Taking it back as there is a few more security fixes landing

Assignee: qa-bugs => tmb

New advisory:

This kernel update provides the upstream 3.4.52 kernel and fixes
the follwing security issues:

The pciback_enable_msi function in the PCI backend driver 
(drivers/xen/pciback/conf_space_capability_msi.c) in Xen for the Linux
kernel 2.6.18 and 3.8 allows guest OS users with PCI device access to
cause a denial of service via a large number of kernel log messages.
(CVE-2013-0231 / XSA-43)

ipv6: ip6_sk_dst_check() must not assume ipv6 dst
It's possible to use AF_INET6 sockets and to connect to an IPv4
destination. After this, socket dst cache is a pointer to a rtable,
not rt6_info. This bug can be exploited by local non-root users
to trigger various corruptions/crashes (CVE-2013-2232)

af_key: fix info leaks in notify messages
key_notify_sa_flush() and key_notify_policy_flush() miss to
initialize the sadb_msg_reserved member of the broadcasted message
and thereby leak 2 bytes of heap memory to listeners (CVE-2013-2234)

af_key: initialize satype in key_notify_policy_flush()
key_notify_policy_flush() miss to nitialize the sadb_msg_satype member
of the broadcasted message and thereby leak heap memory to listeners
(CVE-2013-2237)

Heap-based buffer overflow in the iscsi_add_notunderstood_response function
in drivers/target/iscsi/iscsi_target_parameters.c in the iSCSI target
subsystem in the Linux kernel through 3.9.4 allows remote attackers to
cause a denial of service (memory corruption and OOPS) or possibly execute
arbitrary code via a long key that is not properly handled during
construction of an error-response packet.
A reproduction case requires patching open-iscsi to send overly large
keys. Performing discovery in a loop will Oops the remote server.
(CVE-2013-2850)

Format string vulnerability in the b43_request_firmware function in
drivers/net/wireless/b43/main.c in the Broadcom B43 wireless driver in
the Linux kernel through 3.9.4 allows local users to gain privileges by
leveraging root access and including format string specifiers in an
fwpostfix modprobe parameter, leading to improper construction of an
error message. (CVE-2013-2852)

Other fixes:
Fix up alx AR8161 breakage (mga #10079)

For other -stable fixes, read the referenced changelogs

References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0231
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2232
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2234
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2237
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2850
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2852
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.46
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.47
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.48
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.49
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.50
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.51
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.52

Assignee: tmb => qa-bugs
Summary: Update request: kernel-3.4.51-1.mga2 => Update request: kernel-3.4.52-1.mga2
Source RPM: kernel-3.4.51-1.mga2 => kernel-3.4.52-1.mga2

SRPMS:
kernel-3.4.52-1.mga2.src.rpm
kernel-userspace-headers-3.4.52-1.mga2.src.rpm
kmod-vboxadditions-4.1.24-11.mga2.src.rpm
kmod-virtualbox-4.1.24-11.mga2.src.rpm
kmod-xtables-addons-1.41-28.mga2.src.rpm
kmod-broadcom-wl-5.100.82.112-48.mga2.nonfree.src.rpm
kmod-fglrx-8.961-24.mga2.nonfree.src.rpm
kmod-nvidia173-173.14.36-14.mga2.nonfree.src.rpm
kmod-nvidia96xx-96.43.23-15.mga2.nonfree.src.rpm
kmod-nvidia-current-295.71-19.mga2.nonfree.src.rpm

