SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 5668)

This kernel update for SUSE Linux Enterprise 10 Service Pack 2 fixes various bugs and some security problems : - When creating a file, open/creat allowed the setgid bit to be set via the mode argument even when, due to the bsdgroups mount option or the file being created in a setgid directory, th...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 5473)

This is a respin of the previous kernel update, which got retracted due to an IDE-CDROM regression, where any IDE CDROM access would hang or crash the system. Only this problem was fixed additionally. This kernel update fixes the following security problems : - On x8664 a denial of service attack...

[SECURITY] [DSA 1844-1] New Linux 2.6.24 packages fix several vulnerabilities

---------------------------------------------------------------------- Debian Security Advisory DSA-1844-1 [email protected] http://www.debian.org/security/ Dann Frazier July 28, 2009 http://www.debian.org/security/faq - ----------------------------------------------------------------------...

DSA-1844-1 linux-2.6.24 - several vulnerabilities

Bulletin has no description...

kernel: splice local denial of service

The inode double locking code in fs/ocfs2/file.c in the Linux kernel 2.6.30 before 2.6.30-rc3, 2.6.27 before 2.6.27.24, 2.6.29 before 2.6.29.4, and possibly other versions down to 2.6.19 allows local users to cause a denial of service prevention of file creation and removal via a series of splice...

USN-793-1: Linux kernel vulnerabilities

Igor Zhbanov discovered that NFS clients were able to create device nodes even when rootsquash was enabled. An authenticated remote attacker could create device nodes with open permissions, leading to a loss of privacy or escalation of privileges. Only Ubuntu 8.10 and 9.04 were affected...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : linux, linux-source-2.6.15 vulnerabilities (USN-793-1)

Igor Zhbanov discovered that NFS clients were able to create device nodes even when rootsquash was enabled. An authenticated remote attacker could create device nodes with open permissions, leading to a loss of privacy or escalation of privileges. Only Ubuntu 8.10 and 9.04 were affected...

wireshark security update

1.0.8-1.0.1.el53.1 - Add oracle-ocfs2-network.patch 1.0.8-1.1 - bump release to match Z-stream/EUS NVR policy - Resolves: 501950 1.0.8-1 - upgrade to 1.0.8 - Resolves: 501950...

wireshark security update

1.0.3-4.0.1.el52 - Add oracle-ocfs2-network.patch 1.0.3-4 - fix pam session file, wireshark requires root pswd everytime its started 1.0.3-3 - fix pie flags 1.0.3-1 - upgrade to 1.0.3 - fixes several security issues - Resolves: 461569...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 4935)

This kernel update fixes the following security problems : - Insufficient range checks in certain fault handlers could be used by local attackers to potentially read or write kernel memory. CVE-2008-0007 - Incorrect access mode checks could be used by local attackers to corrupt directory contents...

openSUSE 10 Security Update : kernel (kernel-4941)

This kernel update fixes the following security problems : CVE-2008-0007: Insufficient range checks in certain fault handlers could be used by local attackers to potentially read or write kernel memory. CVE-2008-0001: Incorrect access mode checks could be used by local attackers to corrupt...

Moderate: wireshark security update

wireshark-0.99.7-1.el5.0.1: 0.99.7-1.el5.0.1 - Add oracle-ocfs2-network.patch 0.99.7-1 - upgrade to 0.99.7 - switch to libsmi from net-snmp - disable ADNS due to its lack of Ipv6 support - Resolves: 397411 libsmi-0.4.5-2.el5: 0.4.5-2 - Handle rpath problems in 64-bit systems 209522. 0.4.5-1 -...

SuSE 10 Security Update : Linux kernel (i386) (ZYPP Patch Number 2097)

This kernel update fixes the following security problems : - A double userspace copy in a SCTP ioctl allows local attackers to overflow a buffer in the kernel, potentially allowing code execution and privilege escalation. 199441. CVE-2006-3745 - Local attackers were able to crash PowerPC systems...

wireshark security and bug fix update

0.99.6-EL4.1.0.1 - Add oracle-ocfs2-network.patch 0.99.6-1 - upgrade to 0.99.6 - Wireshark could crash when dissecting an HTTP chunked response - Wireshark could crash while reading iSeries capture files - Wireshark could exhaust system memory while reading a malformed DCP ETSI packet - Wireshark...

wireshark security update

0.99.6-1.el5.01 - Added patch for OCFS2 formatting 0.99.6-1 - upgrade to 0.99.6 - Wireshark could crash when dissecting an HTTP chunked response - Wireshark could crash while reading iSeries capture files - Wireshark could exhaust system memory while reading a malformed DCP ETSI packet - Wireshar...

openSUSE 10 Security Update : kernel (kernel-4641)

This kernel update fixes the following security problems : ++ CVE-2006-6058: A local denial of service when mounting MINIX filesystems was fixed. ++ CVE-2007-4997: A 2 byte buffer underflow in the ieee80211 stack was fixed, which might be used by attackers in WLAN reach to crash the machine. and...

Moderate wireshark security update

0.99.4-EL4.1.1 - Oracle OCFS2 network patch 0.99.4-1 - upgrade to 0.99.4, fixes multiple security issues 211993 - use dist tag - CVE-2006-5468 - The HTTP dissector could dereference a null pointer. - CVE-2006-5469 - The WBXML dissector could crash. - CVE-2006-5470 - The LDAP dissector and possibl...

SUSE Security Announcement: kernel multiple security problems (SUSE-SA:2005:050)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUSE Security Announcement Package: kernel Announcement ID: SUSE-SA:2005:050 Date: Thu, 01 Sep 2005 14:00:00 +0000 Affected Products: 9.1, 9.2, 9.3 SUSE Linux Enterprise Server 9 Novell Linux Desktop 9 Vulnerability Type: denial of service, local...

PT-2009-6759 · Opensuse +1 · Cluster-Network-Kmp-Ppc64 +30

Name of the Vulnerable Software and Affected Versions: openSUSE kernel versions prior to 2.6.30-rc3 openSUSE kernel versions prior to 2.6.27.24 openSUSE kernel versions prior to 2.6.29.4 cluster-network-kmp-pae affected versions not specified cluster-network-kmp-default affected versions not...