March 2011 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2011:0208-1 (important): clamav security update
by opensuse-security＠opensuse.org 22 Mar '11

22 Mar '11

openSUSE Security Update: clamav security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0208-1 Rating: important References: #673753 Cross-References: CVE-2011-1003 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. It includes one version update. Description: Specially crafted VBA data in Microsoft Office documents could crash clamav or potentially even cause execution of arbitrary code. clamav was updated to version 0.97 to fix the issue (CVE-2011-1003). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch clamav-4154 - openSUSE 11.2: zypper in -t patch clamav-4154 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 0.97]: clamav-0.97-5.2.2 - openSUSE 11.3 (noarch) [New Version: 0.97]: clamav-db-0.97-5.2.2 - openSUSE 11.2 (i586 x86_64) [New Version: 0.97]: clamav-0.97-5.2.2 clamav-db-0.97-5.2.2 References: http://support.novell.com/security/cve/CVE-2011-1003.html https://bugzilla.novell.com/673753

1 0

openSUSE-SU-2011:0207-1 (moderate): aaa_base security update
by opensuse-security＠opensuse.org 22 Mar '11

22 Mar '11

openSUSE Security Update: aaa_base security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0207-1 Rating: moderate References: #678827 Cross-References: CVE-2011-0468 Affected Products: openSUSE 11.4 openSUSE 11.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: shell meta characters in file names could cause interactive shells to execute arbitrary commands when performing tab expansion (CVE-2011-0468). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch aaa_base-4171 - openSUSE 11.3: zypper in -t patch aaa_base-4171 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): aaa_base-11.4-54.62.1 aaa_base-extras-11.4-54.62.1 - openSUSE 11.3 (i586 x86_64): aaa_base-11.3-8.9.1 References: http://support.novell.com/security/cve/CVE-2011-0468.html https://bugzilla.novell.com/678827

1 0

openSUSE-RU-2011:0204-1 (low): Fixed post scriptlets in M17N gtk2 immodule packages
by maintenance＠opensuse.org 21 Mar '11

21 Mar '11

openSUSE Recommended Update: Fixed post scriptlets in M17N gtk2 immodule packages ______________________________________________________________________________ Announcement ID: openSUSE-RU-2011:0204-1 Rating: low References: #678080 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This patch fixes the rpm post scriptlets in packages providing gtk2 IM modules to create the gtk2 immodule cache properly after installation / uninstallation. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch immgtk2fixes-4151 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): ibus-1.3.8-4.3.1 ibus-devel-1.3.8-4.3.1 ibus-gtk-1.3.8-4.3.1 imhangul-0.9.14-12.3.1 libibus2-1.3.8-4.3.1 scim-1.4.7-180.3.1 scim-bridge-0.4.15-125.3.1 scim-bridge-gtk-0.4.15-125.3.1 scim-bridge-qt-0.4.15-125.3.1 scim-devel-1.4.7-180.3.1 tamil-gtk2im-2.2-286.3.1 uim-1.5.6-13.3.2 uim-devel-1.5.6-13.3.2 uim-gtk2-1.5.6-13.3.2 uim-qt-1.5.6-13.3.2 uim-qt4-1.5.6-13.3.2 - openSUSE 11.4 (x86_64): imhangul-32bit-0.9.14-12.3.1 scim-32bit-1.4.7-180.3.1 scim-bridge-gtk-32bit-0.4.15-125.3.1 scim-bridge-qt-32bit-0.4.15-125.3.1 tamil-gtk2im-32bit-2.2-286.3.1 uim-32bit-1.5.6-13.3.2 uim-gtk2-32bit-1.5.6-13.3.2 uim-qt-32bit-1.5.6-13.3.2 References: https://bugzilla.novell.com/678080

1 0

openSUSE-SU-2011:0174-1 (moderate): build security update
by opensuse-security＠opensuse.org 15 Mar '11

15 Mar '11

openSUSE Security Update: build security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0174-1 Rating: moderate References: #665768 Cross-References: CVE-2010-4226 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. It includes one version update. Description: The build script uses cpio to extract untrusted rpm packages for bootstrapping virtual machines. cpio is not safe to use for this task, therefore the build script now uses bsdtar instead (CVE-2010-4226). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch build-4028 - openSUSE 11.2: zypper in -t patch build-4028 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (noarch) [New Version: 2010.07.28]: build-2010.07.28-1.3.1 build-mkbaselibs-2010.07.28-1.3.1 - openSUSE 11.2 (noarch) [New Version: 2010.07.28]: build-2010.07.28-1.3.1 References: http://support.novell.com/security/cve/CVE-2010-4226.html https://bugzilla.novell.com/665768

1 0

openSUSE-SU-2011:0171-1 (moderate): aaa_base security update
by opensuse-security＠opensuse.org 14 Mar '11

