September 2017 - openSUSE Security Announce

[security-announce] openSUSE-SU-2017:2604-1: important: Security update for spice
by opensuse-security＠opensuse.org 30 Sep '17

30 Sep '17

openSUSE Security Update: Security update for spice ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2604-1 Rating: important References: #1046779 Cross-References: CVE-2017-7506 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for spice fixes the following security issues: - CVE-2017-7506: Fixed an out-of-bounds memory access when processing specially crafted messages from authenticated attacker to the spice server resulting into crash and/or server memory leak (bsc#1046779). This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1110=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (x86_64): libspice-server-devel-0.12.8-3.1 libspice-server1-0.12.8-3.1 libspice-server1-debuginfo-0.12.8-3.1 spice-debugsource-0.12.8-3.1 References: https://www.suse.com/security/cve/CVE-2017-7506.html https://bugzilla.suse.com/1046779 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2017:2589-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 28 Sep '17

28 Sep '17

SUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: SUSE-SU-2017:2589-1 Rating: important References: #1052829 Cross-References: CVE-2017-7753 CVE-2017-7779 CVE-2017-7782 CVE-2017-7784 CVE-2017-7785 CVE-2017-7786 CVE-2017-7787 CVE-2017-7791 CVE-2017-7792 CVE-2017-7798 CVE-2017-7800 CVE-2017-7801 CVE-2017-7802 CVE-2017-7803 CVE-2017-7804 CVE-2017-7807 Affected Products: SUSE OpenStack Cloud 6 SUSE Linux Enterprise Software Development Kit 12-SP3 SUSE Linux Enterprise Software Development Kit 12-SP2 SUSE Linux Enterprise Server for SAP 12-SP1 SUSE Linux Enterprise Server for Raspberry Pi 12-SP2 SUSE Linux Enterprise Server 12-SP3 SUSE Linux Enterprise Server 12-SP2 SUSE Linux Enterprise Server 12-SP1-LTSS SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Desktop 12-SP3 SUSE Linux Enterprise Desktop 12-SP2 ______________________________________________________________________________ An update that fixes 16 vulnerabilities is now available. Description: This update for MozillaFirefox to ESR 52.3 fixes several issues. These security issues were fixed: - CVE-2017-7807 Domain hijacking through AppCache fallback (bsc#1052829) - CVE-2017-7791 Spoofing following page navigation with data: protocol and modal alerts (bsc#1052829) - CVE-2017-7792 Buffer overflow viewing certificates with an extremely long OID (bsc#1052829) - CVE-2017-7782 WindowsDllDetourPatcher allocates memory without DEP protections (bsc#1052829) - CVE-2017-7787 Same-origin policy bypass with iframes through page reloads (bsc#1052829) - CVE-2017-7786 Buffer overflow while painting non-displayable SVG (bsc#1052829) - CVE-2017-7785 Buffer overflow manipulating ARIA attributes in DOM (bsc#1052829) - CVE-2017-7784 Use-after-free with image observers (bsc#1052829) - CVE-2017-7753 Out-of-bounds read with cached style data and pseudo-elements (bsc#1052829) - CVE-2017-7798 XUL injection in the style editor in devtools (bsc#1052829) - CVE-2017-7804 Memory protection bypass through WindowsDllDetourPatcher (bsc#1052829) - CVE-2017-7779 Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3 (bsc#1052829) - CVE-2017-7800 Use-after-free in WebSockets during disconnection (bsc#1052829) - CVE-2017-7801 Use-after-free with marquee during window resizing (bsc#1052829) - CVE-2017-7802 Use-after-free resizing image elements (bsc#1052829) - CVE-2017-7803 CSP containing 'sandbox' improperly applied (bsc#1052829) Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud 6: zypper in -t patch SUSE-OpenStack-Cloud-6-2017-1603=1 - SUSE Linux Enterprise Software Development Kit 12-SP3: zypper in -t patch SUSE-SLE-SDK-12-SP3-2017-1603=1 - SUSE Linux Enterprise Software Development Kit 12-SP2: zypper in -t patch SUSE-SLE-SDK-12-SP2-2017-1603=1 - SUSE Linux Enterprise Server for SAP 12-SP1: zypper in -t patch SUSE-SLE-SAP-12-SP1-2017-1603=1 - SUSE Linux Enterprise Server for Raspberry Pi 12-SP2: zypper in -t patch SUSE-SLE-RPI-12-SP2-2017-1603=1 - SUSE Linux Enterprise Server 12-SP3: zypper in -t patch SUSE-SLE-SERVER-12-SP3-2017-1603=1 - SUSE