Sicherheit: Mehrere Probleme im Kernel

Lesezeichen hinzufügen

SUSE Security Update: Security update for Linux kernel
______________________________________________________________________________

Announcement ID: SUSE-SU-2013:0786-1
Rating: important
References: #578046 #651219 #709266 #709269 #714604 #722398
#730117 #736149 #738210 #744692 #753371 #754583
#754898 #758040 #758243 #761849 #762424 #763494
#767612 #768052 #768470 #773577 #777616 #777746
#779577 #780977 #786150 #786814 #786900 #787821
#788826 #789235 #789311 #789359 #792674 #792793
#793139 #794513 #794529 #794805 #795269 #795957
#795961 #796412 #796418 #797042 #797175 #798921
#799197 #799209 #799270 #799578 #799926 #800280
#800701 #801038 #801178 #801713 #801717 #801720
#801782 #802153 #802353 #802445 #802712 #803056
#803067 #803394 #803674 #803712 #804154 #804220
#804609 #805823 #806138 #806273 #806395 #806404
#806431 #806466 #806469 #806492 #806631 #806825
#806847 #806908 #806976 #806980 #807431 #807517
#807560 #807853 #808166 #808307 #808829 #808966
#808991 #809155 #809166 #809375 #809493 #809748
#812281 #812315 #813963 #816443 #89359
Cross-References: CVE-2010-3873 CVE-2011-4131 CVE-2011-4604
CVE-2011-4622 CVE-2012-1601 CVE-2012-2119
CVE-2012-2137 CVE-2012-4461 CVE-2012-5517
CVE-2013-0160 CVE-2013-0216 CVE-2013-0231
CVE-2013-0871 CVE-2013-0913 CVE-2013-1767
CVE-2013-1774 CVE-2013-1796 CVE-2013-1797
CVE-2013-1798 CVE-2013-1848
Affected Products:
SUSE Linux Enterprise Real Time 11 SP2
______________________________________________________________________________

An update that solves 20 vulnerabilities and has 87 fixes
is now available. It includes one version update.

Description:

The SUSE Linux Enterprise Server 11 SP2 Realtime kernel has
been updated to 3.0.74 fixing various bugs and security
issues.

This update brings some features:

* Updated HD-audio drivers for Nvidia/AMD HDMI and
Haswell audio (FATE#314311 FATE#313695)
* Lustre enablement patches were added (FATE#314679).
* SGI UV (Ultraviolet) platform support. (FATE#306952)

Security issues fixed in this update:

* CVE-2013-0349: The hidp_setup_hid function in
net/bluetooth/hidp/core.c in the Linux kernel did not
properly copy a certain name field, which allowed local
users to obtain sensitive information from kernel memory by
setting a long name and making an HIDPCONNADD ioctl call.
* CVE-2012-2137: Buffer overflow in virt/kvm/irq_comm.c
in the KVM subsystem in the Linux kernel allowed local
users to cause a denial of service (crash) and to possibly
execute arbitrary code via vectors related to Message
Signaled Interrupts (MSI), irq routing entries, and an
incorrect check by the setup_routing_entry function before
invoking the kvm_set_irq function.
* CVE-2012-6549: The isofs_export_encode_fh function in
fs/isofs/export.c in the Linux kernel did not initialize a
certain structure member, which allowed local users to
obtain sensitive information from kernel heap memory via a
crafted application.
* CVE-2012-6548: The udf_encode_fh function in
fs/udf/namei.c in the Linux kernel did not initialize a
certain structure member, which allowed local users to
obtain sensitive information from kernel heap memory via a
crafted application.
* CVE-2013-0160: Timing side channel on attacks were
possible on /dev/ptmx that could allow local attackers to
predict keypresses like e.g. passwords. This has been fixed
by not updating accessed/modified time on the pty devices.
Note that this might break pty idle detection, so it might
get reverted again.
* CVE-2013-0216: The Xen netback functionality in the
Linux kernel allowed guest OS users to cause a denial of
service (loop) by triggering ring pointer corruption.
* CVE-2013-0231: The pciback_enable_msi function in the
PCI backend driver
(drivers/xen/pciback/conf_space_capability_msi.c) in Xen
for the Linux allowed guest OS users with PCI device access
to cause a denial of service via a large number of kernel
log messages.
* CVE-2013-0311: The translate_desc function in
drivers/vhost/vhost.c in the Linux kernel did not properly
handle cross-region descriptors, which allowed guest OS
users to obtain host OS privileges by leveraging KVM guest
OS privileges.
* CVE-2013-0913: Integer overflow in
drivers/gpu/drm/i915/i915_gem_execbuffer.c in the i915
driver in the Direct Rendering Manager (DRM) subsystem in
the Linux kernel allowed local users to cause a denial of
service (heap-based buffer overflow) or possibly have
unspecified other impact via a crafted application that
triggers many relocation copies, and potentially leads to a
race condition.
* CVE-2013-0914: The flush_signal_handlers function in
kernel/signal.c in the Linux kernel preserved the value of
the sa_restorer field across an exec operation, which makes
it easier for local users to bypass the ASLR protection
mechanism via a crafted application containing a sigaction
system call.
* CVE-2013-1767: Use-after-free vulnerability in the
shmem_remount_fs function in mm/shmem.c in the Linux kernel
allowed local users to gain privileges or to cause a denial
of service (system crash) by remounting a tmpfs filesystem
without specifying a required mpol (aka mempolicy) mount
option.
* CVE-2013-1772: The log_prefix function in
kernel/printk.c in the Linux kernel 3.x did not properly
remove a prefix string from a syslog header, which allowed
local users to cause a denial of service (buffer overflow
and system crash) by leveraging /dev/kmsg write access and
triggering a call_console_drivers function call.
* CVE-2013-1774: The chase_port function in
drivers/usb/serial/io_ti.c in the Linux kernel allowed
local users to cause a denial of service (NULL pointer
dereference and system crash) via an attempted /dev/ttyUSB
read or write operation on a disconnected Edgeport USB
serial converter.
* CVE-2013-1792: Race condition in the
install_user_keyrings function in
security/keys/process_keys.c in the Linux kernel allowed
local users to cause a denial of service (NULL pointer
dereference and system crash) via crafted keyctl system
calls that trigger keyring operations in simultaneous
threads.
* CVE-2013-1796: The kvm_set_msr_common function in
arch/x86/kvm/x86.c in the Linux kernel did not ensure a
required time_page alignment during an MSR_KVM_SYSTEM_TIME
operation, which allowed guest OS users to cause a denial
of service (buffer overflow and host OS memory corruption)
or possibly have unspecified other impact via a crafted
application.
* CVE-2013-1797: Use-after-free vulnerability in
arch/x86/kvm/x86.c in the Linux kernel allowed guest OS
users to cause a denial of service (host OS memory
corruption) or possibly have unspecified other impact via a
crafted application that triggers use of a guest physical
address (GPA) in (1) movable or (2) removable memory during
an MSR_KVM_SYSTEM_TIME kvm_set_msr_common operation.
* CVE-2013-1798: The ioapic_read_indirect function in
virt/kvm/ioapic.c in the Linux kernel did not properly
handle a certain combination of invalid IOAPIC_REG_SELECT
and IOAPIC_REG_WINDOW operations, which allows guest OS
users to obtain sensitive information from host OS memory
or cause a denial of service (host OS OOPS) via a crafted
application.
* CVE-2013-1848: fs/ext3/super.c in the Linux kernel
used incorrect arguments to functions in certain
circumstances related to printk input, which allowed local
users to conduct format-string attacks and possibly gain
privileges via a crafted application.
* CVE-2013-1860: Heap-based buffer overflow in the
wdm_in_callback function in drivers/usb/class/cdc-wdm.c in
the Linux kernel allowed physically proximate attackers to
cause a denial of service (system crash) or to possibly
execute arbitrary code via a crafted cdc-wdm USB device.
* CVE-2013-2634: net/dcb/dcbnl.c in the Linux kernel
did not initialize certain structures, which allowed local
users to obtain sensitive information from kernel stack
memory via a crafted application.
* CVE-2013-2635: The rtnl_fill_ifinfo function in
net/core/rtnetlink.c in the Linux kernel did not initialize
a certain structure member, which allowed local users to
obtain sensitive information from kernel stack memory via a
crafted application.
* CVE-2013-0268: The msr_open function in
arch/x86/kernel/msr.c in the Linux kernel allowed local
users to bypass intended capability restrictions by
executing a crafted application as root, as demonstrated by
msr32.c.

