November 2011 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2011:1222-1: moderate: kernel: security and bugfix update.
by opensuse-security＠opensuse.org 08 Nov '11

08 Nov '11

openSUSE Security Update: kernel: security and bugfix update. ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:1222-1 Rating: moderate References: #626119 #638985 #642896 #649625 #669378 #672008 #678097 #682204 #686412 #692784 #697901 #706374 #711203 #711539 #712023 #712366 #713229 #714001 #716901 #718028 #719450 #719710 Cross-References: CVE-2011-1776 CVE-2011-1833 CVE-2011-2183 CVE-2011-2695 CVE-2011-2918 CVE-2011-3191 CVE-2011-3353 CVE-2011-3363 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that solves 8 vulnerabilities and has 14 fixes is now available. It includes one version update. Description: The openSUSE 11.4 kernel was updated to 2.6.37.6 fixing lots of bugs and security issues. Following security issues have been fixed: CVE-2011-1833: Added a kernel option to ensure ecryptfs is mounting only on paths belonging to the current ui, which would have allowed local attackers to potentially gain privileges via symlink attacks. CVE-2011-2695: Multiple off-by-one errors in the ext4 subsystem in the Linux kernel allowed local users to cause a denial of service (BUG_ON and system crash) by accessing a sparse file in extent format with a write operation involving a block number corresponding to the largest possible 32-bit unsigned integer. CVE-2011-3363: Always check the path in CIFS mounts to avoid interesting filesystem path interaction issues and potential crashes. CVE-2011-2918: In the perf framework software event overflows could deadlock or delete an uninitialized timer. CVE-2011-3353: In the fuse filesystem, FUSE_NOTIFY_INVAL_ENTRY did not check the length of the write so the message processing could overrun and result in a BUG_ON() in fuse_copy_fill(). This flaw could be used by local users able to mount FUSE filesystems to crash the system. CVE-2011-2183: Fixed a race between ksmd and other memory management code, which could result in a NULL ptr dereference and kernel crash. CVE-2011-3191: A signedness issue in CIFS could possibly have lead to to memory corruption, if a malicious server could send crafted replies to the host. CVE-2011-1776: The is_gpt_valid function in fs/partitions/efi.c in the Linux kernel did not check the size of an Extensible Firmware Interface (EFI) GUID Partition Table (GPT) entry, which allowed physically proximate attackers to cause a denial of service (heap-based buffer overflow and OOPS) or obtain sensitive information from kernel heap memory by connecting a crafted GPT storage device, a different vulnerability than CVE-2011-1577. Following non-security bugs were fixed: - novfs: Unable to change password in the Novell Client for Linux (bnc#713229). - novfs: last modification time not reliable (bnc#642896). - novfs: unlink directory after unmap (bnc#649625). - fs: novfs: Fix exit handlers on local_unlink (bnc#649625). - novfs: "Unable to save Login Script" appears when trying to save a user login script (bnc#638985). - fs: novfs: Limit check for datacopy between user and kernel space. - novfs: Fix checking of login id (bnc#626119). - novfs: Set the sticky bit for the novfs mountpoint (bnc#686412). - ACPICA: Fix issues/fault with automatic "serialized" method support (bnc#678097). - drm/radeon/kms: Fix I2C mask definitions (bnc#712023). - ext4: Fix max file size and logical block counting of extent format file (bnc#706374). - novfs: fix off-by-one allocation error (bnc#669378 bnc#719710). - novfs: fix some kmalloc/kfree issues (bnc#669378 bnc#719710). - novfs: fix some DirCache locking issues (bnc#669378 bnc#719710). - memsw: remove noswapaccount kernel parameter (bnc#719450). - Provide memory controller swap extension. Keep the feature disabled by default. Use swapaccount=1 kernel boot parameter for enabling it. - Config cleanups: CONFIG_OLPC should be enabled only for i386 non PAE - TTY: pty, fix pty counting (bnc#711203). - USB: OHCI: fix another regression for NVIDIA controllers (bnc#682204). - xen/blkfront: avoid NULL de-reference in CDROM ioctl handling. - x86, mtrr: lock stop machine during MTRR rendezvous sequence (bnc#672008). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch kernel-5359 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64) [New Version: 2.6.37.6]: kernel-debug-2.6.37.6-0.9.1 kernel-debug-base-2.6.37.6-0.9.1 kernel-debug-devel-2.6.37.6-0.9.1 kernel-default-2.6.37.6-0.9.1 kernel-default-base-2.6.37.6-0.9.1 kernel-default-devel-2.6.37.6-0.9.1 kernel-desktop-2.6.37.6-0.9.1 kernel-desktop-base-2.6.37.6-0.9.1 kernel-desktop-devel-2.6.37.6-0.9.1 kernel-ec2-2.6.37.6-0.9.1 kernel-ec2-base-2.6.37.6-0.9.1 kernel-ec2-devel-2.6.37.6-0.9.1 kernel-ec2-extra-2.6.37.6-0.9.1 kernel-syms-2.6.37.6-0.9.1 kernel-trace-2.6.37.6-0.9.1 kernel-trace-base-2.6.37.6-0.9.1 kernel-trace-devel-2.6.37.6-0.9.1 kernel-vanilla-2.6.37.6-0.9.1 kernel-vanilla-base-2.6.37.6-0.9.1 kernel-vanilla-devel-2.6.37.6-0.9.1 kernel-xen-2.6.37.6-0.9.1 kernel-xen-base-2.6.37.6-0.9.1 kernel-xen-devel-2.6.37.6-0.9.1 preload-kmp-default-1.2_k2.6.37.6_0.9-6.7.20 preload-kmp-desktop-1.2_k2.6.37.6_0.9-6.7.20 - openSUSE 11.4 (noarch) [New Version: 2.6.37.6]: kernel-devel-2.6.37.6-0.9.1 kernel-docs-2.6.37.6-0.9.1 kernel-source-2.6.37.6-0.9.1 kernel-source-vanilla-2.6.37.6-0.9.1 - openSUSE 11.4 (i586) [New Version: 2.6.37.6]: kernel-pae-2.6.37.6-0.9.1 kernel-pae-base-2.6.37.6-0.9.1 kernel-pae-devel-2.6.37.6-0.9.1 kernel-vmi-2.6.37.6-0.9.1 kernel-vmi-base-2.6.37.6-0.9.1 kernel-vmi-devel-2.6.37.6-0.9.1 References: http://support.novell.com/security/cve/CVE-2011-1776.html http://support.novell.com/security/cve/CVE-2011-1833.html http://support.novell.com/security/cve/CVE-2011-2183.html http://support.novell.com/security/cve/CVE-2011-2695.html http://support.novell.com/security/cve/CVE-2011-2918.html http://support.novell.com/security/cve/CVE-2011-3191.html http://support.novell.com/security/cve/CVE-2011-3353.html http://support.novell.com/security/cve/CVE-2011-3363.html https://bugzilla.novell.com/626119 https://bugzilla.novell.com/638985 https://bugzilla.novell.com/642896 https://bugzilla.novell.com/649625 https://bugzilla.novell.com/669378 https://bugzilla.novell.com/672008 https://bugzilla.novell.com/678097 https://bugzilla.novell.com/682204 https://bugzilla.novell.com/686412 https://bugzilla.novell.com/692784 https://bugzilla.novell.com/697901 https://bugzilla.novell.com/706374 https://bugzilla.novell.com/711203 https://bugzilla.novell.com/711539 https://bugzilla.novell.com/712023 https://bugzilla.novell.com/712366 https://bugzilla.novell.com/713229 https://bugzilla.novell.com/714001 https://bugzilla.novell.com/716901 https://bugzilla.novell.com/718028 https://bugzilla.novell.com/719450 https://bugzilla.novell.com/719710