Linux Enterprise Server 12-SP2: zypper in -t patch SUSE-SLE-SERVER-12-SP2-2017-1603=1 - SUSE Linux Enterprise Server 12-SP1-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-SP1-2017-1603=1 - SUSE Linux Enterprise Server 12-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-2017-1603=1 - SUSE Linux Enterprise Desktop 12-SP3: zypper in -t patch SUSE-SLE-DESKTOP-12-SP3-2017-1603=1 - SUSE Linux Enterprise Desktop 12-SP2: zypper in -t patch SUSE-SLE-DESKTOP-12-SP2-2017-1603=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE OpenStack Cloud 6 (x86_64): MozillaFirefox-52.3.0esr-109.3.1 MozillaFirefox-debuginfo-52.3.0esr-109.3.1 MozillaFirefox-debugsource-52.3.0esr-109.3.1 MozillaFirefox-devel-52.3.0esr-109.3.1 MozillaFirefox-translations-52.3.0esr-109.3.1 - SUSE Linux Enterprise Software Development Kit 12-SP3 (aarch64 ppc64le s390x x86_64): MozillaFirefox-debuginfo-52.3.0esr-109.3.1 MozillaFirefox-debugsource-52.3.0esr-109.3.1 MozillaFirefox-devel-52.3.0esr-109.3.1 - SUSE Linux Enterprise Software Development Kit 12-SP2 (aarch64 ppc64le s390x x86_64): MozillaFirefox-debuginfo-52.3.0esr-109.3.1 MozillaFirefox-debugsource-52.3.0esr-109.3.1 MozillaFirefox-devel-52.3.0esr-109.3.1 - SUSE Linux Enterprise Server for SAP 12-SP1 (ppc64le x86_64): MozillaFirefox-52.3.0esr-109.3.1 MozillaFirefox-debuginfo-52.3.0esr-109.3.1 MozillaFirefox-debugsource-52.3.0esr-109.3.1 MozillaFirefox-devel-52.3.0esr-109.3.1 MozillaFirefox-translations-52.3.0esr-109.3.1 - SUSE Linux Enterprise Server for Raspberry Pi 12-SP2 (aarch64): MozillaFirefox-52.3.0esr-109.3.1 MozillaFirefox-debuginfo-52.3.0esr-109.3.1 MozillaFirefox-debugsource-52.3.0esr-109.3.1 MozillaFirefox-translations-52.3.0esr-109.3.1 - SUSE Linux Enterprise Server 12-SP3 (aarch64 ppc64le s390x x86_64): MozillaFirefox-52.3.0esr-109.3.1 MozillaFirefox-debuginfo-52.3.0esr-109.3.1 MozillaFirefox-debugsource-52.3.0esr-109.3.1 MozillaFirefox-translations-52.3.0esr-109.3.1 - SUSE Linux Enterprise Server 12-SP2 (aarch64 ppc64le s390x x86_64): MozillaFirefox-52.3.0esr-109.3.1 MozillaFirefox-debuginfo-52.3.0esr-109.3.1 MozillaFirefox-debugsource-52.3.0esr-109.3.1 MozillaFirefox-translations-52.3.0esr-109.3.1 - SUSE Linux Enterprise Server 12-SP1-LTSS (ppc64le s390x x86_64): MozillaFirefox-52.3.0esr-109.3.1 MozillaFirefox-debuginfo-52.3.0esr-109.3.1 MozillaFirefox-debugsource-52.3.0esr-109.3.1 MozillaFirefox-devel-52.3.0esr-109.3.1 MozillaFirefox-translations-52.3.0esr-109.3.1 - SUSE Linux Enterprise Server 12-LTSS (ppc64le s390x x86_64): MozillaFirefox-52.3.0esr-109.3.1 MozillaFirefox-debuginfo-52.3.0esr-109.3.1 MozillaFirefox-debugsource-52.3.0esr-109.3.1 MozillaFirefox-devel-52.3.0esr-109.3.1 MozillaFirefox-translations-52.3.0esr-109.3.1 - SUSE Linux Enterprise Desktop 12-SP3 (x86_64): MozillaFirefox-52.3.0esr-109.3.1 MozillaFirefox-debuginfo-52.3.0esr-109.3.1 MozillaFirefox-debugsource-52.3.0esr-109.3.1 MozillaFirefox-translations-52.3.0esr-109.3.1 - SUSE Linux Enterprise Desktop 12-SP2 (x86_64): MozillaFirefox-52.3.0esr-109.3.1 MozillaFirefox-debuginfo-52.3.0esr-109.3.1 MozillaFirefox-debugsource-52.3.0esr-109.3.1 MozillaFirefox-translations-52.3.0esr-109.3.1 References: https://www.suse.com/security/cve/CVE-2017-7753.html https://www.suse.com/security/cve/CVE-2017-7779.html https://www.suse.com/security/cve/CVE-2017-7782.html https://www.suse.com/security/cve/CVE-2017-7784.html https://www.suse.com/security/cve/CVE-2017-7785.html https://www.suse.com/security/cve/CVE-2017-7786.html https://www.suse.com/security/cve/CVE-2017-7787.html https://www.suse.com/security/cve/CVE-2017-7791.html https://www.suse.com/security/cve/CVE-2017-7792.html https://www.suse.com/security/cve/CVE-2017-7798.html https://www.suse.com/security/cve/CVE-2017-7800.html https://www.suse.com/security/cve/CVE-2017-7801.html https://www.suse.com/security/cve/CVE-2017-7802.html https://www.suse.com/security/cve/CVE-2017-7803.html https://www.suse.com/security/cve/CVE-2017-7804.html https://www.suse.com/security/cve/CVE-2017-7807.html https://bugzilla.suse.com/1052829 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2017:2567-1: important: Security update for openjpeg2
by opensuse-security＠opensuse.org 26 Sep '17

