January 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2017:0020-1: moderate: Security update for samba
by opensuse-security＠opensuse.org 04 Jan '17

04 Jan '17

openSUSE Security Update: Security update for samba ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0020-1 Rating: moderate References: #1001203 #1009085 #1014437 #1014441 #1014442 #975299 #986675 #991564 #994500 #997833 Cross-References: CVE-2016-2123 CVE-2016-2125 CVE-2016-2126 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves three vulnerabilities and has 7 fixes is now available. Description: This update for samba fixes the following issues: Security issues fixed: - CVE-2016-2125: Don't send delegated credentials to all servers. (bsc#1014441). - CVE-2016-2126: Denial of service due to a client triggered crash in the winbindd parent process. (bsc#1014442). - CVE-2016-2123: Heap-based Buffer Overflow Remote Code Execution Vulnerability. (bsc#1014437). The component affected is not built in our packages. Non security issues fixed: - s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085) - Add doc changes for net ads --no-dns-updates switch; (bsc#991564) - Include vfstest in samba-test; (bsc#1001203). - s3/winbindd: using default domain with user(a)domain.com format fails (bsc#997833). - Fix illegal memory access after memory has been deleted (bsc#975299). - Fix bug in tevent poll backend causing winbind to loop tightly (bsc#994500). - Various fixes for spnego/ntlm (bsc#986675). This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-11=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): ctdb-4.2.4-24.1 ctdb-debuginfo-4.2.4-24.1 ctdb-devel-4.2.4-24.1 ctdb-tests-4.2.4-24.1 ctdb-tests-debuginfo-4.2.4-24.1 libdcerpc-atsvc-devel-4.2.4-24.1 libdcerpc-atsvc0-4.2.4-24.1 libdcerpc-atsvc0-debuginfo-4.2.4-24.1 libdcerpc-binding0-4.2.4-24.1 libdcerpc-binding0-debuginfo-4.2.4-24.1 libdcerpc-devel-4.2.4-24.1 libdcerpc-samr-devel-4.2.4-24.1 libdcerpc-samr0-4.2.4-24.1 libdcerpc-samr0-debuginfo-4.2.4-24.1 libdcerpc0-4.2.4-24.1 libdcerpc0-debuginfo-4.2.4-24.1 libgensec-devel-4.2.4-24.1 libgensec0-4.2.4-24.1 libgensec0-debuginfo-4.2.4-24.1 libndr-devel-4.2.4-24.1 libndr-krb5pac-devel-4.2.4-24.1 libndr-krb5pac0-4.2.4-24.1 libndr-krb5pac0-debuginfo-4.2.4-24.1 libndr-nbt-devel-4.2.4-24.1 libndr-nbt0-4.2.4-24.1 libndr-nbt0-debuginfo-4.2.4-24.1 libndr-standard-devel-4.2.4-24.1 libndr-standard0-4.2.4-24.1 libndr-standard0-debuginfo-4.2.4-24.1 libndr0-4.2.4-24.1 libndr0-debuginfo-4.2.4-24.1 libnetapi-devel-4.2.4-24.1 libnetapi0-4.2.4-24.1 libnetapi0-debuginfo-4.2.4-24.1 libregistry-devel-4.2.4-24.1 libregistry0-4.2.4-24.1 libregistry0-debuginfo-4.2.4-24.1 libsamba-credentials-devel-4.2.4-24.1 libsamba-credentials0-4.2.4-24.1 libsamba-credentials0-debuginfo-4.2.4-24.1 libsamba-hostconfig-devel-4.2.4-24.1 libsamba-hostconfig0-4.2.4-24.1 libsamba-hostconfig0-debuginfo-4.2.4-24.1 libsamba-passdb-devel-4.2.4-24.1 libsamba-passdb0-4.2.4-24.1 libsamba-passdb0-debuginfo-4.2.4-24.1 libsamba-policy-devel-4.2.4-24.1 libsamba-policy0-4.2.4-24.1 libsamba-policy0-debuginfo-4.2.4-24.1 libsamba-util-devel-4.2.4-24.1 libsamba-util0-4.2.4-24.1 libsamba-util0-debuginfo-4.2.4-24.1 libsamdb-devel-4.2.4-24.1 libsamdb0-4.2.4-24.1 libsamdb0-debuginfo-4.2.4-24.1 libsmbclient-devel-4.2.4-24.1 libsmbclient-raw-devel-4.2.4-24.1 libsmbclient-raw0-4.2.4-24.1 libsmbclient-raw0-debuginfo-4.2.4-24.1 