Scientific Linux SL5 SL6 SL7 Important: OpenAFS Security Update

Date: Thu, 30 Jul 2015 14:33:20 -0500
Reply-To: scientific-linux-users@
Sender: Security Errata for Scientific Linux
 
From: Pat Riehecky 
Subject: Security ERRATA Important: openafs on SL5.x, SL6.x,
 SL7.x i386/x86_64
MIME-Version: 1.0
Message-ID: <55BA7C00.3060108@fnal.gov>

Synopsis: Important: openafs security update
Issue Date: 2015-07-30
CVE Numbers: CVE-2015-3282
 CVE-2015-3283
 CVE-2015-3284
 CVE-2015-3285
--
This update resolves the following issues:

 All server platforms

 * Fix for CVE-2015-3282: vos leaks stack data onto the wire in the
 clear when creating vldb entries

 * Workaround for CVE-2015-3283: bos commands can be spoofed,
 including some which alter server state

 * Disabled searching the VLDB by volume name regular expression to
 avoid possible buffer overruns in the volume location server

 All client platforms

 * Fix for CVE-2015-3284: pioctls leak kernel memory

 * Fix for CVE-2015-3285: kernel pioctl support for OSD command
 passing can trigger a panic

After installing the update, you must restart your AFS connections
and AFS services.

--

SL5
 x86_64
 kernel-module-openafs-2.6.18-404.el5-1.4.15-86.sl5.x86_64.rpm
 kernel-module-openafs-2.6.18-404.el5xen-1.4.15-86.sl5.x86_64.rpm
 kernel-module-openafs-2.6.18-406.el5-1.4.15-86.sl5.x86_64.rpm
 kernel-module-openafs-2.6.18-406.el5xen-1.4.15-86.sl5.x86_64.rpm
 openafs-1.4.15-86.sl5.x86_64.rpm
 openafs-authlibs-1.4.15-86.sl5.x86_64.rpm
 openafs-authlibs-devel-1.4.15-86.sl5.x86_64.rpm
 openafs-client-1.4.15-86.sl5.x86_64.rpm
 openafs-compat-1.4.15-86.sl5.x86_64.rpm
 openafs-debug-1.4.15-86.sl5.x86_64.rpm
 openafs-devel-1.4.15-86.sl5.x86_64.rpm
 openafs-kernel-source-1.4.15-86.sl5.x86_64.rpm
 openafs-kpasswd-1.4.15-86.sl5.x86_64.rpm
 openafs-krb5-1.4.15-86.sl5.x86_64.rpm
 openafs-server-1.4.15-86.sl5.x86_64.rpm

 i386
 kernel-module-openafs-2.6.18-404.el5-1.4.15-86.sl5.i686.rpm
 kernel-module-openafs-2.6.18-404.el5PAE-1.4.15-86.sl5.i686.rpm
 kernel-module-openafs-2.6.18-404.el5xen-1.4.15-86.sl5.i686.rpm
 kernel-module-openafs-2.6.18-406.el5-1.4.15-86.sl5.i686.rpm
 kernel-module-openafs-2.6.18-406.el5PAE-1.4.15-86.sl5.i686.rpm
 kernel-module-openafs-2.6.18-406.el5xen-1.4.15-86.sl5.i686.rpm
 openafs-1.4.15-86.sl5.i386.rpm
 openafs-authlibs-1.4.15-86.sl5.i386.rpm
 openafs-authlibs-devel-1.4.15-86.sl5.i386.rpm
 openafs-client-1.4.15-86.sl5.i386.rpm
 openafs-compat-1.4.15-86.sl5.i386.rpm
 openafs-debug-1.4.15-86.sl5.i386.rpm
 openafs-devel-1.4.15-86.sl5.i386.rpm
 openafs-kernel-source-1.4.15-86.sl5.i386.rpm
 openafs-kpasswd-1.4.15-86.sl5.i386.rpm
 openafs-krb5-1.4.15-86.sl5.i386.rpm
 openafs-server-1.4.15-86.sl5.i386.rpm
SL6
 x86_64
 kmod-openafs-504-1.6.13-215.sl6.504.x86_64.rpm
 openafs-1.6.13-215.sl6.x86_64.rpm
 openafs-authlibs-1.6.13-215.sl6.x86_64.rpm
 openafs-authlibs-devel-1.6.13-215.sl6.x86_64.rpm
 openafs-client-1.6.13-215.sl6.x86_64.rpm
 openafs-compat-1.6.13-215.sl6.x86_64.rpm
 openafs-devel-1.6.13-215.sl6.x86_64.rpm
 openafs-kernel-source-1.6.13-215.sl6.x86_64.rpm
 openafs-kpasswd-1.6.13-215.sl6.x86_64.rpm
 openafs-krb5-1.6.13-215.sl6.x86_64.rpm
 openafs-module-tools-1.6.13-215.sl6.x86_64.rpm
 openafs-plumbing-tools-1.6.13-215.sl6.x86_64.rpm
 openafs-server-1.6.13-215.sl6.x86_64.rpm
 i386
 kmod-openafs-504-1.6.13-215.sl6.504.i686.rpm
 openafs-1.6.13-215.sl6.i686.rpm
 openafs-authlibs-1.6.13-215.sl6.i686.rpm
 openafs-authlibs-devel-1.6.13-215.sl6.i686.rpm
 openafs-client-1.6.13-215.sl6.i686.rpm
 openafs-compat-1.6.13-215.sl6.i686.rpm
 openafs-devel-1.6.13-215.sl6.i686.rpm
 openafs-kernel-source-1.6.13-215.sl6.i686.rpm
 openafs-kpasswd-1.6.13-215.sl6.i686.rpm
 openafs-krb5-1.6.13-215.sl6.i686.rpm
 openafs-module-tools-1.6.13-215.sl6.i686.rpm
 openafs-plumbing-tools-1.6.13-215.sl6.i686.rpm
 openafs-server-1.6.13-215.sl6.i686.rpm
SL7
 x86_64
 kmod-openafs-1.6-sl-229-1.6.13-215.sl7.229.1.2.x86_64.rpm
 openafs-1.6-sl-1.6.13-215.sl7.x86_64.rpm
 openafs-1.6-sl-authlibs-1.6.13-215.sl7.x86_64.rpm
 openafs-1.6-sl-authlibs-devel-1.6.13-215.sl7.x86_64.rpm
 openafs-1.6-sl-client-1.6.13-215.sl7.x86_64.rpm
 openafs-1.6-sl-compat-1.6.13-215.sl7.x86_64.rpm
 openafs-1.6-sl-devel-1.6.13-215.sl7.x86_64.rpm
 openafs-1.6-sl-kernel-source-1.6.13-215.sl7.x86_64.rpm
 openafs-1.6-sl-kpasswd-1.6.13-215.sl7.x86_64.rpm
 openafs-1.6-sl-krb5-1.6.13-215.sl7.x86_64.rpm
 openafs-1.6-sl-module-tools-1.6.13-215.sl7.x86_64.rpm
 openafs-1.6-sl-plumbing-tools-1.6.13-215.sl7.x86_64.rpm
 openafs-1.6-sl-server-1.6.13-215.sl7.x86_64.rpm

- Scientific Linux Development Team
lastline