i586:
cpupower-3.4.52-1.mga2.i586.rpm
cpupower-devel-3.4.52-1.mga2.i586.rpm
kernel-desktop-3.4.52-1.mga2-1-1.mga2.i586.rpm
kernel-desktop586-3.4.52-1.mga2-1-1.mga2.i586.rpm
kernel-desktop586-devel-3.4.52-1.mga2-1-1.mga2.i586.rpm
kernel-desktop586-devel-latest-3.4.52-1.mga2.i586.rpm
kernel-desktop586-latest-3.4.52-1.mga2.i586.rpm
kernel-desktop-devel-3.4.52-1.mga2-1-1.mga2.i586.rpm
kernel-desktop-devel-latest-3.4.52-1.mga2.i586.rpm
kernel-desktop-latest-3.4.52-1.mga2.i586.rpm
kernel-doc-3.4.52-1.mga2.noarch.rpm
kernel-netbook-3.4.52-1.mga2-1-1.mga2.i586.rpm
kernel-netbook-devel-3.4.52-1.mga2-1-1.mga2.i586.rpm
kernel-netbook-devel-latest-3.4.52-1.mga2.i586.rpm
kernel-netbook-latest-3.4.52-1.mga2.i586.rpm
kernel-server-3.4.52-1.mga2-1-1.mga2.i586.rpm
kernel-server-devel-3.4.52-1.mga2-1-1.mga2.i586.rpm
kernel-server-devel-latest-3.4.52-1.mga2.i586.rpm
kernel-server-latest-3.4.52-1.mga2.i586.rpm
kernel-source-3.4.52-1.mga2-1-1.mga2.noarch.rpm
kernel-source-latest-3.4.52-1.mga2.noarch.rpm
perf-3.4.52-1.mga2.i586.rpm
kernel-userspace-headers-3.4.52-1.mga2.i586.rpm
vboxadditions-kernel-3.4.52-desktop-1.mga2-4.1.24-11.mga2.i586.rpm
vboxadditions-kernel-3.4.52-desktop586-1.mga2-4.1.24-11.mga2.i586.rpm
vboxadditions-kernel-3.4.52-netbook-1.mga2-4.1.24-11.mga2.i586.rpm
vboxadditions-kernel-3.4.52-server-1.mga2-4.1.24-11.mga2.i586.rpm
vboxadditions-kernel-desktop586-latest-4.1.24-11.mga2.i586.rpm
vboxadditions-kernel-desktop-latest-4.1.24-11.mga2.i586.rpm
vboxadditions-kernel-netbook-latest-4.1.24-11.mga2.i586.rpm
vboxadditions-kernel-server-latest-4.1.24-11.mga2.i586.rpm
virtualbox-kernel-3.4.52-desktop-1.mga2-4.1.24-11.mga2.i586.rpm
virtualbox-kernel-3.4.52-desktop586-1.mga2-4.1.24-11.mga2.i586.rpm
virtualbox-kernel-3.4.52-netbook-1.mga2-4.1.24-11.mga2.i586.rpm
virtualbox-kernel-3.4.52-server-1.mga2-4.1.24-11.mga2.i586.rpm
virtualbox-kernel-desktop586-latest-4.1.24-11.mga2.i586.rpm
virtualbox-kernel-desktop-latest-4.1.24-11.mga2.i586.rpm
virtualbox-kernel-netbook-latest-4.1.24-11.mga2.i586.rpm
virtualbox-kernel-server-latest-4.1.24-11.mga2.i586.rpm
xtables-addons-kernel-3.4.52-desktop-1.mga2-1.41-28.mga2.i586.rpm
xtables-addons-kernel-3.4.52-desktop586-1.mga2-1.41-28.mga2.i586.rpm
xtables-addons-kernel-3.4.52-netbook-1.mga2-1.41-28.mga2.i586.rpm
xtables-addons-kernel-3.4.52-server-1.mga2-1.41-28.mga2.i586.rpm
xtables-addons-kernel-desktop586-latest-1.41-28.mga2.i586.rpm
xtables-addons-kernel-desktop-latest-1.41-28.mga2.i586.rpm
xtables-addons-kernel-netbook-latest-1.41-28.mga2.i586.rpm
xtables-addons-kernel-server-latest-1.41-28.mga2.i586.rpm

