Friday, May 20, 2016

F25 System Wide Change: Parallel Installable Debuginfo

= Proposed System Wide Change: Parallel Installable Debuginfo =
https://fedoraproject.org/wiki/Changes/ParallelInstallableDebuginfo

Change owner(s):
* Mark Wielaard <mjw AT redhat DOT com>

debuginfo packages can be installed in parallel to make it easier to
observe what programs are doing or to debug when they have crashed.
That way debugging, tracing or profiling programs can be done
independent of whether they are 32bit, 64bit, a slightly newer or
older version than currently installed or even from a different
architecture.

== Detailed Description ==
Currently only one version of a debuginfo package can be installed for
a given package. Even on a multi-lib system you cannot install the
64-bit and 32-bit versions of a debuginfo package in parallel
(technically you sometimes can, because of RPM file coloring, the
64bit version of the .debug files win over the 32bit version - causing
lots of confusion). But there are various situation where having
multiple versions of the debuginfo package installed help with
tracing, profiling, debugging and/or crash analysis (see the Benefit
to Fedora section below). There are various things provided by a
debuginfo file that might conflict preventing parallel installation of
different versions:
* build-id file /usr/lib/debug/.build-id/xx/yyyy...yyy which is a
symlink to the main ELF file.
* build-id.debug file /usr/lib/debug/.build-id/xx/yyyy...yyy.debug
which is a symlink to the .debug ELF file.
* The .debug files under /usr/lib/debug/ with file path names
mirroring the main ELF file paths under / with .debug added.
* The source files under /usr/src/debug/<name>-<version>/

They can be made non-conflicting in the following ways:
* The main build-id file should not be in the debuginfo file, but in
the main package (this was always a problem since the package and
debuginfo package installed might not match). If we want to make
usr/lib/debug/ a network resource then we will need to move the
symlink to another location (maybe /usr/lib/.build-id). Unfortunately
this means a change will be necessary for debuginfo consumers to that
depend on the old location. We could keep the old symlink and point it
to the new location to work around it. But I will audit the consumers
to see which depend on it and discuss if we can have a new standard
location.
* build-ids are globally unique identifiers. They will be different
across arches. But might match between minor releases if the exact
same ELF image is produced. The linker will get an option to hash in
the full nvr to make sure all build-ids are always fully unique.
* The .debug file names will be changed to main ELF file
name-vr.debug. This name will also be set in the .gnu_debuglink
section of the main file by changing the options given to eu-strip in
the rpm find-debuginfo.sh script.
* The source files will be moved under
/usr/src/debug/<name>-<version>-<release>.<arch>/. This needs changes
to the rpm debugedit program which rewrites the DWARF source file
information.

These changes will make all files in any debuginfo file unique so they
don't conflict when installed in parallel. There should be no changes
necessary to programs (gdb, perf, valgrind, systemtap,
systemd-coredump, eu-stack, abrt-hook-ccpp, etc.) that use build-ids
or .gnu_debuglink to lookup DWARF debug information and source
references for tracing, profiling and debugging.

It would be good to tweak dnf debuginfo-install to know about parallel
installable debuginfo packages and maybe have an easy option to
install the debuginfo for a core file or for the packages running in a
container.

Alternative solutions currently rejected:
* Move main ELF image build-id file under
/usr/lib/.build-id/xx/yyyy...yyy when moving into main pages. Because
existing programs probably depend on the link being under
/usr/lib/debug/.
* Since when the build-id is identifical also the ELF file is
identical we could mark all build-id.debug files as replacable in the
rpm. It isn't clear that works for symlinks though (but we could
reverse the symlink direction from debug file to build-id file). And
currently you can identify the exact package nvr installed given just
one build-id. That would be impossible if multiple packages could
contain the same build-id/ELF image file.
* Do away with the old .gnu_debuglink way of accessing files under
/usr/lib/debug and just not install .debug files and only support
build-id based debug lookups. Because it isn't clear build-ids are
100% available and all programs work with build-id lookups instead
through .gnu_debuglink names.
* Move the .debug files under a subdir like the sources.
/usr/lib/debug/<name>-<version>-<release>.<arch>/. This cannot easily
be expressed in .gnu_debuglink, which officially only allows a
basename.


== Scope ==
* Proposal owners: Patches need to be developed against the linker
(binutils ld and gold) to accept a hash value to seed the build-id
calculation, against rpm debugedit to rewrite source paths (currently
source paths can only be smaller, this change might create larger
paths) and the rpm find-debuginfo.sh script to change the paths,
symlinks and .gnu_debuglink names as outlined in the Detailed
Description. And the dnf debuginfo-install plugin might be patches to
provide subcommands for pulling in debuginfo packages found by
build-id in core files and/or programs running in containers.

