Synopsis:          Moderate: RDMA stack security, bug fix, and enhancement update
Advisory ID:       SLSA-2013:1661-2
Issue Date:        2013-11-21
CVE Numbers:       CVE-2012-4516
                   CVE-2013-2561
--

A flaw was found in the way ibutils handled temporary files. A local
attacker could use this flaw to cause arbitrary files to be overwritten as
the root user via a symbolic link attack. (CVE-2013-2561)

It was discovered that librdmacm used a static port to connect to the
ib_acm service. A local attacker able to run a specially crafted ib_acm
service on that port could use this flaw to provide incorrect address
resolution information to librmdacm applications. (CVE-2012-4516)

This advisory updates the following packages to the latest upstream
releases, providing a number of bug fixes and enhancements over the
previous versions:

Several bugs have been fixed in the openmpi, mpitests, ibutils, and
infinipath-psm packages.

The most notable changes in these updated packages from the RDMA stack are
the following:

* Multiple bugs in the Message Passing Interface (MPI) test packages were
resolved, allowing more of the mpitest applications to pass on the
underlying MPI implementations.

* The libmlx4 package now includes dracut module files to ensure that any
necessary custom configuration of mlx4 port types is included in the
initramfs dracut builds.

* Multiple test programs in the perftest and qperf packages now work
properly over RoCE interfaces, or when specifying the use of rdmacm queue
pairs.

* The mstflint package has been updated to the latest upstream version,
which is now capable of burning firmware on newly released Mellanox
Connect-IB hardware.

* A compatibility problem between the openmpi and infinipath-psm packages
has been resolved with new builds of these packages.
--

SL6
  x86_64
    infinipath-psm-3.0.1-115.1015_open.2.el6.x86_64.rpm
    infinipath-psm-debuginfo-3.0.1-115.1015_open.2.el6.x86_64.rpm
    libibverbs-1.1.7-1.el6.i686.rpm
    libibverbs-1.1.7-1.el6.x86_64.rpm
    libibverbs-debuginfo-1.1.7-1.el6.i686.rpm
    libibverbs-debuginfo-1.1.7-1.el6.x86_64.rpm
    librdmacm-1.0.17-1.el6.i686.rpm
    librdmacm-1.0.17-1.el6.x86_64.rpm
    librdmacm-debuginfo-1.0.17-1.el6.i686.rpm
    librdmacm-debuginfo-1.0.17-1.el6.x86_64.rpm
    openmpi-1.5.4-2.el6.x86_64.rpm
    openmpi-debuginfo-1.5.4-2.el6.x86_64.rpm
    infinipath-psm-devel-3.0.1-115.1015_open.2.el6.x86_64.rpm
    libibverbs-devel-1.1.7-1.el6.i686.rpm
    libibverbs-devel-1.1.7-1.el6.x86_64.rpm
    libibverbs-devel-static-1.1.7-1.el6.x86_64.rpm
    libibverbs-utils-1.1.7-1.el6.x86_64.rpm
    libmlx4-1.0.5-4.el6.1.i686.rpm
    libmlx4-1.0.5-4.el6.1.x86_64.rpm
    libmlx4-debuginfo-1.0.5-4.el6.1.i686.rpm
    libmlx4-debuginfo-1.0.5-4.el6.1.x86_64.rpm
    libmlx4-static-1.0.5-4.el6.1.x86_64.rpm
    librdmacm-devel-1.0.17-1.el6.i686.rpm
    librdmacm-devel-1.0.17-1.el6.x86_64.rpm
    librdmacm-static-1.0.17-1.el6.x86_64.rpm
    librdmacm-utils-1.0.17-1.el6.x86_64.rpm
    openmpi-1.5.4-2.el6.i686.rpm
    openmpi-debuginfo-1.5.4-2.el6.i686.rpm
    openmpi-devel-1.5.4-2.el6.i686.rpm
    openmpi-devel-1.5.4-2.el6.x86_64.rpm
    ibutils-1.5.7-8.el6.x86_64.rpm
    ibutils-debuginfo-1.5.7-8.el6.i686.rpm
    ibutils-debuginfo-1.5.7-8.el6.x86_64.rpm
    ibutils-libs-1.5.7-8.el6.i686.rpm
    ibutils-libs-1.5.7-8.el6.x86_64.rpm
    mpitests-debuginfo-3.2-9.el6.x86_64.rpm
    mpitests-mvapich-3.2-9.el6.x86_64.rpm
    mpitests-mvapich2-3.2-9.el6.x86_64.rpm
    mpitests-openmpi-3.2-9.el6.x86_64.rpm
    mstflint-3.0-0.6.g6961daa.1.el6.x86_64.rpm
    mstflint-debuginfo-3.0-0.6.g6961daa.1.el6.x86_64.rpm
    perftest-2.0-2.el6.x86_64.rpm
    perftest-debuginfo-2.0-2.el6.x86_64.rpm
    qperf-0.4.9-1.el6.x86_64.rpm
    qperf-debuginfo-0.4.9-1.el6.x86_64.rpm
    ibutils-devel-1.5.7-8.el6.i686.rpm
    ibutils-devel-1.5.7-8.el6.x86_64.rpm
    mpitests-mvapich-psm-3.2-9.el6.x86_64.rpm
    mpitests-mvapich2-psm-3.2-9.el6.x86_64.rpm
  i386
    libibverbs-1.1.7-1.el6.i686.rpm
    libibverbs-debuginfo-1.1.7-1.el6.i686.rpm
    librdmacm-1.0.17-1.el6.i686.rpm
    librdmacm-debuginfo-1.0.17-1.el6.i686.rpm
    openmpi-1.5.4-2.el6.i686.rpm
    openmpi-debuginfo-1.5.4-2.el6.i686.rpm
    libibverbs-devel-1.1.7-1.el6.i686.rpm
    libibverbs-devel-static-1.1.7-1.el6.i686.rpm
    libibverbs-utils-1.1.7-1.el6.i686.rpm
    libmlx4-1.0.5-4.el6.1.i686.rpm
    libmlx4-debuginfo-1.0.5-4.el6.1.i686.rpm
    libmlx4-static-1.0.5-4.el6.1.i686.rpm
    librdmacm-devel-1.0.17-1.el6.i686.rpm
    librdmacm-static-1.0.17-1.el6.i686.rpm
    librdmacm-utils-1.0.17-1.el6.i686.rpm
    openmpi-devel-1.5.4-2.el6.i686.rpm
    ibutils-1.5.7-8.el6.i686.rpm
    ibutils-debuginfo-1.5.7-8.el6.i686.rpm
    ibutils-libs-1.5.7-8.el6.i686.rpm
    mpitests-debuginfo-3.2-9.el6.i686.rpm
    mpitests-mvapich-3.2-9.el6.i686.rpm
    mpitests-mvapich2-3.2-9.el6.i686.rpm
    mpitests-openmpi-3.2-9.el6.i686.rpm
    mstflint-3.0-0.6.g6961daa.1.el6.i686.rpm
    mstflint-debuginfo-3.0-0.6.g6961daa.1.el6.i686.rpm
    perftest-2.0-2.el6.i686.rpm
    perftest-debuginfo-2.0-2.el6.i686.rpm
    qperf-0.4.9-1.el6.i686.rpm
    qperf-debuginfo-0.4.9-1.el6.i686.rpm
    ibutils-devel-1.5.7-8.el6.i686.rpm
  noarch
    rdma-3.10-3.el6.noarch.rpm

- Scientific Linux Development Team