26 Sep '17

openSUSE Security Update: Security update for openjpeg2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2567-1 Rating: important References: #1002414 #1007739 #1007740 #1007741 #1007742 #1007743 #1007744 #1007747 #1014543 #1014975 #979907 #997857 #999817 Cross-References: CVE-2015-8871 CVE-2016-7163 CVE-2016-7445 CVE-2016-8332 CVE-2016-9112 CVE-2016-9113 CVE-2016-9114 CVE-2016-9115 CVE-2016-9116 CVE-2016-9117 CVE-2016-9118 CVE-2016-9572 CVE-2016-9573 CVE-2016-9580 CVE-2016-9581 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes 15 vulnerabilities is now available. Description: This update for openjpeg2 fixes the following issues: * CVE-2016-9114: NULL Pointer Access in function imagetopnm of convert.c:1943(jp2) could lead to crash [bsc#1007740] * CVE-2016-9115: Heap Buffer Overflow in function imagetotga of convert.c(jp2) [bsc#1007741] * CVE-2016-9580, CVE-2016-9581: Possible Heap buffer overflow via integer overflow and infite loop [bsc#1014975] * CVE-2016-9117: NULL Pointer Access in function imagetopnm of convert.c(jp2):1289 [bsc#1007743] * CVE-2016-9118: Heap Buffer Overflow in function pnmtoimage of convert.c [bsc#1007744] * CVE-2016-9112: FPE(Floating Point Exception) in lib/openjp2/pi.c:523 [bsc#1007747] * CVE-2016-9116: NULL Pointer Access in function imagetopnm of convert.c:2226(jp2) [bsc#1007742] * CVE-2016-9113: NULL point dereference in function imagetobmp of convertbmp.c could lead to crash [bsc#1007739] * CVE-2016-9572 CVE-2016-9573: Insuficient check in imagetopnm() could lead to heap buffer overflow [bsc#1014543] * CVE-2016-8332: Malicious file in OpenJPEG JPEG2000 format could lead to code execution [bsc#1002414] * CVE-2016-7445: Null pointer dereference in convert.c could lead to crash [bsc#999817] * CVE 2016-7163: Integer Overflow could lead to remote code execution [bsc#997857] * CVE 2015-8871: Use-after-free in opj_j2k_write_mco function could lead to denial of service [bsc#979907] This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-1090=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): libopenjp2-7-2.1.0-5.1 libopenjp2-7-2.1.0-6.1 openjpeg2-2.1.0-5.1 openjpeg2-2.1.0-6.1 openjpeg2-devel-2.1.0-5.1 openjpeg2-devel-2.1.0-6.1 References: https://www.suse.com/security/cve/CVE-2015-8871.html https://www.suse.com/security/cve/CVE-2016-7163.html https://www.suse.com/security/cve/CVE-2016-7445.html https://www.suse.com/security/cve/CVE-2016-8332.html https://www.suse.com/security/cve/CVE-2016-9112.html https://www.suse.com/security/cve/CVE-2016-9113.html https://www.suse.com/security/cve/CVE-2016-9114.html https://www.suse.com/security/cve/CVE-2016-9115.html https://www.suse.com/security/cve/CVE-2016-9116.html https://www.suse.com/security/cve/CVE-2016-9117.html https://www.suse.com/security/cve/CVE-2016-9118.html https://www.suse.com/security/cve/CVE-2016-9572.html https://www.suse.com/security/cve/CVE-2016-9573.html https://www.suse.com/security/cve/CVE-2016-9580.html https://www.suse.com/security/cve/CVE-2016-9581.html https://bugzilla.suse.com/1002414 https://bugzilla.suse.com/1007739 https://bugzilla.suse.com/1007740 https://bugzilla.suse.com/1007741 https://bugzilla.suse.com/1007742 https://bugzilla.suse.com/1007743 https://bugzilla.suse.com/1007744 https://bugzilla.suse.com/1007747 https://bugzilla.suse.com/1014543 https://bugzilla.suse.com/1014975 https://bugzilla.suse.com/979907 https://bugzilla.suse.com/997857 https://bugzilla.suse.com/999817 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2017:2552-1: important: Security update for spice
by opensuse-security＠opensuse.org 22 Sep '17