1 0

openSUSE-SU-2011:1221-1: moderate: kernel: security and bugfix update.
by opensuse-security＠opensuse.org 08 Nov '11

08 Nov '11

openSUSE Security Update: kernel: security and bugfix update. ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:1221-1 Rating: moderate References: #685276 #692784 #696107 #701355 #706374 #710352 #711203 #711539 #712023 #712366 #714001 #716901 #718028 #719117 Cross-References: CVE-2011-1776 CVE-2011-1833 CVE-2011-2918 CVE-2011-3191 CVE-2011-3353 CVE-2011-3363 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that solves 6 vulnerabilities and has 8 fixes is now available. It includes one version update. Description: The openSUSE 11.3 kernel was updated to fix various bugs and security issues. Following security issues have been fixed: CVE-2011-1833: Added a kernel option to ensure ecryptfs is mounting only on paths belonging to the current ui, which would have allowed local attackers to potentially gain privileges via symlink attacks. CVE-2011-3363: Always check the path in CIFS mounts to avoid interesting filesystem path interaction issues and potential crashes. CVE-2011-2918: In the perf framework software event overflows could deadlock or delete an uninitialized timer. CVE-2011-3353: In the fuse filesystem, FUSE_NOTIFY_INVAL_ENTRY did not check the length of the write so the message processing could overrun and result in a BUG_ON() in fuse_copy_fill(). This flaw could be used by local users able to mount FUSE filesystems to crash the system. CVE-2011-3191: A signedness issue in CIFS could possibly have lead to to memory corruption, if a malicious server could send crafted replies to the host. CVE-2011-1776: The is_gpt_valid function in fs/partitions/efi.c in the Linux kernel did not check the size of an Extensible Firmware Interface (EFI) GUID Partition Table (GPT) entry, which allowed physically proximate attackers to cause a denial of service (heap-based buffer overflow and OOPS) or obtain sensitive information from kernel heap memory by connecting a crafted GPT storage device, a different vulnerability than CVE-2011-1577. Following non security bugs were fixed: - drm/radeon/kms: Fix I2C mask definitions (bnc#712023). - ext4: Fix max file size and logical block counting of extent format file (bnc#706374). - TTY: pty, fix pty counting (bnc#711203). - Update Xen patches to 2.6.34.10. - xen/blkfront: fix data size for xenbus_gather in connect(). - xen/xenbus: fix xenbus_transaction_start() hang caused by double xenbus_transaction_end(). - xen/blkback: don't fail empty barrier requests. - xen/blktap: fix locking (bnc#685276). - xen/xenbus: don't BUG() on user mode induced conditions (bnc#696107). - xen/blkfront: avoid NULL de-reference in CDROM ioctl handling (bnc#701355). - intr-remap: allow disabling source id checking (bnc#710352). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch kernel-5360 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 2.6.34.10]: kernel-debug-2.6.34.10-0.4.1 kernel-debug-base-2.6.34.10-0.4.1 kernel-debug-devel-2.6.34.10-0.4.1 kernel-default-2.6.34.10-0.4.1 kernel-default-base-2.6.34.10-0.4.1 kernel-default-devel-2.6.34.10-0.4.1 kernel-desktop-2.6.34.10-0.4.1 kernel-desktop-base-2.6.34.10-0.4.1 kernel-desktop-devel-2.6.34.10-0.4.1 kernel-ec2-2.6.34.10-0.4.1 kernel-ec2-base-2.6.34.10-0.4.1 kernel-ec2-devel-2.6.34.10-0.4.1 kernel-ec2-extra-2.6.34.10-0.4.1 kernel-syms-2.6.34.10-0.4.1 kernel-trace-2.6.34.10-0.4.1 kernel-trace-base-2.6.34.10-0.4.1 kernel-trace-devel-2.6.34.10-0.4.1 kernel-vanilla-2.6.34.10-0.4.1 kernel-vanilla-base-2.6.34.10-0.4.1 kernel-vanilla-devel-2.6.34.10-0.4.1 kernel-xen-2.6.34.10-0.4.1 kernel-xen-base-2.6.34.10-0.4.1 kernel-xen-devel-2.6.34.10-0.4.1 preload-kmp-default-1.1_k2.6.34.10_0.4-19.1.30 preload-kmp-desktop-1.1_k2.6.34.10_0.4-19.1.30 - openSUSE 11.3 (noarch) [New Version: 2.6.34.10]: kernel-devel-2.6.34.10-0.4.1 kernel-source-2.6.34.10-0.4.1 kernel-source-vanilla-2.6.34.10-0.4.1 - openSUSE 11.3 (i586) [New Version: 2.6.34.10]: kernel-pae-2.6.34.10-0.4.1 kernel-pae-base-2.6.34.10-0.4.1 kernel-pae-devel-2.6.34.10-0.4.1 kernel-vmi-2.6.34.10-0.4.1 kernel-vmi-base-2.6.34.10-0.4.1 kernel-vmi-devel-2.6.34.10-0.4.1 References: http://support.novell.com/security/cve/CVE-2011-1776.html http://support.novell.com/security/cve/CVE-2011-1833.html http://support.novell.com/security/cve/CVE-2011-2918.html http://support.novell.com/security/cve/CVE-2011-3191.html http://support.novell.com/security/cve/CVE-2011-3353.html http://support.novell.com/security/cve/CVE-2011-3363.html https://bugzilla.novell.com/685276 https://bugzilla.novell.com/692784 https://bugzilla.novell.com/696107 https://bugzilla.novell.com/701355 https://bugzilla.novell.com/706374 https://bugzilla.novell.com/710352 https://bugzilla.novell.com/711203 https://bugzilla.novell.com/711539 https://bugzilla.novell.com/712023 https://bugzilla.novell.com/712366 https://bugzilla.novell.com/714001 https://bugzilla.novell.com/716901 https://bugzilla.novell.com/718028 https://bugzilla.novell.com/719117

