AusCERT - ESB-2011.1013 - [SUSE] kernel: Multiple vulnerabilities

HOME
About AusCERT
Membership
PKI Services
Training
Publications
Sec. Bulletins
Conferences
News & Media
Services
Web Log
Site Map
Site Help
Member login
ESB-2011.1013 - [SUSE] kernel: Multiple vulnerabilities
Date: 10 October 2011
References: ESB-2011.0923.2 ESB-2011.0959 ESB-2011.1048

Click here for printable version
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

===========================================================================
             AUSCERT External Security Bulletin Redistribution

                               ESB-2011.1013
          SUSE Security Update: Security update for Linux kernel
                              10 October 2011

===========================================================================

        AusCERT Security Bulletin Summary
        ---------------------------------

Product:          kernel
Publisher:        SUSE
Operating System: SUSE
Impact/Access:    Execute Arbitrary Code/Commands -- Remote/Unauthenticated
                  Denial of Service               -- Existing Account      
Resolution:       Patch/Upgrade
CVE Names:        CVE-2011-3353 CVE-2011-3191 CVE-2011-2928

Reference:        ESB-2011.0959
                  ESB-2011.0923.2

Comment: This bulletin contains two (2) SUSE security advisories.

- --------------------------BEGIN INCLUDED TEXT--------------------

   SUSE Security Update: Security update for Linux kernel
______________________________________________________________________________

Announcement ID:    SUSE-SU-2011:1100-1
Rating:             important
References:         #588458 #603804 #632870 #642896 #649625 #650309 
                    #667386 #669378 #688859 #694670 #699354 #699355 
                    #699357 #701443 #701686 #704347 #706557 #707096 
                    #707125 #707737 #708675 #708877 #709412 #711203 
                    #711969 #712456 #712929 #713138 #713430 #714001 
                    #714966 #715235 #715763 #716901 #719117 #719450 
                    
Cross-References:   CVE-2011-2928 CVE-2011-3191 CVE-2011-3353
                   
Affected Products:
                    SUSE Linux Enterprise Server 11 SP1 for VMware
                    SUSE Linux Enterprise Server 11 SP1
                    SUSE Linux Enterprise High Availability Extension 11 SP1
                    SUSE Linux Enterprise Desktop 11 SP1
______________________________________________________________________________

   An update that solves three vulnerabilities and has 33
   fixes is now available. It includes one version update.

Description:


   The SUSE Linux Enterprise 11 Service Pack 1 kernel was
   updated to 2.6.32.46  and fixes various bugs and security
   issues.

   Following security issues were fixed: CVE-2011-3191: A
   signedness issue in  CIFS could possibly have lead to to
   memory corruption, if a malicious  server could send
   crafted replies to the host.

   CVE-2011-3353: In the fuse filesystem,
   FUSE_NOTIFY_INVAL_ENTRY did not  check the length of the
   write so the message processing could overrun and  result
   in a BUG_ON() in fuse_copy_fill(). This flaw could be used
   by local  users able to mount FUSE filesystems to crash the
   system.

   CVE-2011-2928: The befs_follow_link function in
   fs/befs/linuxvfs.c in the  Linux kernel did not validate
   the length attribute of long symlinks, which  allowed local
   users to cause a denial of service (incorrect pointer
   dereference and OOPS) by accessing a long symlink on a
   malformed Be  filesystem.

   Also the following non security bugs were fixed: -
   CONFIG_CGROUP_MEM_RES_CTLR_SWAP enabled -
   CONFIG_CGROUP_MEM_RES_CTLR_SWAP_ENABLED disabled by
   default. Swap  accounting can be turned on by swapaccount=1
   kernel command line parameter  (bnc#719450) - Make swap
   accounting default behavior configurable  (bnc#719450,
   bnc#650309, fate#310471).

   *

   Added a missing reset for ioc_reset_in_progress in
   SoftReset in the mtpsas driver (bnc#711969).

   *

   Add support for the Digi/IBM PCIe 2-port Adapter
   (bnc#708675).

   *

   Always enable MSI-X on 5709 (bnc#707737).

   *

   sched: fix broken SCHED_RESET_ON_FORK handling
   (bnc#708877).

   *

   sched: Fix rt_rq runtime leakage bug (bnc#707096).

   *

   ACPI: allow passing down C1 information if no other
   C-states exist.

   *

   KDB: turn off kdb usb support by default (bnc#694670
   bnc#603804).

   *

   xfs: Added event tracing support.