* Other developers: Upstream binutils, rpm and dnf maintainers have to
review the proposed patches. If accepted the package maintainers will
have to decide whether those patches can be backported for the next
fedora release. Once all changes are in a package debuginfo needs to
be regenerated before it becomes parallel installable.

* Release engineering: Needs to be discussed. In theory no changes
apart from those listed above are needed. But if we want to support
installing cross-architectures (not just multi-lib arch) debuginfo
then some way needs to be found to get those in the right repodata.

* List of deliverables: N/A (Still Unknown)

* Policies and guidelines: No changes, the debuginfo related rpm
macros won't change. They will just start producing parallel
installable debuginfo packages once all changes are in place.

* Trademark approval: N/A (not needed for this Change)
--
Jan Kuřík
Platform & Fedora Program Manager
Red Hat Czech s.r.o., Purkynova 99/71, 612 45 Brno, Czech Republic
_______________________________________________
devel-announce mailing list
devel-announce@lists.fedoraproject.org
http://lists.fedoraproject.org/admin/lists/devel-announce@lists.fedoraproject.org

F25 Self Contained Change: Java/OpenJDK enforces the system-wide crypto policy

= Proposed Self Contained Change: Java/OpenJDK enforces the
system-wide crypto policy =
https://fedoraproject.org/wiki/Changes/JavaCryptoPolicies

Change owner(s):
* Nikos Mavrogiannopoulos <nmav AT redhat DOT com>

As it is now, the System-wide crypto policy in F24 is only enforced by
the OpenSSL and GnuTLS TLS libraries. To harmonize crypto across all
applications in Fedora, including the Java ones, OpenJDK is enhanced
to respect the settings of the system-wide crypto policy as well.

== Detailed Description ==
As it is now, the System-wide crypto policy in F24 is only enforced by
the OpenSSL and GnuTLS TLS libraries. To harmonize crypto across all
applications in Fedora, including the Java ones, OpenJDK is enhanced
to respect the settings of the system-wide crypto policy as well.

After that change the administrator should be assured that any Java
application will follow a policy that adheres to the configured
profile.


== Scope ==
* Proposal owners:
The change requires modifying OpenJDK to read additional security
properties from the generated by the crypto policies file
(/etc/crypto-policies/back-ends/java.config).

* Other developers:
There are no required actions by other developers. The change requires
only targeted changes to openjdk and crypto-policies.

* Release engineering:
No actions required.

* Policies and guidelines:
The packaging guidelines for crypto policies need to be modified to
include OpenJDK/java in the list of libraries supporting the policies.

* Trademark approval:
N/A (not needed for this Change)
--
Jan Kuřík
Platform & Fedora Program Manager
Red Hat Czech s.r.o., Purkynova 99/71, 612 45 Brno, Czech Republic
_______________________________________________
devel-announce mailing list
devel-announce@lists.fedoraproject.org
http://lists.fedoraproject.org/admin/lists/devel-announce@lists.fedoraproject.org

F25 Self Contained Change: NSS enforces the system-wide crypto policy

= Proposed Self Contained Change: NSS enforces the system-wide crypto policy =
https://fedoraproject.org/wiki/Changes/NSSCryptoPolicies

Change owner(s):
* Nikos Mavrogiannopoulos <nmav AT redhat DOT com>

As it is now, the System-wide crypto policy in F24 is only enforced by
the OpenSSL and GnuTLS TLS libraries. To harmonize crypto in Fedora,
NSS is enhanced to respect the settings of the system-wide crypto
policy as well.

== Detailed Description ==
As it is now, the System-wide crypto policy in F24 is only enforced by
the OpenSSL and GnuTLS TLS libraries. To harmonize crypto in Fedora,
NSS is enhanced to respect the settings of the system-wide crypto
policy as well.
After that change the administrator should be assured that any
application that uses NSS will follow a policy that adheres to the
configured profile.


== Scope ==
* Proposal owners:
The change requires modifying the NSS library to read a policy
generated by the crypto-policy package.

* Other developers:
There are no required actions by other developers. The change requires
only targeted changes to NSS.

* Release engineering:
No actions required.

* Policies and guidelines:
- The packaging guidelines for crypto policies need to be modified to
include NSS in the list of libraries supporting the policies.
- The text "(note that adherence to the system-wide policies is work
in progress for NSS libraries)" must be removed
- The text "Currently the policies are restricted to applications
using GnuTLS and OpenSSL" must be changed to include NSS.

