Security update for OFED

SUSE Security Update: Security update for OFED
Announcement ID: SUSE-SU-2013:0713-1
Rating: moderate
References: #767610
Affected Products:
  • SUSE Linux Enterprise Server 10 SP4
  • SLE SDK 10 SP4

  • An update that fixes one vulnerability is now available.

    Description:


    rds-ping in the OFED stack could have triggered a kernel
    BUG, which could have caused a local denial of service
    attack. (CVE-2012-2372)

    Security Issue reference:

    * CVE-2012-2372
    >

    Package List:

    • SUSE Linux Enterprise Server 10 SP4 (ia64 x86_64):
    • ofed-1.5.2-0.14.3
    • ofed-cxgb3-NIC-kmp-debug-1.5.2_2.6.16.60_0.99.38-0.14.2
    • ofed-cxgb3-NIC-kmp-default-1.5.2_2.6.16.60_0.99.38-0.14.2
    • ofed-doc-1.5.2-0.14.3
    • ofed-kmp-debug-1.5.2_2.6.16.60_0.99.38-0.14.3
    • ofed-kmp-default-1.5.2_2.6.16.60_0.99.38-0.14.3
    • SUSE Linux Enterprise Server 10 SP4 (i586 ppc):
    • ofed-1.5.2-0.14.1
    • ofed-cxgb3-NIC-kmp-default-1.5.2_2.6.16.60_0.99.36-0.14.1
    • ofed-cxgb3-NIC-kmp-kdump-1.5.2_2.6.16.60_0.99.36-0.14.1
    • ofed-doc-1.5.2-0.14.1
    • ofed-kmp-default-1.5.2_2.6.16.60_0.99.36-0.14.1
    • ofed-kmp-kdump-1.5.2_2.6.16.60_0.99.36-0.14.1
    • SUSE Linux Enterprise Server 10 SP4 (x86_64):
    • ofed-cxgb3-NIC-kmp-kdump-1.5.2_2.6.16.60_0.99.38-0.14.2
    • ofed-cxgb3-NIC-kmp-smp-1.5.2_2.6.16.60_0.99.38-0.14.2
    • ofed-kmp-kdump-1.5.2_2.6.16.60_0.99.38-0.14.3
    • ofed-kmp-smp-1.5.2_2.6.16.60_0.99.38-0.14.3
    • SUSE Linux Enterprise Server 10 SP4 (i586):
    • ofed-cxgb3-NIC-kmp-bigsmp-1.5.2_2.6.16.60_0.99.36-0.14.1
    • ofed-cxgb3-NIC-kmp-debug-1.5.2_2.6.16.60_0.99.36-0.14.1
    • ofed-cxgb3-NIC-kmp-kdumppae-1.5.2_2.6.16.60_0.99.36-0.14.1
    • ofed-cxgb3-NIC-kmp-smp-1.5.2_2.6.16.60_0.99.36-0.14.1
    • ofed-cxgb3-NIC-kmp-vmi-1.5.2_2.6.16.60_0.99.36-0.14.1
    • ofed-cxgb3-NIC-kmp-vmipae-1.5.2_2.6.16.60_0.99.36-0.14.1
    • ofed-kmp-bigsmp-1.5.2_2.6.16.60_0.99.36-0.14.1
    • ofed-kmp-debug-1.5.2_2.6.16.60_0.99.36-0.14.1
    • ofed-kmp-kdumppae-1.5.2_2.6.16.60_0.99.36-0.14.1
    • ofed-kmp-smp-1.5.2_2.6.16.60_0.99.36-0.14.1
    • ofed-kmp-vmi-1.5.2_2.6.16.60_0.99.36-0.14.1
    • ofed-kmp-vmipae-1.5.2_2.6.16.60_0.99.36-0.14.1
    • SUSE Linux Enterprise Server 10 SP4 (ppc):
    • ofed-cxgb3-NIC-kmp-ppc64-1.5.2_2.6.16.60_0.99.36-0.14.1
    • ofed-kmp-ppc64-1.5.2_2.6.16.60_0.99.36-0.14.1
    • SLE SDK 10 SP4 (ia64 x86_64):
    • ofed-devel-1.5.2-0.14.3
    • SLE SDK 10 SP4 (i586 ppc):
    • ofed-devel-1.5.2-0.14.1

    References:

    • http://support.novell.com/security/cve/CVE-2012-2372.html
    • https://bugzilla.novell.com/767610
    • http://download.suse.com/patch/finder/?keywords=b49853a37fed1bd24d9f0c87f66fc4d7