   *

   xfs: fix xfs_fsblock_t tracing.

   *

   igb: extend maximum frame size to receive VLAN tagged
   frames (bnc#688859).

   *

   cfq: Do not allow queue merges for queues that have
   no process references (bnc#712929).

   * cfq: break apart merged cfqqs if they stop
   cooperating (bnc#712929).
   * cfq: calculate the seek_mean per cfq_queue not per
   cfq_io_context (bnc#712929).
   * cfq: change the meaning of the cfqq_coop flag
   (bnc#712929).
   * cfq-iosched: get rid of the coop_preempt flag
   (bnc#712929).
   *

   cfq: merge cooperating cfq_queues (bnc#712929).

   *

   Fix FDDI and TR config checks in ipv4 arp and LLC
   (bnc#715235).

   *

   writeback: do uninterruptible sleep in
   balance_dirty_pages() (bnc#699354 bnc#699357).

   * xfs: fix memory reclaim recursion deadlock on locked
   inode buffer (bnc#699355 bnc#699354).
   *

   xfs: use GFP_NOFS for page cache allocation
   (bnc#699355 bnc#699354).

   *

   virtio-net: init link state correctly (bnc#714966).

   *

   cpufreq: pcc-cpufreq: sanity check to prevent a NULL
   pointer dereference (bnc#709412).

   *

   x86: ucode-amd: Do not warn when no ucode is
   available for a CPU

   *

   patches.arch/x86_64-unwind-annotations: Refresh
   (bnc#588458).

   *

   patches.suse/stack-unwind: Refresh (bnc#588458).

   *

   splice: direct_splice_actor() should not use pos in
   sd (bnc#715763).

   *

   qdio: 2nd stage retry on SIGA-W busy conditions
   (bnc#713138,LTC#74402).

   *

   TTY: pty, fix pty counting (bnc#711203).

   *

   Avoid deadlock in GFP_IO/GFP_FS allocation
   (bnc#632870).

   *

   novfs: fix some DirCache locking issues (bnc#669378).

   * novfs: fix some kmalloc/kfree issues (bnc#669378).
   * novfs: fix off-by-one allocation error (bnc#669378).
   * novfs: unlink directory after unmap (bnc#649625).
   *

   novfs: last modification time not reliable
   (bnc#642896).

   *

   x86 / IO APIC: Reset IRR in clear_IO_APIC_pin()
   (bnc#701686, bnc#667386).

   *

   mptfusion : Added check for SILI bit in READ_6 CDB
   for DATA UNDERRUN ERRATA (bnc #712456).

   *

   xfs: serialise unaligned direct IOs (bnc#707125).

   *

   NFS: Ensure that we handle NFS4ERR_STALE_STATEID
   correctly (bnc#701443).

   * NFSv4: Do not call nfs4_state_mark_reclaim_reboot()
   from error handlers (bnc#701443).
   * NFSv4: Fix open recovery (bnc#701443).
   * NFSv4.1: Do not call nfs4_schedule_state_recovery()
   unnecessarily (bnc#701443).

   Security Issues:

   * CVE-2011-3191
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3191
   >
   * CVE-2011-3353
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3353
   >
   * CVE-2011-2928
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2928
   >

Indications:

   Everyone using the Linux Kernel on x86_64 architecture should update.

Special Instructions and Notes:

   Please reboot the system after installing this update.

Patch Instructions:

   To install this SUSE Security Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   - SUSE Linux Enterprise Server 11 SP1 for VMware:

      zypper in -t patch slessp1-kernel-5219 slessp1-kernel-5223

   - SUSE Linux Enterprise Server 11 SP1:

      zypper in -t patch slessp1-kernel-5219 slessp1-kernel-5220 slessp1-kernel-5221 slessp1-kernel-5222 slessp1-kernel-5223

   - SUSE Linux Enterprise High Availability Extension 11 SP1:

      zypper in -t patch sleshasp1-kernel-5219 sleshasp1-kernel-5220 sleshasp1-kernel-5221 sleshasp1-kernel-5222 sleshasp1-kernel-5223

   - SUSE Linux Enterprise Desktop 11 SP1:

      zypper in -t patch sledsp1-kernel-5219 sledsp1-kernel-5223

   To bring your system up-to-date, use "zypper patch".