22 Sep '17

SUSE Security Update: Security update for spice ______________________________________________________________________________ Announcement ID: SUSE-SU-2017:2552-1 Rating: important References: #1046779 Cross-References: CVE-2017-7506 Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP3 SUSE Linux Enterprise Server 12-SP3 SUSE Linux Enterprise Desktop 12-SP3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for spice fixes the following security issues: - CVE-2017-7506: Fixed an out-of-bounds memory access when processing specially crafted messages from authenticated attacker to the spice server resulting into crash and/or server memory leak (bsc#1046779). Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 12-SP3: zypper in -t patch SUSE-SLE-SDK-12-SP3-2017-1581=1 - SUSE Linux Enterprise Server 12-SP3: zypper in -t patch SUSE-SLE-SERVER-12-SP3-2017-1581=1 - SUSE Linux Enterprise Desktop 12-SP3: zypper in -t patch SUSE-SLE-DESKTOP-12-SP3-2017-1581=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 12-SP3 (aarch64 ppc64le s390x x86_64): libspice-server-devel-0.12.8-3.9 spice-debugsource-0.12.8-3.9 - SUSE Linux Enterprise Server 12-SP3 (aarch64 ppc64le s390x x86_64): libspice-server1-0.12.8-3.9 libspice-server1-debuginfo-0.12.8-3.9 spice-debugsource-0.12.8-3.9 - SUSE Linux Enterprise Desktop 12-SP3 (x86_64): libspice-server1-0.12.8-3.9 libspice-server1-debuginfo-0.12.8-3.9 spice-debugsource-0.12.8-3.9 References: https://www.suse.com/security/cve/CVE-2017-7506.html https://bugzilla.suse.com/1046779 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2017:2548-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 21 Sep '17

