SuSE 11.2 Security Update : pcp (SAT Patch Number 7221)

pcp was updated to version 3.6.10 which fixes security issues and also brings a lot of new features. - Update to pcp-3.6.10. - Transition daemons to run under an unprivileged account. - Fixes for security advisory CVE-2012-5530: tmpfile flaws;. bnc782967 - Fix pcp1 command short-form pmlogger...

kernel security and bug fix update

2.6.32-279.14.1.el6 - usb usbhid: Fix use-after-free in USBHID James Paradis 864827 857518 - usb Add kernel parameter to force iowatchdog for Intel EHCI HCD James Paradis 865713 846024 - block Fix hanging kernel threads in blkexecuterq James Paradis 865308 855984 - mm hugetlb: do not use...

kernel security and bug fix update

2.6.32-279.9.1.el6 - md raid1, raid10: avoid deadlock during resync/recovery. Dave Wysochanski 845464 835613 - fs dlm: fix deadlock between dlmsend and dlmcontrold David Teigland 849051 824964 - ata libata: Add space to fix 2GB ATA Flash Disk/ADMA428M blacklist Prarit Bhargava 851445 843849 - fs...

Scientific Linux Security Update : kernel on SL4.x i386/x86_64

This update fixes the following security issues : - A buffer overflow flaw was found in the loadmixervolumes function in the Linux kernel's Open Sound System OSS sound driver. On 64-bit PowerPC systems, a local, unprivileged user could use this flaw to cause a denial of service or escalate their...

Scientific Linux Security Update : kernel on SL4.x i386/x86_64

These updated packages fix the following security issue : - a possible kernel memory leak was found in the Linux kernel Simple Internet Transition SIT INET6 implementation. This could allow a local unprivileged user to cause a denial of service. CVE-2008-2136, Important As well, these updated...

Scientific Linux Security Update : kernel on SL5.x i386/x86_64

Olaf Kirch reported a flaw in the i915 kernel driver that only affects the Intel G33 series and newer. This flaw could, potentially, lead to local privilege escalation. CVE-2008-3831, Important - Miklos Szeredi reported a missing check for files opened with OAPPEND in the syssplice. This could...

Scientific Linux Security Update : kernel on SL3.x i386/x86_64

A flaw was found in the handling of process death signals. This allowed a local user to send arbitrary signals to the suid-process executed by that user. A successful exploitation of this flaw depends on the structure of the suid-program and its signal handling. CVE-2007-3848, Important A flaw wa...

Scientific Linux Security Update : kernel on SL4.x i386/x86_64

CVE-2005-4881 kernel: netlink: fix numerous padding memleaks CVE-2009-3228 kernel: tc: uninitialised kernel memory leak This update fixes the following security issues : - multiple, missing initialization flaws were found in the Linux kernel. Padding data in several core network structures was no...

Scientific Linux Security Update : kernel for SL 5.x on i386/x86_64

CVE-2007-5966 kernel: non-root can trigger cpuidle soft lockup CVE-2009-1385 kernel: e1000cleanrxirq denial of service CVE-2009-1388 kernel: docoredump vs ptracestart deadlock CVE-2009-1389 kernel: r8169: fix crash when large packets are received CVE-2009-1895 kernel: personality: fix...

Scientific Linux Security Update : kernel on SL5.x i386/x86_64

This update fixes the following security issues : - a logic error was found in the dosetlk function of the Linux kernel Network File System NFS implementation. If a signal interrupted a lock request, the local POSIX lock was incorrectly created. This could cause a denial of service on the NFS...

Scientific Linux Security Update : gfs2-utils on SL5.x i386/x86_64

Multiple insecure temporary file use flaws were discovered in GFS2 user level utilities. A local attacker could use these flaws to overwrite an arbitrary file writable by a victim running those utilities typically root with the output of the utilities via a symbolic link attack. CVE-2008-6552 Thi...

Scientific Linux Security Update : kernel on SL4.x i386/x86_64

A flaw was found in the handling of process death signals. This allowed a local user to send arbitrary signals to the suid-process executed by that user. A successful exploitation of this flaw depends on the structure of the suid-program and its signal handling. CVE-2007-3848, Important - A flaw...

CVE-2011-4611

Integer overflow in the perfeventinterrupt function in arch/powerpc/kernel/perfevent.c in the Linux kernel before 2.6.39 on powerpc platforms allows local users to cause a denial of service unhandled performance monitor exception via vectors that trigger certain outcomes of performance events...

Integer overflow

Integer overflow in the perfeventinterrupt function in arch/powerpc/kernel/perfevent.c in the Linux kernel before 2.6.39 on powerpc platforms allows local users to cause a denial of service unhandled performance monitor exception via vectors that trigger certain outcomes of performance events...

CVE-2011-4611

The CVE-2011-4611 entry relates to the Linux kernel on POWERPC where an integer overflow in perf_event_interrupt (arch/powerpc/kernel/perf_event.c) before version 2.6.39 can allow a local user to trigger a denial of service via performance-event handling. Affected: Linux kernel releases prior to ...

CVE-2011-4611

Integer overflow in the perfeventinterrupt function in arch/powerpc/kernel/perfevent.c in the Linux kernel before 2.6.39 on powerpc platforms allows local users to cause a denial of service unhandled performance monitor exception via vectors that trigger certain outcomes of performance events...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 4186)

This kernel update fixes the following security problems : - The IPv6 protocol allows remote attackers to cause a denial of service via crafted IPv6 type 0 route headers IPV6RTHDRTYPE0 that create network amplification between two routers. CVE-2007-2242 The default is that RH0 is disabled now. To...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 2393)

This kernel update fixes the following security problems : - A bug within the UDF filesystem that caused machine hangs when truncating files on the filesystem was fixed. 186226. CVE-2006-4145 - A potential crash when receiving IPX packets was fixed. This problem is thought not to be exploitable...

SuSE 10 Security Update : Linux kernel (x86_64) (ZYPP Patch Number 2096)

This kernel update fixes the following security problems : - A double userspace copy in a SCTP ioctl allows local attackers to overflow a buffer in the kernel, potentially allowing code execution and privilege escalation. 199441. CVE-2006-3745 - Local attackers were able to crash PowerPC systems...

kernel: perf, powerpc: Handle events that raise an exception without overflowing

Integer overflow in the perfeventinterrupt function in arch/powerpc/kernel/perfevent.c in the Linux kernel before 2.6.39 on powerpc platforms allows local users to cause a denial of service unhandled performance monitor exception via vectors that trigger certain outcomes of performance events...