[slackware-security] 64-bit kernel

New kernel packages are available for Slackware x8664 13.1, and -current to fix security issues. Here are the details from the Slackware64 13.1 ChangeLog: patches/packages/linux-2.6.33.4-2/kernel-firmware-2.6.33.4-noarch-2.txz: Rebuilt...

BELL-CVE-2010-3301 CVE-2010-3301 does not affect BellSoft software

Bulletin has no description...

CVE-2010-3301

The IA32 system call emulation functionality in arch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.36-rc4-git2 on the x8664 platform does not zero extend the %eax register after the 32-bit entry path to ptrace is used, which allows local users to gain privileges by triggering an out-of-boun...

CVE-2010-3301

Summary: CVE-2010-3301 affects the Linux kernel IA32 system call emulation on x86_64 where the 32‑bit entry path to ptrace does not zero‑extend %eax, enabling local privilege escalation via an out‑of‑bounds access to the syscall table. Impact: local users can gain privileges. Affected versions: k...

Ubuntu Update for Linux kernel vulnerabilities USN-988-1

Ubuntu Update for Linux kernel vulnerabilities USN-988-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9881.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for Linux kernel vulnerabilities USN-988-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Fedora 14 : kernel-2.6.35.4-28.fc14 (2010-14832)

Fix possible local privilege escalation on x8664 systems CVE-2010-3081, CVE-2010-3301. - NOTE: All users should update because of this bug. Fix denial of service attack with large argument lists. Add support for perl and python scripting to perf. Nouveau video driver fixes : - fix oops in acpi ed...

Ubuntu: Security Advisory (USN-988-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for kernel FEDORA-2010-14890

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 12 : kernel-2.6.32.21-168.fc12 (2010-14878)

Fix possible local privilege escalation on x8664 systems CVE-2010-3081, CVE-2010-3301. - Mitigate denial of service attack with large argument lists. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted...

Fedora 13 : kernel-2.6.34.7-56.fc13 (2010-14890)

Fix possible local privilege escalation on x8664 systems CVE-2010-3081, CVE-2010-3301. - Mitigate denial of service attack with large argument lists. - Fix possible hang on suspend introduced in 2.6.34.6-54 Note that Tenable Network Security has extracted the preceding description block directly...

USN-988-1: Linux kernel vulnerabilities

Ben Hawkes discovered that the Linux kernel did not correctly validate memory ranges on 64bit kernels when allocating memory on behalf of 32bit system calls. On a 64bit system, a local attacker could perform malicious multicast getsockopt calls to gain root privileges. CVE-2010-3081 Ben Hawkes...

CVE-2010-3301

creationtimestamp| type| source ---|---|--- 2010-09-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15023...

CVE-2010-3301

The IA32 system call emulation functionality in arch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.36-rc4-git2 on the x8664 platform does not zero extend the %eax register after the 32-bit entry path to ptrace is used, which allows local users to gain privileges by triggering an out-of-boun...

Fedora 12 : openoffice.org-3.1.1-19.26.fc12 (2010-1847)

Fri Feb 12 2010 Caolan McNamara - 1:3.1.1-19.26 - CVE-2009-2950 GIF file parsing heap overflow caolanm - CVE-2009-2949 integer overflow in XPM processing caolanm - CVE-2009-3301 .doc Table Parsing vulernability caolanm - CVE-2009-3302 .doc Table Parsing vulernability caolanm - Resolves:...

Fedora Update for openoffice.org FEDORA-2010-9628

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

openSUSE Security Update : OpenOffice_org-base-drivers-postgresql (OpenOffice_org-base-drivers-postgresql-1980)

This update of OpenOfficeorg includes fixes for the following vulnerabilities : - CVE-2009-0217: XML signature weakness - CVE-2009-2949: XPM Import Integer Overflow - CVE-2009-2950: GIF Import Heap Overflow - CVE-2009-3301: MS Word sprmTDefTable Memory Corruption - CVE-2009-3302: MS Word...

openSUSE Security Update : OpenOffice_org (OpenOffice_org-1979)

This update of OpenOfficeorg includes fixes for the following vulnerabilities : - CVE-2009-0217: XML signature weakness - CVE-2009-2949: XPM Import Integer Overflow - CVE-2009-2950: GIF Import Heap Overflow - CVE-2009-3301: MS Word sprmTDefTable Memory Corruption - CVE-2009-3302: MS Word...

FreeBSD Ports: openoffice.org

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: openoffice.org

The remote host is missing an update to the system as announced in the referenced advisory. VID c97d7a37-2233-11df-96dd-001b2134ef46 OpenVAS Vulnerability Test $ Description: Auto generated from VID c97d7a37-2233-11df-96dd-001b2134ef46 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Fedora Update for openoffice.org FEDORA-2010-1847

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...