14 Mar '11

openSUSE Security Update: aaa_base security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0171-1 Rating: moderate References: #665479 Cross-References: CVE-2011-0461 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The boot.localfs init script wrote a file to /dev/shm during shut-down. Since local users may create symlinks there a malicious user could cause corruption of arbitrary files (CVE-2011-0461). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch aaa_base-3906 - openSUSE 11.2: zypper in -t patch aaa_base-3906 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): aaa_base-11.3-8.7.1 - openSUSE 11.2 (i586 x86_64): aaa_base-11.2-43.48.1 References: http://support.novell.com/security/cve/CVE-2011-0461.html https://bugzilla.novell.com/665479

1 0

openSUSE-SU-2011:0169-1 (critical): MozillaFirefox: Security update to 3.6.15
by opensuse-security＠opensuse.org 11 Mar '11

11 Mar '11

openSUSE Security Update: MozillaFirefox: Security update to 3.6.15 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0169-1 Rating: critical References: #667155 Cross-References: CVE-2010-1585 CVE-2011-0051 CVE-2011-0053 CVE-2011-0054 CVE-2011-0055 CVE-2011-0056 CVE-2011-0057 CVE-2011-0058 CVE-2011-0059 CVE-2011-0061 CVE-2011-0062 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes 11 vulnerabilities is now available. It includes 6 new package versions. Description: MozillaFirefox was updated to version 3.6.15, fixing various security issues. Following security issues were fixed: MFSA 2011-01: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code. References Jesse Ruderman, Igor Bukanov, Olli Pettay, Gary Kwong, Jeff Walden, Henry Sivonen, Martijn Wargers, David Baron and Marcia Knous reported memory safety problems that affected Firefox 3.6 and Firefox 3.5. (CVE-2011-0053) Igor Bukanov and Gary Kwong reported memory safety problems that affected Firefox 3.6 only. (CVE-2011-0062) MFSA 2011-02 / CVE-2011-0051: Security researcher Zach Hoffman reported that a recursive call to eval() wrapped in a try/catch statement places the browser into a inconsistent state. Any dialog box opened in this state is displayed without text and with non-functioning buttons. Closing the window causes the dialog to evaluate to true. An attacker could use this issue to force a user into accepting any dialog, such as one granting elevated privileges to the page presenting the dialog. MFSA 2011-03 / CVE-2011-0055: Security researcher regenrecht reported via TippingPoint's Zero Day Initiative that a method used by JSON.stringify contained a use-after-free error in which a currently in-use pointer was freed and subsequently dereferenced. This could lead to arbitrary code execution if an attacker was able to store malicious code in the freed section of memory. Mozilla developer Igor Bukanov also independently discovered and reported this issue two weeks after the initial report was received. MFSA 2011-04 / CVE-2011-0054: Security researcher Christian Holler reported that the JavaScript engine's internal memory mapping of non-local JS variables contained a buffer overflow which could potentially be used by an attacker to run arbitrary code on a victim's computer. MFSA 2011-05 / CVE-2011-0056: Security researcher Christian Holler reported that the JavaScript engine's internal mapping of string values contained an error in cases where the number of values being stored was above 64K. In such cases an offset pointer was manually moved forwards and backwards to access the larger address space. If an exception was thrown between the time that the offset pointer was moved forward and the time it was reset, then the exception object would be read from an invalid memory address, potentially executing attacker-controlled memory. MFSA 2011-06 / CVE-2011-0057: Daniel Kozlowski reported that a JavaScript Worker could be used to keep a reference to an object that could be freed during garbage collection. Subsequent calls through this deleted reference could cause attacker-controlled memory to be executed on a victim's computer. MFSA 2011-07 / CVE-2011-0058: Alex Miller reported that when very long strings were constructed and inserted into an HTML document, the browser would incorrectly construct the layout objects used to display the text. Under such conditions an incorrect length would be calculated for a text run resulting in too small of a memory buffer being allocated to store the text. This issue could be used by an attacker to write data past the end of the buffer and execute malicious code on a victim's computer. This issue affects only Mozilla browsers on Windows. MFSA 2011-08 / CVE-2010-1585: Mozilla security developer Roberto Suggi Liverani reported that ParanoidFragmentSink, a class used to sanitize potentially unsafe HTML for display, allows javascript: URLs and other inline JavaScript when the embedding document is a chrome document. While there are no unsafe uses of this class in any released products, extension code could have potentially used it in an unsafe