SUSE-SU-2013:0713-1: moderate: Security update for OFED

[sle-security-updates at lists.suse.com]

   SUSE Security Update: Security update for OFED
______________________________________________________________________________

Announcement ID:    SUSE-SU-2013:0713-1
Rating:             moderate
References:         #767610 
Cross-References:   CVE-2012-2372
Affected Products:
                    SUSE Linux Enterprise Server 10 SP4
                    SLE SDK 10 SP4
______________________________________________________________________________

   An update that fixes one vulnerability is now available.

Description:


   rds-ping in the OFED stack could have triggered a kernel
   BUG, which could  have caused a local denial of service
   attack. (CVE-2012-2372)

   Security Issue reference:

   * CVE-2012-2372
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2372
   >



Package List:

   - SUSE Linux Enterprise Server 10 SP4 (ia64 x86_64):

      ofed-1.5.2-0.14.3
      ofed-cxgb3-NIC-kmp-debug-1.5.2_2.6.16.60_0.99.38-0.14.2
      ofed-cxgb3-NIC-kmp-default-1.5.2_2.6.16.60_0.99.38-0.14.2
      ofed-doc-1.5.2-0.14.3
      ofed-kmp-debug-1.5.2_2.6.16.60_0.99.38-0.14.3
      ofed-kmp-default-1.5.2_2.6.16.60_0.99.38-0.14.3

   - SUSE Linux Enterprise Server 10 SP4 (i586 ppc):

      ofed-1.5.2-0.14.1
      ofed-cxgb3-NIC-kmp-default-1.5.2_2.6.16.60_0.99.36-0.14.1
      ofed-cxgb3-NIC-kmp-kdump-1.5.2_2.6.16.60_0.99.36-0.14.1
      ofed-doc-1.5.2-0.14.1
      ofed-kmp-default-1.5.2_2.6.16.60_0.99.36-0.14.1
      ofed-kmp-kdump-1.5.2_2.6.16.60_0.99.36-0.14.1

   - SUSE Linux Enterprise Server 10 SP4 (x86_64):

      ofed-cxgb3-NIC-kmp-kdump-1.5.2_2.6.16.60_0.99.38-0.14.2
      ofed-cxgb3-NIC-kmp-smp-1.5.2_2.6.16.60_0.99.38-0.14.2
      ofed-kmp-kdump-1.5.2_2.6.16.60_0.99.38-0.14.3
      ofed-kmp-smp-1.5.2_2.6.16.60_0.99.38-0.14.3

   - SUSE Linux Enterprise Server 10 SP4 (i586):

      ofed-cxgb3-NIC-kmp-bigsmp-1.5.2_2.6.16.60_0.99.36-0.14.1
      ofed-cxgb3-NIC-kmp-debug-1.5.2_2.6.16.60_0.99.36-0.14.1
      ofed-cxgb3-NIC-kmp-kdumppae-1.5.2_2.6.16.60_0.99.36-0.14.1
      ofed-cxgb3-NIC-kmp-smp-1.5.2_2.6.16.60_0.99.36-0.14.1
      ofed-cxgb3-NIC-kmp-vmi-1.5.2_2.6.16.60_0.99.36-0.14.1
      ofed-cxgb3-NIC-kmp-vmipae-1.5.2_2.6.16.60_0.99.36-0.14.1
      ofed-kmp-bigsmp-1.5.2_2.6.16.60_0.99.36-0.14.1
      ofed-kmp-debug-1.5.2_2.6.16.60_0.99.36-0.14.1
      ofed-kmp-kdumppae-1.5.2_2.6.16.60_0.99.36-0.14.1
      ofed-kmp-smp-1.5.2_2.6.16.60_0.99.36-0.14.1
      ofed-kmp-vmi-1.5.2_2.6.16.60_0.99.36-0.14.1
      ofed-kmp-vmipae-1.5.2_2.6.16.60_0.99.36-0.14.1

   - SUSE Linux Enterprise Server 10 SP4 (ppc):

      ofed-cxgb3-NIC-kmp-ppc64-1.5.2_2.6.16.60_0.99.36-0.14.1
      ofed-kmp-ppc64-1.5.2_2.6.16.60_0.99.36-0.14.1

   - SLE SDK 10 SP4 (ia64 x86_64):

      ofed-devel-1.5.2-0.14.3

   - SLE SDK 10 SP4 (i586 ppc):

      ofed-devel-1.5.2-0.14.1


References:

   http://support.novell.com/security/cve/CVE-2012-2372.html
   https://bugzilla.novell.com/767610
   http://download.novell.com/patch/finder/?keywords=b49853a37fed1bd24d9f0c87f66fc4d7