ALT-BU-2013-1344-1
Branch sisyphus update bulletin.
Package kernel-image-led-ws updated to version 3.10.18-alt6 for branch sisyphus in task 108001.
Closed vulnerabilities
Modified: 2024-11-21
CVE-2013-4511
Multiple integer overflows in Alchemy LCD frame-buffer drivers in the Linux kernel before 3.12 allow local users to create a read-write memory mapping for the entirety of kernel memory, and consequently gain privileges, via crafted mmap operations, related to the (1) au1100fb_fb_mmap function in drivers/video/au1100fb.c and the (2) au1200fb_fb_mmap function in drivers/video/au1200fb.c.
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7314e613d5ff9f0934f7a0f74ed7973b903315d1
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7314e613d5ff9f0934f7a0f74ed7973b903315d1
- openSUSE-SU-2014:0204
- openSUSE-SU-2014:0204
- openSUSE-SU-2014:0205
- openSUSE-SU-2014:0205
- openSUSE-SU-2014:0247
- openSUSE-SU-2014:0247
- [oss-security] 20131104 Re: some unstracked linux kernel security fixes
- [oss-security] 20131104 Re: some unstracked linux kernel security fixes
- USN-2036-1
- USN-2036-1
- USN-2037-1
- USN-2037-1
- USN-2066-1
- USN-2066-1
- USN-2067-1
- USN-2067-1
- USN-2068-1
- USN-2068-1
- USN-2069-1
- USN-2069-1
- USN-2070-1
- USN-2070-1
- USN-2071-1
- USN-2071-1
- USN-2072-1
- USN-2072-1
- USN-2073-1
- USN-2073-1
- USN-2074-1
- USN-2074-1
- USN-2075-1
- USN-2075-1
- USN-2076-1
- USN-2076-1
- https://github.com/torvalds/linux/commit/7314e613d5ff9f0934f7a0f74ed7973b903315d1
- https://github.com/torvalds/linux/commit/7314e613d5ff9f0934f7a0f74ed7973b903315d1
- https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.12.bz2
- https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.12.bz2
Package kernel-image-led-vs updated to version 3.10.18-alt6 for branch sisyphus in task 108002.
Closed vulnerabilities
Modified: 2024-11-21
CVE-2013-4511
Multiple integer overflows in Alchemy LCD frame-buffer drivers in the Linux kernel before 3.12 allow local users to create a read-write memory mapping for the entirety of kernel memory, and consequently gain privileges, via crafted mmap operations, related to the (1) au1100fb_fb_mmap function in drivers/video/au1100fb.c and the (2) au1200fb_fb_mmap function in drivers/video/au1200fb.c.
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7314e613d5ff9f0934f7a0f74ed7973b903315d1
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7314e613d5ff9f0934f7a0f74ed7973b903315d1
- openSUSE-SU-2014:0204
- openSUSE-SU-2014:0204
- openSUSE-SU-2014:0205
- openSUSE-SU-2014:0205
- openSUSE-SU-2014:0247
- openSUSE-SU-2014:0247
- [oss-security] 20131104 Re: some unstracked linux kernel security fixes
- [oss-security] 20131104 Re: some unstracked linux kernel security fixes
- USN-2036-1
- USN-2036-1
- USN-2037-1
- USN-2037-1
- USN-2066-1
- USN-2066-1
- USN-2067-1
- USN-2067-1
- USN-2068-1
- USN-2068-1
- USN-2069-1
- USN-2069-1
- USN-2070-1
- USN-2070-1
- USN-2071-1
- USN-2071-1
- USN-2072-1
- USN-2072-1
- USN-2073-1
- USN-2073-1
- USN-2074-1
- USN-2074-1
- USN-2075-1
- USN-2075-1
- USN-2076-1
- USN-2076-1
- https://github.com/torvalds/linux/commit/7314e613d5ff9f0934f7a0f74ed7973b903315d1
- https://github.com/torvalds/linux/commit/7314e613d5ff9f0934f7a0f74ed7973b903315d1
- https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.12.bz2
- https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.12.bz2
Closed bugs
Добавить дополнительные параметры к макросу cmake
Closed vulnerabilities
Modified: 2024-11-21
CVE-2013-6336
The ieee802154_map_rec function in epan/dissectors/packet-ieee802154.c in the IEEE 802.15.4 dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10.3 uses an incorrect pointer chain, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
- http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-ieee802154.c?r1=52036&r2=52035&pathrev=52036
- http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-ieee802154.c?r1=52036&r2=52035&pathrev=52036
- http://anonsvn.wireshark.org/viewvc?view=revision&revision=52036
- http://anonsvn.wireshark.org/viewvc?view=revision&revision=52036
- openSUSE-SU-2013:1671
- openSUSE-SU-2013:1671
- openSUSE-SU-2013:1675
- openSUSE-SU-2013:1675
- RHSA-2014:0342
- RHSA-2014:0342
- DSA-2792
- DSA-2792
- http://www.wireshark.org/security/wnpa-sec-2013-61.html
- http://www.wireshark.org/security/wnpa-sec-2013-61.html
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9139
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9139
- oval:org.mitre.oval:def:19193
- oval:org.mitre.oval:def:19193
Modified: 2024-11-21
CVE-2013-6337
Unspecified vulnerability in the NBAP dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10.3 allows remote attackers to cause a denial of service (application crash) via a crafted packet.