manner. MFSA 2011-09 / CVE-2011-0061: Security researcher Jordi Chancel reported that a JPEG image could be constructed that would be decoded incorrectly, causing data to be written past the end of a buffer created to store the image. An attacker could potentially craft such an image that would cause malicious code to be stored in memory and then later executed on a victim's computer. MFSA 2011-10 / CVE-2011-0059: Adobe security researcher Peleus Uhley reported that when plugin-initiated requests receive a 307 redirect response, the plugin is not notified and the request is forwarded to the new location. This is true even for cross-site redirects, so any custom headers that were added as part of the initial request would be forwarded intact across origins. This poses a CSRF risk for web applications that rely on custom headers only being present in requests from their own origin. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch MozillaFirefox-4111 MozillaThunderbird-4070 mozilla-xulrunner191-4073 seamonkey-4074 - openSUSE 11.2: zypper in -t patch MozillaFirefox-4111 MozillaThunderbird-4070 mozilla-xulrunner191-4073 seamonkey-4074 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64) [New Version: 1.1.2,1.9.1.17,1.9.2.15,2.0.12,3.1.8 and 3.6.15]: MozillaFirefox-3.6.15-0.2.1 MozillaFirefox-branding-upstream-3.6.15-0.2.1 MozillaFirefox-translations-common-3.6.15-0.2.1 MozillaFirefox-translations-other-3.6.15-0.2.1 MozillaThunderbird-3.1.8-0.7.1 MozillaThunderbird-devel-3.1.8-0.7.1 MozillaThunderbird-translations-common-3.1.8-0.7.1 MozillaThunderbird-translations-other-3.1.8-0.7.1 enigmail-1.1.2-9.7.1 mozilla-js192-1.9.2.15-0.2.1 mozilla-xulrunner191-1.9.1.17-0.2.1 mozilla-xulrunner191-devel-1.9.1.17-0.2.1 mozilla-xulrunner191-gnomevfs-1.9.1.17-0.2.1 mozilla-xulrunner191-translations-common-1.9.1.17-0.2.1 mozilla-xulrunner191-translations-other-1.9.1.17-0.2.1 mozilla-xulrunner192-1.9.2.15-0.2.1 mozilla-xulrunner192-buildsymbols-1.9.2.15-0.2.1 mozilla-xulrunner192-devel-1.9.2.15-0.2.1 mozilla-xulrunner192-gnome-1.9.2.15-0.2.1 mozilla-xulrunner192-translations-common-1.9.2.15-0.2.1 mozilla-xulrunner192-translations-other-1.9.2.15-0.2.1 python-xpcom191-1.9.1.17-0.2.1 seamonkey-2.0.12-0.2.1 seamonkey-dom-inspector-2.0.12-0.2.1 seamonkey-irc-2.0.12-0.2.1 seamonkey-translations-common-2.0.12-0.2.1 seamonkey-translations-other-2.0.12-0.2.1 seamonkey-venkman-2.0.12-0.2.1 - openSUSE 11.3 (x86_64) [New Version: 1.9.1.17 and 1.9.2.15]: mozilla-js192-32bit-1.9.2.15-0.2.1 mozilla-xulrunner191-32bit-1.9.1.17-0.2.1 mozilla-xulrunner191-gnomevfs-32bit-1.9.1.17-0.2.1 mozilla-xulrunner192-32bit-1.9.2.15-0.2.1 mozilla-xulrunner192-gnome-32bit-1.9.2.15-0.2.1 mozilla-xulrunner192-translations-common-32bit-1.9.2.15-0.2.1 mozilla-xulrunner192-translations-other-32bit-1.9.2.15-0.2.1 - openSUSE 11.2 (i586 x86_64) [New Version: 1.1.2,1.9.1.17,1.9.2.15,2.0.12,3.1.8 and 3.6.15]: MozillaFirefox-3.6.15-0.2.2 MozillaFirefox-branding-upstream-3.6.15-0.2.2 MozillaFirefox-translations-common-3.6.15-0.2.2 MozillaFirefox-translations-other-3.6.15-0.2.2 MozillaThunderbird-3.1.8-0.7.1 MozillaThunderbird-devel-3.1.8-0.7.1 MozillaThunderbird-translations-common-3.1.8-0.7.1 MozillaThunderbird-translations-other-3.1.8-0.7.1 enigmail-1.1.2-9.7.1 mozilla-js192-1.9.2.15-0.2.2 mozilla-xulrunner191-1.9.1.17-0.2.1 mozilla-xulrunner191-devel-1.9.1.17-0.2.1 mozilla-xulrunner191-gnomevfs-1.9.1.17-0.2.1 mozilla-xulrunner191-translations-common-1.9.1.17-0.2.1 mozilla-xulrunner191-translations-other-1.9.1.17-0.2.1 mozilla-xulrunner192-1.9.2.15-0.2.2 mozilla-xulrunner192-buildsymbols-1.9.2.15-0.2.2 mozilla-xulrunner192-devel-1.9.2.15-0.2.2 mozilla-xulrunner192-gnome-1.9.2.15-0.2.2 mozilla-xulrunner192-translations-common-1.9.2.15-0.2.2 mozilla-xulrunner192-translations-other-1.9.2.15-0.2.2 python-xpcom191-1.9.1.17-0.2.1 seamonkey-2.0.12-0.2.1 seamonkey-dom-inspector-2.0.12-0.2.1 seamonkey-irc-2.0.12-0.2.1 seamonkey-venkman-2.0.12-0.2.1 - openSUSE 11.2 (x86_64) [New Version: 1.9.1.17 and 1.9.2.15]: mozilla-js192-32bit-1.9.2.15-0.2.2 mozilla-xulrunner191-32bit-1.9.1.17-0.2.1 mozilla-xulrunner191-gnomevfs-32bit-1.9.1.17-0.2.1 mozilla-xulrunner192-32bit-1.9.2.15-0.2.2 mozilla-xulrunner192-gnome-32bit-1.9.2.15-0.2.2 mozilla-xulrunner192-translations-common-32bit-1.9.2.15-0.2.2 mozilla-xulrunner192-translations-other-32bit-1.9.2.15-0.2.2 References: http://support.novell.com/security/cve/CVE-2010-1585.html http://support.novell.com/security/cve/CVE-2011-0051.html http://support.novell.com/security/cve/CVE-2011-0053.html http://support.novell.com/security/cve/CVE-2011-0054.html http://support.novell.com/security/cve/CVE-2011-0055.html http://support.novell.com/security/cve/CVE-2011-0056.html http://support.novell.com/security/cve/CVE-2011-0057.html http://support.novell.com/security/cve/CVE-2011-0058.html http://support.novell.com/security/cve/CVE-2011-0059.html http://support.novell.com/security/cve/CVE-2011-0061.html http://support.novell.com/security/cve/CVE-2011-0062.html https://bugzilla.novell.com/667155

