This is Your Open EnterpriseTM

Novell XTier framework 5198


This document (5114991) is provided subject to the disclaimer at the end of this document.

patches this patch supersedes

This patch does not supersede any other patches.

patches that supersede this patch

This patch is not superseded by any other patches.

patch attributes

Architecture: x86-64
Security patch: YesView security alerts.
Priority: Mandatory
Distribution Type: Public


Revision: 1
Document ID: 5114991
Creation Date: 2011-10-25 11:45:36


Important: Security update for Novell XTier framework (5198)

Patch: sledsp1-novell-novfsd-5198
CVEs: CVE-2011-1710
Bugs: 585440

Applies to:

Package(s): novell-novfsd novell-novfsd-debuginfo novell-novfsd-debugsource novell-xtier-base novell-xtier-core novell-xtier-devel novell-xtier-web novell-xtier-xplat
SUSE Linux Enterprise Desktop 11 SP1



Everyone should update.




Several user supplied header length variables for the HTTP server component in the Novell XTier framework were not size limited, allowing integer overflow attacks to crash the service or potentially execute code. (CVE-2011-1710)

Security Issue reference:


This update is provided as a set of RPM packages that can easily be installed onto a running system by using the YaST online update module. Please install the update.

file contents

Files IncludedSizeDate
novell-novfsd-3.0.0-0.11.1.x86_64.rpm80.0 KB (82000)2011-10-25 11:45:40
novell-xtier-xplat-3.1.8-0.7.1.x86_64.rpm182.0 KB (186391)2011-10-25 11:45:45
novell-xtier-core-3.1.8-0.7.1.x86_64.rpm1.0 MB (1120261)2011-10-25 11:45:44
novell-xtier-base-3.1.8-0.7.1.x86_64.rpm4.0 MB (4232264)2011-10-25 11:45:43
readme_5114991.htmlN/A2011-10-25 11:48:30

source packages

Download the source code of the patches for maintained products.


The Origin of this information may be internal or external to Novell. Novell makes all reasonable efforts to verify this information. However, the information provided in this document is for your information only. Novell makes no explicit or implied claims to the validity of this information. Any trademarks referenced in this document are the property of their respective owners. Consult your product manuals for complete trademark information.

Novell is a registered trademark of Novell, Inc. in the United States and other countries. SUSE is a registered trademark of SUSE Linux AG, a Novell business. *All third-party trademarks are the property of their respective owners.

© 2007 Novell, Inc. All Rights Reserved.