SuSE 11.2 Security Update : Linux kernel (SAT Patch Numbers 6923 / 6926 / 6931)

This script is Copyright (C) 2013 Tenable Network Security, Inc.


Synopsis :

The remote SuSE 11 host is missing one or more security updates.

Description :

The SUSE Linux Enterprise 11 SP2 kernel was updated to 3.0.42 which
fixes various bugs and security issues.

The following security issues have been fixed :

- A denial of service in key management was fixed. (This
was fixed in 3.0.28 already, but is listed here.) Some
more security and bug fixes might already be part of the
3.0.42 stable kernel release which is included here.
(CVE-2012-2745)

The following non security issues have been fixed :

BTRFS :

- btrfs: allow setting NOCOW for a zero sized file via
ioctl

- btrfs: fix a bug of per-file nocow

- btrfs: fix the missing error information in
create_pending_snapshot()

- btrfs: fix off-by-one in file clone

- btrfs: move transaction aborts to the point of failure

- btrfs: fix unnecessary warning when the fragments make
the space alloc fail

- btrfs: return EPERM upon rmdir on a subvolume

- btrfs: cleanup for duplicated code in find_free_extent

- btrfs: cleanup fs_info->hashers

- btrfs: use vfree instead of kfree

- btrfs: fix error path in create_pending_snapshot()

- btrfs: fix file extent discount problem in the, snapshot

- btrfs: fix full backref problem when inserting shared
block reference

- btrfs: fix wrong size for the reservation of the,
snapshot creation

- btrfs: fix error handling in delete_block_group_cache()

- btrfs: polish names of kmem caches

- btrfs: update last trans if we do not update the inode

- btrfs: fix possible corruption when fsyncing written
prealloced extents

- btrfs: set journal_info in async trans commit worker

- btrfs: fix a bug in parsing return value in logical
resolve

- btrfs: use helper for logical resolve

- btrfs: use larger limit for translation of logical to
inode

- btrfs: use a slab for ordered extents allocation

- btrfs: fix unprotected ->log_batch

- btrfs: output more information when aborting a unused
transaction handle

- btrfs: fix wrong size for the reservation when doing,
file pre-allocation

- btrfs: cleanup for unused ref cache stuff

- btrfs: fix a misplaced address operator in a condition

- btrfs: fix that error value is changed by mistake

- btrfs: fix second lock in btrfs_delete_delayed_items()

- btrfs: increase the size of the free space cache

- btrfs: fix enospc problems when deleting a subvol

- btrfs: fix wrong mtime and ctime when creating snapshots

- btrfs: fix race in run_clustered_refs S/390 :

- zfcp: remove invalid reference to list iterator
variable. (bnc#779461)

- zfcp: Make trace record tags unique
(bnc#780012,LTC#84941).

- zfcp: Do not wakeup while suspended
(bnc#780012,LTC#84816).

- zfcp: restore refcount check on port_remove
(bnc#780012,LTC#84942).

- zfcp: No automatic port_rescan on events
(bnc#780012,LTC#84817).

- dasd: System hang after all channel were lost
(bnc#780012,LTC#85025).

- Added patches.arch/s390-54-01-hypfs-missing-files.patch
to series.conf. (bnc#769407)

- dasd: set and unset TIMEOUT flag automatically.
(bnc#768084)

- kernel: incorrect task size after fork of a 31 bit
process (bnc#772407,LTC#83674).

- patches.arch/s390-55-03-crst-table-downgrade.patch:
Deleted due to 31bit compile error. ALSA :

- ALSA: hda - Add mic-mute LED control for HP laptop.
(bnc#779330)

- ALSA: hda - Add 3stack-automute model to AD1882 codec
(bnc#775373). Wireless :

- rt2x00: Remove incorrect led blink. (bnc#774902)

- Revert 'rt2x00: handle spurious pci interrupts'.
(bnc#774902)

- rt2x00: Mark active channels survey data as 'in use'.
(bnc#774902)

- rt2x00: Convert big if-statements to switch-statements.
(bnc#774902)

- rt2800: zero MAC_SYS_CTRL bits during BBP and MAC reset.
(bnc#774902)

- rt2800lib: fix wrong -128dBm when signal is stronger
than -12dBm. (bnc#774902)