broadcom-wl-kernel-3.4.52-desktop-1.mga2-5.100.82.112-48.mga2.nonfree.i586.rpm
broadcom-wl-kernel-3.4.52-desktop586-1.mga2-5.100.82.112-48.mga2.nonfree.i586.rpm
broadcom-wl-kernel-3.4.52-netbook-1.mga2-5.100.82.112-48.mga2.nonfree.i586.rpm
broadcom-wl-kernel-3.4.52-server-1.mga2-5.100.82.112-48.mga2.nonfree.i586.rpm
broadcom-wl-kernel-desktop586-latest-5.100.82.112-48.mga2.nonfree.i586.rpm
broadcom-wl-kernel-desktop-latest-5.100.82.112-48.mga2.nonfree.i586.rpm
broadcom-wl-kernel-netbook-latest-5.100.82.112-48.mga2.nonfree.i586.rpm
broadcom-wl-kernel-server-latest-5.100.82.112-48.mga2.nonfree.i586.rpm
fglrx-kernel-3.4.52-desktop-1.mga2-8.961-24.mga2.nonfree.i586.rpm
fglrx-kernel-3.4.52-desktop586-1.mga2-8.961-24.mga2.nonfree.i586.rpm
fglrx-kernel-3.4.52-netbook-1.mga2-8.961-24.mga2.nonfree.i586.rpm
fglrx-kernel-3.4.52-server-1.mga2-8.961-24.mga2.nonfree.i586.rpm
fglrx-kernel-desktop586-latest-8.961-24.mga2.nonfree.i586.rpm
fglrx-kernel-desktop-latest-8.961-24.mga2.nonfree.i586.rpm
fglrx-kernel-netbook-latest-8.961-24.mga2.nonfree.i586.rpm
fglrx-kernel-server-latest-8.961-24.mga2.nonfree.i586.rpm
nvidia173-kernel-3.4.52-desktop-1.mga2-173.14.36-14.mga2.nonfree.i586.rpm
nvidia173-kernel-3.4.52-desktop586-1.mga2-173.14.36-14.mga2.nonfree.i586.rpm
nvidia173-kernel-3.4.52-netbook-1.mga2-173.14.36-14.mga2.nonfree.i586.rpm
nvidia173-kernel-3.4.52-server-1.mga2-173.14.36-14.mga2.nonfree.i586.rpm
nvidia173-kernel-desktop586-latest-173.14.36-14.mga2.nonfree.i586.rpm
nvidia173-kernel-desktop-latest-173.14.36-14.mga2.nonfree.i586.rpm
nvidia173-kernel-netbook-latest-173.14.36-14.mga2.nonfree.i586.rpm
nvidia173-kernel-server-latest-173.14.36-14.mga2.nonfree.i586.rpm
nvidia96xx-kernel-3.4.52-desktop-1.mga2-96.43.23-15.mga2.nonfree.i586.rpm
nvidia96xx-kernel-3.4.52-desktop586-1.mga2-96.43.23-15.mga2.nonfree.i586.rpm
nvidia96xx-kernel-3.4.52-netbook-1.mga2-96.43.23-15.mga2.nonfree.i586.rpm
nvidia96xx-kernel-3.4.52-server-1.mga2-96.43.23-15.mga2.nonfree.i586.rpm
nvidia96xx-kernel-desktop586-latest-96.43.23-15.mga2.nonfree.i586.rpm
nvidia96xx-kernel-desktop-latest-96.43.23-15.mga2.nonfree.i586.rpm
nvidia96xx-kernel-netbook-latest-96.43.23-15.mga2.nonfree.i586.rpm
nvidia96xx-kernel-server-latest-96.43.23-15.mga2.nonfree.i586.rpm
nvidia-current-kernel-3.4.52-desktop-1.mga2-295.71-19.mga2.nonfree.i586.rpm
nvidia-current-kernel-3.4.52-desktop586-1.mga2-295.71-19.mga2.nonfree.i586.rpm
nvidia-current-kernel-3.4.52-netbook-1.mga2-295.71-19.mga2.nonfree.i586.rpm
nvidia-current-kernel-3.4.52-server-1.mga2-295.71-19.mga2.nonfree.i586.rpm
nvidia-current-kernel-desktop586-latest-295.71-19.mga2.nonfree.i586.rpm
nvidia-current-kernel-desktop-latest-295.71-19.mga2.nonfree.i586.rpm
nvidia-current-kernel-netbook-latest-295.71-19.mga2.nonfree.i586.rpm
nvidia-current-kernel-server-latest-295.71-19.mga2.nonfree.i586.rpm