* Trademark approval:
N/A (not needed for this Change)
--
Jan Kuřík
Platform & Fedora Program Manager
Red Hat Czech s.r.o., Purkynova 99/71, 612 45 Brno, Czech Republic
_______________________________________________
devel-announce mailing list
devel-announce@lists.fedoraproject.org
http://lists.fedoraproject.org/admin/lists/devel-announce@lists.fedoraproject.org

Thursday, May 19, 2016

reallost1.fbsd2233449:企业如何培养业绩精英?ci8sx

reallost1.fbsd2233449   您好

业绩是一个企业存活的根源,得业绩者得天下,但是业绩精英又该如何培养呢?

附件中内容希望能帮助到您的工作

cvqmc1q

2016-5-209:11:00

Wednesday, May 18, 2016

[USN-2936-3] Firefox regression

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBCAAGBQJXPRPuAAoJEGEfvezVlG4PpSIH/1otSqh+gH810viSzgwI83vz
xrZ6UNSPALvgMirVqKofrQVzc5ghcq5haV4+U2zsZaU7i0FFrr03foXqjzE281i5
lePby9hHU31H8U70PY3gjTg5u2opZv5NRUL6/ESnsfcT4dl7gPNNP9En6PMozR9m
TwlJGtFDK51NYv1ZXEHmpWfUa0KNZMMil9pvJtQGC7s9HxQoLtKDVozcR/ONh/7p
/Hyh7s9Sg/eQSE99sxDKUN5PV+upFXrDGaEQmhDxxvylnIRd9Ftbe8xXkYjBz6GX
mPCXj9+N30E1NCmfo0JhqyMe01SdC9ouTPdpaf/gf4RplEwc4nSf0URjmBdu2/M=
=xHEC
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-2936-3
May 19, 2016

firefox regression
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 16.04 LTS
- Ubuntu 15.10
- Ubuntu 14.04 LTS
- Ubuntu 12.04 LTS

Summary:

USN-2936-1 introduced a regression in Firefox.

Software Description:
- firefox: Mozilla Open Source web browser

Details:

USN-2936-1 fixed vulnerabilities in Firefox. The update caused an issue
where a device update POST request was sent every time about:preferences#sync
was shown. This update fixes the problem.

We apologize for the inconvenience.

Original advisory details:

Christian Holler, Tyson Smith, Phil Ringalda, Gary Kwong, Jesse Ruderman,
Mats Palmgren, Carsten Book, Boris Zbarsky, David Bolter, Randell Jesup,
Andrew McCreight, and Steve Fink discovered multiple memory safety issues
in Firefox. If a user were tricked in to opening a specially crafted
website, an attacker could potentially exploit these to cause a denial of
service via application crash, or execute arbitrary code with the
privileges of the user invoking Firefox. (CVE-2016-2804, CVE-2016-2806,
CVE-2016-2807)

An invalid write was discovered when using the JavaScript .watch() method in
some circumstances. If a user were tricked in to opening a specially crafted
website, an attacker could potentially exploit this to cause a denial of
service via application crash, or execute arbitrary code with the
privileges of the user invoking Firefox. (CVE-2016-2808)

Looben Yang discovered a use-after-free and buffer overflow in service
workers. If a user were tricked in to opening a specially crafted website,
an attacker could potentially exploit these to cause a denial of service
via application crash, or execute arbitrary code with the privileges of
the user invoking Firefox. (CVE-2016-2811, CVE-2016-2812)

Sascha Just discovered a buffer overflow in libstagefright in some
circumstances. If a user were tricked in to opening a specially crafted
website, an attacker could potentially exploit this to cause a denial of
service via application crash, or execute arbitrary code with the
privileges of the user invoking Firefox. (CVE-2016-2814)

Muneaki Nishimura discovered that CSP is not applied correctly to web
content sent with the multipart/x-mixed-replace MIME type. An attacker
could potentially exploit this to conduct cross-site scripting (XSS)
attacks when they would otherwise be prevented. (CVE-2016-2816)

Muneaki Nishimura discovered that the chrome.tabs.update API for web
extensions allows for navigation to javascript: URLs. A malicious
extension could potentially exploit this to conduct cross-site scripting
(XSS) attacks. (CVE-2016-2817)

Mark Goodwin discovered that about:healthreport accepts certain events
from any content present in the remote-report iframe. If another
vulnerability allowed the injection of web content in the remote-report
iframe, an attacker could potentially exploit this to change the user's
sharing preferences. (CVE-2016-2820)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS:
firefox 46.0.1+build1-0ubuntu0.16.04.2

Ubuntu 15.10:
firefox 46.0.1+build1-0ubuntu0.15.10.2

Ubuntu 14.04 LTS:
firefox 46.0.1+build1-0ubuntu0.14.04.3

Ubuntu 12.04 LTS:
firefox 46.0.1+build1-0ubuntu0.12.04.2

After a standard system update you need to restart Firefox to make
all the necessary changes.

