kernel security update

2.4.21-47.0.1.EL - fix buflen assignment for DVD BDA read requests Chip Coldwell - prevent write permission w/read-only shm segments Ernie Petrides - fix clock drift by disabling C1 clock ramping on AMD Prarit Bhargava - prevent possible deadlock with shmat/shm-rmid races Sachin Prabhu - prevent...

Mandrake Linux Security Advisory : kernel (MDKSA-2007:060)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : The 2.6.17 kernel and earlier, when running on IA64 and SPARC platforms would allow a local user to cause a DoS crash via a malformed ELF file CVE-2006-4538. The mincore function in the Linux kernel did not properly lock...

Mandrake Linux Security Advisory : kernel (MDKSA-2007:012)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : The blockprepatewrite function in the 2.6 kernel before 2.6.13 does not properly clear buffers during certain error conditions, which allows users to read portions of files that have been unlinked CVE-2006-4813. The...

Mandrake Linux Security Advisory : gtk+2.0 (MDKSA-2007:039)

The GdkPixbufLoader function in GIMP ToolKit GTK+ in GTK 2 gtk2 allows context-dependent attackers to cause a denial of service crash via a malformed image file. CVE-2007-0010 The version of libgtk+2.0 shipped with Mandriva Linux 2007 fails various portions of the lsb-test-desktop test suite, par...

SUSE-SA:2006:057: kernel

The remote host is missing the patch for the advisory SUSE-SA:2006:057 kernel. Various security problems were found and fixed in the Linux kernel. We have released updates for following distributions: - SUSE Linux Enterprise Server 9 on September 21st - SUSE Linux Enterprise 10 on September 26th ...

kernel Race condition in mincore can cause "ps -ef" to hang

The mincore function in the Linux kernel before 2.4.33.6 does not properly lock access to user space, which has unspecified impact and attack vectors, possibly related to a deadlock...

CVE-2006-6922

SQL injection vulnerability in Deadlock User Management System phpdeadlock 0.64 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2006-6922

SQL injection vulnerability in Deadlock User Management System phpdeadlock 0.64 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2006-6922

CVE-2006-6922 describes a SQL injection vulnerability in Deadlock User Management System (phpdeadlock) 0.64 and earlier, allowing remote attackers to execute arbitrary SQL via unspecified vectors. The affected product is the Deadlock User Management System (phpdeadlock); the flaw is in the handli...

CVE-2006-4814

The mincore function in the Linux kernel before 2.4.33.6 does not properly lock access to user space, which has unspecified impact and attack vectors, possibly related to a deadlock...

CVE-2006-4814

The mincore function in the Linux kernel before 2.4.33.6 does not properly lock access to user space, which has unspecified impact and attack vectors, possibly related to a deadlock...

CVE-2006-4814

The mincore function in the Linux kernel before 2.4.33.6 does not properly lock access to user space, which has unspecified impact and attack vectors, possibly related to a deadlock...

Important: Red Hat Security Advisory: kernel security update

Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 3 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...

security flaw

The kernel in Red Hat Enterprise Linux 3, when running on SMP systems, allows local users to cause a denial of service deadlock by running the shmat function on an shm at the same time that shmctl is removing that shm IPCRMID, which prevents a spinlock from being unlocked...

CVE-2006-4342

The kernel in Red Hat Enterprise Linux 3, when running on SMP systems, allows local users to cause a denial of service deadlock by running the shmat function on an shm at the same time that shmctl is removing that shm IPCRMID, which prevents a spinlock from being unlocked...

CVE-2006-4342

The kernel in Red Hat Enterprise Linux 3, when running on SMP systems, allows local users to cause a denial of service deadlock by running the shmat function on an shm at the same time that shmctl is removing that shm IPCRMID, which prevents a spinlock from being unlocked...

CVE-2006-4342

Summary: CVE-2006-4342 affects the Red Hat Enterprise Linux 3 kernel on SMP systems. When a local user calls shmat() to attach IPC shared memory while shmctl() is removing the same shared memory (IPC_RMID), access controls may not be fully cleared before removal, potentially causing a deadlock an...

PT-2006-5148 · Red Hat · Red Hat

Name of the Vulnerable Software and Affected Versions: Red Hat Enterprise Linux version 3 Description: The issue allows local users to cause a denial of service, resulting in a deadlock. This occurs when the shmat function is run on a shared memory segment at the same time that the shmctl functio...

Low: Red Hat Security Advisory: openssh security update

Updated openssh packages that fix bugs in sshd are now available for Red Hat Enterprise Linux 3. This update has been rated as having low security impact by the Red Hat Security Response Team. OpenSSH is OpenBSD's SSH Secure SHell protocol implementation. This package includes the core files...

Regarding "SMB Invalid Handle Value" - MS06-030. Vulnerability not fixed.

Hi, Just to confirm that Microsoft has not fixed the NtClose/ZwClose DeadLock vulnerability. The bulletin MS06-030 addressed this flaw as "SMB Invalid Handle Value" which is just an euphemism under my point of view. The code added to mrxsmb.sys is just a wrapper in order to avoid the "Invalid...