Bugs fixed in this update:

BTRFS:

* btrfs: do not try to notify udev about missing
devices.
* btrfs: add cancellation points to defrag.
* btrfs: define BTRFS_MAGIC as a u64 value.
* btrfs: make sure NODATACOW also gets NODATASUM set.
* btrfs: enforce min_bytes parameter during extent
allocation.
* btrfs: build up error handling for merge_reloc_roots.
* btrfs: free all recorded tree blocks on error .
* btrfs: do not BUG_ON in prepare_to_reloc .
* btrfs: do not BUG_ON on aborted situation .
* btrfs: handle a bogus chunk tree nicely .
* btrfs: do not drop path when printing out tree errors
in scrub .
* btrfs: make subvol creation/deletion killable in the
early stages.
* btrfs: abort unlink trans in missed error case.
* btrfs: fix reada debug code compilation.
* btrfs: return error when we specify wrong start to
defrag.
* btrfs: do not force pages under writeback to finish
when aborting.

USB:

* USB: move usb_translate_errors to 1/usb (bnc#806908).
* USB: add EOPNOTSUPP to usb_translate_errors
(bnc#806908).
* USB: cdc-wdm: sanitize error returns (bnc#806908).
* USB: cdc-wdm: cleanup error codes (bnc#806908).
* USB: cdc-wdm: add helper to preserve kABI
(bnc#806908).
* USB: Do not use EHCI port sempahore for USB 3.0 hubs
(bnc#807560).
* USB: Prepare for refactoring by adding extra udev
checks (bnc#807560).
* USB: Rip out recursive call on warm port reset
(bnc#807560).
* USB: Fix connected device switch to Inactive state
(bnc#807560).
* USB: modify hub to detect unplugs in all states
(bnc#807560).
* USB: io_ti: Fix NULL dereference in chase_port()
(bnc#806976, CVE-2013-1774).
* USB: cdc-wdm: fix buffer overflow (bnc#806431).
* USB: cdc-wdm: cannot use dev_printk when device is
gone (bnc#806469).
* USB: cdc-wdm: fix memory leak (bnc#806466).
* elousb: really long delays for broken devices
(bnc#795269).
* xhci: Fix conditional check in bandwidth calculation
(bnc#795961).
* xHCI: Fix TD Size calculation on 1.0 hosts
(bnc#795957).
* xhci: avoid dead ports, add roothub port polling
(bnc#799197).
* USB: Handle warm reset failure on empty port
(bnc#799926).
* USB: Ignore port state until reset completes
(bnc#799926).
* Allow USB 3.0 ports to be disabled (bnc#799926).
* USB: Ignore xHCI Reset Device status (bnc#799926).
* USB: Handle auto-transition from hot to warm reset
(bnc#799926).

S/390:

* ipl: Implement diag308 loop for zfcpdump (bnc#801720,
LTC#88197).
* zcore: Add hsa file (bnc#801720, LTC#88198).
* kernel: support physical memory > 4TB (bnc#801720,
LTC#88787).
* mm: Fix crst upgrade of mmap with MAP_FIXED
(bnc#801720, LTC#88797).
* Update patches.suse/zcrypt-feed-hwrandom
(bnc#806825). Allow zcrypt module unload even when the
thread is blocked writing to a full random pool.
* dca: check against empty dca_domains list before
unregister provider fix.
* s390/kvm: Fix store status for ACRS/FPRS fix.
* series.conf: disabled
patches.arch/s390-64-03-kernel-inc-phys-mem.patch due to
excessive kabi break. (bnc#801720)

ALSA:

*
patches.drivers/alsa-sp3-pre-695-Yet-another-fix-for-broken-
HSW-HDMI-pin: Refresh. Fix the invalid PCI SSID check
(bnc#806404)
* ALSA: hda - Support mute LED on HP AiO buttons
(bnc#808991).
* ALSA: hda: Allow multple SPDIF controls per codec
(bnc#780977).
* ALSA: hda: Virtualize SPDIF out controls (bnc#780977).
* ALSA: hda: Separate generic and non-generic
implementations.
* ALSA: hda: hdmi_eld_update_pcm_info: update a stream
in place.
* ALSA: hda: HDMI: Support codecs with fewer cvts than
pins.
* ALSA: hda - Add snd_hda_get_conn_list() helper
function.
* ALSA: hda - Add snd_hda_override_conn_list() helper
function.
* ALSA: hda - Increase the max number of coverters/pins
in patch_hdmi.c (bnc#780977).
* ALSA: hda - Check non-snoop in a single place
(bnc#801713).
* ALSA: HDA: Use LPIB Position fix for Intel SCH
Poulsbo (bnc#801713).
* ALSA: hda_intel: Add Oaktrail identifiers
(bnc#801713).
* ALSA: HDA: Use LPIB position fix for Oaktrail
(bnc#801713).
* ALSA: hda - add id for Atom Cedar Trail HDMI codec
(bnc#801713).
* ALSA: hda - Fix detection of Creative SoundCore3D
controllers (bnc#762424).
* ALSA: hda - add power states information in proc
(bnc#801713).
* ALSA: hda - Show D3cold state in proc files
(bnc#801713).
* ALSA: hda - check supported power states (bnc#801713).
* ALSA: hda - reduce msleep time if EPSS power states
supported (bnc#801713).
* ALSA: hda - check proper return value (bnc#801713).
* ALSA: hda - power setting error check (bnc#801713).
* ALSA: hda - Add DeviceID for Haswell HDA (bnc#801713).
* ALSA: hda - add Haswell HDMI codec id (bnc#801713).
* ALSA: hda - Fix driver type of Haswell controller to
AZX_DRIVER_SCH.
* ALSA: hda - Add new GPU codec ID to snd-hda
(bnc#780977).
* ALSA: HDMI - Fix channel_allocation array wrong order
(bnc#801713).
* ALSA: hda - Avoid BDL position workaround when
no_period_wakeup is set (bnc#801713).
* ALSA: hda - Allow to pass position_fix=0 explicitly
(bnc#801713).
* ALSA: hda - Add another pci id for Haswell board.
* ALSA: hda - force use of SSYNC bits (bnc#801713).
* ALSA: hda - use LPIB for delay estimation
(bnc#801713).
* ALSA: hda - add PCI identifier for Intel 5
Series/3400 (bnc#801713).
* ALSA: hda - Add workaround for conflicting IEC958
controls (FATE#314311).
* ALSA: hda - Stop LPIB delay counting on broken
hardware (FATE#313695).
* ALSA: hda - Always turn on pins for HDMI/DP
(FATE#313695).
* ALSA: hda - bug fix for invalid connection list of
Haswell HDMI codec pins (FATE#313695).
* ALSA - HDA: New PCI ID for Haswell ULT (bnc#801713).
* ALSA: hda - Release assigned pin/cvt at error path of
hdmi_pcm_open() (bnc#801713).
* ALSA: hda - Support rereading widgets under the
function group (bnc#801713).
* ALSA: hda - Add fixup for Haswell to enable all pin
and convertor widgets (bnc#801713).
* ALSA: hda - Yet another fix for broken HSW HDMI pin
connections (bnc#801713).
* patches.kabi/alsa-spdif-update-kabi-fixes: Fix kABI
breakage due to HD-audio HDMI updates (bnc#780977).
* ALSA: hda - Fix non-snoop page handling (bnc#800701).
* ALSA: hda - Apply mic-mute LED fixup for new HP
laptops (bnc#796418).
*
patches.drivers/alsa-sp3-pre-695-Yet-another-fix-for-broken-
HSW-HDMI-pin: Refresh. Fix a superfluous incremental
leading to the double array size (bnc#808966)

XEN:

* pciback: notify hypervisor about devices intended to
be assigned to guests.
* patches.xen/xen-clockevents: Update (bnc#803712).
* patches.xen/xen-ipi-per-cpu-irq: Update (bnc#803712).
* patches.xen/xen3-patch-2.6.19: Update (bnc#809166).
* Update Xen patches to 3.0.68.
* Update Xen patches to 3.0.63.
* netback: fix netbk_count_requests().
* x86/mm: Check if PUD is large when validating a
kerneladdress (bnc#794805).

OTHER:

* Revert dmi_scan: fix missing check for _DMI_
signature in smbios_present().
* Revert drivers/firmware/dmi_scan.c: fetch dmi version
from SMBIOS if it exists.
* Revert drivers/firmware/dmi_scan.c: check dmi version
when get system uuid.
* sysfs: Revert sysfs: fix race between readdir and
lseek (bnc#816443).
* 8021q: Revert 8021q: fix a potential use-after-free.
* /dev/urandom returning EOF: trim down revert to not
change kabi. (bnc#789359).
* tun: reserves space for network in skb (bnc#803394).
* Fixed /dev/urandom returning EOF (bnc#789359).
* mm: Make snapshotting pages for stable writes a
per-bio operation
* fs: Only enable stable page writes when necessary
(bnc#807517).
*
patches.drivers/ixgbe-Address-fact-that-RSC-was-not-setting-
GSO-size.patch: Fix bnc#802712
* Fix build error without CONFIG_BOOTSPLASH
* Fix bootsplash breakage due to 3.0.67 stable fix
(bnc#813963)
* drivers/base/memory.c: fix memory_dev_init() long
delay (bnc#804609).
* mtd: drop physmap_configure (bnc#809375).
* Bluetooth: btusb: hide more usb_submit_urb errors
(bnc#812281).
* o2dlm: fix NULL pointer dereference in
o2dlm_blocking_ast_wrapper (bnc#806492)
* qeth: fix qeth_wait_for_threads() deadlock for OSN
devices (bnc#812315, LTC#90910).
* Fix NULL pointer dereference in
o2dlm_blocking_ast_wrapper (bnc#806492)
* mm: fix ALLOC_WMARK_MASK check (bnc#808166)
* pciehp: Fix dmi match table definition and missing
space in printk (bnc#796412).
* fnic: Fix SGEs limit (bnc#807431).
* pciehp: Ignore missing surprise bit on some hosts
(bnc#796412).
* ipv6: Queue fragments per interface for
multicast/link-local addresses (bnc#804220).
* netfilter: send ICMPv6 message on fragment reassembly
timeout (bnc#773577).
* netfilter: fix sending ICMPv6 on netfilter reassembly
timeout (bnc#773577).
* jbd: clear revoked flag on buffers before a new
transaction started (bnc#806395).
* xfrm6: count extension headers into payload length
(bnc#794513).
* mm: page_alloc: Avoid marking zones full prematurely
after zone_reclaim() (Evict inactive pages when
zone_reclaim is enabled (bnc#808166)).
* st: Take additional queue ref in st_probe
(bnc#801038, bnc#788826).
* drivers: xhci: fix incorrect bit test (bnc#714604).
* xfrm: remove unused xfrm4_policy_fini() (bnc#801717).
* xfrm: make gc_thresh configurable in all namespaces
(bnc#801717).
* kabi: use net_generic to avoid changes in struct net
(bnc#801717).
* xfs: Fix WARN_ON(delalloc) in xfs_vm_releasepage()
(bnc#806631).
*
patches.drivers/alsa-sp2-hda-033-Support-mute-LED-on-HP-AiO-
buttons: Refresh tags.
* block: use i_size_write() in bd_set_size()
(bnc#809748).
* loopdev: fix a deadlock (bnc#809748).
* patches.suse/supported-flag: fix mis-reported
supported status (bnc#809493).
* patches.suse/supported-flag-enterprise: Refresh.
* KVM: Convert MSR_KVM_SYSTEM_TIME to use
gfn_to_hva_cache_init (bnc#806980 CVE-2013-1797).
* KVM: Fix bounds checking in ioapic indirect register
read (bnc#806980 CVE-2013-1798).
* KVM: Fix for buffer overflow in handling of
MSR_KVM_SYSTEM_TIME (bnc#806980 CVE-2013-1796).
* KVM: introduce kvm_read_guest_cached (bnc#806980).
* x86/numa: Add constraints check for nid parameters
(Cope with negative SRAT distances (bnc#807853)).
* drm/i915: Periodically sanity check power management
(bnc#808307).
* drm/i915: bounds check execbuffer relocation count
(bnc#808829,CVE-2013-0913).
* ext3: Fix format string issues (bnc#809155,
CVE-2013-1848).
* x86-64: Fix memset() to support sizes of 4Gb and
above (Properly initialise memmap on large machines
(bnc#802353)).
* bdi: allow block devices to say that they require
stable page writes
* mm: only enforce stable page writes if the backing
device requires it
* block: optionally snapshot page contents to provide
stable pages during write
* 9pfs: fix filesystem to wait for stable page writeback
* ocfs2: wait for page writeback to provide stable pages
* ubifs: wait for page writeback to provide stable pages
* Only enable stable page writes when required by
underlying BDI (bnc#807517).
* KVM: emulator: drop RPL check from linearize()
function (bnc#754583).
* mlx4: Correct calls to to_ib_ah_attr() (bnc#806847).
* DRM/i915: On G45 enable cursor plane briefly after
enabling the display plane (bnc #753371) [backported from