1 0

openSUSE-RU-2011:1220-1: logwatch: Fix start of service dmeventd service
by maintenance＠opensuse.org 05 Nov '11

05 Nov '11

openSUSE Recommended Update: logwatch: Fix start of service dmeventd service ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:1220-1 Rating: low References: #724164 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: logwatch won't start with the service dmeventd because the crontab entry in /etc/cron.d/dmeventd is lacking the user name. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch logwatch-5290 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (noarch): logwatch-7.3.6-78.84.1 References: https://bugzilla.novell.com/724164

1 0

openSUSE-SU-2011:1217-1: important: apache2: Fixed several security issues
by opensuse-security＠opensuse.org 04 Nov '11

04 Nov '11

openSUSE Security Update: apache2: Fixed several security issues ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:1217-1 Rating: important References: #713966 #719236 #722545 Cross-References: CVE-2011-3192 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update fixes several security issues in the Apache webserver. The patch for the ByteRange remote denial of service attack (CVE-2011-3192) was refined and the configuration options used by upstream were added. Introduce new config option: Allow MaxRanges Number of ranges requested, if exceeded, the complete content is served. default: 200 0|unlimited: unlimited none: Range headers are ignored. This option is a backport from 2.2.21. Also fixed: CVE-2011-3348: Denial of service in proxy_ajp when using a undefined method. CVE-2011-3368: Exposure of internal servers via reverse proxy methods with mod_proxy enabled and incorrect Rewrite or Proxy Rules. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch apache2-5347 - openSUSE 11.3: zypper in -t patch apache2-5347 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): apache2-2.2.17-4.9.1 apache2-devel-2.2.17-4.9.1 apache2-example-certificates-2.2.17-4.9.1 apache2-example-pages-2.2.17-4.9.1 apache2-itk-2.2.17-4.9.1 apache2-prefork-2.2.17-4.9.1 apache2-utils-2.2.17-4.9.1 apache2-worker-2.2.17-4.9.1 - openSUSE 11.4 (noarch): apache2-doc-2.2.17-4.9.1 - openSUSE 11.3 (i586 x86_64): apache2-2.2.15-4.7.1 apache2-devel-2.2.15-4.7.1 apache2-example-certificates-2.2.15-4.7.1 apache2-example-pages-2.2.15-4.7.1 apache2-itk-2.2.15-4.7.1 apache2-prefork-2.2.15-4.7.1 apache2-utils-2.2.15-4.7.1 apache2-worker-2.2.15-4.7.1 - openSUSE 11.3 (noarch): apache2-doc-2.2.15-4.7.1 References: http://support.novell.com/security/cve/CVE-2011-3192.html https://bugzilla.novell.com/713966 https://bugzilla.novell.com/719236 https://bugzilla.novell.com/722545

1 0

openSUSE-SU-2011:1208-1: important: pam: fixing stack overflow (CVE-2011-3148), a local DoS (CVE-2011-3149) and CVE-2010-3316.
by opensuse-security＠opensuse.org 02 Nov '11