21 Sep '17

SUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: SUSE-SU-2017:2548-1 Rating: important References: #1057389 Cross-References: CVE-2017-1000251 Affected Products: SUSE Linux Enterprise Software Development Kit 11-SP4 SUSE Linux Enterprise Server 11-SP4 SUSE Linux Enterprise Server 11-EXTRA SUSE Linux Enterprise Debuginfo 11-SP4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The SUSE Linux Enterprise 11 SP4 kernel was updated to receive the following security fixes: - CVE-2017-1000251: The native Bluetooth stack in the Linux Kernel was vulnerable to a stack overflow while processing L2CAP configuration responses, resulting in a potential remote code execution vulnerability. [bnc#1057389] Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11-SP4: zypper in -t patch sdksp4-kernel-source-13286=1 - SUSE Linux Enterprise Server 11-SP4: zypper in -t patch slessp4-kernel-source-13286=1 - SUSE Linux Enterprise Server 11-EXTRA: zypper in -t patch slexsp3-kernel-source-13286=1 - SUSE Linux Enterprise Debuginfo 11-SP4: zypper in -t patch dbgsp4-kernel-source-13286=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11-SP4 (noarch): kernel-docs-3.0.101-108.10.2 - SUSE Linux Enterprise Server 11-SP4 (i586 ia64 ppc64 s390x x86_64): kernel-default-3.0.101-108.10.1 kernel-default-base-3.0.101-108.10.1 kernel-default-devel-3.0.101-108.10.1 kernel-source-3.0.101-108.10.1 kernel-syms-3.0.101-108.10.1 kernel-trace-3.0.101-108.10.1 kernel-trace-base-3.0.101-108.10.1 kernel-trace-devel-3.0.101-108.10.1 - SUSE Linux Enterprise Server 11-SP4 (i586 x86_64): kernel-ec2-3.0.101-108.10.1 kernel-ec2-base-3.0.101-108.10.1 kernel-ec2-devel-3.0.101-108.10.1 kernel-xen-3.0.101-108.10.1 kernel-xen-base-3.0.101-108.10.1 kernel-xen-devel-3.0.101-108.10.1 - SUSE Linux Enterprise Server 11-SP4 (ppc64): kernel-bigmem-3.0.101-108.10.1 kernel-bigmem-base-3.0.101-108.10.1 kernel-bigmem-devel-3.0.101-108.10.1 kernel-ppc64-3.0.101-108.10.1 kernel-ppc64-base-3.0.101-108.10.1 kernel-ppc64-devel-3.0.101-108.10.1 - SUSE Linux Enterprise Server 11-SP4 (s390x): kernel-default-man-3.0.101-108.10.1 - SUSE Linux Enterprise Server 11-SP4 (i586): kernel-pae-3.0.101-108.10.1 kernel-pae-base-3.0.101-108.10.1 kernel-pae-devel-3.0.101-108.10.1 - SUSE Linux Enterprise Server 11-EXTRA (i586 ia64 ppc64 s390x x86_64): kernel-default-extra-3.0.101-108.10.1 - SUSE Linux Enterprise Server 11-EXTRA (i586 x86_64): kernel-xen-extra-3.0.101-108.10.1 - SUSE Linux Enterprise Server 11-EXTRA (x86_64): kernel-trace-extra-3.0.101-108.10.1 - SUSE Linux Enterprise Server 11-EXTRA (ppc64): kernel-ppc64-extra-3.0.101-108.10.1 - SUSE Linux Enterprise Server 11-EXTRA (i586): kernel-pae-extra-3.0.101-108.10.1 - SUSE Linux Enterprise Debuginfo 11-SP4 (i586 ia64 ppc64 s390x x86_64): kernel-default-debuginfo-3.0.101-108.10.1 kernel-default-debugsource-3.0.101-108.10.1 kernel-trace-debuginfo-3.0.101-108.10.1 kernel-trace-debugsource-3.0.101-108.10.1 - SUSE Linux Enterprise Debuginfo 11-SP4 (i586 ia64 s390x x86_64): kernel-default-devel-debuginfo-3.0.101-108.10.1 kernel-trace-devel-debuginfo-3.0.101-108.10.1 - SUSE Linux Enterprise Debuginfo 11-SP4 (i586 x86_64): kernel-ec2-debuginfo-3.0.101-108.10.1 kernel-ec2-debugsource-3.0.101-108.10.1 kernel-xen-debuginfo-3.0.101-108.10.1 kernel-xen-debugsource-3.0.101-108.10.1 kernel-xen-devel-debuginfo-3.0.101-108.10.1 - SUSE Linux Enterprise Debuginfo 11-SP4 (ppc64): kernel-bigmem-debuginfo-3.0.101-108.10.1 kernel-bigmem-debugsource-3.0.101-108.10.1 kernel-ppc64-debuginfo-3.0.101-108.10.1 kernel-ppc64-debugsource-3.0.101-108.10.1 - SUSE Linux Enterprise Debuginfo 11-SP4 (i586): kernel-pae-debuginfo-3.0.101-108.10.1 kernel-pae-debugsource-3.0.101-108.10.1 kernel-pae-devel-debuginfo-3.0.101-108.10.1 References: https://www.suse.com/security/cve/CVE-2017-1000251.html https://bugzilla.suse.com/1057389 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2017:2541-1: important: Security update for xen
by opensuse-security＠opensuse.org 21 Sep '17

