[security-announce] openSUSE-SU-2013:0396-1: important: kernel: security and bugfix update

[news 28]

openSUSE Security Update: kernel: security and bugfix update

______________________________________________________________________________

 

Announcement ID: openSUSE-SU-2013:0396-1

Rating: important

References: #714906 #720226 #733148 #755546 #762693 #765524

#768506 #769784 #769896 #770695 #773406 #773831

#774285 #774523 #774859 #776144 #778630 #779432

#781134 #783515 #784192 #786013 #787168 #792500

#793671 #797175 #799209 #800280 #801178 #801782

#802153 #802642 #804154 #804652 #804738

Cross-References: CVE-2012-0957 CVE-2012-2745 CVE-2012-3412

CVE-2012-4530 CVE-2013-0160 CVE-2013-0216

CVE-2013-0231 CVE-2013-0268 CVE-2013-0309

CVE-2013-0871

Affected Products:

openSUSE 12.1

______________________________________________________________________________

 

An update that solves 10 vulnerabilities and has 25 fixes

is now available.

 

Description:

 

 

The Linux kernel was updated to fix various bugs and

security issues:

 

CVE-2013-0871: Race condition in the ptrace functionality

in the Linux kernel allowed local users to gain privileges

via a PTRACE_SETREGS ptrace system call in a crafted

application, as demonstrated by ptrace_death.

 

CVE-2013-0160: Avoid a side channel attack on /dev/ptmx

(keyboard input timing).

 

CVE-2012-5374: Fixed a local denial of service in the BTRFS

hashing code.

 

CVE-2013-0309: arch/x86/include/asm/pgtable.h in the Linux

kernel, when transparent huge pages are used, does not

properly support PROT_NONE memory regions, which allows

local users to cause a denial of service (system crash) via

a crafted application.

 

CVE-2013-0268: The msr_open function in

arch/x86/kernel/msr.c in the Linux kernel allowed local

users to bypass intended capability restrictions by

executing a crafted application as root, as demonstrated by

msr32.c.

 

CVE-2012-0957: The override_release function in

kernel/sys.c in the Linux kernel allowed local users to

obtain sensitive information from kernel stack memory via a

uname system call in conjunction with a UNAME26 personality.

 

CVE-2013-0216: The Xen netback functionality in the Linux

kernel allowed guest OS users to cause a denial of service

(loop) by triggering ring pointer corruption.

 

CVE-2013-0231: The pciback_enable_msi function in the PCI

backend driver

(drivers/xen/pciback/conf_space_capability_msi.c) in Xen

for the Linux kernel allowed guest OS users with PCI device

access to cause a denial of service via a large number of

kernel log messages. NOTE: some of these details are

obtained from third party information.

 

CVE-2012-4530: The load_script function in

fs/binfmt_script.c in the Linux kernel did not properly

handle recursion, which allowed local users to obtain

sensitive information from kernel stack memory via a

crafted application.

 

CVE-2012-4508: Race condition in fs/ext4/extents.c in the

Linux kernel allowed local users to obtain sensitive

information from a deleted file by reading an extent that

was not properly marked as uninitialized.

 

CVE-2012-3412: The sfc (aka Solarflare Solarstorm) driver

in the Linux kernel allowed remote attackers to cause a

denial of service (DMA descriptor consumption and

network-controller outage) via crafted TCP packets that

trigger a small MSS value.

 

CVE-2012-2745: The copy_creds function in kernel/cred.c in

the Linux kernel provided an invalid replacement session

keyring to a child process, which allowed local users to

cause a denial of service (panic) via a crafted application

that uses the fork system call.

 

CVE-2012-3375: The epoll_ctl system call in fs/eventpoll.c

in the Linux kernel did not properly handle ELOOP errors in

EPOLL_CTL_ADD operations, which allowed local users to

cause a denial of service (file-descriptor consumption and

system crash) via a crafted application that attempts to

create a circular epoll dependency.

 

CVE-2012-3400: Heap-based buffer overflow in the

udf_load_logicalvol function in fs/udf/super.c in the Linux

kernel allowed remote attackers to cause a denial of

service (system crash) or possibly have unspecified other

impact via a crafted UDF filesystem.

 

 

Patch Instructions:

 

To install this openSUSE Security Update use YaST online_update.

Alternatively you can run the command listed for your product:

 

- openSUSE 12.1:

 

zypper in -t patch openSUSE-2013-176

 

To bring your system up-to-date, use "zypper patch".

 

 

Package List:

 

- openSUSE 12.1 (i586 x86_64):

 