Package List:

   - SUSE Linux Enterprise Server 11 SP1 for VMware (i586 x86_64) [New Version: 2.6.32.46]:

      btrfs-kmp-default-0_2.6.32.46_0.3-0.3.57
      ext4dev-kmp-default-0_2.6.32.46_0.3-7.9.24
      hyper-v-kmp-default-0_2.6.32.46_0.3-0.14.11
      kernel-default-2.6.32.46-0.3.1
      kernel-default-base-2.6.32.46-0.3.1
      kernel-default-devel-2.6.32.46-0.3.1
      kernel-source-2.6.32.46-0.3.1
      kernel-syms-2.6.32.46-0.3.1
      kernel-trace-2.6.32.46-0.3.1
      kernel-trace-base-2.6.32.46-0.3.1
      kernel-trace-devel-2.6.32.46-0.3.1

   - SUSE Linux Enterprise Server 11 SP1 for VMware (i586) [New Version: 2.6.32.46]:

      btrfs-kmp-pae-0_2.6.32.46_0.3-0.3.57
      ext4dev-kmp-pae-0_2.6.32.46_0.3-7.9.24
      hyper-v-kmp-pae-0_2.6.32.46_0.3-0.14.11
      kernel-pae-2.6.32.46-0.3.1
      kernel-pae-base-2.6.32.46-0.3.1
      kernel-pae-devel-2.6.32.46-0.3.1

   - SUSE Linux Enterprise Server 11 SP1 (i586 ia64 ppc64 s390x x86_64) [New Version: 2.6.32.46]:

      btrfs-kmp-default-0_2.6.32.46_0.3-0.3.57
      ext4dev-kmp-default-0_2.6.32.46_0.3-7.9.24
      kernel-default-2.6.32.46-0.3.1
      kernel-default-base-2.6.32.46-0.3.1
      kernel-default-devel-2.6.32.46-0.3.1
      kernel-source-2.6.32.46-0.3.1
      kernel-syms-2.6.32.46-0.3.1
      kernel-trace-2.6.32.46-0.3.1
      kernel-trace-base-2.6.32.46-0.3.1
      kernel-trace-devel-2.6.32.46-0.3.1

   - SUSE Linux Enterprise Server 11 SP1 (i586 x86_64) [New Version: 2.6.32.46]:

      btrfs-kmp-xen-0_2.6.32.46_0.3-0.3.57
      ext4dev-kmp-xen-0_2.6.32.46_0.3-7.9.24
      hyper-v-kmp-default-0_2.6.32.46_0.3-0.14.11
      kernel-ec2-2.6.32.46-0.3.1
      kernel-ec2-base-2.6.32.46-0.3.1
      kernel-xen-2.6.32.46-0.3.1
      kernel-xen-base-2.6.32.46-0.3.1
      kernel-xen-devel-2.6.32.46-0.3.1

   - SUSE Linux Enterprise Server 11 SP1 (s390x) [New Version: 2.6.32.46]:

      kernel-default-man-2.6.32.46-0.3.1

   - SUSE Linux Enterprise Server 11 SP1 (ppc64) [New Version: 2.6.32.46]:

      ext4dev-kmp-ppc64-0_2.6.32.46_0.3-7.9.24
      kernel-ppc64-2.6.32.46-0.3.1
      kernel-ppc64-base-2.6.32.46-0.3.1
      kernel-ppc64-devel-2.6.32.46-0.3.1

   - SUSE Linux Enterprise Server 11 SP1 (i586) [New Version: 2.6.32.46]:

      btrfs-kmp-pae-0_2.6.32.46_0.3-0.3.57
      ext4dev-kmp-pae-0_2.6.32.46_0.3-7.9.24
      hyper-v-kmp-pae-0_2.6.32.46_0.3-0.14.11
      kernel-pae-2.6.32.46-0.3.1
      kernel-pae-base-2.6.32.46-0.3.1
      kernel-pae-devel-2.6.32.46-0.3.1

   - SUSE Linux Enterprise High Availability Extension 11 SP1 (i586 ia64 ppc64 s390x x86_64):

      cluster-network-kmp-default-1.4_2.6.32.46_0.3-2.5.9
      gfs2-kmp-default-2_2.6.32.46_0.3-0.2.56
      ocfs2-kmp-default-1.6_2.6.32.46_0.3-0.4.2.9

   - SUSE Linux Enterprise High Availability Extension 11 SP1 (i586 x86_64):

      cluster-network-kmp-xen-1.4_2.6.32.46_0.3-2.5.9
      gfs2-kmp-xen-2_2.6.32.46_0.3-0.2.56
      ocfs2-kmp-xen-1.6_2.6.32.46_0.3-0.4.2.9