1 0

openSUSE-SU-2011:0162-1 (moderate): gimp: security update
by opensuse-security＠opensuse.org 10 Mar '11

10 Mar '11

openSUSE Security Update: gimp: security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0162-1 Rating: moderate References: #662043 Cross-References: CVE-2010-4540 CVE-2010-4541 CVE-2010-4542 CVE-2010-4543 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. It includes one version update. Description: Four buffer overflows have been fixed in gimp and its plugins. CVE-2010-4540-CVE-2010-4543 have been assigned to these issues. - CVE-2010-4540: CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P): Buffer Errors (CWE-119) - CVE-2010-4541: CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P): Buffer Errors (CWE-119) - CVE-2010-4542: CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P): Buffer Errors (CWE-119) - CVE-2010-4543: CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P): Buffer Errors (CWE-119) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch gimp-3967 - openSUSE 11.2: zypper in -t patch gimp-3967 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): gimp-2.6.8-7.3.1 gimp-branding-upstream-2.6.8-7.3.1 gimp-devel-2.6.8-7.3.1 gimp-help-browser-2.6.8-7.3.1 gimp-module-hal-2.6.8-7.3.1 gimp-plugins-python-2.6.8-7.3.1 - openSUSE 11.3 (noarch): gimp-lang-2.6.8-7.3.1 - openSUSE 11.2 (i586 x86_64) [New Version: 2.6.8]: gimp-2.6.8-1.3.1 gimp-branding-upstream-2.6.8-1.3.1 gimp-devel-2.6.8-1.3.1 gimp-help-browser-2.6.8-1.3.1 gimp-plugins-python-2.6.8-1.3.1 - openSUSE 11.2 (noarch) [New Version: 2.6.8]: gimp-lang-2.6.8-1.3.1 References: http://support.novell.com/security/cve/CVE-2010-4540.html http://support.novell.com/security/cve/CVE-2010-4541.html http://support.novell.com/security/cve/CVE-2010-4542.html http://support.novell.com/security/cve/CVE-2010-4543.html https://bugzilla.novell.com/662043

1 0

openSUSE-SU-2011:0159-1 (important): SLE11 SP1
by opensuse-security＠opensuse.org 08 Mar '11