References:
http://www.ubuntu.com/usn/usn-2936-3
http://www.ubuntu.com/usn/usn-2936-1
https://launchpad.net/bugs/1583389

Package Information:
https://launchpad.net/ubuntu/+source/firefox/46.0.1+build1-0ubuntu0.16.04.2
https://launchpad.net/ubuntu/+source/firefox/46.0.1+build1-0ubuntu0.15.10.2
https://launchpad.net/ubuntu/+source/firefox/46.0.1+build1-0ubuntu0.14.04.3
https://launchpad.net/ubuntu/+source/firefox/46.0.1+build1-0ubuntu0.12.04.2

[USN-2973-1] Thunderbird vulnerabilities

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBCAAGBQJXPROuAAoJEGEfvezVlG4PRv4H/R1CHXawJuW2PxfDYpZvjltH
Z9JQnlv/9+5ycclnK0VmXoqX+LgD3ICdaNRYZiHvAJLHHuzpOgaOBweCYSP1o3Y8
qd24aCyY4P9mTaCzF3Xhf/R/31oy5VQ/dtpmHEZVL81SK1YkfwAe8UUaQIc4Nknp
/UhRFQ6ZcPafP0Orb+54fxT9AktnkaBcMogrdpJSMddRi6hKvU1CB+Y4zsL9ur+8
lgc/QW647kaHLQGTpjG6hWTlWg/bmOqmC53oXH03LRaR5D31LP3pV3nflbtA43Cs
rTh1bwSnhxdoj4WV77r17wACOVISN3NRggQkh8tdde1apWB2oD1O9poZBo1xSLo=
=wsHi
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-2973-1
May 19, 2016

thunderbird vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 16.04 LTS
- Ubuntu 15.10
- Ubuntu 14.04 LTS
- Ubuntu 12.04 LTS

Summary:

Several security issues were fixed in Thunderbird.

Software Description:
- thunderbird: Mozilla Open Source mail and newsgroup client

Details:

Christian Holler, Tyson Smith, and Phil Ringalda discovered multiple
memory safety issues in Thunderbird. If a user were tricked in to opening
a specially crafted message, an attacker could potentially exploit these
to cause a denial of service via application crash, or execute arbitrary
code. (CVE-2016-2805, CVE-2016-2807)

Hanno Böck discovered that calculations with mp_div and mp_exptmod in NSS
produce incorrect results in some circumstances, resulting in
cryptographic weaknesses. (CVE-2016-1938)

A use-after-free was discovered in ssl3_HandleECDHServerKeyExchange in
NSS. A remote attacker could potentially exploit this to cause a denial of
service via application crash, or execute arbitrary code. (CVE-2016-1978)

A use-after-free was discovered in PK11_ImportDERPrivateKeyInfoAndReturnKey
in NSS. A remote attacker could potentially exploit this to cause a denial
of service via application crash, or execute arbitrary code.
(CVE-2016-1979)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS:
thunderbird 1:38.8.0+build1-0ubuntu0.16.04.1

Ubuntu 15.10:
thunderbird 1:38.8.0+build1-0ubuntu0.15.10.1

Ubuntu 14.04 LTS:
thunderbird 1:38.8.0+build1-0ubuntu0.14.04.1

Ubuntu 12.04 LTS:
thunderbird 1:38.8.0+build1-0ubuntu0.12.04.1

After a standard system update you need to restart Thunderbird to make
all the necessary changes.

References:
http://www.ubuntu.com/usn/usn-2973-1
CVE-2016-1938, CVE-2016-1978, CVE-2016-1979, CVE-2016-2805,
CVE-2016-2807

Package Information:
https://launchpad.net/ubuntu/+source/thunderbird/1:38.8.0+build1-0ubuntu0.16.04.1
https://launchpad.net/ubuntu/+source/thunderbird/1:38.8.0+build1-0ubuntu0.15.10.1
https://launchpad.net/ubuntu/+source/thunderbird/1:38.8.0+build1-0ubuntu0.14.04.1
https://launchpad.net/ubuntu/+source/thunderbird/1:38.8.0+build1-0ubuntu0.12.04.1

[USN-2960-1] Oxide vulnerabilities

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBCAAGBQJXPRNmAAoJEGEfvezVlG4PaTQH/j7S3ijWFfltQbWsKBxcDoDA
FR062GiQFqUZOh2UAVD1fFvtZ7S68I61n25sIPWEHoxxiIBZEHE/zTUSiro9JamO
dKyiE46qG2CkNf6QaW3rC3TXNUF4iZ+ciDbBwKEb14MEm/eEhIrADorE1NB4Vh1V
WWtUNu6VYXCrZbxSQEAJqzvLg/5gVvK9cexH/L9zYTLwM2jjz443k4PPUfntK4hF
2SaqlxfWHl+2k7RzQPiP4mrwrqRAciuGAUHdXdCbHlm+JJQQm/XJx2kOXSma6iRv
d6Jtd5hJElEAfniduxX4K90SVZbYLfk10MxZNylRDM6wXYFmf4jQTpBGhYjHizg=
=H3lg
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-2960-1
May 18, 2016

oxide-qt vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 16.04 LTS
- Ubuntu 15.10
- Ubuntu 14.04 LTS

Summary:

Several security issues were fixed in Oxide.

