Security fix for the ALT Linux 7 package bind version 9.3.6-alt7

Dec. 16, 2011 Dmitry V. Levin 9.3.6-alt7 - Imported fixes for several DNSSEC vulnerabilities from RH bind CVE-2009-4022, CVE-2010-0097, CVE-2010-3762, CVE-2011-4313; note that DNSSEC is not enabled by default. - Enabled IPv6 support. - Fixed RPATH issue...

Security fix for the ALT Linux 8 package bind version 9.3.6-alt7

Dec. 16, 2011 Dmitry V. Levin 9.3.6-alt7 - Imported fixes for several DNSSEC vulnerabilities from RH bind CVE-2009-4022, CVE-2010-0097, CVE-2010-3762, CVE-2011-4313; note that DNSSEC is not enabled by default. - Enabled IPv6 support. - Fixed RPATH issue...

Security fix for the ALT Linux 9 package bind version 9.3.6-alt7

Dec. 16, 2011 Dmitry V. Levin 9.3.6-alt7 - Imported fixes for several DNSSEC vulnerabilities from RH bind CVE-2009-4022, CVE-2010-0097, CVE-2010-3762, CVE-2011-4313; note that DNSSEC is not enabled by default. - Enabled IPv6 support. - Fixed RPATH issue...

Security fix for the ALT Linux 6 package bind version 9.3.6-alt7

Dec. 16, 2011 Dmitry V. Levin 9.3.6-alt7 - Imported fixes for several DNSSEC vulnerabilities from RH bind CVE-2009-4022, CVE-2010-0097, CVE-2010-3762, CVE-2011-4313; note that DNSSEC is not enabled by default. - Enabled IPv6 support. - Fixed RPATH issue...

SuSE 10 Security Update : glibc (ZYPP Patch Number 7574)

This update contains the following fixes : - Specially crafted input to the fnmatch function could cause an integer overflow. CVE-2011-1071 - The output of the 'locale' command was not properly quoted. CVE-2011-1095 - Don't search the current directory if $ORIGIN is in RPATH of libraries called b...

Mandriva Update for glibc MDVSA-2011:178 (glibc)

Check for the Version of glibc OpenVAS Vulnerability Test Mandriva Update for glibc MDVSA-2011:178 glibc Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

PT-2011-4834

Name of the Vulnerable Software and Affected Versions IBM DB2 Express Edition 9.7 Description The issue concerns untrusted search path vulnerabilities in the db2rspgn and kbbacf1 components of IBM DB2 Express Edition. This allows local users to gain privileges by utilizing a Trojan horse libkbb.s...

SuSE9 Security Update : glibc (YOU Patch Number 12775)

This update contains the following fixes : - Specially crafted input to the fnmatch function could cause an integer overflow. CVE-2011-1071 - The output of the 'locale' command was not properly quoted. CVE-2011-1095 - Don't search the current directory if $ORIGIN is in RPATH of libraries called b...

SuSE 10 Security Update : glibc (ZYPP Patch Number 7575)

The following bugs have been fixed : - Specially crafted input to the fnmatch function could cause an integer overflow. CVE-2011-1071 - The output of the 'locale' command was not properly quoted. CVE-2011-1095 - Don't search the current directory if $ORIGIN is in RPATH of libraries called by setu...

SuSE 11.1 Security Update : glibc (SAT Patch Number 4572)

This update fixes the following security issues found in glibc : - Specially crafted input to the fnmatch function could cause an integer overflow. CVE-2011-1071 - The output of the 'locale' command was not properly quoted. CVE-2011-1095 - Unprivileged users could read the NIS shadow database...

CVE-2011-1658

ld.so in the GNU C Library aka glibc or libc6 2.13 and earlier expands the $ORIGIN dynamic string token when RPATH is composed entirely of this token, which might allow local users to gain privileges by creating a hard link in an arbitrary directory to a 1 setuid or 2 setgid program with this RPA...

Design/Logic Flaw

ld.so in the GNU C Library aka glibc or libc6 2.13 and earlier expands the $ORIGIN dynamic string token when RPATH is composed entirely of this token, which might allow local users to gain privileges by creating a hard link in an arbitrary directory to a 1 setuid or 2 setgid program with this RPA...

CVE-2011-1658

ld.so in the GNU C Library aka glibc or libc6 2.13 and earlier expands the $ORIGIN dynamic string token when RPATH is composed entirely of this token, which might allow local users to gain privileges by creating a hard link in an arbitrary directory to a 1 setuid or 2 setgid program with this RPA...

CVE-2011-1658

CVE-2011-1658 affects the GNU C Library (glibc) ld.so: when RPATH consists entirely of the special token $ORIGIN, it can enable local privilege escalation by linking a crafted LD_PRELOAD with a setuid/setgid program. Affected are glibc versions 2.13 and earlier. The root cause is expansion of the...

CVE-2011-1658: Undefined Security Weakness

ld.so in the GNU C Library aka glibc or libc6 2.13 and earlier expands the $ORIGIN dynamic string token when RPATH is composed entirely of this token, which might allow local users to gain privileges by creating a hard link in an arbitrary directory to a 1 setuid or 2 setgid program with this RPA...

CVE-2011-1658

ld.so in the GNU C Library aka glibc or libc6 2.13 and earlier expands the $ORIGIN dynamic string token when RPATH is composed entirely of this token, which might allow local users to gain privileges by creating a hard link in an arbitrary directory to a 1 setuid or 2 setgid program with this RPA...

glibc: ld.so insecure handling of privileged programs' RPATHs with $ORIGIN

ld.so in the GNU C Library aka glibc or libc6 2.13 and earlier expands the $ORIGIN dynamic string token when RPATH is composed entirely of this token, which might allow local users to gain privileges by creating a hard link in an arbitrary directory to a 1 setuid or 2 setgid program with this RPA...

glibc: fix causes linker to search CWD when running privileged program with $ORIGIN in R*PATH

Multiple untrusted search path vulnerabilities in elf/dl-object.c in certain modified versions of the GNU C Library aka glibc or libc6, including glibc-2.5-49.el55.6 and glibc-2.12-1.7.el60.3 in Red Hat Enterprise Linux, allow local users to gain privileges via a crafted dynamic shared object DSO...

glibc: fix causes linker to search CWD when running privileged program with $ORIGIN in R*PATH

Multiple untrusted search path vulnerabilities in elf/dl-object.c in certain modified versions of the GNU C Library aka glibc or libc6, including glibc-2.5-49.el55.6 and glibc-2.12-1.7.el60.3 in Red Hat Enterprise Linux, allow local users to gain privileges via a crafted dynamic shared object DSO...

glibc security update

2.5-58.el56.2 - Avoid too much stack use in fnmatch 681054, CVE-2011-1071 - Properly quote output of locale 625893, CVE-2011-1095 - Don't leave empty element in rpath when skipping the first element, ignore rpath elements containing non-isolated use of when privileged 667974, CVE-2011-0536 - Fix...