libsmbclient0-4.2.4-24.1 libsmbclient0-debuginfo-4.2.4-24.1 libsmbconf-devel-4.2.4-24.1 libsmbconf0-4.2.4-24.1 libsmbconf0-debuginfo-4.2.4-24.1 libsmbldap-devel-4.2.4-24.1 libsmbldap0-4.2.4-24.1 libsmbldap0-debuginfo-4.2.4-24.1 libtevent-util-devel-4.2.4-24.1 libtevent-util0-4.2.4-24.1 libtevent-util0-debuginfo-4.2.4-24.1 libwbclient-devel-4.2.4-24.1 libwbclient0-4.2.4-24.1 libwbclient0-debuginfo-4.2.4-24.1 samba-4.2.4-24.1 samba-client-4.2.4-24.1 samba-client-debuginfo-4.2.4-24.1 samba-core-devel-4.2.4-24.1 samba-debuginfo-4.2.4-24.1 samba-debugsource-4.2.4-24.1 samba-libs-4.2.4-24.1 samba-libs-debuginfo-4.2.4-24.1 samba-pidl-4.2.4-24.1 samba-python-4.2.4-24.1 samba-python-debuginfo-4.2.4-24.1 samba-test-4.2.4-24.1 samba-test-debuginfo-4.2.4-24.1 samba-test-devel-4.2.4-24.1 samba-winbind-4.2.4-24.1 samba-winbind-debuginfo-4.2.4-24.1 - openSUSE Leap 42.1 (x86_64): libdcerpc-atsvc0-32bit-4.2.4-24.1 libdcerpc-atsvc0-debuginfo-32bit-4.2.4-24.1 libdcerpc-binding0-32bit-4.2.4-24.1 libdcerpc-binding0-debuginfo-32bit-4.2.4-24.1 libdcerpc-samr0-32bit-4.2.4-24.1 libdcerpc-samr0-debuginfo-32bit-4.2.4-24.1 libdcerpc0-32bit-4.2.4-24.1 libdcerpc0-debuginfo-32bit-4.2.4-24.1 libgensec0-32bit-4.2.4-24.1 libgensec0-debuginfo-32bit-4.2.4-24.1 libndr-krb5pac0-32bit-4.2.4-24.1 libndr-krb5pac0-debuginfo-32bit-4.2.4-24.1 libndr-nbt0-32bit-4.2.4-24.1 libndr-nbt0-debuginfo-32bit-4.2.4-24.1 libndr-standard0-32bit-4.2.4-24.1 libndr-standard0-debuginfo-32bit-4.2.4-24.1 libndr0-32bit-4.2.4-24.1 libndr0-debuginfo-32bit-4.2.4-24.1 libnetapi0-32bit-4.2.4-24.1 libnetapi0-debuginfo-32bit-4.2.4-24.1 libregistry0-32bit-4.2.4-24.1 libregistry0-debuginfo-32bit-4.2.4-24.1 libsamba-credentials0-32bit-4.2.4-24.1 libsamba-credentials0-debuginfo-32bit-4.2.4-24.1 libsamba-hostconfig0-32bit-4.2.4-24.1 libsamba-hostconfig0-debuginfo-32bit-4.2.4-24.1 libsamba-passdb0-32bit-4.2.4-24.1 libsamba-passdb0-debuginfo-32bit-4.2.4-24.1 libsamba-policy0-32bit-4.2.4-24.1 libsamba-policy0-debuginfo-32bit-4.2.4-24.1 libsamba-util0-32bit-4.2.4-24.1 libsamba-util0-debuginfo-32bit-4.2.4-24.1 libsamdb0-32bit-4.2.4-24.1 libsamdb0-debuginfo-32bit-4.2.4-24.1 libsmbclient-raw0-32bit-4.2.4-24.1 libsmbclient-raw0-debuginfo-32bit-4.2.4-24.1 libsmbclient0-32bit-4.2.4-24.1 libsmbclient0-debuginfo-32bit-4.2.4-24.1 libsmbconf0-32bit-4.2.4-24.1 libsmbconf0-debuginfo-32bit-4.2.4-24.1 libsmbldap0-32bit-4.2.4-24.1 libsmbldap0-debuginfo-32bit-4.2.4-24.1 libtevent-util0-32bit-4.2.4-24.1 libtevent-util0-debuginfo-32bit-4.2.4-24.1 libwbclient0-32bit-4.2.4-24.1 libwbclient0-debuginfo-32bit-4.2.4-24.1 samba-32bit-4.2.4-24.1 samba-client-32bit-4.2.4-24.1 samba-client-debuginfo-32bit-4.2.4-24.1 samba-debuginfo-32bit-4.2.4-24.1 samba-libs-32bit-4.2.4-24.1 samba-libs-debuginfo-32bit-4.2.4-24.1 samba-winbind-32bit-4.2.4-24.1 samba-winbind-debuginfo-32bit-4.2.4-24.1 - openSUSE Leap 42.1 (noarch): samba-doc-4.2.4-24.1 References: https://www.suse.com/security/cve/CVE-2016-2123.html https://www.suse.com/security/cve/CVE-2016-2125.html https://www.suse.com/security/cve/CVE-2016-2126.html https://bugzilla.suse.com/1001203 https://bugzilla.suse.com/1009085 https://bugzilla.suse.com/1014437 https://bugzilla.suse.com/1014441 https://bugzilla.suse.com/1014442 https://bugzilla.suse.com/975299 https://bugzilla.suse.com/986675 https://bugzilla.suse.com/991564 https://bugzilla.suse.com/994500 https://bugzilla.suse.com/997833