x86_64:
cpupower-3.4.52-1.mga2.x86_64.rpm
cpupower-devel-3.4.52-1.mga2.x86_64.rpm
kernel-desktop-3.4.52-1.mga2-1-1.mga2.x86_64.rpm
kernel-desktop-devel-3.4.52-1.mga2-1-1.mga2.x86_64.rpm
kernel-desktop-devel-latest-3.4.52-1.mga2.x86_64.rpm
kernel-desktop-latest-3.4.52-1.mga2.x86_64.rpm
kernel-doc-3.4.52-1.mga2.noarch.rpm
kernel-netbook-3.4.52-1.mga2-1-1.mga2.x86_64.rpm
kernel-netbook-devel-3.4.52-1.mga2-1-1.mga2.x86_64.rpm
kernel-netbook-devel-latest-3.4.52-1.mga2.x86_64.rpm
kernel-netbook-latest-3.4.52-1.mga2.x86_64.rpm
kernel-server-3.4.52-1.mga2-1-1.mga2.x86_64.rpm
kernel-server-devel-3.4.52-1.mga2-1-1.mga2.x86_64.rpm
kernel-server-devel-latest-3.4.52-1.mga2.x86_64.rpm
kernel-server-latest-3.4.52-1.mga2.x86_64.rpm
kernel-source-3.4.52-1.mga2-1-1.mga2.noarch.rpm
kernel-source-latest-3.4.52-1.mga2.noarch.rpm
perf-3.4.52-1.mga2.x86_64.rpm
kernel-userspace-headers-3.4.52-1.mga2.x86_64.rpm
vboxadditions-kernel-3.4.52-desktop-1.mga2-4.1.24-11.mga2.x86_64.rpm
vboxadditions-kernel-3.4.52-netbook-1.mga2-4.1.24-11.mga2.x86_64.rpm
vboxadditions-kernel-3.4.52-server-1.mga2-4.1.24-11.mga2.x86_64.rpm
vboxadditions-kernel-desktop-latest-4.1.24-11.mga2.x86_64.rpm
vboxadditions-kernel-netbook-latest-4.1.24-11.mga2.x86_64.rpm
vboxadditions-kernel-server-latest-4.1.24-11.mga2.x86_64.rpm
virtualbox-kernel-3.4.52-desktop-1.mga2-4.1.24-11.mga2.x86_64.rpm
virtualbox-kernel-3.4.52-netbook-1.mga2-4.1.24-11.mga2.x86_64.rpm
virtualbox-kernel-3.4.52-server-1.mga2-4.1.24-11.mga2.x86_64.rpm
virtualbox-kernel-desktop-latest-4.1.24-11.mga2.x86_64.rpm
virtualbox-kernel-netbook-latest-4.1.24-11.mga2.x86_64.rpm
virtualbox-kernel-server-latest-4.1.24-11.mga2.x86_64.rpm
xtables-addons-kernel-3.4.52-desktop-1.mga2-1.41-28.mga2.x86_64.rpm
xtables-addons-kernel-3.4.52-netbook-1.mga2-1.41-28.mga2.x86_64.rpm
xtables-addons-kernel-3.4.52-server-1.mga2-1.41-28.mga2.x86_64.rpm
xtables-addons-kernel-desktop-latest-1.41-28.mga2.x86_64.rpm
xtables-addons-kernel-netbook-latest-1.41-28.mga2.x86_64.rpm
xtables-addons-kernel-server-latest-1.41-28.mga2.x86_64.rpm

broadcom-wl-kernel-3.4.52-desktop-1.mga2-5.100.82.112-48.mga2.nonfree.x86_64.rpm
broadcom-wl-kernel-3.4.52-netbook-1.mga2-5.100.82.112-48.mga2.nonfree.x86_64.rpm
broadcom-wl-kernel-3.4.52-server-1.mga2-5.100.82.112-48.mga2.nonfree.x86_64.rpm
broadcom-wl-kernel-desktop-latest-5.100.82.112-48.mga2.nonfree.x86_64.rpm
broadcom-wl-kernel-netbook-latest-5.100.82.112-48.mga2.nonfree.x86_64.rpm
broadcom-wl-kernel-server-latest-5.100.82.112-48.mga2.nonfree.x86_64.rpm
fglrx-kernel-3.4.52-desktop-1.mga2-8.961-24.mga2.nonfree.x86_64.rpm
fglrx-kernel-3.4.52-netbook-1.mga2-8.961-24.mga2.nonfree.x86_64.rpm
fglrx-kernel-3.4.52-server-1.mga2-8.961-24.mga2.nonfree.x86_64.rpm
fglrx-kernel-desktop-latest-8.961-24.mga2.nonfree.x86_64.rpm
fglrx-kernel-netbook-latest-8.961-24.mga2.nonfree.x86_64.rpm
fglrx-kernel-server-latest-8.961-24.mga2.nonfree.x86_64.rpm
nvidia173-kernel-3.4.52-desktop-1.mga2-173.14.36-14.mga2.nonfree.x86_64.rpm
nvidia173-kernel-3.4.52-netbook-1.mga2-173.14.36-14.mga2.nonfree.x86_64.rpm
nvidia173-kernel-3.4.52-server-1.mga2-173.14.36-14.mga2.nonfree.x86_64.rpm
nvidia173-kernel-desktop-latest-173.14.36-14.mga2.nonfree.x86_64.rpm
nvidia173-kernel-netbook-latest-173.14.36-14.mga2.nonfree.x86_64.rpm
nvidia173-kernel-server-latest-173.14.36-14.mga2.nonfree.x86_64.rpm
nvidia96xx-kernel-3.4.52-desktop-1.mga2-96.43.23-15.mga2.nonfree.x86_64.rpm
nvidia96xx-kernel-3.4.52-netbook-1.mga2-96.43.23-15.mga2.nonfree.x86_64.rpm
nvidia96xx-kernel-3.4.52-server-1.mga2-96.43.23-15.mga2.nonfree.x86_64.rpm
nvidia96xx-kernel-desktop-latest-96.43.23-15.mga2.nonfree.x86_64.rpm
nvidia96xx-kernel-netbook-latest-96.43.23-15.mga2.nonfree.x86_64.rpm
nvidia96xx-kernel-server-latest-96.43.23-15.mga2.nonfree.x86_64.rpm
nvidia-current-kernel-3.4.52-desktop-1.mga2-295.71-19.mga2.nonfree.x86_64.rpm
nvidia-current-kernel-3.4.52-netbook-1.mga2-295.71-19.mga2.nonfree.x86_64.rpm
nvidia-current-kernel-3.4.52-server-1.mga2-295.71-19.mga2.nonfree.x86_64.rpm
nvidia-current-kernel-desktop-latest-295.71-19.mga2.nonfree.x86_64.rpm
nvidia-current-kernel-netbook-latest-295.71-19.mga2.nonfree.x86_64.rpm
nvidia-current-kernel-server-latest-295.71-19.mga2.nonfree.x86_64.rpm