drm-intel-fixes].
* cxgb4i: Remove the scsi host device when removing
device (bnc#722398)
* xprtrdma: The transport should not bug-check when a
dup reply is received (bnc#763494).
* tmpfs: fix use-after-free of mempolicy object
(bnc#806138, CVE-2013-1767).
* lpfc: Check fc_block_scsi_eh return value correctly
for lpfc_abort_handler (bnc#803674).
* md: fix bug in handling of new_data_offset
(bnc#805823).
* md: Avoid OOPS when reshaping raid1 to raid0 (Useful
OOPS fix).
* md: fix two bugs when attempting to resize RAID0
array (Useful BUG() fix).
* md: raid0: fix error return from create_stripe_zones
(useful bug fix).
* ext4: add missing kfree() on error return path in
add_new_gdb().
* ext4: Free resources in some error path in
ext4_fill_super.
* intel_idle: support Haswell (fate#313720).
* hp_accel: Add a new PnP ID HPQ6007 for new HP laptops
(bnc#802445).
* nfs: Ensure NFS does not block on dead server during
unmount (bnc#794529).
* block: disable discard request merge temporarily
(bnc#803067).
* mm: mmu_notifier: have mmu_notifiers use a global
SRCU so they may safely schedule
* mm: mmu_notifier: make the mmu_notifier srcu static
* mmu_notifier_unregister NULL Pointer deref and
multiple ->release() callouts
* Have mmu_notifiers use SRCU so they may safely
schedule kabi compatability
*
patches.fixes/Have-mmu_notifiers-use-SRCU-so-they-may-safely
-schedule.patch:
*
patches.fixes/Have-mmu_notifiers-use-SRCU-so-they-may-safely
-schedule-build-fix.patch: Delete, replace with upstream
equivalent and add KABI workaround (bnc#578046, bnc#786814,
FATE#306952).
* ipv6: Do not send packet to big messages to self
(bnc#786150).
* hpwdt: Unregister NMI events on exit (bnc#777746).
* x86/mm: Check if PUD is large when validating a
kernel address (bnc#794805).
* ata: Fix DVD not dectected at some Haswell platforms
(bnc#792674).
* Avoid softlockups in printk (bnc#744692, bnc#789311).
* Do not pack credentials for dying processes
(bnc#779577, bnc#803056).
* xfs: punch new delalloc blocks out of failed writes
inside EOF (bnc#761849).
* xfs: xfs_sync_data is redundant (bnc#761849).
* Add GPIO support for Intel Centerton SOC (bnc#792793).
* Add Multifunction Device support for Intel Centerton
SOC (bnc#792793).
* Add Intel Legacy Block support for Intel Centerton
SOC (bnc#792793).
* mm: net: Allow some !SOCK_MEMALLOC traffic through
even if skb_pfmemalloc (Allow GPFS network traffic despite
PF_MEMALLOC misuse (bnc#786900)).
* kernel/resource.c: fix stack overflow in
__reserve_region_with_split() (bnc#801782).
* Lustre enablement patches
* block: add dev_check_rdonly and friends for Lustre
testing (FATE#314679).
* dcache: Add DCACHE_LUSTRE_INVALID flag for Lustre to
handle its own invalidation (FATE#314679).
* lsm: export security_inode_unlink (FATE#315679).
* lustre: Add lustre kernel version (FATE#314679).
* st: fix memory leak with >1MB tape I/O (bnc#798921).
* cifs: lower default wsize when 1 extensions are not
used (bnc#799578).
* ata_generic: Skip is_intel_ider() check when
ata_generic=1 is set (bnc#777616).
* quota: autoload the quota_v2 module for QFMT_VFS_V1
quota format (bnc#802153).
* xen: properly bound buffer access when parsing
cpu/availability.
* netback: shutdown the ring if it contains garbage
(CVE-2013-0216 XSA-39 bnc#800280).
* netback: correct netbk_tx_err() to handle wrap around
(CVE-2013-0216 XSA-39 bnc#800280).
* pciback: rate limit error message from
pciback_enable_msi() (CVE-2013-0231 XSA-43 bnc#801178).
* scsiback/usbback: move cond_resched() invocations to
proper place.
* drm/i915: Implement workaround for broken CS tlb on
i830/845 (bnc #758040).
* drivers: scsi: storvsc: Initialize the sglist.
* e1000e: 82571 Fix Tx Data Corruption during Tx hang
recovery (bnc#790867).
* KVM: Fix buffer overflow in kvm_set_irq() (bnc#767612
CVE-2012-2137).
* mm: compaction: Abort async compaction if locks are
contended or taking too long.
* mm: compaction: abort compaction loop if lock is
contended or run too long.
* mm: compaction: acquire the zone->lock as late as
possible.
* mm: compaction: acquire the zone->lru_lock as late as
possible.
* mm: compaction: move fatal signal check out of
compact_checklock_irqsave. Reduce LRU and zone lock
contention when compacting memory for THP (bnc#796823).