Software Description:
- oxide-qt: Web browser engine for Qt (QML plugin)

Details:

An out of bounds write was discovered in Blink. If a user were tricked in
to opening a specially crafted website, an attacker could potentially
exploit this to cause a denial of service via renderer crash, or execute
arbitrary code. (CVE-2016-1660)

It was discovered that Blink assumes that a frame which passes same-origin
checks is local in some cases. If a user were tricked in to opening a
specially crafted website, an attacker could potentially exploit this to
cause a denial of service via renderer crash, or execute arbitrary code.
(CVE-2016-1661)

A use-after-free was discovered in the V8 bindings in Blink. If a user
were tricked in to opening a specially crafted website, an attacker could
potentially exploit this to cause a denial of service via renderer crash,
or execute arbitrary code. (CVE-2016-1663)

It was discovered that the JSGenericLowering class in V8 mishandles
comparison operators. If a user were tricked in to opening a specially
crafted website, an attacker could potentially exploit this to obtain
sensitive information. (CVE-2016-1665)

Multiple security issues were discovered in Chromium. If a user were
tricked in to opening a specially crafted website, an attacker could
potentially exploit these to read uninitialized memory, cause a denial
of service via application crash or execute arbitrary code.
(CVE-2016-1666)

It was discovered that the TreeScope::adoptIfNeeded function in Blink
does not prevent script execution during node-adoption operations. If a
user were tricked in to opening a specially crafted website, an attacker
could potentially exploit this to bypass same origin restrictions.
(CVE-2016-1667)

It was discovered that the forEachForBinding in the V8 bindings in Blink
uses an improper creation context. If a user were tricked in to opening a
specially crafted website, an attacker could potentially exploit this to
bypass same origin restrictions. (CVE-2016-1668)

A buffer overflow was discovered in V8. If a user were tricked in to
opening a specially crafted website, an attacker could potentially exploit
this to cause a denial of service via renderer crash, or execute arbitrary
code. (CVE-2016-1669)

A race condition was discovered in ResourceDispatcherHostImpl in Chromium.
An attacker could potentially exploit this to make arbitrary HTTP
requests. (CVE-2016-1670)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS:
liboxideqtcore0 1.14.9-0ubuntu0.16.04.1

Ubuntu 15.10:
liboxideqtcore0 1.14.9-0ubuntu0.15.10.1

Ubuntu 14.04 LTS:
liboxideqtcore0 1.14.9-0ubuntu0.14.04.1

In general, a standard system update will make all the necessary changes.

References:
http://www.ubuntu.com/usn/usn-2960-1
CVE-2016-1660, CVE-2016-1661, CVE-2016-1663, CVE-2016-1665,
CVE-2016-1666, CVE-2016-1667, CVE-2016-1668, CVE-2016-1669,
CVE-2016-1670

Package Information:
https://launchpad.net/ubuntu/+source/oxide-qt/1.14.9-0ubuntu0.16.04.1
https://launchpad.net/ubuntu/+source/oxide-qt/1.14.9-0ubuntu0.15.10.1
https://launchpad.net/ubuntu/+source/oxide-qt/1.14.9-0ubuntu0.14.04.1

reallost1.fbsd2233449:企业如何培养中层?

 尊敬的reallost1.fbsd2233449:您好      

        当今中国企业的中层干部,很多是半路出家。原先是业务骨干、技术能手,后来时势造化被推到"管理"这个位置,从业务一把好手,到承上启下、带领一帮人把一摊子事情做好,这个角色转换并不容易。

    我们需要怎样的中层干部?这个课程给出了答案。
                                                                                                  应永状