21 Sep '17

SUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: SUSE-SU-2017:2541-1 Rating: important References: #1002573 #1027519 #1032598 #1037413 #1046637 #1047675 #1048920 #1049578 #1051787 #1051788 #1052686 #1056278 #1056281 #1056282 Cross-References: CVE-2017-10664 CVE-2017-10806 CVE-2017-11334 CVE-2017-11434 CVE-2017-12135 CVE-2017-12137 CVE-2017-12855 CVE-2017-14316 CVE-2017-14317 CVE-2017-14319 Affected Products: SUSE Linux Enterprise Server for SAP 12 SUSE Linux Enterprise Server 12-LTSS ______________________________________________________________________________ An update that solves 10 vulnerabilities and has four fixes is now available. Description: This update for xen fixes several issues. These security issues were fixed: - CVE-2017-12135: Unbounded recursion in grant table code allowed a malicious guest to crash the host or potentially escalate privileges/leak information (XSA-226, bsc#1051787). - CVE-2017-12137: Incorrectly-aligned updates to pagetables allowed for privilege escalation (XSA-227, bsc#1051788). - CVE-2017-11334: The address_space_write_continue function in exec.c allowed local guest OS privileged users to cause a denial of service (out-of-bounds access and guest instance crash) by leveraging use of qemu_map_ram_ptr to access guest ram block area (bsc#1048920). - CVE-2017-11434: The dhcp_decode function in slirp/bootp.c allowed local guest OS users to cause a denial of service (out-of-bounds read) via a crafted DHCP options string (bsc#1049578). - CVE-2017-10806: Stack-based buffer overflow in hw/usb/redirect.c allowed local guest OS users to cause a denial of service via vectors related to logging debug messages (bsc#1047675). - CVE-2017-10664: qemu-nbd did not ignore SIGPIPE, which allowed remote attackers to cause a denial of service (daemon crash) by disconnecting during a server-to-client reply attempt (bsc#1046637). - CVE-2017-12855: Premature clearing of GTF_writing / GTF_reading lead to potentially leaking sensitive information (XSA-230, bsc#1052686). - CVE-2017-14316: Missing bound check in function `alloc_heap_pages` for an internal array allowed attackers using crafted hypercalls to execute arbitrary code within Xen (XSA-231, bsc#1056278) - CVE-2017-14317: A race in cxenstored may have cause a double-free allowind for DoS of the xenstored daemon (XSA-233, bsc#1056281). - CVE-2017-14319: An error while handling grant mappings allowed malicious or buggy x86 PV guest to escalate its privileges or crash the hypervisor (XSA-234, bsc#1056282). These non-security issues were fixed: - bsc#1002573: Optimized LVM functions in block-dmmd block-dmmd - bsc#1032598: Prevent removal of NVME devices - bsc#1037413: Support for newer intel cpu's, mwait-idle driver and skylake Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server for SAP 12: zypper in -t patch SUSE-SLE-SAP-12-2017-1576=1 - SUSE Linux Enterprise Server 12-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-2017-1576=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Server for SAP 12 (x86_64): xen-4.4.4_22-22.51.2 xen-debugsource-4.4.4_22-22.51.2 xen-doc-html-4.4.4_22-22.51.2 xen-kmp-default-4.4.4_22_k3.12.61_52.89-22.51.2 xen-kmp-default-debuginfo-4.4.4_22_k3.12.61_52.89-22.51.2 xen-libs-32bit-4.4.4_22-22.51.2 xen-libs-4.4.4_22-22.51.2 xen-libs-debuginfo-32bit-4.4.4_22-22.51.2 xen-libs-debuginfo-4.4.4_22-22.51.2 xen-tools-4.4.4_22-22.51.2 xen-tools-debuginfo-4.4.4_22-22.51.2 xen-tools-domU-4.4.4_22-22.51.2 xen-tools-domU-debuginfo-4.4.4_22-22.51.2 - SUSE Linux Enterprise Server 12-LTSS (x86_64): xen-4.4.4_22-22.51.2 xen-debugsource-4.4.4_22-22.51.2 xen-doc-html-4.4.4_22-22.51.2 xen-kmp-default-4.4.4_22_k3.12.61_52.89-22.51.2 xen-kmp-default-debuginfo-4.4.4_22_k3.12.61_52.89-22.51.2 xen-libs-32bit-4.4.4_22-22.51.2 xen-libs-4.4.4_22-22.51.2 xen-libs-debuginfo-32bit-4.4.4_22-22.51.2 xen-libs-debuginfo-4.4.4_22-22.51.2 xen-tools-4.4.4_22-22.51.2 xen-tools-debuginfo-4.4.4_22-22.51.2 xen-tools-domU-4.4.4_22-22.51.2 xen-tools-domU-debuginfo-4.4.4_22-22.51.2 References: https://www.suse.com/security/cve/CVE-2017-10664.html https://www.suse.com/security/cve/CVE-2017-10806.html https://www.suse.com/security/cve/CVE-2017-11334.html https://www.suse.com/security/cve/CVE-2017-11434.html https://www.suse.com/security/cve/CVE-2017-12135.html https://www.suse.com/security/cve/CVE-2017-12137.html https://www.suse.com/security/cve/CVE-2017-12855.html https://www.suse.com/security/cve/CVE-2017-14316.html https://www.suse.com/security/cve/CVE-2017-14317.html https://www.suse.com/security/cve/CVE-2017-14319.html https://bugzilla.suse.com/1002573 https://bugzilla.suse.com/1027519 https://bugzilla.suse.com/1032598 https://bugzilla.suse.com/1037413 https://bugzilla.suse.com/1046637 https://bugzilla.suse.com/1047675 https://bugzilla.suse.com/1048920 https://bugzilla.suse.com/1049578 https://bugzilla.suse.com/1051787 https://bugzilla.suse.com/1051788 https://bugzilla.suse.com/1052686 https://bugzilla.suse.com/1056278 https://bugzilla.suse.com/1056281 https://bugzilla.suse.com/1056282 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2017:2540-1: important: Security update for xen
by opensuse-security＠opensuse.org 21 Sep '17