1 0

openSUSE-SU-2017:0016-1: important: Security update for dnsmasq
by opensuse-security＠opensuse.org 03 Jan '17

03 Jan '17

openSUSE Security Update: Security update for dnsmasq ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0016-1 Rating: important References: #983273 Cross-References: CVE-2015-8899 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for dnsmasq fixes the following issues: - CVE-2015-8899: Denial of service between local and remote dns entries (bsc#983273) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-10=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-10=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): dnsmasq-2.71-8.1 dnsmasq-debuginfo-2.71-8.1 dnsmasq-debugsource-2.71-8.1 dnsmasq-utils-2.71-8.1 dnsmasq-utils-debuginfo-2.71-8.1 - openSUSE Leap 42.1 (i586 x86_64): dnsmasq-2.71-9.1 dnsmasq-debuginfo-2.71-9.1 dnsmasq-debugsource-2.71-9.1 dnsmasq-utils-2.71-9.1 dnsmasq-utils-debuginfo-2.71-9.1 References: https://www.suse.com/security/cve/CVE-2015-8899.html https://bugzilla.suse.com/983273

1 0

openSUSE-SU-2017:0015-1: moderate: Security update for wget
by opensuse-security＠opensuse.org 03 Jan '17

03 Jan '17

openSUSE Security Update: Security update for wget ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0015-1 Rating: moderate References: #1005091 #1012677 #995964 Cross-References: CVE-2016-7098 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for wget fixes the following issues: Security issues fixed: - CVE-2016-7098: Fixed a potential race condition by creating files with .tmp ext and making them accessible to the current user only. (bsc#995964) Non security issues fixed: - bsc#1005091: Don't call xfree() on string returned by usr_error() - bsc#1012677: Add support for enforcing TLSv1.1 and TLSv1.2 (TLS 1.2 support was already present, but it was not enforcable). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-9=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-9=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): wget-1.14-6.1 wget-debuginfo-1.14-6.1 wget-debugsource-1.14-6.1 - openSUSE Leap 42.1 (i586 x86_64): wget-1.14-8.1 wget-debuginfo-1.14-8.1 wget-debugsource-1.14-8.1 References: https://www.suse.com/security/cve/CVE-2016-7098.html https://bugzilla.suse.com/1005091 https://bugzilla.suse.com/1012677 https://bugzilla.suse.com/995964

1 0

openSUSE-RU-2017:0012-1: Recommended update for clamav-database
by maintenance＠opensuse.org 02 Jan '17

02 Jan '17

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0012-1 Rating: low References: Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh Jan 2nd. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-7=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-7=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): clamav-database-201701020005-22.1 - openSUSE Leap 42.1 (noarch): clamav-database-201701020005-201.1 References:

1 0

openSUSE-SU-2017:0009-1: moderate: Security update for GNU Health and it's dependencies
by opensuse-security＠opensuse.org 02 Jan '17

02 Jan '17

openSUSE Security Update: Security update for GNU Health and it's dependencies ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0009-1 Rating: moderate References: #1016817 #1016885 #1016886 Cross-References: CVE-2016-1241 CVE-2016-1242 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update provides version 3.0.5 of GNU Health including several fixes and improvements. - Update to ICD10 version 2016. - Fix error when printing prescription using review dates. - Fix error on summary report when no date of birth is assigned to the person. Additionally the following dependencies have been updated: tryton: - Update to 3.8.12. - Sanitize path in file open. (boo#1016886, CVE-2016-1242) - Prevent read of user password hash. (boo#1016885, CVE-2016-1241) trytond: - Update to 3.8.9. - Sanitize path in file open. (boo#1016886, CVE-2016-1242) - Prevent read of user password hash. (boo#1016885, CVE-2016-1241) trytond_account: - Update to 3.8.5. trytond_account_invoice: - Update to 3.8.4. trytond_stock: - Update to 3.8.4. trytond_stock_lot: - Update to 3.8.1. porteus: - Update to 3.8.5. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-6=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): gnuhealth-3.0.5-3.1 proteus-3.8.5-3.1 tryton-3.8.12-3.1 trytond-3.8.9-4.1 trytond_account-3.8.5-3.1 trytond_account_invoice-3.8.4-3.1 trytond_stock-3.8.4-3.1 trytond_stock_lot-3.8.1-3.1 References: https://www.suse.com/security/cve/CVE-2016-1241.html https://www.suse.com/security/cve/CVE-2016-1242.html https://bugzilla.suse.com/1016817 https://bugzilla.suse.com/1016885 https://bugzilla.suse.com/1016886