                                                                          2016-5-192:14:18

[USN-2950-4] Samba regressions

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQIcBAEBCgAGBQJXPG8jAAoJEGVp2FWnRL6TIqQP/0TvslDvmW87bXINH9VzA+4n
2UA1FPIFHOqoS4VfJriz47+P0AxL7pNZnGtDvlmRefXf8B6h7Aw8OQVd3whaonfl
Q+2MsuKXg5eVXN6rhML5COI54TjjJS5t5WwZplaXBtDxgEIuR0v7XgFTTQFYuSbD
OavP1Ool3D201mmMGpeiBT7DqyTTg1ekPUbTLddRfJt5N+d/I4YPehTRlTHL57PE
3tEV0vzaRL/u4c6sl8L7lWU2TA/FcB8TBsXWTQbRQtXW/72nyVb4NRXDVV3W8I+k
+I/6x64vozR1GdIMKqBjtbVnYm99sQtXVaOYy1NLLTTJshqVq/ttNVFp3RML2m0J
FidVCEthgcqRSHqfduRNqMgFYd/0Q6QtwcpmIEd0BMAc1JDqLHfcLAvrjzyTSxnz
qq6+4kRCQT+srgZfsE6sCAZXtVgZwLIjFgqa0TpofUMWz89r48PSx6ydk//4stL4
Z2HfjjoOVdgVMHCf91rCSXVZVbnkgiEhd/3UhZWRUv/GbwCwmKTU68ckFqxj+LAh
UnbQT5f5hINop1oy9kUvbjhWrs0DcuG9oubzNTgNK2arZtE9Lk7tlpKoqGejZJR2
GQNGIJXXQPorUqJvyQpiSkhyJLfRxIF2R2Gngq5dmGTzDhS1HSZuXd/iH8xRpGGP
H4AKMhs+AXXZxj0a8g3K
=YOzu
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-2950-4
May 18, 2016

samba regressions
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 12.04 LTS

Summary:

USN-2950-1 introduced regressions in Samba.

Software Description:
- samba: SMB/CIFS file, print, and login server for Unix

Details:

USN-2950-1 fixed vulnerabilities in Samba. The backported fixes introduced
in Ubuntu 12.04 LTS caused interoperability issues. This update fixes
compatibility with certain NAS devices, and allows connecting to Samba 3.6
servers by relaxing the "client ipc signing" parameter to "auto".

We apologize for the inconvenience.

Original advisory details:

Jouni Knuutinen discovered that Samba contained multiple flaws in the
DCE/RPC implementation. A remote attacker could use this issue to perform
a denial of service, downgrade secure connections by performing a man in
the middle attack, or possibly execute arbitrary code. (CVE-2015-5370)
Stefan Metzmacher discovered that Samba contained multiple flaws in the
NTLMSSP authentication implementation. A remote attacker could use this
issue to downgrade connections to plain text by performing a man in the
middle attack. (CVE-2016-2110)
Alberto Solino discovered that a Samba domain controller would establish a
secure connection to a server with a spoofed computer name. A remote
attacker could use this issue to obtain sensitive information.
(CVE-2016-2111)
Stefan Metzmacher discovered that the Samba LDAP implementation did not
enforce integrity protection. A remote attacker could use this issue to
hijack LDAP connections by performing a man in the middle attack.
(CVE-2016-2112)
Stefan Metzmacher discovered that Samba did not validate TLS certificates.
A remote attacker could use this issue to spoof a Samba server.
(CVE-2016-2113)
Stefan Metzmacher discovered that Samba did not enforce SMB signing even if
configured to. A remote attacker could use this issue to perform a man in
the middle attack. (CVE-2016-2114)
Stefan Metzmacher discovered that Samba did not enable integrity protection
for IPC traffic. A remote attacker could use this issue to perform a man in
the middle attack. (CVE-2016-2115)
Stefan Metzmacher discovered that Samba incorrectly handled the MS-SAMR and
MS-LSAD protocols. A remote attacker could use this flaw with a man in the
middle attack to impersonate users and obtain sensitive information from
the Security Account Manager database. This flaw is known as Badlock.
(CVE-2016-2118)
Samba has been updated to 4.3.8 in Ubuntu 14.04 LTS and Ubuntu 15.10.
Ubuntu 12.04 LTS has been updated to 3.6.25 with backported security fixes.
In addition to security fixes, the updated packages contain bug fixes,
new features, and possibly incompatible changes. Configuration changes may
be required in certain environments.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 LTS:
samba 2:3.6.25-0ubuntu0.12.04.4

In general, a standard system update will make all the necessary changes.

References:
http://www.ubuntu.com/usn/usn-2950-4
http://www.ubuntu.com/usn/usn-2950-1
https://launchpad.net/bugs/1574403, https://launchpad.net/bugs/1576109

Package Information:
https://launchpad.net/ubuntu/+source/samba/2:3.6.25-0ubuntu0.12.04.4

[USN-2983-1] Expat vulnerability

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=gLNq
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-2983-1
May 18, 2016

expat vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 16.04 LTS
- Ubuntu 15.10
- Ubuntu 14.04 LTS
- Ubuntu 12.04 LTS

Summary:

Expat could be made to crash or run programs as your login if it opened a
specially crafted file.