   - SUSE Linux Enterprise High Availability Extension 11 SP1 (ppc64):

      cluster-network-kmp-ppc64-1.4_2.6.32.46_0.3-2.5.9
      gfs2-kmp-ppc64-2_2.6.32.46_0.3-0.2.56
      ocfs2-kmp-ppc64-1.6_2.6.32.46_0.3-0.4.2.9

   - SUSE Linux Enterprise High Availability Extension 11 SP1 (i586):

      cluster-network-kmp-pae-1.4_2.6.32.46_0.3-2.5.9
      gfs2-kmp-pae-2_2.6.32.46_0.3-0.2.56
      ocfs2-kmp-pae-1.6_2.6.32.46_0.3-0.4.2.9

   - SUSE Linux Enterprise Desktop 11 SP1 (i586 x86_64) [New Version: 2.6.32.46]:

      btrfs-kmp-default-0_2.6.32.46_0.3-0.3.57
      btrfs-kmp-xen-0_2.6.32.46_0.3-0.3.57
      hyper-v-kmp-default-0_2.6.32.46_0.3-0.14.11
      kernel-default-2.6.32.46-0.3.1
      kernel-default-base-2.6.32.46-0.3.1
      kernel-default-devel-2.6.32.46-0.3.1
      kernel-default-extra-2.6.32.46-0.3.1
      kernel-desktop-devel-2.6.32.46-0.3.1
      kernel-source-2.6.32.46-0.3.1
      kernel-syms-2.6.32.46-0.3.1
      kernel-xen-2.6.32.46-0.3.1
      kernel-xen-base-2.6.32.46-0.3.1
      kernel-xen-devel-2.6.32.46-0.3.1
      kernel-xen-extra-2.6.32.46-0.3.1

   - SUSE Linux Enterprise Desktop 11 SP1 (i586) [New Version: 2.6.32.46]:

      btrfs-kmp-pae-0_2.6.32.46_0.3-0.3.57
      hyper-v-kmp-pae-0_2.6.32.46_0.3-0.14.11
      kernel-pae-2.6.32.46-0.3.1
      kernel-pae-base-2.6.32.46-0.3.1
      kernel-pae-devel-2.6.32.46-0.3.1
      kernel-pae-extra-2.6.32.46-0.3.1


References:

   http://support.novell.com/security/cve/CVE-2011-2928.html
   http://support.novell.com/security/cve/CVE-2011-3191.html
   http://support.novell.com/security/cve/CVE-2011-3353.html
   https://bugzilla.novell.com/588458
   https://bugzilla.novell.com/603804
   https://bugzilla.novell.com/632870
   https://bugzilla.novell.com/642896
   https://bugzilla.novell.com/649625
   https://bugzilla.novell.com/650309
   https://bugzilla.novell.com/667386
   https://bugzilla.novell.com/669378
   https://bugzilla.novell.com/688859
   https://bugzilla.novell.com/694670
   https://bugzilla.novell.com/699354
   https://bugzilla.novell.com/699355
   https://bugzilla.novell.com/699357
   https://bugzilla.novell.com/701443
   https://bugzilla.novell.com/701686
   https://bugzilla.novell.com/704347
   https://bugzilla.novell.com/706557
   https://bugzilla.novell.com/707096
   https://bugzilla.novell.com/707125
   https://bugzilla.novell.com/707737
   https://bugzilla.novell.com/708675
   https://bugzilla.novell.com/708877
   https://bugzilla.novell.com/709412
   https://bugzilla.novell.com/711203
   https://bugzilla.novell.com/711969
   https://bugzilla.novell.com/712456
   https://bugzilla.novell.com/712929
   https://bugzilla.novell.com/713138
   https://bugzilla.novell.com/713430
   https://bugzilla.novell.com/714001
   https://bugzilla.novell.com/714966
   https://bugzilla.novell.com/715235
   https://bugzilla.novell.com/715763
   https://bugzilla.novell.com/716901
   https://bugzilla.novell.com/719117
   https://bugzilla.novell.com/719450
   http://download.novell.com/patch/finder/?keywords=20cb09e23614f5f5085f698cc5bf2e4f
   http://download.novell.com/patch/finder/?keywords=56d0712d83970cf6fe7492bf3330ee2a
   http://download.novell.com/patch/finder/?keywords=94fa14c210d027059a56ea1e31e280c7
   http://download.novell.com/patch/finder/?keywords=959314df0926c9887f7057c56f1d07c1
   http://download.novell.com/patch/finder/?keywords=9a7f6196af0af6d69bc4d0f12e07e44d