i586 kernel-desktop 3.4.52 working fine on my computer at home:
Core 2 Duo E8400
Intel P45 chipset
Radeon HD 4650

VirtualBox works fine too.

Testing complete for mga2 32

cpupower-3.4.52-1.mga2.i586.rpm
kernel-desktop586-3.4.52-1.mga2-1-1.mga2.i586.rpm
kernel-desktop586-devel-3.4.52-1.mga2-1-1.mga2.i586.rpm
kernel-desktop586-devel-latest-3.4.52-1.mga2.i586.rpm
kernel-desktop586-latest-3.4.52-1.mga2.i586.rpm
vboxadditions-kernel-3.4.52-desktop586-1.mga2-4.1.24-11.mga2.i586.rpm
vboxadditions-kernel-desktop586-latest-4.1.24-11.mga2.i586.rpm

CC: (none) => geiger.david68210
Whiteboard: (none) => mga2-32-ok

i586 kernel-server 3.4.52 working fine on my Dell Optiplex 990 at work.
Core i7-2600
Intel 6 Series/C200 chipset, with Sandy Bridge
Radeon HD 5450

kernel-desktop on x86_64 on my dell vostro works fine (and bcm-wl)

i586 kernel-server 3.4.52 working fine on our big iron Squid server.
Dell PowerEdge R610
Intel Xeon X5670, 2 6-core CPUs with hyperthreading
Intel ICH9 chipset
Matrox G200eW WPCM450

kernel-server-3.4.52-1.mga2-1-1.mga2.i586.rpm
kernel-server-devel-3.4.52-1.mga2-1-1.mga2.i586.rpm
kernel-userspace-headers-3.4.52-1.mga2.i586.rpm

MGA2 32bits

ASUS M2N SLI mainboard
Nvidia Geforce 210 graphic card
two internal SATA harddisks    (using sata_nv module)
one internal IDE harddisk      (using pata_amd module)
one external usb harddisk 
one external firewire harddisk
one internal IDE DVD writer    (using pata_amd module)
one internal IDE DVD reader    (using pata_amd module)

during installation dkms built the nvidia module

Everything OK after rebooting on new kernel-server

CC: (none) => philippedidier

Thanks everybody.

Validating. Advisory from comment 2 uploaded.

Could sysadmin please push from 2 core & nonfree/updates_testing to updates

Thanks!

Keywords: (none) => validated_update
Whiteboard: mga2-32-ok => mga2-32-ok mga2-64-ok
CC: (none) => sysadmin-bugs

http://advisories.mageia.org/MGASA-2013-0203.html

Status: NEW => RESOLVED
CC: (none) => boklm
Resolution: (none) => FIXED