Security Issue references:

* CVE-2012-6548
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6548
>
* CVE-2012-6549
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6549
>
* CVE-2012-2137
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2137
>
* CVE-2013-0160
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0160
>
* CVE-2013-0216
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0216
>
* CVE-2013-0231
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0231
>
* CVE-2013-0913
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0913
>
* CVE-2013-0914
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0914
>
* CVE-2013-1767
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1767
>
* CVE-2013-1774
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1774
>
* CVE-2013-1796
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1796
>
* CVE-2013-1797
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1797
>
* CVE-2013-1798
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1798
>
* CVE-2013-1848
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1848
>
* CVE-2013-1860
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1860
>
* CVE-2013-2634
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2634
>
* CVE-2013-2635
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2635
>
* CVE-2013-1792
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1792
>
* CVE-2013-0311
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0311
>
* CVE-2013-1772
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1772
>
* CVE-2013-0268
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0268
>
* CVE-2013-0349
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0349
>

Indications:

Everyone using the Real Time Linux Kernel on x86_64 architecture should
update.

Special Instructions and Notes:

Please reboot the system after installing this update.

Patch Instructions:

To install this SUSE Security Update use YaST online_update.
Alternatively you can run the command listed for your product:

- SUSE Linux Enterprise Real Time 11 SP2:

zypper in -t patch slertesp2-kernel-7695

To bring your system up-to-date, use "zypper patch".

Package List:

- SUSE Linux Enterprise Real Time 11 SP2 (x86_64) [New Version:
3.0.74.rt98]:

cluster-network-kmp-rt-1.4_3.0.74_rt98_0.6.2-2.18.37
cluster-network-kmp-rt_trace-1.4_3.0.74_rt98_0.6.2-2.18.37
drbd-kmp-rt-8.4.2_3.0.74_rt98_0.6.2-0.6.6.28
drbd-kmp-rt_trace-8.4.2_3.0.74_rt98_0.6.2-0.6.6.28
iscsitarget-kmp-rt-1.4.20_3.0.74_rt98_0.6.2-0.23.34
iscsitarget-kmp-rt_trace-1.4.20_3.0.74_rt98_0.6.2-0.23.34
kernel-rt-3.0.74.rt98-0.6.2.1
kernel-rt-base-3.0.74.rt98-0.6.2.1
kernel-rt-devel-3.0.74.rt98-0.6.2.1
kernel-rt_trace-3.0.74.rt98-0.6.2.1
kernel-rt_trace-base-3.0.74.rt98-0.6.2.1
kernel-rt_trace-devel-3.0.74.rt98-0.6.2.1
kernel-source-rt-3.0.74.rt98-0.6.2.1
kernel-syms-rt-3.0.74.rt98-0.6.2.1
lttng-modules-kmp-rt-2.0.4_3.0.74_rt98_0.6.2-0.7.30
lttng-modules-kmp-rt_trace-2.0.4_3.0.74_rt98_0.6.2-0.7.30
ocfs2-kmp-rt-1.6_3.0.74_rt98_0.6.2-0.11.36
ocfs2-kmp-rt_trace-1.6_3.0.74_rt98_0.6.2-0.11.36
ofed-kmp-rt-1.5.2_3.0.74_rt98_0.6.2-0.28.28.8
ofed-kmp-rt_trace-1.5.2_3.0.74_rt98_0.6.2-0.28.28.8

References:

http://support.novell.com/security/cve/CVE-2010-3873.html
http://support.novell.com/security/cve/CVE-2011-4131.html
http://support.novell.com/security/cve/CVE-2011-4604.html
http://support.novell.com/security/cve/CVE-2011-4622.html
http://support.novell.com/security/cve/CVE-2012-1601.html
http://support.novell.com/security/cve/CVE-2012-2119.html
http://support.novell.com/security/cve/CVE-2012-2137.html
http://support.novell.com/security/cve/CVE-2012-4461.html
http://support.novell.com/security/cve/CVE-2012-5517.html
http://support.novell.com/security/cve/CVE-2013-0160.html
http://support.novell.com/security/cve/CVE-2013-0216.html
http://support.novell.com/security/cve/CVE-2013-0231.html
http://support.novell.com/security/cve/CVE-2013-0871.html
http://support.novell.com/security/cve/CVE-2013-0913.html
http://support.novell.com/security/cve/CVE-2013-1767.html
http://support.novell.com/security/cve/CVE-2013-1774.html
http://support.novell.com/security/cve/CVE-2013-1796.html
http://support.novell.com/security/cve/CVE-2013-1797.html
http://support.novell.com/security/cve/CVE-2013-1798.html
http://support.novell.com/security/cve/CVE-2013-1848.html
https://bugzilla.novell.com/578046
https://bugzilla.novell.com/651219
https://bugzilla.novell.com/709266
https://bugzilla.novell.com/709269
https://bugzilla.novell.com/714604
https://bugzilla.novell.com/722398
https://bugzilla.novell.com/730117
https://bugzilla.novell.com/736149
https://bugzilla.novell.com/738210
https://bugzilla.novell.com/744692
https://bugzilla.novell.com/753371
https://bugzilla.novell.com/754583
https://bugzilla.novell.com/754898
https://bugzilla.novell.com/758040
https://bugzilla.novell.com/758243
https://bugzilla.novell.com/761849
https://bugzilla.novell.com/762424
https://bugzilla.novell.com/763494
https://bugzilla.novell.com/767612
https://bugzilla.novell.com/768052
https://bugzilla.novell.com/768470
https://bugzilla.novell.com/773577
https://bugzilla.novell.com/777616
https://bugzilla.novell.com/777746
https://bugzilla.novell.com/779577
https://bugzilla.novell.com/780977
https://bugzilla.novell.com/786150
https://bugzilla.novell.com/786814
https://bugzilla.novell.com/786900
https://bugzilla.novell.com/787821
https://bugzilla.novell.com/788826
https://bugzilla.novell.com/789235
https://bugzilla.novell.com/789311
https://bugzilla.novell.com/789359
https://bugzilla.novell.com/792674
https://bugzilla.novell.com/792793
https://bugzilla.novell.com/793139
https://bugzilla.novell.com/794513
https://bugzilla.novell.com/794529
https://bugzilla.novell.com/794805
https://bugzilla.novell.com/795269
https://bugzilla.novell.com/795957
https://bugzilla.novell.com/795961
https://bugzilla.novell.com/796412
https://bugzilla.novell.com/796418
https://bugzilla.novell.com/797042
https://bugzilla.novell.com/797175
https://bugzilla.novell.com/798921
https://bugzilla.novell.com/799197
https://bugzilla.novell.com/799209
https://bugzilla.novell.com/799270
https://bugzilla.novell.com/799578
https://bugzilla.novell.com/799926
https://bugzilla.novell.com/800280
https://bugzilla.novell.com/800701
https://bugzilla.novell.com/801038
https://bugzilla.novell.com/801178
https://bugzilla.novell.com/801713
https://bugzilla.novell.com/801717
https://bugzilla.novell.com/801720
https://bugzilla.novell.com/801782
https://bugzilla.novell.com/802153
https://bugzilla.novell.com/802353
https://bugzilla.novell.com/802445
https://bugzilla.novell.com/802712
https://bugzilla.novell.com/803056
https://bugzilla.novell.com/803067
https://bugzilla.novell.com/803394
https://bugzilla.novell.com/803674
https://bugzilla.novell.com/803712
https://bugzilla.novell.com/804154
https://bugzilla.novell.com/804220
https://bugzilla.novell.com/804609
https://bugzilla.novell.com/805823
https://bugzilla.novell.com/806138
https://bugzilla.novell.com/806273
https://bugzilla.novell.com/806395
https://bugzilla.novell.com/806404
https://bugzilla.novell.com/806431
https://bugzilla.novell.com/806466
https://bugzilla.novell.com/806469
https://bugzilla.novell.com/806492
https://bugzilla.novell.com/806631
https://bugzilla.novell.com/806825
https://bugzilla.novell.com/806847
https://bugzilla.novell.com/806908
https://bugzilla.novell.com/806976
https://bugzilla.novell.com/806980
https://bugzilla.novell.com/807431
https://bugzilla.novell.com/807517
https://bugzilla.novell.com/807560
https://bugzilla.novell.com/807853
https://bugzilla.novell.com/808166
https://bugzilla.novell.com/808307
https://bugzilla.novell.com/808829
https://bugzilla.novell.com/808966
https://bugzilla.novell.com/808991
https://bugzilla.novell.com/809155
https://bugzilla.novell.com/809166
https://bugzilla.novell.com/809375
https://bugzilla.novell.com/809493
https://bugzilla.novell.com/809748
https://bugzilla.novell.com/812281
https://bugzilla.novell.com/812315
https://bugzilla.novell.com/813963
https://bugzilla.novell.com/816443
https://bugzilla.novell.com/89359
?keywords=d2f8c0b58837ded577fa1f4a7a342e3f

--
To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@opensuse.org
For additional commands, e-mail: opensuse-security-announce+help@opensuse.org