kernel-debug-3.1.10-1.19.1

kernel-debug-base-3.1.10-1.19.1

kernel-debug-base-debuginfo-3.1.10-1.19.1

kernel-debug-debuginfo-3.1.10-1.19.1

kernel-debug-debugsource-3.1.10-1.19.1

kernel-debug-devel-3.1.10-1.19.1

kernel-debug-devel-debuginfo-3.1.10-1.19.1

kernel-default-3.1.10-1.19.1

kernel-default-base-3.1.10-1.19.1

kernel-default-base-debuginfo-3.1.10-1.19.1

kernel-default-debuginfo-3.1.10-1.19.1

kernel-default-debugsource-3.1.10-1.19.1

kernel-default-devel-3.1.10-1.19.1

kernel-default-devel-debuginfo-3.1.10-1.19.1

kernel-desktop-3.1.10-1.19.1

kernel-desktop-base-3.1.10-1.19.1

kernel-desktop-base-debuginfo-3.1.10-1.19.1

kernel-desktop-debuginfo-3.1.10-1.19.1

kernel-desktop-debugsource-3.1.10-1.19.1

kernel-desktop-devel-3.1.10-1.19.1

kernel-desktop-devel-debuginfo-3.1.10-1.19.1

kernel-ec2-3.1.10-1.19.1

kernel-ec2-base-3.1.10-1.19.1

kernel-ec2-base-debuginfo-3.1.10-1.19.1

kernel-ec2-debuginfo-3.1.10-1.19.1

kernel-ec2-debugsource-3.1.10-1.19.1

kernel-ec2-devel-3.1.10-1.19.1

kernel-ec2-devel-debuginfo-3.1.10-1.19.1

kernel-ec2-extra-3.1.10-1.19.1

kernel-ec2-extra-debuginfo-3.1.10-1.19.1

kernel-syms-3.1.10-1.19.1

kernel-trace-3.1.10-1.19.1

kernel-trace-base-3.1.10-1.19.1

kernel-trace-base-debuginfo-3.1.10-1.19.1

kernel-trace-debuginfo-3.1.10-1.19.1

kernel-trace-debugsource-3.1.10-1.19.1

kernel-trace-devel-3.1.10-1.19.1

kernel-trace-devel-debuginfo-3.1.10-1.19.1

kernel-vanilla-3.1.10-1.19.1

kernel-vanilla-base-3.1.10-1.19.1

kernel-vanilla-base-debuginfo-3.1.10-1.19.1

kernel-vanilla-debuginfo-3.1.10-1.19.1

kernel-vanilla-debugsource-3.1.10-1.19.1

kernel-vanilla-devel-3.1.10-1.19.1

kernel-vanilla-devel-debuginfo-3.1.10-1.19.1

kernel-xen-3.1.10-1.19.1

kernel-xen-base-3.1.10-1.19.1

kernel-xen-base-debuginfo-3.1.10-1.19.1

kernel-xen-debuginfo-3.1.10-1.19.1

kernel-xen-debugsource-3.1.10-1.19.1

kernel-xen-devel-3.1.10-1.19.1

kernel-xen-devel-debuginfo-3.1.10-1.19.1

 

- openSUSE 12.1 (noarch):

 

kernel-devel-3.1.10-1.19.1

kernel-docs-3.1.10-1.19.2

kernel-source-3.1.10-1.19.1

kernel-source-vanilla-3.1.10-1.19.1

 

- openSUSE 12.1 (i586):

 

kernel-pae-3.1.10-1.19.1

kernel-pae-base-3.1.10-1.19.1

kernel-pae-base-debuginfo-3.1.10-1.19.1

kernel-pae-debuginfo-3.1.10-1.19.1

kernel-pae-debugsource-3.1.10-1.19.1

kernel-pae-devel-3.1.10-1.19.1

kernel-pae-devel-debuginfo-3.1.10-1.19.1

 

 

References:

 

http://support.novell.com/security/cve/CVE-2012-0957.html

http://support.novell.com/security/cve/CVE-2012-2745.html

http://support.novell.com/security/cve/CVE-2012-3412.html

http://support.novell.com/security/cve/CVE-2012-4530.html

http://support.novell.com/security/cve/CVE-2013-0160.html

http://support.novell.com/security/cve/CVE-2013-0216.html

http://support.novell.com/security/cve/CVE-2013-0231.html

http://support.novell.com/security/cve/CVE-2013-0268.html

http://support.novell.com/security/cve/CVE-2013-0309.html

http://support.novell.com/security/cve/CVE-2013-0871.html

https://bugzilla.novell.com/714906

https://bugzilla.novell.com/720226

https://bugzilla.novell.com/733148

https://bugzilla.novell.com/755546

https://bugzilla.novell.com/762693

https://bugzilla.novell.com/765524

https://bugzilla.novell.com/768506

https://bugzilla.novell.com/769784

https://bugzilla.novell.com/769896

https://bugzilla.novell.com/770695

https://bugzilla.novell.com/773406

https://bugzilla.novell.com/773831

https://bugzilla.novell.com/774285

https://bugzilla.novell.com/774523

https://bugzilla.novell.com/774859

https://bugzilla.novell.com/776144

https://bugzilla.novell.com/778630

https://bugzilla.novell.com/779432

https://bugzilla.novell.com/781134

https://bugzilla.novell.com/783515

https://bugzilla.novell.com/784192

https://bugzilla.novell.com/786013

https://bugzilla.novell.com/787168

https://bugzilla.novell.com/792500

https://bugzilla.novell.com/793671

https://bugzilla.novell.com/797175

https://bugzilla.novell.com/799209

https://bugzilla.novell.com/800280

https://bugzilla.novell.com/801178

https://bugzilla.novell.com/801782

https://bugzilla.novell.com/802153

https://bugzilla.novell.com/802642

https://bugzilla.novell.com/804154

https://bugzilla.novell.com/804652

https://bugzilla.novell.com/804738

 

--

To unsubscribe, e-mail: opensuse-security-announce+unsubscribe ( -at -) opensuse.org

For additional commands, e-mail: opensuse-security-announce+help ( -at -) opensuse.org