Software Description:
- expat: XML parsing C library

Details:

Gustavo Grieco discovered that Expat incorrectly handled malformed XML
data. If a user or application linked against Expat were tricked into
opening a crafted XML file, an attacker could cause a denial of service, or
possibly execute arbitrary code. (CVE-2016-0718)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS:
lib64expat1 2.1.0-7ubuntu0.16.04.1
libexpat1 2.1.0-7ubuntu0.16.04.1

Ubuntu 15.10:
lib64expat1 2.1.0-7ubuntu0.15.10.1
libexpat1 2.1.0-7ubuntu0.15.10.1

Ubuntu 14.04 LTS:
lib64expat1 2.1.0-4ubuntu1.2
libexpat1 2.1.0-4ubuntu1.2

Ubuntu 12.04 LTS:
lib64expat1 2.0.1-7.2ubuntu1.3
libexpat1 2.0.1-7.2ubuntu1.3

After a standard system upgrade you need to restart any applications linked
against Expat to effect the necessary changes.

References:
http://www.ubuntu.com/usn/usn-2983-1
CVE-2016-0718

Package Information:
https://launchpad.net/ubuntu/+source/expat/2.1.0-7ubuntu0.16.04.1
https://launchpad.net/ubuntu/+source/expat/2.1.0-7ubuntu0.15.10.1
https://launchpad.net/ubuntu/+source/expat/2.1.0-4ubuntu1.2
https://launchpad.net/ubuntu/+source/expat/2.0.1-7.2ubuntu1.3

Tuesday, May 17, 2016

[FreeBSD-Announce] FreeBSD Security Advisory FreeBSD-SA-16:19.sendmsg

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

=============================================================================
FreeBSD-SA-16:19.sendmsg Security Advisory
The FreeBSD Project

Topic: Incorrect argument handling in sendmsg(2)

Category: core
Module: kernel
Announced: 2016-05-17
Credits: CTurt and the HardenedBSD team
Affects: FreeBSD 10.x
Corrected: 2016-05-17 22:30:43 UTC (stable/10, 10.3-STABLE)
2016-05-17 22:28:27 UTC (releng/10.3, 10.3-RELEASE-p3)
2016-05-17 22:28:20 UTC (releng/10.2, 10.2-RELEASE-p17)
2016-05-17 22:28:11 UTC (releng/10.1, 10.1-RELEASE-p34)
CVE Name: CVE-2016-1887

For general information regarding FreeBSD Security Advisories,
including descriptions of the fields above, security branches, and the
following sections, please visit <URL:https://security.FreeBSD.org/>.

I. Background

The sendmsg(2) system call allows to send data to a socket. The data
may be accompanied by optional ancillary data.

II. Problem Description

Incorrect argument handling in the socket code allows malicious local
user to overwrite large portion of the kernel memory.

III. Impact

Malicious local user may crash kernel or execute arbitrary code in the kernel,
potentially gaining superuser privileges.

IV. Workaround

No workaround is available.

V. Solution

Perform one of the following:

1) Upgrade your vulnerable system to a supported FreeBSD stable or
release / security branch (releng) dated after the correction date.

Reboot is required.

2) To update your vulnerable system via a binary patch:

Systems running a RELEASE version of FreeBSD on the i386 or amd64
platforms can be updated via the freebsd-update(8) utility:

# freebsd-update fetch
# freebsd-update install

Reboot is required.

3) To update your vulnerable system via a source code patch:

The following patches have been verified to apply to the applicable
FreeBSD release branches.

a) Download the relevant patch from the location below, and verify the
detached PGP signature using your PGP utility.

# fetch https://security.FreeBSD.org/patches/SA-16:19/sendmsg.patch
# fetch https://security.FreeBSD.org/patches/SA-16:19/sendmsg.patch.asc
# gpg --verify sendmsg.patch.asc

b) Apply the patch. Execute the following commands as root:

# cd /usr/src
# patch < /path/to/patch

c) Recompile your kernel as described in
<URL:https://www.FreeBSD.org/handbook/kernelconfig.html> and reboot the
system.

VI. Correction details

The following list contains the correction revision numbers for each
affected branch.