- rt2800: document RF_R03 register bits [7:4].
(bnc#774902)

- rt2x00: Introduce concept of driver data in struct
rt2x00_dev. (bnc#774902)

- rt2x00: Use struct rt2x00_dev driver data in
rt2800{pci,usb}. (bnc#774902)

- rt2x00: fix a possible NULL pointer dereference.
(bnc#774902)

- rt2x00:Add VCO recalibration. (bnc#774902)

- rt2x00:Add RT5372 chipset support. (bnc#774902)

- rt2x00: Set IEEE80211_HW_REPORTS_TX_ACK_STATUS in
rt2800. (bnc#774902)

- rt2800: introduce wpdma_disable function. (bnc#774902)

- rt2800: initialize queues before giving up due to DMA
error. (bnc#774902)

- rt2800: zero registers of unused TX rings. (bnc#774902)

- wireless: rt2x00: rt2800pci add more RT539x ids.
(bnc#774902)

- rt2x00:Add RT5392 chipset support. (bnc#774902)

-
patches.fixes/0012-rt2x00-Add-RT5372-chipset-support.pat
ch: Fix typo.

- rt2800: Add documentation on MCU requests. (bnc#744198)

- rt2800pci: Fix 'Error - MCU request failed' during
initialization. (bnc#744198) Packaging :

- rpm/kernel-binary.spec.in: Temporarily disable icecream
builds until miscompilation is resolved. (bnc#763954 /
bnc#773831)

- rpm/kernel-binary.spec.in: add Conflicts for older
hyper-v hv_kvp_daemon (bnc#770763) the kernel-user
interface changed, old binaries will busyloop with newer
kernel

- rpm/kernel-binary.spec.in: Do not run debugedit -i, use
eu-unstrip to retrieve the build-id instead.
(bnc#768504)

- rpm/kernel-binary.spec.in: Fix Obsoletes: tag for the
SLE11-SP1 realtek-r8192ce_pci-kmp package. Misc

- patches.suse/no-partition-scan: Implement
'no_partition_scan' commandline option (FATE#303697).

- vfs: dcache: use DCACHE_DENTRY_KILLED instead of
DCACHE_DISCONNECTED in d_kill(). (bnc#779699)

- igb: convert to ndo_fix_features. (bnc#777269)

- igb: do vlan cleanup. (bnc#777269)

- tcp: flush DMA queue before sk_wait_data if rcv_wnd is
zero. (bnc#777024)

- drm: Export drm_probe_ddc(). (bnc#780461)

- drm/dp: Update DPCD defines. (bnc#780461)

- drm/i915/dp: Be smarter about connection sense for
branch devices. (bnc#780461)

- drm/i915/dp: Fetch downstream port info if needed during
DPCD fetch. (bnc#780461)

- md: fix so that GET_ARRAY_INFO and GET_DISK_INFO fail
correctly when array has not 'raid_disks' count yet.

- sched: Fix ancient race in do_exit(). (bnc#781018)

- sched: fix divide by zero in thread_group/task_times().
(bnc#761774)

- sched: fix migration thread runtime bogosity.
(bnc#773688, bnc#769251)

- megaraid_sas: boot hangs up while LD is offline issue.
(bnc#698102)

- memcg: warn on deeper hierarchies with use_hierarchy==0.
(bnc#781134)

- scsi_dh_alua: Retry the check-condition in case Mode
Parameters Changed. (bnc#772473)

- scsi: update scsi.h with SYNCHRONIZE_CACHE_16
(FATE#313550,bnc#769195).

- sd: Reshuffle init_sd to avoid crash. (bnc#776787)

- st: remove st_mutex. (bnc#773007)

- cifs: Assume passwords are encoded according to
iocharset (try #2). (bnc#731035)

- drm/fb-helper: delay hotplug handling when partially
bound. (bnc#778822)

- drm/fb helper: do not call drm_crtc_helper_set_config.
(bnc#778822)

- patches.drivers/drm-Skip-too-big-EDID-extensions:
Delete. Fixed in firmware, so no longer needed.
(bnc#764900)

- drm/i915: Fix backlight control for systems which have
bl polarity reversed. (bnc#766156)

- patches.kernel.org/patch-3.0.27-28: Update references.
(bnc#770695 / CVE-2012-2745)

- xen/x86-64: fix hypercall page unwind info.