08 Mar '11

openSUSE Security Update: SLE11 SP1 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0159-1 Rating: important References: #466279 #552250 #564423 #602969 #620929 #622868 #623393 #625965 #629170 #630970 #632317 #633026 #636435 #638258 #640850 #642309 #643266 #643513 #648647 #648701 #648916 #649473 #650067 #650366 #650748 #651152 #652391 #655220 #655278 #655964 #657248 #657763 #658037 #658254 #658337 #658353 #658461 #658551 #658720 #659101 #659394 #659419 #660546 #661605 #661945 #662031 #662192 #662202 #662212 #662335 #662340 #662360 #662673 #662722 #662800 #662931 #662945 #663537 #663582 #663706 #664149 #664463 #665480 #665499 #665524 #665663 #666012 #666893 #668545 #668633 #668929 #670129 #670577 #670864 #671256 #671274 #671483 #672292 #672492 #672499 #672524 #674735 Cross-References: CVE-2010-2943 CVE-2010-3699 CVE-2010-3705 CVE-2010-3858 CVE-2010-3875 CVE-2010-3876 CVE-2010-3877 CVE-2010-4075 CVE-2010-4076 CVE-2010-4077 CVE-2010-4163 CVE-2010-4243 CVE-2010-4342 CVE-2010-4346 CVE-2010-4526 CVE-2010-4527 CVE-2010-4529 CVE-2010-4650 CVE-2010-4668 CVE-2011-0006 CVE-2011-0710 CVE-2011-0711 CVE-2011-0712 Affected Products: SLE 11 SERVER Unsupported Extras ______________________________________________________________________________ An update that solves 23 vulnerabilities and has 59 fixes is now available. Description: The SUSE Linux Enterprise 11 Service Pack 1 kernel was updated to 2.6.32.29 and fixes various bugs and security issues. CVE-2010-3875: The ax25_getname function in net/ax25/af_ax25.c in the Linux kernel did not initialize a certain structure, which allowed local users to obtain potentially sensitive information from kernel stack memory by reading a copy of this structure. CVE-2010-3876: net/packet/af_packet.c in the Linux kernel did not properly initialize certain structure members, which allowed local users to obtain potentially sensitive information from kernel stack memory by leveraging the CAP_NET_RAW capability to read copies of the applicable structures. CVE-2010-3877: The get_name function in net/tipc/socket.c in the Linux kernel did not initialize a certain structure, which allowed local users to obtain potentially sensitive information from kernel stack memory by reading a copy of this structure. CVE-2010-3705: The sctp_auth_asoc_get_hmac function in net/sctp/auth.c in the Linux kernel did not properly validate the hmac_ids array of an SCTP peer, which allowed remote attackers to cause a denial of service (memory corruption and panic) via a crafted value in the last element of this array. CVE-2011-0711: A stack memory information leak in the xfs FSGEOMETRY_V1 ioctl was fixed. CVE-2011-0712: Multiple buffer overflows in the caiaq Native Instruments USB audio functionality in the Linux kernel might have allowed attackers to cause a denial of service or possibly have unspecified other impact via a long USB device name, related to (1) the snd_usb_caiaq_audio_init function in sound/usb/caiaq/audio.c and (2) the snd_usb_caiaq_midi_init function in sound/usb/caiaq/midi.c. CVE-2011-0710: The task_show_regs function in arch/s390/kernel/traps.c in the Linux kernel on the s390 platform allowed local users to obtain the values of the registers of an arbitrary process by reading a status file under /proc/. CVE-2010-2943: The xfs implementation in the Linux kernel did not look up inode allocation btrees before reading inode buffers, which allowed remote authenticated users to read unlinked files, or read or overwrite disk blocks that are currently assigned to an active file but were previously assigned to an unlinked file, by accessing a stale NFS filehandle. CVE-2010-4075: The uart_get_count function in drivers/serial/serial_core.c in the Linux kernel did not properly initialize a certain structure member, which allowed local users to obtain potentially sensitive information from kernel stack memory via a TIOCGICOUNT ioctl call. CVE-2010-4076: The rs_ioctl function in drivers/char/amiserial.c in the Linux kernel did not properly initialize a certain structure member, which allowed local users to obtain potentially sensitive information from kernel stack memory via a TIOCGICOUNT ioctl call. CVE-2010-4077: The ntty_ioctl_tiocgicount function in drivers/char/nozomi.c in the Linux kernel did not properly initialize a certain structure member, which allowed local users to obtain potentially sensitive information from kernel stack memory via a TIOCGICOUNT ioctl call. CVE-2010-4243: fs/exec.c in the Linux kernel did not enable the OOM Killer to assess use of stack memory by arrays representing the (1) arguments and (2) environment, which allows local users to cause a denial of service (memory consumption) via a crafted exec system call, aka an OOM dodging issue, a related issue to CVE-2010-3858. CVE-2010-4668: The blk_rq_map_user_iov function in block/blk-map.c in the Linux kernel allowed local users to cause a denial of service (panic) via a zero-length I/O request in a device ioctl to a SCSI device, related to an unaligned map. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-4163. CVE-2010-4529: Integer underflow in the irda_getsockopt function in net/irda/af_irda.c in the Linux kernel on platforms other than x86 allowed local users to obtain potentially sensitive information from kernel heap memory via an IRLMP_ENUMDEVICES getsockopt call. CVE-2010-4342: The aun_incoming function in net/econet/af_econet.c in the Linux kernel, when Econet is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and OOPS) by sending an Acorn Universal Networking (AUN) packet over UDP. CVE-2010-3699: The backend driver in Xen 3.x allowed guest OS users to cause a denial of service via a kernel thread leak, which prevented the device and guest OS from being shut down or create a zombie domain, causing a hang in zenwatch, or preventing unspecified xm commands from working properly, related to (1) netback, (2) blkback, or (3) blktap. CVE-2010-4346: The