-12.2 xen-kmp-desktop-4.4.1_08_k3.16.7_13-12.2 xen-kmp-desktop-debuginfo-4.4.1_08_k3.16.7_13-12.2 xen-libs-32bit-4.4.1_08-12.2 xen-libs-debuginfo-32bit-4.4.1_08-12.2 xen-tools-4.4.1_08-12.2 xen-tools-debuginfo-4.4.1_08-12.2 - openSUSE 13.2 (i686): kernel-pae-3.16.7-13.2 kernel-pae-base-3.16.7-13.2 kernel-pae-base-debuginfo-3.16.7-13.2 kernel-pae-debuginfo-3.16.7-13.2 kernel-pae-debugsource-3.16.7-13.2 kernel-pae-devel-3.16.7-13.2 - openSUSE 13.2 (i586): bbswitch-kmp-pae-0.8_k3.16.7_13-3.6.6 bbswitch-kmp-pae-debuginfo-0.8_k3.16.7_13-3.6.6 cloop-kmp-pae-2.639_k3.16.7_13-14.6.6 cloop-kmp-pae-debuginfo-2.639_k3.16.7_13-14.6.6 crash-kmp-pae-7.0.8_k3.16.7_13-6.6 crash-kmp-pae-debuginfo-7.0.8_k3.16.7_13-6.6 hdjmod-kmp-pae-1.28_k3.16.7_13-18.7.6 hdjmod-kmp-pae-debuginfo-1.28_k3.16.7_13-18.7.6 ipset-kmp-pae-6.23_k3.16.7_13-6.6 ipset-kmp-pae-debuginfo-6.23_k3.16.7_13-6.6 pcfclock-kmp-pae-0.44_k3.16.7_13-260.6.2 pcfclock-kmp-pae-debuginfo-0.44_k3.16.7_13-260.6.2 vhba-kmp-pae-20140629_k3.16.7_13-2.6.2 vhba-kmp-pae-debuginfo-20140629_k3.16.7_13-2.6.2 virtualbox-guest-kmp-pae-4.3.20_k3.16.7_13-10.2 virtualbox-guest-kmp-pae-debuginfo-4.3.20_k3.16.7_13-10.2 virtualbox-host-kmp-pae-4.3.20_k3.16.7_13-10.2 virtualbox-host-kmp-pae-debuginfo-4.3.20_k3.16.7_13-10.2 xtables-addons-kmp-pae-2.6_k3.16.7_13-6.2 xtables-addons-kmp-pae-debuginfo-2.6_k3.16.7_13-6.2 References: https://www.suse.com/security/cve/CVE-2014-8134.html https://www.suse.com/security/cve/CVE-2014-8160.html https://www.suse.com/security/cve/CVE-2014-8559.html https://www.suse.com/security/cve/CVE-2014-9419.html https://www.suse.com/security/cve/CVE-2014-9420.html https://www.suse.com/security/cve/CVE-2014-9428.html https://www.suse.com/security/cve/CVE-2014-9529.html https://www.suse.com/security/cve/CVE-2014-9584.html https://www.suse.com/security/cve/CVE-2014-9585.html https://www.suse.com/security/cve/CVE-2015-0777.html https://www.suse.com/security/cve/CVE-2015-1421.html https://www.suse.com/security/cve/CVE-2015-1593.html https://www.suse.com/security/cve/CVE-2015-2150.html https://bugzilla.suse.com/867199 https://bugzilla.suse.com/893428 https://bugzilla.suse.com/895797 https://bugzilla.suse.com/900811 https://bugzilla.suse.com/901925 https://bugzilla.suse.com/903589 https://bugzilla.suse.com/903640 https://bugzilla.suse.com/904899 https://bugzilla.suse.com/905681 https://bugzilla.suse.com/907039 https://bugzilla.suse.com/907818 https://bugzilla.suse.com/907988 https://bugzilla.suse.com/908582 https://bugzilla.suse.com/908588 https://bugzilla.suse.com/908589 https://bugzilla.suse.com/908592 https://bugzilla.suse.com/908593 https://bugzilla.suse.com/908594 https://bugzilla.suse.com/908596 https://bugzilla.suse.com/908598 https://bugzilla.suse.com/908603 https://bugzilla.suse.com/908604 https://bugzilla.suse.com/908605 https://bugzilla.suse.com/908606 https://bugzilla.suse.com/908608 https://bugzilla.suse.com/908610 https://bugzilla.suse.com/908612 https://bugzilla.suse.com/909077 