1 0

openSUSE-SU-2017:0008-1: important: Security update for xen
by opensuse-security＠opensuse.org 02 Jan '17

02 Jan '17

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0008-1 Rating: important References: #1000106 #1000195 #1002496 #1003030 #1003032 #1004016 #1005004 #1005005 #1007157 #1007160 #1009100 #1009103 #1009104 #1009107 #1009109 #1009111 #1011652 #1012651 #1014298 #1016340 #953518 Cross-References: CVE-2016-10013 CVE-2016-10024 CVE-2016-7777 CVE-2016-7908 CVE-2016-7909 CVE-2016-8576 CVE-2016-8667 CVE-2016-8669 CVE-2016-8909 CVE-2016-8910 CVE-2016-9379 CVE-2016-9380 CVE-2016-9381 CVE-2016-9382 CVE-2016-9383 CVE-2016-9385 CVE-2016-9386 CVE-2016-9637 CVE-2016-9932 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that solves 19 vulnerabilities and has two fixes is now available. Description: This updates xen to version 4.4.4_06 to fix the following issues: - An unprivileged user in a guest could gain guest could escalate privilege to that of the guest kernel, if it had could invoke the instruction emulator. Only 64-bit x86 HVM guest were affected. Linux guest have not been vulnerable. (boo#1016340, CVE-2016-10013) - An unprivileged user in a 64 bit x86 guest could gain information from the host, crash the host or gain privilege of the host (boo#1009107, CVE-2016-9383) - An unprivileged guest process could (unintentionally or maliciously) obtain or ocorrupt sensitive information of other programs in the same guest. Only x86 HVM guests have been affected. The attacker needs to be able to trigger the Xen instruction emulator. (boo#1000106, CVE-2016-7777) - A guest on x86 systems could read small parts of hypervisor stack data (boo#1012651, CVE-2016-9932) - A malicious guest kernel could hang or crash the host system (boo#1014298, CVE-2016-10024) - A malicious guest administrator could escalate their privilege to that of the host. Only affects x86 HVM guests using qemu older version 1.6.0 or using the qemu-xen-traditional. (boo#1011652, CVE-2016-9637) - An unprivileged guest user could escalate privilege to that of the guest administrator on x86 HVM guests, especially on Intel CPUs (boo#1009100, CVE-2016-9386) - An unprivileged guest user could escalate privilege to that of the guest administrator (on AMD CPUs) or crash the system (on Intel CPUs) on 32-bit x86 HVM guests. Only guest operating systems that allowed a new task to start in VM86 mode were affected. (boo#1009103, CVE-2016-9382) - A malicious guest administrator could crash the host on x86 PV guests only (boo#1009104, CVE-2016-9385) - A malicious guest administrator could get privilege of the host emulator process on x86 HVM guests. (boo#1009109, CVE-2016-9381) - A vulnerability in pygrub allowed a malicious guest administrator to obtain the contents of sensitive host files, or even delete those files (boo#1009111, CVE-2016-9379, CVE-2016-9380) - A privileged guest user could cause an infinite loop in the RTL8139 ethernet emulation to consume CPU cycles on the host, causing a DoS situation (boo#1007157, CVE-2016-8910) - A privileged guest user could cause an infinite loop in the intel-hda sound emulation to consume CPU cycles on the host, causing a DoS situation (boo#1007160, CVE-2016-8909) - A privileged guest user could cause a crash of the emulator process on the host by exploiting a divide by zero vulnerability of the JAZZ RC4030 chipset emulation (boo#1005004 CVE-2016-8667) - A privileged guest user could cause a crash of the emulator process on the host by exploiting a divide by zero issue of the 16550A UART emulation (boo#1005005, CVE-2016-8669) - A privileged guest user could cause an infinite loop in the USB xHCI emulation, causing a DoS situation on the host (boo#1004016, CVE-2016-8576) - A privileged guest user could cause an infinite loop in the ColdFire Fash Ethernet Controller emulation, causing a DoS situation on the host (boo#1003030, CVE-2016-7908) - A privileged guest user could cause an infinite loop in the AMD PC-Net II emulation, causing a DoS situation on the host (boo#1003032, CVE-2016-7909) - Cause a reload of clvm in the block-dmmd script to avoid a blocking lvchange call (boo#1002496) - Also unplug SCSI disks in qemu-xen-traditional for upstream unplug protocol. Before a single SCSI storage devices added to HVM guests could appear multiple times in the guest. (boo#953518) - Fix a kernel panic / black screen when trying to boot a XEN kernel on some UEFI firmwares (boo#1000195) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2017-5=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): xen-debugsource-4.4.4_06-58.1 xen-devel-4.4.4_06-58.1 xen-libs-4.4.4_06-58.1 xen-libs-debuginfo-4.4.4_06-58.1 xen-tools-domU-4.4.4_06-58.1 xen-tools-domU-debuginfo-4.4.4_06-58.1 - openSUSE 13.2 (x86_64): xen-4.4.4_06-58.1 xen-doc-html-4.4.4_06-58.1 xen-kmp-default-4.4.4_06_k3.16.7_53-58.1 xen-kmp-default-debuginfo-4.4.4_06_k3.16.7_53-58.1 xen-kmp-desktop-4.4.4_06_k3.16.7_53-58.1 xen-kmp-desktop-debuginfo-4.4.4_06_k3.16.7_53-58.1 xen-libs-32bit-4.4.4_06-58.1 xen-libs-debuginfo-32bit-4.4.4_06-58.1 xen-tools-4.4.4_06-58.1 xen-tools-debuginfo-4.4.4_06-58.1 References: https://www.suse.com/security/cve/CVE-2016-10013.html https://www.suse.com/security/cve/CVE-2016-10024.html https://www.suse.com/security/cve/CVE-2016-7777.html https://www.suse.com/security/cve/CVE-2016-7908.html https://www.suse.com/security/cve/CVE-2016-7909.html https://www.suse.com/security/cve/CVE-2016-8576.html https://www.suse.com/security/cve/CVE-2016-8667.html https://www.suse.com/security/cve/CVE-2016-8669.html https://www.suse.com/security/cve/CVE-2016-8909.html https://www.suse.com/security/cve/CVE-2016-8910.html https://www.suse.com/security/cve/CVE-2016-9379.html https://www.suse.com/security/cve/CVE-2016-9380.html https://www.suse.com/security/cve/CVE-2016-9381.html https://www.suse.com/security/cve/CVE-2016-9382.html https://www.suse.com/security/cve/CVE-2016-9383.html https://www.suse.com/security/cve/CVE-2016-9385.html https://www.suse.com/security/cve/CVE-2016-9386.html https://www.suse.com/security/cve/CVE-2016-9637.html https://www.suse.com/security/cve/CVE-2016-9932.html https://bugzilla.suse.com/1000106 https://bugzilla.suse.com/1000195 https://bugzilla.suse.com/1002496 https://bugzilla.suse.com/1003030 https://bugzilla.suse.com/1003032 https://bugzilla.suse.com/1004016 https://bugzilla.suse.com/1005004 https://bugzilla.suse.com/1005005 https://bugzilla.suse.com/1007157 https://bugzilla.suse.com/1007160 https://bugzilla.suse.com/1009100 https://bugzilla.suse.com/1009103 https://bugzilla.suse.com/1009104 https://bugzilla.suse.com/1009107 https://bugzilla.suse.com/1009109 https://bugzilla.suse.com/1009111 https://bugzilla.suse.com/1011652 https://bugzilla.suse.com/1012651 https://bugzilla.suse.com/1014298 https://bugzilla.suse.com/1016340 https://bugzilla.suse.com/953518

