237 matches found
SuSE 10 Security Update : Xen (ZYPP Patch Number 2155)
This update includes both bug fixes and security fixes for Xen. A summary of the fixes appears below: 151105 - Fix various 'leaks' of loopback devices w/ domUloader 162865 - Re-send all page tables when migrating to avoid oops 167145 - Add status messages during file backed disk creation 176369 -...
Moderate: Red Hat Security Advisory: conga security, bug fix, and enhancement update
Updated conga packages that correct a security flaw and provide bug fixes and add enhancements are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Conga package is a web-based administration tool for remote cluster and storag...
Fedora 7 : kernel-2.6.22.7-85.fc7 (2007-2298)
Update to official Linux 2.6.22.6 from 2.6.22.6-rc1: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.6 Update to Linux 2.6.22.7: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.7 - libata: add option to disable DMA on PATA devices libata.patadma, see kernel-parameters.tx...
Fedora Core 6 : kernel-2.6.22.7-57.fc6 (2007-712)
Update to official Linux 2.6.22.6 previously 2.6.22.6-rc1: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.6 Update to Linux 2.6.22.7: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.7 - USB: three trivial fixes - futex: fix compat list traversal - Restore ofpath...
CVE-2004-0972
The lvmcreateinitrd script in the lvm package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files...
Mandrake Linux Security Advisory : lvm (MDKSA-2004:144)
The Trustix developers discovered that the lvmcreateinitrd script, part of the lvm1 package, created a temporary directory in an insecure manner. This could allow for a symlink attack to create or overwrite arbitrary files with the privileges of the user running the script. The updated packages...
Davfs2, lvm-user: Insecure tempfile handling
Background Davfs2 is a file system driver that allows you to mount a WebDAV server as a local disk drive. lvm-user is a package providing userland utilities for LVM Logical Volume Management 1.x features. Description Florian Schilhabel from the Gentoo Linux Security Audit Team found that Davfs2...
lvm symbolic links
Incorrect temporary directory creation in lvmcreateinitrd и davfs2...
CVE-2004-0972
CVE-2004-0972 concerns the lvmcreate_initrd helper in the Trustix/ lvm package (lvm1) where a temporary-directory creation flaw enables a local attacker to perform a symlink-based overwrite of arbitrary files. The described root cause is insecure handling of temporary files by the script, allowin...
CVE-2004-0972: Undefined Security Weakness
The lvmcreateinitrd script in the lvm package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files...
CVE-2004-0545
LVM for AIX 5.1 and 5.2 allows local users to overwrite arbitrary files via a symlink attack...
CVE-2004-0545
LVM for AIX 5.1 and 5.2 allows local users to overwrite arbitrary files via a symlink attack...
CVE-2004-0545
CVE-2004-0545 affects AIX 5.1 and 5.2 where the LVM component allows local users to overwrite arbitrary files via a symlink attack . The vulnerability is described as local-access, with the impact of potentially compromising file integrity via symlink tricks. Related Nessus entries for AIX 5.1/5....
CVE-2004-0544
Multiple buffer overflows in LVM for AIX 5.1 and 5.2 allow local users to gain privileges via the 1 putlvcb or 2 getlvcb commands...
CVE-2004-0544
The CVE-2004-0544 issue affects LVM on AIX 5.1/5.2, with multiple buffer overflows in putlvcb and getlvcb that enable local privilege escalation. Connected Nessus entries indicate vendor patches IY55681 (AIX 5.1) and IY55682 (AIX 5.2) to mitigate the vulnerability. Practically, systems running af...