install_special_mapping function in mm/mmap.c in the Linux kernel did not make an expected security_file_mmap function call, which allows local users to bypass intended mmap_min_addr restrictions and possibly conduct NULL pointer dereference attacks via a crafted assembly-language application. CVE-2010-4650: Fixed a verify_ioctl overflow in "cuse" in the fuse filesystem. The code should only be called by root users though. CVE-2010-4526: Race condition in the sctp_icmp_proto_unreachable function in net/sctp/input.c in the Linux kernel allowed remote attackers to cause a denial of service (panic) via an ICMP unreachable message to a socket that is already locked by a user, which causes the socket to be freed and triggers list corruption, related to the sctp_wait_for_connect function. CVE-2010-4527: The load_mixer_volumes function in sound/oss/soundcard.c in the OSS sound subsystem in the Linux kernel incorrectly expected that a certain name field ends with a '0' character, which allowed local users to conduct buffer overflow attacks and gain privileges, or possibly obtain sensitive information from kernel memory, via a SOUND_MIXER_SETLEVELS ioctl call. CVE-2011-0006: Fixed a LSM bug in IMA (Integrity Measuring Architecture). IMA is not enabled in SUSE kernels, so we were not affected. Special Instructions and Notes: Please reboot the system after installing this update. Package List: - SLE 11 SERVER Unsupported Extras (i586 ia64 ppc64 s390x x86_64): kernel-default-extra-2.6.32.29-0.3.1 - SLE 11 SERVER Unsupported Extras (i586 x86_64): kernel-xen-extra-2.6.32.29-0.3.1 - SLE 11 SERVER Unsupported Extras (ppc64): kernel-ppc64-extra-2.6.32.29-0.3.1 - SLE 11 SERVER Unsupported Extras (i586): kernel-pae-extra-2.6.32.29-0.3.1 References: http://support.novell.com/security/cve/CVE-2010-2943.html http://support.novell.com/security/cve/CVE-2010-3699.html http://support.novell.com/security/cve/CVE-2010-3705.html http://support.novell.com/security/cve/CVE-2010-3858.html http://support.novell.com/security/cve/CVE-2010-3875.html http://support.novell.com/security/cve/CVE-2010-3876.html http://support.novell.com/security/cve/CVE-2010-3877.html http://support.novell.com/security/cve/CVE-2010-4075.html http://support.novell.com/security/cve/CVE-2010-4076.html http://support.novell.com/security/cve/CVE-2010-4077.html http://support.novell.com/security/cve/CVE-2010-4163.html http://support.novell.com/security/cve/CVE-2010-4243.html http://support.novell.com/security/cve/CVE-2010-4342.html http://support.novell.com/security/cve/CVE-2010-4346.html http://support.novell.com/security/cve/CVE-2010-4526.html http://support.novell.com/security/cve/CVE-2010-4527.html http://support.novell.com/security/cve/CVE-2010-4529.html http://support.novell.com/security/cve/CVE-2010-4650.html http://support.novell.com/security/cve/CVE-2010-4668.html http://support.novell.com/security/cve/CVE-2011-0006.html http://support.novell.com/security/cve/CVE-2011-0710.html http://support.novell.com/security/cve/CVE-2011-0711.html http://support.novell.com/security/cve/CVE-2011-0712.html https://bugzilla.novell.com/466279 https://bugzilla.novell.com/552250 https://bugzilla.novell.com/564423 https://bugzilla.novell.com/602969 https://bugzilla.novell.com/620929 https://bugzilla.novell.com/622868 https://bugzilla.novell.com/623393 https://bugzilla.novell.com/625965 https://bugzilla.novell.com/629170 https://bugzilla.novell.com/630970 https://bugzilla.novell.com/632317 https://bugzilla.novell.com/633026 https://bugzilla.novell.com/636435 https://bugzilla.novell.com/638258 https://bugzilla.novell.com/640850 https://bugzilla.novell.com/642309 https://bugzilla.novell.com/643266 https://bugzilla.novell.com/643513 https://bugzilla.novell.com/648647 https://bugzilla.novell.com/648701 https://bugzilla.novell.com/648916 https://bugzilla.novell.com/649473 https://bugzilla.novell.com/650067 https://bugzilla.novell.com/650366 https://bugzilla.novell.com/650748 https://bugzilla.novell.com/651152 https://bugzilla.novell.com/652391 https://bugzilla.novell.com/655220 https://bugzilla.novell.com/655278 https://bugzilla.novell.com/655964 https://bugzilla.novell.com/657248 https://bugzilla.novell.com/657763 https://bugzilla.novell.com/658037 https://bugzilla.novell.com/658254 https://bugzilla.novell.com/658337 https://bugzilla.novell.com/658353 https://bugzilla.novell.com/658461 https://bugzilla.novell.com/658551 https://bugzilla.novell.com/658720 https://bugzilla.novell.com/659101 https://bugzilla.novell.com/659394 https://bugzilla.novell.com/659419 https://bugzilla.novell.com/660546 https://bugzilla.novell.com/661605 https://bugzilla.novell.com/661945 https://bugzilla.novell.com/662031 https://bugzilla.novell.com/662192 https://bugzilla.novell.com/662202 https://bugzilla.novell.com/662212 https://bugzilla.novell.com/662335 https://bugzilla.novell.com/662340 https://bugzilla.novell.com/662360 https://bugzilla.novell.com/662673 https://bugzilla.novell.com/662722 https://bugzilla.novell.com/662800 https://bugzilla.novell.com/662931 https://bugzilla.novell.com/662945 https://bugzilla.novell.com/663537 https://bugzilla.novell.com/663582 https://bugzilla.novell.com/663706 https://bugzilla.novell.com/664149 https://bugzilla.novell.com/664463 https://bugzilla.novell.com/665480 https://bugzilla.novell.com/665499 https://bugzilla.novell.com/665524 https://bugzilla.novell.com/665663 https://bugzilla.novell.com/666012 https://bugzilla.novell.com/666893 https://bugzilla.novell.com/668545 https://bugzilla.novell.com/668633 https://bugzilla.novell.com/668929 https://bugzilla.novell.com/670129 https://bugzilla.novell.com/670577 https://bugzilla.novell.com/670864 https://bugzilla.novell.com/671256 https://bugzilla.novell.com/671274 https://bugzilla.novell.com/671483 https://bugzilla.novell.com/672292 https://bugzilla.novell.com/672492 https://bugzilla.novell.com/672499 https://bugzilla.novell.com/672524 https://bugzilla.novell.com/674735

