Advisory: The pciback_enable_msi function in the PCI backend driver (drivers/xen/pciback/conf_space_capability_msi.c) in Xen for the Linux kernel 2.6.18 and 3.8 allows guest OS users with PCI device access to cause a denial of service via a large number of kernel log messages. (CVE-2013-0231 / XSA-43) Heap-based buffer overflow in the iscsi_add_notunderstood_response function in drivers/target/iscsi/iscsi_target_parameters.c in the iSCSI target subsystem in the Linux kernel through 3.9.4 allows remote attackers to cause a denial of service (memory corruption and OOPS) or possibly execute arbitrary code via a long key that is not properly handled during construction of an error-response packet. A reproduction case requires patching open-iscsi to send overly large keys. Performing discovery in a loop will Oops the remote server. (CVE-2013-2850) Format string vulnerability in the b43_request_firmware function in drivers/net/wireless/b43/main.c in the Broadcom B43 wireless driver in the Linux kernel through 3.9.4 allows local users to gain privileges by leveraging root access and including format string specifiers in an fwpostfix modprobe parameter, leading to improper construction of an error message. (CVE-2013-2852) Other fixes: For other -stable fixes, read the referenced changelogs References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0231 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2850 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2852 https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.46 https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.47 https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.48 https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.49 https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.50 https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.51 SRPM: kernel-linus-3.4.51-1.mga2.src.rpm i586: kernel-linus-3.4.51-1.mga2-1-1.mga2.i586.rpm kernel-linus-devel-3.4.51-1.mga2-1-1.mga2.i586.rpm kernel-linus-devel-latest-3.4.51-1.mga2.i586.rpm kernel-linus-doc-3.4.51-1.mga2.noarch.rpm kernel-linus-latest-3.4.51-1.mga2.i586.rpm kernel-linus-source-3.4.51-1.mga2-1-1.mga2.noarch.rpm kernel-linus-source-latest-3.4.51-1.mga2.noarch.rpm x86_64: kernel-linus-3.4.51-1.mga2-1-1.mga2.x86_64.rpm kernel-linus-devel-3.4.51-1.mga2-1-1.mga2.x86_64.rpm kernel-linus-devel-latest-3.4.51-1.mga2.x86_64.rpm kernel-linus-doc-3.4.51-1.mga2.noarch.rpm kernel-linus-latest-3.4.51-1.mga2.x86_64.rpm kernel-linus-source-3.4.51-1.mga2-1-1.mga2.noarch.rpm kernel-linus-source-latest-3.4.51-1.mga2.noarch.rpm Reproducible: Steps to Reproduce:
Taking it back as there is a few more security fixes landing
Assignee: qa-bugs => tmb
New advisory: This kernel update provides the upstream 3.4.52 kernel and fixes the follwing security issues: The pciback_enable_msi function in the PCI backend driver (drivers/xen/pciback/conf_space_capability_msi.c) in Xen for the Linux kernel 2.6.18 and 3.8 allows guest OS users with PCI device access to cause a denial of service via a large number of kernel log messages. (CVE-2013-0231 / XSA-43) Heap-based buffer overflow in the iscsi_add_notunderstood_response function in drivers/target/iscsi/iscsi_target_parameters.c in the iSCSI target subsystem in the Linux kernel through 3.9.4 allows remote attackers to cause a denial of service (memory corruption and OOPS) or possibly execute arbitrary code via a long key that is not properly handled during construction of an error-response packet. A reproduction case requires patching open-iscsi to send overly large keys. Performing discovery in a loop will Oops the remote server. (CVE-2013-2850) Format string vulnerability in the b43_request_firmware function in drivers/net/wireless/b43/main.c in the Broadcom B43 wireless driver in the Linux kernel through 3.9.4 allows local users to gain privileges by leveraging root access and including format string specifiers in an fwpostfix modprobe parameter, leading to improper construction of an error message. (CVE-2013-2852) Other fixes: For other -stable fixes, read the referenced changelogs References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0231 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2850 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2852 https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.46 https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.47 https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.48 https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.49 https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.50 https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.51 https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.52
Assignee: tmb => qa-bugsSummary: Update request: kernel-linus-3.4.51-1.mga2 => Update request: kernel-linus-3.4.521-1.mga2Source RPM: kernel-linus-3.4.51-1.mga2 => kernel-linus-3.4.52-1.mga2
SRPM: kernel-linus-3.4.52-1.mga2.src.rpm i586: kernel-linus-3.4.52-1.mga2-1-1.mga2.i586.rpm kernel-linus-devel-3.4.52-1.mga2-1-1.mga2.i586.rpm kernel-linus-devel-latest-3.4.52-1.mga2.i586.rpm kernel-linus-doc-3.4.52-1.mga2.noarch.rpm kernel-linus-latest-3.4.52-1.mga2.i586.rpm kernel-linus-source-3.4.52-1.mga2-1-1.mga2.noarch.rpm kernel-linus-source-latest-3.4.52-1.mga2.noarch.rpm x86_64: kernel-linus-3.4.52-1.mga2-1-1.mga2.x86_64.rpm kernel-linus-devel-3.4.52-1.mga2-1-1.mga2.x86_64.rpm kernel-linus-devel-latest-3.4.52-1.mga2.x86_64.rpm kernel-linus-doc-3.4.52-1.mga2.noarch.rpm kernel-linus-latest-3.4.52-1.mga2.x86_64.rpm kernel-linus-source-3.4.52-1.mga2-1-1.mga2.noarch.rpm kernel-linus-source-latest-3.4.52-1.mga2.noarch.rpm
Summary: Update request: kernel-linus-3.4.521-1.mga2 => Update request: kernel-linus-3.4.52-1.mga2
First advisory line should be: This kernel-linus update provides the upstream 3.4.52 kernel and fixes the follwing security issues:
Tested OK on my 32bit Mageia 2 box with out problems. This is a basic pc with no dkms modules needed.
CC: (none) => led43john
Whiteboard: (none) => mga2-32bit OK
Whiteboard: mga2-32bit OK => mga2-32-OK
Confirmed ok mga2 32. I can't test other mga2 32 kernels on real HW due to bug 6077
Testing complete. Validating the update. Could someone from the sysadmin team push 10653.adv
Keywords: (none) => validated_updateWhiteboard: mga2-32-OK => mga2-32-OK MGA2-64-OKCC: (none) => davidwhodgins, sysadmin-bugs
Update pushed: http://advisories.mageia.org/MGASA-2013-0210.html
Status: NEW => RESOLVEDResolution: (none) => FIXED