SUSE-SU-2012:1708-1: moderate: Security update for ofed

[sle-updates at lists.suse.com]

   SUSE Security Update: Security update for ofed
______________________________________________________________________________

Announcement ID:    SUSE-SU-2012:1708-1
Rating:             moderate
References:         #676724 #678795 #706175 #721597 #773383 
Cross-References:   CVE-2012-3430
Affected Products:
                    SUSE Linux Enterprise Server 10 SP4
                    SLE SDK 10 SP4
______________________________________________________________________________

   An update that solves one vulnerability and has four fixes
   is now available.

Description:


   This update of ofed fixed multiple issues (including
   security related  flaws):

   * sdp: move histogram allocation from stack to heap
   (bnc#706175)
   * cma: Fix crash in request handlers (bnc#678795,
   CVE-2011-0695)
   * rds: set correct msg_namelen (bnc#773383,
   CVE-2012-3430)
   * cm: Bump reference count on cm_id before invoking
   (bnc#678795, CVE-2011-0695)
   * sdp / ipath: Added fixes for 64bit divide on 32bit
   builds
   * updated Infiniband sysconfig file to match openibd
   (bnc#721597)

   Security Issue reference:

   * CVE-2012-3430
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3430
   >



Package List:

   - SUSE Linux Enterprise Server 10 SP4 (i586 ia64 ppc x86_64):

      ofed-1.5.2-0.12.1
      ofed-cxgb3-NIC-kmp-default-1.5.2_2.6.16.60_0.99.13-0.12.1
      ofed-doc-1.5.2-0.12.1
      ofed-kmp-default-1.5.2_2.6.16.60_0.99.13-0.12.1

   - SUSE Linux Enterprise Server 10 SP4 (i586 ia64 x86_64):

      ofed-cxgb3-NIC-kmp-debug-1.5.2_2.6.16.60_0.99.13-0.12.1
      ofed-kmp-debug-1.5.2_2.6.16.60_0.99.13-0.12.1

   - SUSE Linux Enterprise Server 10 SP4 (i586 ppc x86_64):

      ofed-cxgb3-NIC-kmp-kdump-1.5.2_2.6.16.60_0.99.13-0.12.1
      ofed-kmp-kdump-1.5.2_2.6.16.60_0.99.13-0.12.1

   - SUSE Linux Enterprise Server 10 SP4 (i586 x86_64):

      ofed-cxgb3-NIC-kmp-smp-1.5.2_2.6.16.60_0.99.13-0.12.1
      ofed-kmp-smp-1.5.2_2.6.16.60_0.99.13-0.12.1

   - SUSE Linux Enterprise Server 10 SP4 (i586):

      ofed-cxgb3-NIC-kmp-bigsmp-1.5.2_2.6.16.60_0.99.13-0.12.1
      ofed-cxgb3-NIC-kmp-kdumppae-1.5.2_2.6.16.60_0.99.13-0.12.1
      ofed-cxgb3-NIC-kmp-vmi-1.5.2_2.6.16.60_0.99.13-0.12.1
      ofed-cxgb3-NIC-kmp-vmipae-1.5.2_2.6.16.60_0.99.13-0.12.1
      ofed-kmp-bigsmp-1.5.2_2.6.16.60_0.99.13-0.12.1
      ofed-kmp-kdumppae-1.5.2_2.6.16.60_0.99.13-0.12.1
      ofed-kmp-vmi-1.5.2_2.6.16.60_0.99.13-0.12.1
      ofed-kmp-vmipae-1.5.2_2.6.16.60_0.99.13-0.12.1

   - SUSE Linux Enterprise Server 10 SP4 (ppc):

      ofed-cxgb3-NIC-kmp-ppc64-1.5.2_2.6.16.60_0.99.13-0.12.1
      ofed-kmp-ppc64-1.5.2_2.6.16.60_0.99.13-0.12.1

   - SLE SDK 10 SP4 (i586 ia64 ppc x86_64):

      ofed-devel-1.5.2-0.12.1


References:

   http://support.novell.com/security/cve/CVE-2012-3430.html
   https://bugzilla.novell.com/676724
   https://bugzilla.novell.com/678795
   https://bugzilla.novell.com/706175
   https://bugzilla.novell.com/721597
   https://bugzilla.novell.com/773383
   http://download.novell.com/patch/finder/?keywords=e928539d6bca959aca91d810ff33a425