- -- 

   SUSE Security Update: kernel update for SLE11 SP1
______________________________________________________________________________

Announcement ID:    SUSE-SU-2011:1101-1
Rating:             important
References:         #588458 #603804 #632870 #642896 #649625 #667386 
                    #669378 #688859 #694670 #699354 #699357 #701443 
                    #701686 #704347 #706557 #707096 #707125 #707737 
                    #708675 #708877 #709412 #711203 #711969 #712456 
                    #712929 #713138 #713430 #714001 #714966 #715235 
                    #715763 #716901 #719117 
Cross-References:   CVE-2011-2928 CVE-2011-3191 CVE-2011-3353
                   
Affected Products:
                    SLE 11 SERVER Unsupported Extras
______________________________________________________________________________

   An update that solves three vulnerabilities and has 30
   fixes is now available.

Description:

   The SUSE Linux Enterprise 11 Service Pack 1 kernel was
   updated to 2.6.32.46 and fixes various bugs and security
   issues.

   Following security issues were fixed: CVE-2011-3191: A
   signedness issue in CIFS could possibly have lead to to
   memory corruption, if a malicious server could send crafted
   replies to the host.

   CVE-2011-3353: In the fuse filesystem,
   FUSE_NOTIFY_INVAL_ENTRY did not check the length of the
   write so the message processing could overrun and result in
   a BUG_ON() in fuse_copy_fill(). This flaw could be used by
   local users able to mount FUSE filesystems to crash the
   system.

   CVE-2011-2928: The befs_follow_link function in
   fs/befs/linuxvfs.c in the Linux kernel did not validate the
   length attribute of long symlinks, which allowed local
   users to cause a denial of service (incorrect pointer
   dereference and OOPS) by accessing a long symlink on a
   malformed Be filesystem.

   Also the following non security bugs were fixed:
   - Added a missing reset for ioc_reset_in_progress in
   SoftReset in the mtpsas driver (bnc#711969).

   - Add support for the Digi/IBM PCIe 2-port Adapter
   (bnc#708675).

   - Always enable MSI-X on 5709 (bnc#707737).

   - sched: fix broken SCHED_RESET_ON_FORK handling
   (bnc#708877).

   - sched: Fix rt_rq runtime leakage bug (bnc#707096).

   - ACPI: allow passing down C1 information if no other
   C-states exist.

   - KDB: turn off kdb usb support by default (bnc#694670
   bnc#603804).

   - xfs: Added event tracing support.
   - xfs: fix xfs_fsblock_t tracing.

   - igb: extend maximum frame size to receive VLAN tagged
   frames (bnc#688859).

   - cfq: Do not allow queue merges for queues that have no
   process references (bnc#712929).
   - cfq: break apart merged cfqqs if they stop cooperating
   (bnc#712929).
   - cfq: calculate the seek_mean per cfq_queue not per
   cfq_io_context (bnc#712929).
   - cfq: change the meaning of the cfqq_coop flag
   (bnc#712929).
   - cfq-iosched: get rid of the coop_preempt flag
   (bnc#712929).
   - cfq: merge cooperating cfq_queues (bnc#712929).

   - Fix FDDI and TR config checks in ipv4 arp and LLC
   (bnc#715235).

   - writeback: do uninterruptible sleep in
   balance_dirty_pages() (bnc#699354 bnc#699357).
   - xfs: fix memory reclaim recursion deadlock on locked
   inode buffer (bnc#699355 bnc#699354).
   - xfs: use GFP_NOFS for page cache allocation (bnc#699355
   bnc#699354).

   - virtio-net: init link state correctly (bnc#714966).

   - cpufreq: pcc-cpufreq: sanity check to prevent a NULL
   pointer dereference (bnc#709412).

   - x86: ucode-amd: Do not warn when no ucode is available
   for a CPU

   - patches.arch/x86_64-unwind-annotations: Refresh
   (bnc#588458).
   - patches.suse/stack-unwind: Refresh (bnc#588458).

   - splice: direct_splice_actor() should not use pos in sd
   (bnc#715763).

   - qdio: 2nd stage retry on SIGA-W busy conditions
   (bnc#713138,LTC#74402).

   - TTY: pty, fix pty counting (bnc#711203).

   - Avoid deadlock in GFP_IO/GFP_FS allocation (bnc#632870).

