kernel security and bug fix update

2.6.18-53.1.19.0.1.el5 - NET Add entropy support to e1000 and bnx2 John Sobecki ORA 6045759 - NET Fix msi issue with kexec/kdump Michael Chan ORA 6219364 - MM Fix allocpagesnode static nid' race made kernel crash Joe Jin ORA 6187457 - splice Fix bad unlockpage in error case Jens Axboe ORA 6263574...

CVE-2008-1615

CVE-2008-1615 affects the Linux kernel (2.6.18 and possibly later) on AMD64 . The vulnerability arises when a local user uses certain ptrace calls, enabling an unprivileged user to crash the kernel, i.e., a local denial of service. The connected Nessus advisories/OSV entries reference this CVE am...

kernel: ptrace: Unprivileged crash on x86_64 %cs corruption

Linux kernel 2.6.18, and possibly other versions, when running on AMD64 architectures, allows local users to cause a denial of service crash via certain ptrace calls...

CVE-2007-5498

The Xen hypervisor block backend driver for Linux kernel 2.6.18, when running on a 64-bit host with a 32-bit paravirtualized guest, allows local privileged users in the guest OS to cause a denial of service host OS crash via a request that specifies a large number of blocks...

[SECURITY] [DSA 1565-1] New Linux 2.6.18 packages fix several vulnerabilities

---------------------------------------------------------------------- Debian Security Advisory DSA-1565-1 [email protected] http://www.debian.org/security/ dann frazier May 1, 2008 http://www.debian.org/security/faq - ----------------------------------------------------------------------...

Null pointer dereference

The chrpshowcpuinfo function chrp/setup.c in Linux kernel 2.4.21 through 2.6.18-53, when running on PowerPC, might allow local users to cause a denial of service crash via unknown vectors that cause the ofgetproperty function to fail, which triggers a NULL pointer dereference...

Debian Security Advisory DSA 1356-1 (linux-2.6)

The remote host is missing an update to linux-2.6 announced via advisory DSA 1356-1. OpenVAS Vulnerability Test $Id: deb13561.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1356-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-1363-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1428-2 : linux-2.6 - several vulnerabilities

Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : This is an update to DSA 1428-1 which omitted a reference...

DSA-1378-2 fai-kernels linux-2.6 user-mode-linux - several vulnerabilities

Bulletin has no description...

Important: kernel security and bug fix update

2.6.18-8.1.6.0.1.el5 -Fix bonding primary=ethX so it picks correct network Bert Barbe IT 101532 ORA 5136660 -Add entropy module option to e1000 John Sobecki ORA 6045759 -Add entropy module option to bnx2 John Sobecki ORA 6045759 2.6.18.8-1.6.el5 - bluetooth close information leaks in setsockopt...

Fedora Core 5 : iscsi-initiator-utils-5.2.0.865-0.0.fc5 (2007-589)

This update to iscsi-initiator-utils is a rebase to the upstream open-iscsi-2.0-865 release. This release includes two security fixes which are described here https://bugzilla.redhat.com/bugzilla/showbug.cgi?id=243719 bug fixes and new features. The tools in this release use a different db format...

[SECURITY] [DSA 1289-1] New Linux 2.6.18 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1289-1 [email protected] http://www.debian.org/security/ Dann Frazier May 13th, 2007 http://www.debian.org/security/faq -...

security flaw

Race condition in the findgetblockslow function in the ISO9660 filesystem in Linux 2.6.18 and possibly other versions allows local users to cause a denial of service infinite loop by mounting a crafted ISO9660 filesystem containing malformed data structures...

Fedora Core 6 : kernel-2.6.18-1.2849.fc6 (2006-1223)

This updates to the latest upstream stable kernel 2.6.18.2, and also fixes a number of security issues. MOKB-05-11-2006: Linux 2.6.x ISO9660 findgetblockslow denial of service http://projects.info-pull.com/mokb/MOKB-05-11-2006.html CVE-2006-5757 MOKB-07-11-2006: Linux 2.6.x zlibinflate memory...

CVE-2006-6128

The CVE-2006-6128 entry describes a local-denial-of-service vulnerability tied to the ReiserFS implementation in Linux kernel 2.6.18 (and possibly other versions). The issue arises when a malformed ReiserFS filesystem triggers memory corruption during a sync operation, enabling local users to cau...

Linux Kernel ATM SkBuff Dereference Remote Denial of Service Vulnerability

这个问题是在Kernel处理输入ATM（异步传输模式）数据时被触发。 利用这个漏洞，攻击者可以目标Kernel死机，导致拒绝服务的发生。 本问题只影响那些具有ATM硬件并且配置成支持ATM的Kernel的系统。 Kernel版本从2.6.0到2.6.17（包括2.6.17）都受到该漏洞影响。 PHP 5 受此漏洞影响。 Trustix Secure Linux 3.0 Trustix Secure Linux 2.2 Trustix Operating System Enterprise Server 2.0 RedHat Enterprise Linux WS 4 RedHat...

CVE-2006-5757

Race condition in the findgetblockslow function in the ISO9660 filesystem in Linux 2.6.18 and possibly other versions allows local users to cause a denial of service infinite loop by mounting a crafted ISO9660 filesystem containing malformed data structures...

CVE-2006-5757

Race condition in the findgetblockslow function in the ISO9660 filesystem in Linux 2.6.18 and possibly other versions allows local users to cause a denial of service infinite loop by mounting a crafted ISO9660 filesystem containing malformed data structures...

SQL-Ledger 2.6.x/LedgerSMB 1.0 - 'Terminal' Directory Traversal

source: https://www.securityfocus.com/bid/19960/info SQL-Ledger and LedgerSMB are prone to a remote directory-traversal vulnerability. An attacker can exploit this issue to include arbitrary files located on the vulnerable computer in the context of the webserver process. The attacker may be able...