Branch/path Revision
- -------------------------------------------------------------------------
stable/10/ r300093
releng/10.1/ r300085
releng/10.2/ r300086
releng/10.3/ r300087
- -------------------------------------------------------------------------

To see which files were modified by a particular revision, run the
following command, replacing NNNNNN with the revision number, on a
machine with Subversion installed:

# svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base

Or visit the following URL, replacing NNNNNN with the revision number:

<URL:https://svnweb.freebsd.org/base?view=revision&revision=NNNNNN>

VII. References

<URL:http://cturt.github.io/sendmsg.html>
<URL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1887>

The latest revision of this advisory is available at
<URL:https://security.FreeBSD.org/advisories/FreeBSD-SA-16:19.sendmsg.asc>
-----BEGIN PGP SIGNATURE-----
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=wuhi
-----END PGP SIGNATURE-----
_______________________________________________
freebsd-announce@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-announce
To unsubscribe, send any mail to "freebsd-announce-unsubscribe@freebsd.org"

[FreeBSD-Announce] FreeBSD Security Advisory FreeBSD-SA-16:18.atkbd

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

=============================================================================
FreeBSD-SA-16:18.atkbd Security Advisory
The FreeBSD Project

Topic: Buffer overflow in keyboard driver

Category: core
Module: atkbd
Announced: 2016-05-17
Credits: CTurt and the HardenedBSD team
Affects: All supported versions of FreeBSD.
Corrected: 2016-05-17 22:29:59 UTC (stable/10, 10.3-STABLE)
2016-05-17 22:28:27 UTC (releng/10.3, 10.3-RELEASE-p3)
2016-05-17 22:28:20 UTC (releng/10.2, 10.2-RELEASE-p17)
2016-05-17 22:28:11 UTC (releng/10.1, 10.1-RELEASE-p34)
2016-05-17 22:31:12 UTC (stable/9, 9.3-STABLE)
2016-05-17 22:28:36 UTC (releng/9.3, 9.3-RELEASE-p42)
CVE Name: CVE-2016-1886

For general information regarding FreeBSD Security Advisories,
including descriptions of the fields above, security branches, and the
following sections, please visit <URL:https://security.FreeBSD.org/>.

I. Background

The atkbd(4) driver, together with the atkbdc(4) driver, provides access
to the AT 84 keyboard or the AT enhanced keyboard which is connected to
the AT keyboard controller. The driver is required for the console driver
syscons(4) or vt(4). The driver exposes its own ioctl(2) interface to allow
it to be configured from userland through the kbdcontrol(1) utility.

II. Problem Description

Incorrect signedness comparison in the ioctl(2) handler allows a malicious
local user to overwrite a portion of the kernel memory.

III. Impact

A local user may crash the kernel, read a portion of kernel memory and
execute arbitrary code in kernel context. The result of executing an
arbitrary kernel code is privilege escalation.

IV. Workaround

Disallow keymap changes for non-privileged users:

sysctl hw.kbd.keymap_restrict_change=4

V. Solution

Perform one of the following:

1) Upgrade your vulnerable system to a supported FreeBSD stable or
release / security branch (releng) dated after the correction date.

Reboot is required.

2) To update your vulnerable system via a binary patch:

Systems running a RELEASE version of FreeBSD on the i386 or amd64
platforms can be updated via the freebsd-update(8) utility:

# freebsd-update fetch
# freebsd-update install

Reboot is required.

3) To update your vulnerable system via a source code patch:

The following patches have been verified to apply to the applicable
FreeBSD release branches.

a) Download the relevant patch from the location below, and verify the
detached PGP signature using your PGP utility.

# fetch https://security.FreeBSD.org/patches/SA-16:18/atkbd.patch
# fetch https://security.FreeBSD.org/patches/SA-16:18/atkbd.patch.asc
# gpg --verify atkbd.patch.asc

b) Apply the patch. Execute the following commands as root:

# cd /usr/src
# patch < /path/to/patch

c) Recompile your kernel as described in
<URL:https://www.FreeBSD.org/handbook/kernelconfig.html> and reboot the
system.

VI. Correction details

The following list contains the correction revision numbers for each
affected branch.

Branch/path Revision
- -------------------------------------------------------------------------
stable/9/ r300093
releng/9.3/ r300088
stable/10/ r300091
releng/10.1/ r300085
releng/10.2/ r300086
releng/10.3/ r300087
- -------------------------------------------------------------------------

To see which files were modified by a particular revision, run the
following command, replacing NNNNNN with the revision number, on a
machine with Subversion installed:

# svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base

Or visit the following URL, replacing NNNNNN with the revision number:

<URL:https://svnweb.freebsd.org/base?view=revision&revision=NNNNNN>

VII. References

<URL:http://cturt.github.io/SETFKEY.html>
<URL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1886>

The latest revision of this advisory is available at
<URL:https://security.FreeBSD.org/advisories/FreeBSD-SA-16:18.atkbd.asc>
-----BEGIN PGP SIGNATURE-----
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=6GJy
-----END PGP SIGNATURE-----
_______________________________________________
freebsd-announce@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-announce
To unsubscribe, send any mail to "freebsd-announce-unsubscribe@freebsd.org"