02 Nov '11

openSUSE Security Update: pam: fixing stack overflow (CVE-2011-3148), a local DoS (CVE-2011-3149) and CVE-2010-3316. ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:1208-1 Rating: important References: #631802 #724480 Cross-References: CVE-2010-3316 CVE-2011-3148 CVE-2011-3149 Affected Products: openSUSE 11.3 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: The pam_env module is vulnerable to a stack overflow (CVE-2011-3148) and a DoS condition (CVE-2011-3149) when parsing users .pam_environment files. Additionally a missing return value check inside pam_xauth has been fixed (CVE-2010-3316). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch pam-5331 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): pam-1.1.1.90-2.3.1 pam-devel-1.1.1.90-2.3.1 - openSUSE 11.3 (x86_64): pam-32bit-1.1.1.90-2.3.1 pam-devel-32bit-1.1.1.90-2.3.1 - openSUSE 11.3 (noarch): pam-doc-1.1.1.90-2.3.1 References: http://support.novell.com/security/cve/CVE-2010-3316.html http://support.novell.com/security/cve/CVE-2011-3148.html http://support.novell.com/security/cve/CVE-2011-3149.html https://bugzilla.novell.com/631802 https://bugzilla.novell.com/724480

1 0

openSUSE-SU-2011:1204-1: important: pam: fixing stack overflow (CVE-2011-3148) and DoS (CVE-2011-3149)
by opensuse-security＠opensuse.org 02 Nov '11

02 Nov '11

openSUSE Security Update: pam: fixing stack overflow (CVE-2011-3148) and DoS (CVE-2011-3149) ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:1204-1 Rating: important References: #724480 Cross-References: CVE-2011-3148 CVE-2011-3149 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: The pam_env module is vulnerable to a stack overflow (CVE-2011-3148) and a DoS condition (CVE-2011-3149) when parsing users .pam_environment files. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch pam-5330 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): pam-1.1.3-4.9.1 pam-devel-1.1.3-4.9.1 pam-doc-1.1.3-4.9.1 - openSUSE 11.4 (x86_64): pam-32bit-1.1.3-4.9.1 pam-devel-32bit-1.1.3-4.9.1 References: http://support.novell.com/security/cve/CVE-2011-3148.html http://support.novell.com/security/cve/CVE-2011-3149.html https://bugzilla.novell.com/724480

1 0

openSUSE-SU-2011:1203-1: important: rpm (CVE-2011-3378)
by opensuse-security＠opensuse.org 02 Nov '11

02 Nov '11

openSUSE Security Update: rpm (CVE-2011-3378) ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:1203-1 Rating: important References: #720824 Cross-References: CVE-2011-3378 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Specially crafted rpm packages can cause memory corruption in rpm when verifying signatures (CVE-2011-3378). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch rpm-5255 - openSUSE 11.3: zypper in -t patch rpm-5255 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): rpm-4.8.0-28.29.1 rpm-devel-4.8.0-28.29.1 - openSUSE 11.4 (x86_64): rpm-32bit-4.8.0-28.29.1 - openSUSE 11.3 (i586 x86_64): rpm-4.8.0-5.3.1 rpm-devel-4.8.0-5.3.1 - openSUSE 11.3 (x86_64): rpm-32bit-4.8.0-5.3.1 References: http://support.novell.com/security/cve/CVE-2011-3378.html https://bugzilla.novell.com/720824

1 0

openSUSE-RU-2011:1202-1: libwebkit: Reduce initial vm allocation
by maintenance＠opensuse.org 02 Nov '11

02 Nov '11

openSUSE Recommended Update: libwebkit: Reduce initial vm allocation ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:1202-1 Rating: low References: #710242 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update reduces the initial vm allocation to 32MB and increases it only when overcommit is possible (bnc#710242) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch libwebkit-5341 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): libwebkitgtk-1_0-0-1.3.10-6.7.1 libwebkitgtk-devel-1.3.10-6.7.1 webkit-jsc-1.3.10-6.7.1 - openSUSE 11.4 (x86_64): libwebkitgtk-1_0-0-32bit-1.3.10-6.7.1 - openSUSE 11.4 (noarch): libwebkitgtk2-lang-1.3.10-6.7.1 References: https://bugzilla.novell.com/710242

1 0