1 0

openSUSE-SU-2017:0007-1: important: Security update for xen
by opensuse-security＠opensuse.org 02 Jan '17

02 Jan '17

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0007-1 Rating: important References: #1000106 #1002496 #1003030 #1003032 #1003870 #1004016 #1005004 #1005005 #1007157 #1007160 #1009100 #1009103 #1009104 #1009107 #1009108 #1009109 #1009111 #1011652 #1012651 #1013657 #1013668 #1014298 #1016340 Cross-References: CVE-2016-10013 CVE-2016-10024 CVE-2016-7777 CVE-2016-7908 CVE-2016-7909 CVE-2016-7995 CVE-2016-8576 CVE-2016-8667 CVE-2016-8669 CVE-2016-8909 CVE-2016-8910 CVE-2016-9101 CVE-2016-9377 CVE-2016-9378 CVE-2016-9379 CVE-2016-9380 CVE-2016-9381 CVE-2016-9382 CVE-2016-9383 CVE-2016-9385 CVE-2016-9386 CVE-2016-9637 CVE-2016-9776 CVE-2016-9932 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 24 vulnerabilities is now available. Description: This updates xen to version 4.5.5 to fix the following issues: - An unprivileged user in a guest could gain guest could escalate privilege to that of the guest kernel, if it had could invoke the instruction emulator. Only 64-bit x86 HVM guest were affected. Linux guest have not been vulnerable. (boo#1016340, CVE-2016-10013) - An unprivileged user in a 64 bit x86 guest could gain information from the host, crash the host or gain privilege of the host (boo#1009107, CVE-2016-9383) - An unprivileged guest process could (unintentionally or maliciously) obtain or ocorrupt sensitive information of other programs in the same guest. Only x86 HVM guests have been affected. The attacker needs to be able to trigger the Xen instruction emulator. (boo#1000106, CVE-2016-7777) - A guest on x86 systems could read small parts of hypervisor stack data (boo#1012651, CVE-2016-9932) - A malicious guest kernel could hang or crash the host system (boo#1014298, CVE-2016-10024) - The epro100 emulated network device caused a memory leak in the host when unplugged in the guest. A privileged user in the guest could use this to cause a DoS on the host or potentially crash the guest process on the host (boo#1013668, CVE-2016-9101) - The ColdFire Fast Ethernet Controller was vulnerable to an infinite loop that could be trigged by a privileged user in the guest, leading to DoS (boo#1013657, CVE-2016-9776) - A malicious guest administrator could escalate their privilege to that of the host. Only affects x86 HVM guests using qemu older version 1.6.0 or using the qemu-xen-traditional. (boo#1011652, CVE-2016-9637) - An unprivileged guest user could escalate privilege to that of the guest administrator on x86 HVM guests, especially on Intel CPUs (boo#1009100, CVE-2016-9386) - An unprivileged guest user could escalate privilege to that of the guest administrator (on AMD CPUs) or crash the system (on Intel CPUs) on 32-bit x86 HVM guests. Only guest operating systems that allowed a new task to start in VM86 mode were affected. (boo#1009103, CVE-2016-9382) - A malicious guest administrator could crash the host on x86 PV guests only (boo#1009104, CVE-2016-9385) - An unprivileged guest user was able to crash the guest. (boo#1009108, CVE-2016-9377, CVE-2016-9378) - A malicious guest administrator could get privilege of the host emulator process on x86 HVM guests. (boo#1009109, CVE-2016-9381) - A vulnerability in pygrub allowed a malicious guest administrator to obtain the contents of sensitive host files, or even delete those files (boo#1009111, CVE-2016-9379, CVE-2016-9380) - A privileged guest user could cause an infinite loop in the RTL8139 ethernet emulation to consume CPU cycles on the host, causing a DoS situation (boo#1007157, CVE-2016-8910) - A privileged guest user could cause an infinite loop in the intel-hda sound emulation to consume CPU cycles on the host, causing a DoS