https://bugzilla.suse.com/909078 https://bugzilla.suse.com/909477 https://bugzilla.suse.com/909634 https://bugzilla.suse.com/910150 https://bugzilla.suse.com/910322 https://bugzilla.suse.com/910440 https://bugzilla.suse.com/911311 https://bugzilla.suse.com/911325 https://bugzilla.suse.com/911326 https://bugzilla.suse.com/911356 https://bugzilla.suse.com/911438 https://bugzilla.suse.com/911578 https://bugzilla.suse.com/911835 https://bugzilla.suse.com/912061 https://bugzilla.suse.com/912202 https://bugzilla.suse.com/912429 https://bugzilla.suse.com/912705 https://bugzilla.suse.com/913059 https://bugzilla.suse.com/913466 https://bugzilla.suse.com/913695 https://bugzilla.suse.com/914175 https://bugzilla.suse.com/915425 https://bugzilla.suse.com/915454 https://bugzilla.suse.com/915456 https://bugzilla.suse.com/915577 https://bugzilla.suse.com/915858 https://bugzilla.suse.com/916608 https://bugzilla.suse.com/917830 https://bugzilla.suse.com/917839 https://bugzilla.suse.com/918954 https://bugzilla.suse.com/918970 https://bugzilla.suse.com/919463 https://bugzilla.suse.com/920581 https://bugzilla.suse.com/920604 https://bugzilla.suse.com/921313 https://bugzilla.suse.com/922542 https://bugzilla.suse.com/922944 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2015:0704-2: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 10 Apr '15

10 Apr '15

SUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: SUSE-SU-2015:0704-2 Rating: important References: #925368 Cross-References: CVE-2015-0801 CVE-2015-0807 CVE-2015-0813 CVE-2015-0814 CVE-2015-0815 CVE-2015-0816 Affected Products: SUSE Linux Enterprise Desktop 12 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: Mozilla Firefox was updated to 31.6.0 ESR to fix five security issues. The following vulnerabilities were fixed: * Miscellaneous memory safety hazards (MFSA 2015-30/CVE-2015-0814/CVE-2015-0815) * Use-after-free when using the Fluendo MP3 GStreamer plugin (MFSA 2015-31/CVE-2015-0813) * resource:// documents can load privileged pages (MFSA 2015-33/CVE-2015-0816) * CORS requests should not follow 30x redirections after preflight (MFSA 2015-37/CVE-2015-0807) * Same-origin bypass through anchor navigation (MFSA 2015-40/CVE-2015-0801) Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Desktop 12: zypper in -t patch SUSE-SLE-DESKTOP-12-2015-165=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Desktop 12 (x86_64): MozillaFirefox-31.6.0esr-30.1 MozillaFirefox-debuginfo-31.6.0esr-30.1 MozillaFirefox-debugsource-31.6.0esr-30.1 MozillaFirefox-translations-31.6.0esr-30.1 References: https://www.suse.com/security/cve/CVE-2015-0801.html https://www.suse.com/security/cve/CVE-2015-0807.html https://www.suse.com/security/cve/CVE-2015-0813.html https://www.suse.com/security/cve/CVE-2015-0814.html https://www.suse.com/security/cve/CVE-2015-0815.html https://www.suse.com/security/cve/CVE-2015-0816.html https://bugzilla.suse.com/925368 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0