21 Sep '17

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2540-1 Rating: important References: #1027519 #1055695 #1056278 #1056280 #1056281 #1056282 Cross-References: CVE-2017-14316 CVE-2017-14317 CVE-2017-14318 CVE-2017-14319 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves four vulnerabilities and has two fixes is now available. Description: This update for xen fixes several issues. These security issues were fixed: - CVE-2017-14316: Missing bound check in function `alloc_heap_pages` for an internal array allowed attackers using crafted hypercalls to execute arbitrary code within Xen (XSA-231, bsc#1056278) - CVE-2017-14318: The function __gnttab_cache_flush missed a check for grant tables, allowing a malicious guest to crash the host or for x86 PV guests to potentially escalate privileges (XSA-232, bsc#1056280) - CVE-2017-14317: A race in cxenstored may have cause a double-free allowind for DoS of the xenstored daemon (XSA-233, bsc#1056281). - CVE-2017-14319: An error while handling grant mappings allowed malicious or buggy x86 PV guest to escalate its privileges or crash the hypervisor (XSA-234, bsc#1056282). These non-security issues were fixed: - bsc#1055695: Fixed restoring updates for HVM guests for ballooned domUs This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1080=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): xen-debugsource-4.7.3_04-11.15.1 xen-devel-4.7.3_04-11.15.1 xen-libs-4.7.3_04-11.15.1 xen-libs-debuginfo-4.7.3_04-11.15.1 xen-tools-domU-4.7.3_04-11.15.1 xen-tools-domU-debuginfo-4.7.3_04-11.15.1 - openSUSE Leap 42.2 (x86_64): xen-4.7.3_04-11.15.1 xen-doc-html-4.7.3_04-11.15.1 xen-libs-32bit-4.7.3_04-11.15.1 xen-libs-debuginfo-32bit-4.7.3_04-11.15.1 xen-tools-4.7.3_04-11.15.1 xen-tools-debuginfo-4.7.3_04-11.15.1 References: https://www.suse.com/security/cve/CVE-2017-14316.html https://www.suse.com/security/cve/CVE-2017-14317.html https://www.suse.com/security/cve/CVE-2017-14318.html https://www.suse.com/security/cve/CVE-2017-14319.html https://bugzilla.suse.com/1027519 https://bugzilla.suse.com/1055695 https://bugzilla.suse.com/1056278 https://bugzilla.suse.com/1056280 https://bugzilla.suse.com/1056281 https://bugzilla.suse.com/1056282 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2017:2535-1: important: Security update for emacs
by opensuse-security＠opensuse.org 21 Sep '17

21 Sep '17

openSUSE Security Update: Security update for emacs ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2535-1 Rating: important References: #1058425 Cross-References: CVE-2017-14482 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for emacs fixes one issues. This security issue was fixed: - CVE-2017-14482: Remote code execution via mails with "Content-Type: text/enriched" (bsc#1058425) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1078=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1078=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): emacs-24.3-28.1 emacs-debuginfo-24.3-28.1 emacs-debugsource-24.3-28.1 emacs-nox-24.3-28.1 emacs-nox-debuginfo-24.3-28.1 emacs-x11-24.3-28.1 emacs-x11-debuginfo-24.3-28.1 etags-24.3-28.1 etags-debuginfo-24.3-28.1 - openSUSE Leap 42.3 (noarch): emacs-el-24.3-28.1 emacs-info-24.3-28.1 - openSUSE Leap 42.2 (i586 x86_64): emacs-24.3-24.6.1 emacs-debuginfo-24.3-24.6.1 emacs-debugsource-24.3-24.6.1 emacs-nox-24.3-24.6.1 emacs-nox-debuginfo-24.3-24.6.1 emacs-x11-24.3-24.6.1 emacs-x11-debuginfo-24.3-24.6.1 etags-24.3-24.6.1 etags-debuginfo-24.3-24.6.1 - openSUSE Leap 42.2 (noarch): emacs-el-24.3-24.6.1 emacs-info-24.3-24.6.1 References: https://www.suse.com/security/cve/CVE-2017-14482.html https://bugzilla.suse.com/1058425 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2017:2534-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 20 Sep '17