situation (boo#1007160, CVE-2016-8909) - A privileged guest user could cause a crash of the emulator process on the host by exploiting a divide by zero vulnerability of the JAZZ RC4030 chipset emulation (boo#1005004 CVE-2016-8667) - A privileged guest user could cause a crash of the emulator process on the host by exploiting a divide by zero issue of the 16550A UART emulation (boo#1005005, CVE-2016-8669) - A privileged guest user could cause a memory leak in the USB EHCI emulation, causing a DoS situation on the host (boo#1003870, CVE-2016-7995) - A privileged guest user could cause an infinite loop in the USB xHCI emulation, causing a DoS situation on the host (boo#1004016, CVE-2016-8576) - A privileged guest user could cause an infinite loop in the ColdFire Fash Ethernet Controller emulation, causing a DoS situation on the host (boo#1003030, CVE-2016-7908) - A privileged guest user could cause an infinite loop in the AMD PC-Net II emulation, causing a DoS situation on the host (boo#1003032, CVE-2016-7909) - Cause a reload of clvm in the block-dmmd script to avoid a blocking lvchange call (boo#1002496) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-4=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): xen-debugsource-4.5.5_06-18.1 xen-devel-4.5.5_06-18.1 xen-libs-4.5.5_06-18.1 xen-libs-debuginfo-4.5.5_06-18.1 xen-tools-domU-4.5.5_06-18.1 xen-tools-domU-debuginfo-4.5.5_06-18.1 - openSUSE Leap 42.1 (x86_64): xen-4.5.5_06-18.1 xen-doc-html-4.5.5_06-18.1 xen-kmp-default-4.5.5_06_k4.1.36_41-18.1 xen-kmp-default-debuginfo-4.5.5_06_k4.1.36_41-18.1 xen-libs-32bit-4.5.5_06-18.1 xen-libs-debuginfo-32bit-4.5.5_06-18.1 xen-tools-4.5.5_06-18.1 xen-tools-debuginfo-4.5.5_06-18.1 References: https://www.suse.com/security/cve/CVE-2016-10013.html https://www.suse.com/security/cve/CVE-2016-10024.html https://www.suse.com/security/cve/CVE-2016-7777.html https://www.suse.com/security/cve/CVE-2016-7908.html https://www.suse.com/security/cve/CVE-2016-7909.html https://www.suse.com/security/cve/CVE-2016-7995.html https://www.suse.com/security/cve/CVE-2016-8576.html https://www.suse.com/security/cve/CVE-2016-8667.html https://www.suse.com/security/cve/CVE-2016-8669.html https://www.suse.com/security/cve/CVE-2016-8909.html https://www.suse.com/security/cve/CVE-2016-8910.html https://www.suse.com/security/cve/CVE-2016-9101.html https://www.suse.com/security/cve/CVE-2016-9377.html https://www.suse.com/security/cve/CVE-2016-9378.html https://www.suse.com/security/cve/CVE-2016-9379.html https://www.suse.com/security/cve/CVE-2016-9380.html https://www.suse.com/security/cve/CVE-2016-9381.html https://www.suse.com/security/cve/CVE-2016-9382.html https://www.suse.com/security/cve/CVE-2016-9383.html https://www.suse.com/security/cve/CVE-2016-9385.html https://www.suse.com/security/cve/CVE-2016-9386.html https://www.suse.com/security/cve/CVE-2016-9637.html https://www.suse.com/security/cve/CVE-2016-9776.html https://www.suse.com/security/cve/CVE-2016-9932.html https://bugzilla.suse.com/1000106 https://bugzilla.suse.com/1002496 https://bugzilla.suse.com/1003030 https://bugzilla.suse.com/1003032 https://bugzilla.suse.com/1003870 https://bugzilla.suse.com/1004016 https://bugzilla.suse.com/1005004 https://bugzilla.suse.com/1005005 https://bugzilla.suse.com/1007157 https://bugzilla.suse.com/1007160 https://bugzilla.suse.com/1009100 https://bugzilla.suse.com/1009103 https://bugzilla.suse.com/1009104 https://bugzilla.suse.com/1009107 https://bugzilla.suse.com/1009108 https://bugzilla.suse.com/1009109 https://bugzilla.suse.com/1009111 https://bugzilla.suse.com/1011652 https://bugzilla.suse.com/1012651 https://bugzilla.suse.com/1013657 https://bugzilla.suse.com/1013668 https://bugzilla.suse.com/1014298 https://bugzilla.suse.com/1016340

