kernel security and bug fix update

2.6.32-431.20.3 - kernel futex: Make lookuppistate more robust Jerome Marchand 1104516 1104517 CVE-2014-3153 - kernel futex: Always cleanup owner tid in unlockpi Jerome Marchand 1104516 1104517 CVE-2014-3153 - kernel futex: Validate atomic acquisition in futexlockpiatomic Jerome Marchand 1104516...

Server side request forgery (ssrf)

Samba 3.6.6 through 3.6.23, 4.0.x before 4.0.18, and 4.1.x before 4.1.8, when a certain vfs shadow copy configuration is enabled, does not properly initialize the SRVSNAPSHOTARRAY response field, which allows remote authenticated users to obtain potentially sensitive information from process memo...

CVE-2014-0178

Samba 3.6.6 through 3.6.23, 4.0.x before 4.0.18, and 4.1.x before 4.1.8, when a certain vfs shadow copy configuration is enabled, does not properly initialize the SRVSNAPSHOTARRAY response field, which allows remote authenticated users to obtain potentially sensitive information from process memo...

CVE-2014-0178: Improper Initialization

Samba 3.6.6 through 3.6.23, 4.0.x before 4.0.18, and 4.1.x before 4.1.8, when a certain vfs shadow copy configuration is enabled, does not properly initialize the SRVSNAPSHOTARRAY response field, which allows remote authenticated users to obtain potentially sensitive information from process memo...

PT-2014-1429

Name of the Vulnerable Software and Affected Versions Samba versions 3.6.6 through 3.6.23 Samba versions 4.0.x before 4.0.18 Samba versions 4.1.x before 4.1.8 Description The issue is related to the improper initialization of the SRV SNAPSHOT ARRAY response field in Samba when a certain vfs shado...

Samba < 3.6.22 / 4.0.13 / 4.1.3 Multiple Vulnerabilities

Binary data 8075.prm...

Debian Security Advisory DSA 2812-1 (samba - several vulnerabilities)

Two security issues were found in Samba, a SMB/CIFS file, print, and login server: CVE-2013-4408 It was discovered that multiple buffer overflows in the processing of DCE-RPC packets may lead to the execution of arbitrary code. CVE-2013-4475 Hemanth Thummala discovered that ACLs were not checked...

DSA-2812-1 samba - several

Bulletin has no description...

Fedora 20 : samba-4.1.1-1.fc20 (2013-21088)

Security update to fix CVE-2013-4475. Add glusterfs VFS module. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additiona...

Oracle Linux 6 kernel update

2.6.32-431 - md Disabling of TRIM on RAID5 for RHEL6.5 was too aggressive Jes Sorensen 1028426 2.6.32-430 - x86 Revert 'efi: be more paranoid about available space when creating variables' Rafael Aquini 1012370 1023173 - x86 Revert 'efivars: firmware bug workarounds should be in platform code'...

UBUNTU-CVE-2013-4475

Samba 3.2.x through 3.6.x before 3.6.20, 4.0.x before 4.0.11, and 4.1.x before 4.1.1, when vfsstreamsdepot or vfsstreamsxattr is enabled, allows remote attackers to bypass intended file restrictions by leveraging ACL differences between a file and an associated alternate data stream ADS...

PT-2013-1324

Name of the Vulnerable Software and Affected Versions Samba versions 3.2.x through 3.6.x before 3.6.20 Samba versions 4.0.x before 4.0.11 Samba versions 4.1.x before 4.1.1 Description The issue is related to a lack of privilege control and access management mechanisms in the vfs streams depot or...

Debian DSA-2769-1 : kfreebsd-9 - privilege escalation/denial of service

Several vulnerabilities have been discovered in the FreeBSD kernel that may lead to a denial of service or privilege escalation. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2013-5691 Loganaden Velvindron and Gleb Smirnoff discovered that the...

[SECURITY] [DSA-2769-1] kfreebsd-9 security update

---------------------------------------------------------------------- Debian Security Advisory DSA-2769-1 [email protected] http://www.debian.org/security/ Aurelien Jarno October 08, 2013 http://www.debian.org/security/faq -...

Oracle linux 5 kernel update

kernel 2.6.18-371 - net be2net: enable polling prior enabling interrupts globally Ivan Vecera 987539 2.6.18-370 - net be2net: Fix to avoid hardware workaround when not needed Ivan Vecera 995961 - kernel signals: stop info leak via tkill and tgkill syscalls Oleg Nesterov 970875 CVE-2013-2141...

SuSE 11.2 Security Update : Samba (SAT Patch Number 8170)

The Samba server suite received a security update to fix a denial of service problem in integer wrap protection. CVE-2013-4124. Additionally, the following stability fixes are included in this update : - Do not restart the smbfs service on pre-11.3 systems during dhcp lease renewal when the IP...

kernel security and bug fix update

2.6.32-358.18.1 - x86 perf/x86: Fix offcorersp valid mask for SNB/IVB Nikola Pajkovsky 971314 971315 CVE-2013-2146 - net br: fix schedule while atomic issue in brfeaturesrecompute Jiri Pirko 990464 980876 - scsi isci: Fix a race condition in the SSP task management path David Milburn 990470 97860...

PT-2013-5242

Name of the Vulnerable Software and Affected Versions FreeBSD versions 8.3 and 9.x through 9.1-RELEASE-p5 Description The issue concerns the NFS server implementation in the kernel, where the vfs hang addrlist function in sys/kern/vfs export.c controls authorization for host/subnet export entries...

Oracle Linux 5 : kernel (ELSA-2010-0504)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0504 advisory. - fs gfs2: fix permissions checking for setflags ioctl Steven Whitehouse 595580 595399 CVE-2010-1641 - misc keys: do not find already freed keyrings...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2012-2022)

Description of changes: Avoid bug caused by corrupted Ext4 filesystem. When mounting an ext4 filesystem, the kernel was not checking for zero length extents. This would cause a BUGON assertion failure in the log. NULL pointer dereference in the SCSI subsystem. A NULL dereference may occur if a SC...