   - novfs: fix some DirCache locking issues (bnc#669378).
   - novfs: fix some kmalloc/kfree issues (bnc#669378).
   - novfs: fix off-by-one allocation error (bnc#669378).
   - novfs: unlink directory after unmap (bnc#649625).
   - novfs: last modification time not reliable (bnc#642896).

   - x86 / IO APIC: Reset IRR in clear_IO_APIC_pin()
   (bnc#701686, bnc#667386).

   - mptfusion : Added check for SILI bit in READ_6 CDB for
   DATA UNDERRUN ERRATA (bnc #712456).

   - xfs: serialise unaligned direct IOs (bnc#707125).

   - NFS: Ensure that we handle NFS4ERR_STALE_STATEID
   correctly (bnc#701443).
   - NFSv4: Do not call nfs4_state_mark_reclaim_reboot() from
   error handlers (bnc#701443).
   - NFSv4: Fix open recovery (bnc#701443).
   - NFSv4.1: Do not call nfs4_schedule_state_recovery()
   unnecessarily (bnc#701443).

Special Instructions and Notes:

   Please reboot the system after installing this update.

Package List:

   - SLE 11 SERVER Unsupported Extras (i586 ia64 ppc64 s390x x86_64):

      kernel-default-extra-2.6.32.46-0.3.1

   - SLE 11 SERVER Unsupported Extras (i586 x86_64):

      kernel-xen-extra-2.6.32.46-0.3.1

   - SLE 11 SERVER Unsupported Extras (ppc64):

      kernel-ppc64-extra-2.6.32.46-0.3.1

   - SLE 11 SERVER Unsupported Extras (i586):

      kernel-pae-extra-2.6.32.46-0.3.1

References:

   http://support.novell.com/security/cve/CVE-2011-2928.html
   http://support.novell.com/security/cve/CVE-2011-3191.html
   http://support.novell.com/security/cve/CVE-2011-3353.html
   https://bugzilla.novell.com/588458
   https://bugzilla.novell.com/603804
   https://bugzilla.novell.com/632870
   https://bugzilla.novell.com/642896
   https://bugzilla.novell.com/649625
   https://bugzilla.novell.com/667386
   https://bugzilla.novell.com/669378
   https://bugzilla.novell.com/688859
   https://bugzilla.novell.com/694670
   https://bugzilla.novell.com/699354
   https://bugzilla.novell.com/699357
   https://bugzilla.novell.com/701443
   https://bugzilla.novell.com/701686
   https://bugzilla.novell.com/704347
   https://bugzilla.novell.com/706557
   https://bugzilla.novell.com/707096
   https://bugzilla.novell.com/707125
   https://bugzilla.novell.com/707737
   https://bugzilla.novell.com/708675
   https://bugzilla.novell.com/708877
   https://bugzilla.novell.com/709412
   https://bugzilla.novell.com/711203
   https://bugzilla.novell.com/711969
   https://bugzilla.novell.com/712456
   https://bugzilla.novell.com/712929
   https://bugzilla.novell.com/713138
   https://bugzilla.novell.com/713430
   https://bugzilla.novell.com/714001
   https://bugzilla.novell.com/714966
   https://bugzilla.novell.com/715235
   https://bugzilla.novell.com/715763
   https://bugzilla.novell.com/716901
   https://bugzilla.novell.com/719117
   http://download.novell.com/patch/finder/?keywords=0077a9d97a9220061e5c5383b6a91b6a
   http://download.novell.com/patch/finder/?keywords=17c299ec5c72561013e394661e8c1774
   http://download.novell.com/patch/finder/?keywords=ae7e4cdc32d427f458768606f08979a1
   http://download.novell.com/patch/finder/?keywords=e18fc5d18fa6afec4316bbd22c7968cc
   http://download.novell.com/patch/finder/?keywords=fe7c633311f0a14664b71dab2a1bf490

- --

- --------------------------END INCLUDED TEXT--------------------

You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.

NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members.  As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.

NOTE: This is only the original release of the security bulletin.  It may
not be updated when updates to the original are made.  If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.

Contact information for the authors of the original document is included
in the Security Bulletin above.  If you have any questions or need further
information, please contact them directly.

Previous advisories and external security bulletins can be retrieved from:

        http://www.auscert.org.au/render.html?cid=1980

===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072

Internet Email: auscert@auscert.org.au
Facsimile:      (07) 3365 7031
Telephone:      (07) 3365 4417 (International: +61 7 3365 4417)
                AusCERT personnel answer during Queensland business hours
                which are GMT+10:00 (AEST).
                On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967
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=6bPO
-----END PGP SIGNATURE-----