1 0

openSUSE-SU-2017:0006-1: moderate: Security update for gd
by opensuse-security＠opensuse.org 02 Jan '17

02 Jan '17

openSUSE Security Update: Security update for gd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0006-1 Rating: moderate References: #1015187 Cross-References: CVE-2016-9933 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for gd fixes the following issues: * CVE-2016-9933 possible stackoverflow on malicious truecolor images [bsc#1015187] This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-3=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-3=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): gd-2.1.0-13.1 gd-debuginfo-2.1.0-13.1 gd-debugsource-2.1.0-13.1 gd-devel-2.1.0-13.1 - openSUSE Leap 42.2 (x86_64): gd-32bit-2.1.0-13.1 gd-debuginfo-32bit-2.1.0-13.1 - openSUSE Leap 42.1 (i586 x86_64): gd-2.1.0-16.1 gd-debuginfo-2.1.0-16.1 gd-debugsource-2.1.0-16.1 gd-devel-2.1.0-16.1 - openSUSE Leap 42.1 (x86_64): gd-32bit-2.1.0-16.1 gd-debuginfo-32bit-2.1.0-16.1 References: https://www.suse.com/security/cve/CVE-2016-9933.html https://bugzilla.suse.com/1015187

1 0

openSUSE-SU-2017:0005-1: important: Security update for xen
by opensuse-security＠opensuse.org 02 Jan '17