1 0

openSUSE-SU-2011:0156-1 (critical): acroread security update
by opensuse-security＠opensuse.org 05 Mar '11

05 Mar '11

openSUSE Security Update: acroread security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0156-1 Rating: critical References: #669550 Cross-References: CVE-2010-4091 CVE-2011-0558 CVE-2011-0559 CVE-2011-0560 CVE-2011-0561 CVE-2011-0562 CVE-2011-0563 CVE-2011-0565 CVE-2011-0566 CVE-2011-0567 CVE-2011-0570 CVE-2011-0571 CVE-2011-0572 CVE-2011-0573 CVE-2011-0574 CVE-2011-0575 CVE-2011-0577 CVE-2011-0578 CVE-2011-0585 CVE-2011-0586 CVE-2011-0587 CVE-2011-0588 CVE-2011-0589 CVE-2011-0590 CVE-2011-0591 CVE-2011-0592 CVE-2011-0593 CVE-2011-0594 CVE-2011-0595 CVE-2011-0596 CVE-2011-0598 CVE-2011-0599 CVE-2011-0600 CVE-2011-0602 CVE-2011-0603 CVE-2011-0604 CVE-2011-0606 CVE-2011-0607 CVE-2011-0608 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes 39 vulnerabilities is now available. It includes one version update. Description: Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code. acroread was updated to version 9.4.2 to address the issues. (CVE-2010-4091, CVE-2011-0562, CVE-2011-0563, CVE-2011-0565, CVE-2011-0566, CVE-2011-0567, CVE-2011-0570, CVE-2011-0585, CVE-2011-0586, CVE-2011-0587, CVE-2011-0588, CVE-2011-0589, CVE-2011-0590, CVE-2011-0591, CVE-2011-0592, CVE-2011-0593, CVE-2011-0594, CVE-2011-0595, CVE-2011-0596, CVE-2011-0598, CVE-2011-0599, CVE-2011-0600, CVE-2011-0602, CVE-2011-0603, CVE-2011-0604, CVE-2011-0606, CVE-2011-0558, CVE-2011-0559, CVE-2011-0560, CVE-2011-0561, CVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574, CVE-2011-0575, CVE-2011-0577, CVE-2011-0578, CVE-2011-0607, CVE-2011-0608) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch acroread-4078 - openSUSE 11.2: zypper in -t patch acroread-4078 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586) [New Version: 9.4.2]: acroread-9.4.2-0.2.1 - openSUSE 11.2 (noarch) [New Version: 9.4.2]: acroread-cmaps-9.4.2-0.2.1 acroread-fonts-ja-9.4.2-0.2.1 acroread-fonts-ko-9.4.2-0.2.1 acroread-fonts-zh_CN-9.4.2-0.2.1 acroread-fonts-zh_TW-9.4.2-0.2.1 - openSUSE 11.2 (i586) [New Version: 9.4.2]: acroread-9.4.2-0.2.1 References: http://support.novell.com/security/cve/CVE-2010-4091.html http://support.novell.com/security/cve/CVE-2011-0558.html http://support.novell.com/security/cve/CVE-2011-0559.html http://support.novell.com/security/cve/CVE-2011-0560.html http://support.novell.com/security/cve/CVE-2011-0561.html http://support.novell.com/security/cve/CVE-2011-0562.html http://support.novell.com/security/cve/CVE-2011-0563.html http://support.novell.com/security/cve/CVE-2011-0565.html http://support.novell.com/security/cve/CVE-2011-0566.html http://support.novell.com/security/cve/CVE-2011-0567.html http://support.novell.com/security/cve/CVE-2011-0570.html http://support.novell.com/security/cve/CVE-2011-0571.html http://support.novell.com/security/cve/CVE-2011-0572.html http://support.novell.com/security/cve/CVE-2011-0573.html http://support.novell.com/security/cve/CVE-2011-0574.html http://support.novell.com/security/cve/CVE-2011-0575.html http://support.novell.com/security/cve/CVE-2011-0577.html http://support.novell.com/security/cve/CVE-2011-0578.html http://support.novell.com/security/cve/CVE-2011-0585.html http://support.novell.com/security/cve/CVE-2011-0586.html http://support.novell.com/security/cve/CVE-2011-0587.html http://support.novell.com/security/cve/CVE-2011-0588.html http://support.novell.com/security/cve/CVE-2011-0589.html http://support.novell.com/security/cve/CVE-2011-0590.html http://support.novell.com/security/cve/CVE-2011-0591.html http://support.novell.com/security/cve/CVE-2011-0592.html http://support.novell.com/security/cve/CVE-2011-0593.html http://support.novell.com/security/cve/CVE-2011-0594.html http://support.novell.com/security/cve/CVE-2011-0595.html http://support.novell.com/security/cve/CVE-2011-0596.html http://support.novell.com/security/cve/CVE-2011-0598.html http://support.novell.com/security/cve/CVE-2011-0599.html http://support.novell.com/security/cve/CVE-2011-0600.html http://support.novell.com/security/cve/CVE-2011-0602.html http://support.novell.com/security/cve/CVE-2011-0603.html http://support.novell.com/security/cve/CVE-2011-0604.html http://support.novell.com/security/cve/CVE-2011-0606.html http://support.novell.com/security/cve/CVE-2011-0607.html http://support.novell.com/security/cve/CVE-2011-0608.html https://bugzilla.novell.com/669550