- patches.xen/xen3-patch-3.0.40-41: Linux 3.0.41.

- Refresh other Xen patches. (bnc#776019)

- e1000e: clear REQ and GNT in EECD (82571 &&
82572). (bnc#762099)

- bonding: add some slack to arp monitoring time limits.
(bnc#776095)

- patches.arch/x2apic_opt_out.patch: Refresh. (bnc#778082)

- x86, mce: Do not call del_timer_sync() in IRQ context.
(bnc#776896)

- cpufreq / ACPI: Fix not loading acpi-cpufreq driver
regression. (bnc#766654)

- ida: Update references. (bnc#740291)

- audit: do not free_chunk() after fsnotify_add_mark().
(bnc#762214)

- audit: fix refcounting in audit-tree. (bnc#762214)

- mlx4_en: map entire pages to increase throughput.

- usb: Add support for root hub port status CAS.
(bnc#774289)

- fs,reiserfs: unlock superblock before calling
reiserfs_quota_on_mount(). (bnc#772786)

- reiserfs: fix deadlock with nfs racing on create/lookup.
(bnc#762693)

- NFS: Slow down state manager after an unhandled error.
(bnc#774973)

- nfs: increase number of permitted callback connections.
(bnc#771706)

- Freezer / sunrpc / NFS: do not allow TASK_KILLABLE
sleeps to block the freezer. (bnc#775182)

- powerpc/pseries: Support lower minimum entitlement for
virtual processors. (bnc#775984)

- powerpc: Disable /dev/port interface on systems without
an ISA bridge. (bnc#754670)

- ocfs2: Add a missing journal credit in
ocfs2_link_credits() -v2. (bnc#773320)

- block: do not artificially constrain max_sectors for
stacking drivers. (bnc#774073)

- bnx2x: Clear MDC/MDIO warning message. (bnc#769035)

- bnx2x: Fix BCM57810-KR AN speed transition. (bnc#769035)

- bnx2x: Fix BCM57810-KR FC. (bnc#769035)

- bnx2x: Fix BCM578x0-SFI pre-emphasis settings.
(bnc#769035)

- bnx2x: Fix link issue for BCM8727 boards. (bnc#769035)

- bnx2x: PFC fix. (bnc#769035)

- bnx2x: fix checksum validation. (bnc#769035)

- bnx2x: fix panic when TX ring is full. (bnc#769035)

- bnx2x: previous driver unload revised. (bnc#769035)

- bnx2x: remove WARN_ON. (bnc#769035)

- bnx2x: update driver version. (bnc#769035)

- xhci: Fix a logical vs bitwise AND bug. (bnc#772427)

- xhci: Switch PPT ports to EHCI on shutdown. (bnc#772427)

- xhci: definitions of register definitions to preserve
kABI. (bnc#772427)

- xhci: Introduce a private switchback method to preserve
kABI. (bnc#772427)

- config.conf: Drop reference to a s390 vanilla config
that does not exist.

- block: eliminate potential for infinite loop in
blkdev_issue_discard. (bnc#773319)

- Fix cosmetic (but worrisome to users) stop class
accounting bug.

- bluetooth: Another vendor specific ID for BCM20702A0
[0a5c:21f1]. (bnc#774612)

- memcg: further prevent OOM with too many dirty pages.
(bnc#763198)

-
patches.fixes/mm-consider-PageReclaim-for-sync-reclaim.p
atch: Refresh to match the upstream version.

- tmpfs: optimize clearing when writing (VM Performance).