02 Jan '17

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0005-1 Rating: important References: #1012651 #1014298 #1014300 #1016340 Cross-References: CVE-2016-10013 CVE-2016-10024 CVE-2016-10025 CVE-2016-9932 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for xen fixes the following issues: - A Mishandling of SYSCALL singlestep during emulation which could have lead to privilege escalation. (XSA-204, bsc#1016340, CVE-2016-10013) - CMPXCHG8B emulation failed to ignore operand size override which could have lead to information disclosure. (XSA-200, bsc#1012651, CVE-2016-9932) - PV guests may have been able to mask interrupts causing a Denial of Service. (XSA-202, bsc#1014298, CVE-2016-10024) - A missing NULL pointer check in VMFUNC emulation could lead to a hypervisor crash leading to a Denial of Servce. (XSA-203, bsc#1014300, CVE-2016-10025) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-2=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): xen-debugsource-4.7.1_04-6.1 xen-devel-4.7.1_04-6.1 xen-libs-4.7.1_04-6.1 xen-libs-debuginfo-4.7.1_04-6.1 xen-tools-domU-4.7.1_04-6.1 xen-tools-domU-debuginfo-4.7.1_04-6.1 - openSUSE Leap 42.2 (x86_64): xen-4.7.1_04-6.1 xen-doc-html-4.7.1_04-6.1 xen-libs-32bit-4.7.1_04-6.1 xen-libs-debuginfo-32bit-4.7.1_04-6.1 xen-tools-4.7.1_04-6.1 xen-tools-debuginfo-4.7.1_04-6.1 References: https://www.suse.com/security/cve/CVE-2016-10013.html https://www.suse.com/security/cve/CVE-2016-10024.html https://www.suse.com/security/cve/CVE-2016-10025.html https://www.suse.com/security/cve/CVE-2016-9932.html https://bugzilla.suse.com/1012651 https://bugzilla.suse.com/1014298 https://bugzilla.suse.com/1014300 https://bugzilla.suse.com/1016340

1 0

openSUSE-SU-2017:0002-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 02 Jan '17

02 Jan '17

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0002-1 Rating: important References: #1013038 #1014943 Cross-References: CVE-2016-9756 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: The openSUSE 42.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2016-9756: KVM: x86: drop error recovery in em_jmp_far and em_ret_far (bsc#1013038). The following non-security bugs were fixed: - scsi: megaraid_sas: fix macro MEGASAS_IS_LOGICAL to avoid regression (bsc#1014943). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-1=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): kernel-default-4.1.36-44.1 kernel-default-base-4.1.36-44.1 kernel-default-base-debuginfo-4.1.36-44.1 kernel-default-debuginfo-4.1.36-44.1 kernel-default-debugsource-4.1.36-44.1 kernel-default-devel-4.1.36-44.1 kernel-obs-build-4.1.36-44.3 kernel-obs-build-debugsource-4.1.36-44.3 kernel-obs-qa-4.1.36-44.1 kernel-syms-4.1.36-44.1 - openSUSE Leap 42.1 (i686 x86_64): kernel-debug-4.1.36-44.1 kernel-debug-base-4.1.36-44.1 kernel-debug-base-debuginfo-4.1.36-44.1 kernel-debug-debuginfo-4.1.36-44.1 kernel-debug-debugsource-4.1.36-44.1 kernel-debug-devel-4.1.36-44.1 kernel-debug-devel-debuginfo-4.1.36-44.1 kernel-ec2-4.1.36-44.1 kernel-ec2-base-4.1.36-44.1 kernel-ec2-base-debuginfo-4.1.36-44.1 kernel-ec2-debuginfo-4.1.36-44.1 kernel-ec2-debugsource-4.1.36-44.1 kernel-ec2-devel-4.1.36-44.1 kernel-pv-4.1.36-44.1 kernel-pv-base-4.1.36-44.1 kernel-pv-base-debuginfo-4.1.36-44.1 kernel-pv-debuginfo-4.1.36-44.1 kernel-pv-debugsource-4.1.36-44.1 kernel-pv-devel-4.1.36-44.1 kernel-vanilla-4.1.36-44.1 kernel-vanilla-debuginfo-4.1.36-44.1 kernel-vanilla-debugsource-4.1.36-44.1 kernel-vanilla-devel-4.1.36-44.1 kernel-xen-4.1.36-44.1 kernel-xen-base-4.1.36-44.1 kernel-xen-base-debuginfo-4.1.36-44.1 kernel-xen-debuginfo-4.1.36-44.1 kernel-xen-debugsource-4.1.36-44.1 kernel-xen-devel-4.1.36-44.1 - openSUSE Leap 42.1 (noarch): kernel-devel-4.1.36-44.1 kernel-docs-4.1.36-44.2 kernel-docs-html-4.1.36-44.2 kernel-docs-pdf-4.1.36-44.2 kernel-macros-4.1.36-44.1 kernel-source-4.1.36-44.1 kernel-source-vanilla-4.1.36-44.1 - openSUSE Leap 42.1 (i686): kernel-pae-4.1.36-44.1 kernel-pae-base-4.1.36-44.1 kernel-pae-base-debuginfo-4.1.36-44.1 kernel-pae-debuginfo-4.1.36-44.1 kernel-pae-debugsource-4.1.36-44.1 kernel-pae-devel-4.1.36-44.1 References: https://www.suse.com/security/cve/CVE-2016-9756.html https://bugzilla.suse.com/1013038 https://bugzilla.suse.com/1014943

1 0