- openSUSE-SU-2013:1671
- openSUSE-SU-2013:1671
- openSUSE-SU-2013:1675
- openSUSE-SU-2013:1675
- RHSA-2014:0342
- RHSA-2014:0342
- DSA-2792
- DSA-2792
- http://www.wireshark.org/security/wnpa-sec-2013-62.html
- http://www.wireshark.org/security/wnpa-sec-2013-62.html
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9168
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9168
- oval:org.mitre.oval:def:19329
- oval:org.mitre.oval:def:19329
Modified: 2024-11-21
CVE-2013-6338
The dissect_sip_common function in epan/dissectors/packet-sip.c in the SIP dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10.3 does not properly initialize a data structure, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
- http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-sip.c?r1=52354&r2=52353&pathrev=52354
- http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-sip.c?r1=52354&r2=52353&pathrev=52354
- http://anonsvn.wireshark.org/viewvc?view=revision&revision=52354
- http://anonsvn.wireshark.org/viewvc?view=revision&revision=52354
- openSUSE-SU-2013:1671
- openSUSE-SU-2013:1671
- openSUSE-SU-2013:1675
- openSUSE-SU-2013:1675
- RHSA-2014:0342
- RHSA-2014:0342
- DSA-2792
- DSA-2792
- http://www.wireshark.org/security/wnpa-sec-2013-63.html
- http://www.wireshark.org/security/wnpa-sec-2013-63.html
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9228
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9228
- oval:org.mitre.oval:def:19145
- oval:org.mitre.oval:def:19145
Modified: 2024-11-21
CVE-2013-6339
The dissect_openwire_type function in epan/dissectors/packet-openwire.c in the OpenWire dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10.3 allows remote attackers to cause a denial of service (loop) via a crafted packet.
- http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-openwire.c?r1=52458&r2=52457&pathrev=52458
- http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-openwire.c?r1=52458&r2=52457&pathrev=52458
- http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-openwire.c?r1=52463&r2=52462&pathrev=52463
- http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-openwire.c?r1=52463&r2=52462&pathrev=52463
- http://anonsvn.wireshark.org/viewvc?view=revision&revision=52458
- http://anonsvn.wireshark.org/viewvc?view=revision&revision=52458
- http://anonsvn.wireshark.org/viewvc?view=revision&revision=52463
- http://anonsvn.wireshark.org/viewvc?view=revision&revision=52463
- openSUSE-SU-2013:1671
- openSUSE-SU-2013:1671
- openSUSE-SU-2013:1675
- openSUSE-SU-2013:1675
- RHSA-2014:0342
- RHSA-2014:0342
- http://www.wireshark.org/security/wnpa-sec-2013-64.html
- http://www.wireshark.org/security/wnpa-sec-2013-64.html
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9248
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9248
- oval:org.mitre.oval:def:19086
- oval:org.mitre.oval:def:19086
Modified: 2024-11-21
CVE-2013-6340
epan/dissectors/packet-tcp.c in the TCP dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10.3 does not properly determine the amount of remaining data, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
- http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-tcp.c?r1=52570&r2=52569&pathrev=52570
- http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-tcp.c?r1=52570&r2=52569&pathrev=52570
- http://anonsvn.wireshark.org/viewvc?view=revision&revision=52570
- http://anonsvn.wireshark.org/viewvc?view=revision&revision=52570
- openSUSE-SU-2013:1671
- openSUSE-SU-2013:1671
- openSUSE-SU-2013:1675
- openSUSE-SU-2013:1675
- RHSA-2014:0342
- RHSA-2014:0342
- DSA-2792
- DSA-2792
- http://www.wireshark.org/security/wnpa-sec-2013-65.html
- http://www.wireshark.org/security/wnpa-sec-2013-65.html
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9263
- https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9263
- oval:org.mitre.oval:def:19298
- oval:org.mitre.oval:def:19298