Security update for ofed
SUSE Security Update: Security update for ofed
This update of ofed fixed multiple issues (including
security related flaws):
* sdp: move histogram allocation from stack to heap
(bnc#706175)
* cma: Fix crash in request handlers (bnc#678795,
CVE-2011-0695)
* rds: set correct msg_namelen (bnc#773383,
CVE-2012-3430)
* cm: Bump reference count on cm_id before invoking
(bnc#678795, CVE-2011-0695)
* sdp / ipath: Added fixes for 64bit divide on 32bit
builds
* updated Infiniband sysconfig file to match openibd
(bnc#721597)
Security Issue reference:
* CVE-2012-3430
>
| Announcement ID: | SUSE-SU-2012:1708-1 |
| Rating: | moderate |
| References: | #676724 #678795 #706175 #721597 #773383 |
| Affected Products: |
An update that solves one vulnerability and has four fixes is now available.
Description:
This update of ofed fixed multiple issues (including
security related flaws):
* sdp: move histogram allocation from stack to heap
(bnc#706175)
* cma: Fix crash in request handlers (bnc#678795,
CVE-2011-0695)
* rds: set correct msg_namelen (bnc#773383,
CVE-2012-3430)
* cm: Bump reference count on cm_id before invoking
(bnc#678795, CVE-2011-0695)
* sdp / ipath: Added fixes for 64bit divide on 32bit
builds
* updated Infiniband sysconfig file to match openibd
(bnc#721597)
Security Issue reference:
* CVE-2012-3430
Package List:
- SUSE Linux Enterprise Server 10 SP4 (i586 ia64 ppc x86_64):
- ofed-1.5.2-0.12.1
- ofed-cxgb3-NIC-kmp-default-1.5.2_2.6.16.60_0.99.13-0.12.1
- ofed-doc-1.5.2-0.12.1
- ofed-kmp-default-1.5.2_2.6.16.60_0.99.13-0.12.1
- SUSE Linux Enterprise Server 10 SP4 (i586 ia64 x86_64):
- ofed-cxgb3-NIC-kmp-debug-1.5.2_2.6.16.60_0.99.13-0.12.1
- ofed-kmp-debug-1.5.2_2.6.16.60_0.99.13-0.12.1
- SUSE Linux Enterprise Server 10 SP4 (i586 ppc x86_64):
- ofed-cxgb3-NIC-kmp-kdump-1.5.2_2.6.16.60_0.99.13-0.12.1
- ofed-kmp-kdump-1.5.2_2.6.16.60_0.99.13-0.12.1
- SUSE Linux Enterprise Server 10 SP4 (i586 x86_64):
- ofed-cxgb3-NIC-kmp-smp-1.5.2_2.6.16.60_0.99.13-0.12.1
- ofed-kmp-smp-1.5.2_2.6.16.60_0.99.13-0.12.1
- SUSE Linux Enterprise Server 10 SP4 (i586):
- ofed-cxgb3-NIC-kmp-bigsmp-1.5.2_2.6.16.60_0.99.13-0.12.1
- ofed-cxgb3-NIC-kmp-kdumppae-1.5.2_2.6.16.60_0.99.13-0.12.1
- ofed-cxgb3-NIC-kmp-vmi-1.5.2_2.6.16.60_0.99.13-0.12.1
- ofed-cxgb3-NIC-kmp-vmipae-1.5.2_2.6.16.60_0.99.13-0.12.1
- ofed-kmp-bigsmp-1.5.2_2.6.16.60_0.99.13-0.12.1
- ofed-kmp-kdumppae-1.5.2_2.6.16.60_0.99.13-0.12.1
- ofed-kmp-vmi-1.5.2_2.6.16.60_0.99.13-0.12.1
- ofed-kmp-vmipae-1.5.2_2.6.16.60_0.99.13-0.12.1
- SUSE Linux Enterprise Server 10 SP4 (ppc):
- ofed-cxgb3-NIC-kmp-ppc64-1.5.2_2.6.16.60_0.99.13-0.12.1
- ofed-kmp-ppc64-1.5.2_2.6.16.60_0.99.13-0.12.1
- SLE SDK 10 SP4 (i586 ia64 ppc x86_64):
- ofed-devel-1.5.2-0.12.1
References:
- http://support.novell.com/security/cve/CVE-2012-3430.html
- https://bugzilla.novell.com/676724
- https://bugzilla.novell.com/678795
- https://bugzilla.novell.com/706175
- https://bugzilla.novell.com/721597
- https://bugzilla.novell.com/773383
- http://download.suse.com/patch/finder/?keywords=e928539d6bca959aca91d810ff33a425