20 Sep '17

SUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: SUSE-SU-2017:2534-1 Rating: important References: #1057389 Cross-References: CVE-2017-1000251 Affected Products: SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Module for Public Cloud 12 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The SUSE Linux Enterprise 12 GA kernel was updated to receive the following security fixes: - CVE-2017-1000251: The native Bluetooth stack in the Linux Kernel was vulnerable to a stack overflow while processing L2CAP configuration responses, resulting in a potential remote denial-of-service vulnerability but no remote code execution due to use of CONFIG_CC_STACKPROTECTOR. [bnc#1057389] Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 12-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-2017-1569=1 - SUSE Linux Enterprise Module for Public Cloud 12: zypper in -t patch SUSE-SLE-Module-Public-Cloud-12-2017-1569=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Server 12-LTSS (ppc64le s390x x86_64): kernel-default-3.12.61-52.92.1 kernel-default-base-3.12.61-52.92.1 kernel-default-base-debuginfo-3.12.61-52.92.1 kernel-default-debuginfo-3.12.61-52.92.1 kernel-default-debugsource-3.12.61-52.92.1 kernel-default-devel-3.12.61-52.92.1 kernel-syms-3.12.61-52.92.1 - SUSE Linux Enterprise Server 12-LTSS (x86_64): kernel-xen-3.12.61-52.92.1 kernel-xen-base-3.12.61-52.92.1 kernel-xen-base-debuginfo-3.12.61-52.92.1 kernel-xen-debuginfo-3.12.61-52.92.1 kernel-xen-debugsource-3.12.61-52.92.1 kernel-xen-devel-3.12.61-52.92.1 kgraft-patch-3_12_61-52_92-default-1-2.1 kgraft-patch-3_12_61-52_92-xen-1-2.1 - SUSE Linux Enterprise Server 12-LTSS (noarch): kernel-devel-3.12.61-52.92.1 kernel-macros-3.12.61-52.92.1 kernel-source-3.12.61-52.92.1 - SUSE Linux Enterprise Server 12-LTSS (s390x): kernel-default-man-3.12.61-52.92.1 - SUSE Linux Enterprise Module for Public Cloud 12 (x86_64): kernel-ec2-3.12.61-52.92.1 kernel-ec2-debuginfo-3.12.61-52.92.1 kernel-ec2-debugsource-3.12.61-52.92.1 kernel-ec2-devel-3.12.61-52.92.1 kernel-ec2-extra-3.12.61-52.92.1 kernel-ec2-extra-debuginfo-3.12.61-52.92.1 References: https://www.suse.com/security/cve/CVE-2017-1000251.html https://bugzilla.suse.com/1057389 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2017:2532-1: important: Security update for emacs
by opensuse-security＠opensuse.org 20 Sep '17

20 Sep '17

SUSE Security Update: Security update for emacs ______________________________________________________________________________ Announcement ID: SUSE-SU-2017:2532-1 Rating: important References: #1058425 Cross-References: CVE-2017-14482 Affected Products: SUSE Linux Enterprise Software Development Kit 11-SP4 SUSE Linux Enterprise Server 11-SP4 SUSE Linux Enterprise Server 11-SP3-LTSS SUSE Linux Enterprise Point of Sale 11-SP3 SUSE Linux Enterprise Debuginfo 11-SP4 SUSE Linux Enterprise Debuginfo 11-SP3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for emacs fixes one issues. This security issue was fixed: - CVE-2017-14482: Remote code execution via mails with "Content-Type: text/enriched" (bsc#1058425) Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11-SP4: zypper in -t patch sdksp4-emacs-13285=1 - SUSE Linux Enterprise Server 11-SP4: zypper in -t patch slessp4-emacs-13285=1 - SUSE Linux Enterprise Server 11-SP3-LTSS: zypper in -t patch slessp3-emacs-13285=1 - SUSE Linux Enterprise Point of Sale 11-SP3: zypper in -t patch sleposp3-emacs-13285=1 - SUSE Linux Enterprise Debuginfo 11-SP4: zypper in -t patch dbgsp4-emacs-13285=1 - SUSE Linux Enterprise Debuginfo 11-SP3: zypper in -t patch dbgsp3-emacs-13285=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11-SP4 (i586 x86_64): emacs-nox-22.3-42.3.1 - SUSE Linux Enterprise Server 11-SP4 (i586 ia64 ppc64 s390x x86_64): emacs-22.3-42.3.1 emacs-el-22.3-42.3.1 emacs-info-22.3-42.3.1 emacs-nox-22.3-42.3.1 emacs-x11-22.3-42.3.1 - SUSE Linux Enterprise Server 11-SP3-LTSS (i586 s390x x86_64): emacs-22.3-42.3.1 emacs-el-22.3-42.3.1 emacs-info-22.3-42.3.1 emacs-nox-22.3-42.3.1 emacs-x11-22.3-42.3.1 - SUSE Linux Enterprise Point of Sale 11-SP3 (i586): emacs-22.3-42.3.1 emacs-el-22.3-42.3.1 emacs-info-22.3-42.3.1 emacs-nox-22.3-42.3.1 emacs-x11-22.3-42.3.1 - SUSE Linux Enterprise Debuginfo 11-SP4 (i586 ia64 ppc64 s390x x86_64): emacs-debuginfo-22.3-42.3.1 emacs-debugsource-22.3-42.3.1 - SUSE Linux Enterprise Debuginfo 11-SP3 (i586 s390x x86_64): emacs-debuginfo-22.3-42.3.1 emacs-debugsource-22.3-42.3.1 References: https://www.suse.com/security/cve/CVE-2017-14482.html https://bugzilla.suse.com/1058425 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0