1 0

openSUSE-SU-2011:0155-1 (moderate): java-1_6_0-openjdk: security update
by opensuse-security＠opensuse.org 05 Mar '11

05 Mar '11

openSUSE Security Update: java-1_6_0-openjdk: security update ______________________________________________________________________________ Announcement ID: openSUSE-SU-2011:0155-1 Rating: moderate References: #671714 Cross-References: CVE-2010-4448 CVE-2010-4450 CVE-2010-4465 CVE-2010-4469 CVE-2010-4470 CVE-2010-4471 CVE-2010-4472 CVE-2011-0706 Affected Products: openSUSE 11.3 openSUSE 11.2 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: Multiple vulnerabilities were fixed in java-1_6_0-openjdk: - CVE-2010-4448: CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N): DNS cache poisoning by untrusted applets - CVE-2010-4450: CVSS v2 Base Score: 3.7 (AV:L/AC:H/Au:N/C:P/I:P/A:P): Launcher incorrect processing of empty library path entries - CVE-2010-4465: CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P): Swing timer-based security manager bypass - CVE-2010-4469: CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P): Hotspot backward jsr heap corruption - CVE-2010-4470: CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P): JAXP untrusted component state manipulation - CVE-2010-4471: CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N): Java2D font-related system property leak - CVE-2010-4472: CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:P/I:N/A:N): Untrusted code allowed to replace DSIG/C14N implementation - CVE-2011-0706: CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P): Permissions, Privileges, and Access Control (CWE-264) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.3: zypper in -t patch java-1_6_0-openjdk-4038 - openSUSE 11.2: zypper in -t patch java-1_6_0-openjdk-4038 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.3 (i586 x86_64): java-1_6_0-openjdk-1.6.0.0_b20.1.9.7-1.2.1 java-1_6_0-openjdk-devel-1.6.0.0_b20.1.9.7-1.2.1 java-1_6_0-openjdk-plugin-1.6.0.0_b20.1.9.7-1.2.1 - openSUSE 11.3 (noarch): java-1_6_0-openjdk-demo-1.6.0.0_b20.1.9.7-1.2.1 java-1_6_0-openjdk-javadoc-1.6.0.0_b20.1.9.7-1.2.1 java-1_6_0-openjdk-src-1.6.0.0_b20.1.9.7-1.2.1 - openSUSE 11.2 (i586 x86_64): java-1_6_0-openjdk-1.6.0.0_b20.1.9.7-1.2.2 java-1_6_0-openjdk-devel-1.6.0.0_b20.1.9.7-1.2.2 java-1_6_0-openjdk-plugin-1.6.0.0_b20.1.9.7-1.2.2 - openSUSE 11.2 (noarch): java-1_6_0-openjdk-demo-1.6.0.0_b20.1.9.7-1.2.2 java-1_6_0-openjdk-javadoc-1.6.0.0_b20.1.9.7-1.2.2 java-1_6_0-openjdk-src-1.6.0.0_b20.1.9.7-1.2.2 References: http://support.novell.com/security/cve/CVE-2010-4448.html http://support.novell.com/security/cve/CVE-2010-4450.html http://support.novell.com/security/cve/CVE-2010-4465.html http://support.novell.com/security/cve/CVE-2010-4469.html http://support.novell.com/security/cve/CVE-2010-4470.html http://support.novell.com/security/cve/CVE-2010-4471.html http://support.novell.com/security/cve/CVE-2010-4472.html http://support.novell.com/security/cve/CVE-2011-0706.html https://bugzilla.novell.com/671714

1 0