- tmpfs: distribute interleave better across nodes.
(bnc#764209)

-
patches.fixes/tmpfs-implement-NUMA-node-interleaving.pat
ch: dropped in favor of the upstream patch

See also :

https://bugzilla.novell.com/show_bug.cgi?id=698102
https://bugzilla.novell.com/show_bug.cgi?id=731035
https://bugzilla.novell.com/show_bug.cgi?id=740291
https://bugzilla.novell.com/show_bug.cgi?id=744198
https://bugzilla.novell.com/show_bug.cgi?id=753617
https://bugzilla.novell.com/show_bug.cgi?id=754670
https://bugzilla.novell.com/show_bug.cgi?id=761774
https://bugzilla.novell.com/show_bug.cgi?id=762099
https://bugzilla.novell.com/show_bug.cgi?id=762214
https://bugzilla.novell.com/show_bug.cgi?id=762693
https://bugzilla.novell.com/show_bug.cgi?id=763198
https://bugzilla.novell.com/show_bug.cgi?id=763954
https://bugzilla.novell.com/show_bug.cgi?id=764209
https://bugzilla.novell.com/show_bug.cgi?id=764900
https://bugzilla.novell.com/show_bug.cgi?id=766156
https://bugzilla.novell.com/show_bug.cgi?id=766654
https://bugzilla.novell.com/show_bug.cgi?id=768084
https://bugzilla.novell.com/show_bug.cgi?id=768504
https://bugzilla.novell.com/show_bug.cgi?id=769035
https://bugzilla.novell.com/show_bug.cgi?id=769195
https://bugzilla.novell.com/show_bug.cgi?id=769251
https://bugzilla.novell.com/show_bug.cgi?id=769407
https://bugzilla.novell.com/show_bug.cgi?id=770034
https://bugzilla.novell.com/show_bug.cgi?id=770695
https://bugzilla.novell.com/show_bug.cgi?id=770763
https://bugzilla.novell.com/show_bug.cgi?id=771706
https://bugzilla.novell.com/show_bug.cgi?id=772407
https://bugzilla.novell.com/show_bug.cgi?id=772427
https://bugzilla.novell.com/show_bug.cgi?id=772473
https://bugzilla.novell.com/show_bug.cgi?id=772786
https://bugzilla.novell.com/show_bug.cgi?id=772831
https://bugzilla.novell.com/show_bug.cgi?id=773007
https://bugzilla.novell.com/show_bug.cgi?id=773319
https://bugzilla.novell.com/show_bug.cgi?id=773320
https://bugzilla.novell.com/show_bug.cgi?id=773688
https://bugzilla.novell.com/show_bug.cgi?id=773831
https://bugzilla.novell.com/show_bug.cgi?id=774073
https://bugzilla.novell.com/show_bug.cgi?id=774289
https://bugzilla.novell.com/show_bug.cgi?id=774612
https://bugzilla.novell.com/show_bug.cgi?id=774902
https://bugzilla.novell.com/show_bug.cgi?id=774973
https://bugzilla.novell.com/show_bug.cgi?id=775182
https://bugzilla.novell.com/show_bug.cgi?id=775373
https://bugzilla.novell.com/show_bug.cgi?id=775984
https://bugzilla.novell.com/show_bug.cgi?id=776019
https://bugzilla.novell.com/show_bug.cgi?id=776095
https://bugzilla.novell.com/show_bug.cgi?id=776787
https://bugzilla.novell.com/show_bug.cgi?id=776896
https://bugzilla.novell.com/show_bug.cgi?id=777024
https://bugzilla.novell.com/show_bug.cgi?id=777269
https://bugzilla.novell.com/show_bug.cgi?id=778082
https://bugzilla.novell.com/show_bug.cgi?id=778822
https://bugzilla.novell.com/show_bug.cgi?id=779330
https://bugzilla.novell.com/show_bug.cgi?id=779461
https://bugzilla.novell.com/show_bug.cgi?id=779699
https://bugzilla.novell.com/show_bug.cgi?id=780012
https://bugzilla.novell.com/show_bug.cgi?id=780461
https://bugzilla.novell.com/show_bug.cgi?id=781018
https://bugzilla.novell.com/show_bug.cgi?id=781134
http://support.novell.com/security/cve/CVE-2012-2745.html

Solution :

Apply SAT patch number 6923 / 6926 / 6931 as appropriate.

Risk factor :

Medium / CVSS Base Score : 4.7
(CVSS2#AV:L/AC:M/Au:N/C:N/I:N/A:C)

Family: SuSE Local Security Checks

Nessus Plugin ID: 64179 ()

Bugtraq ID:

CVE ID: CVE-2012-2745

Ready to Amp Up Your Nessus Experience?

Get Nessus Professional to scan unlimited IPs, run compliance checks & more

Buy Nessus Professional Now