ALT Linux Team

Branch t7 update on 2014-01-11

2014-01-11

ALT-BU-2014-2513-1

Branch t7 update bulletin.

ALT-PU-2014-1021-1

Package systemd updated to version 201-alt1.M70T.1 for branch t7 in task 111611.

Closed bugs

Bug #29680

separate pkg for journalctl without systemd?

ALT-PU-2014-1025-1

Package adobe-flash-player updated to version 11-alt23 for branch t7 in task 111646.

Closed vulnerabilities

Published: 2013-12-11
Modified: 2025-04-11

CVE-2013-5331

Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR before 3.9.0.1380, Adobe AIR SDK before 3.9.0.1380, and Adobe AIR SDK & Compiler before 3.9.0.1380 allow remote attackers to execute arbitrary code via crafted .swf content that leverages an unspecified "type confusion," as exploited in the wild in December 2013.

Severity: CRITICAL (9.3) Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
References:
Published: 2013-12-11
Modified: 2025-04-11

CVE-2013-5332

Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR before 3.9.0.1380, Adobe AIR SDK before 3.9.0.1380, and Adobe AIR SDK & Compiler before 3.9.0.1380 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Severity: CRITICAL (9.3) Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
References:

ALT-PU-2014-1026-1

Package kernel-image-el-def updated to version 2.6.32-alt17 for branch t7 in task 111646.

Closed vulnerabilities

Published: 2013-12-14

BDU:2014-00095

Уязвимость операционной системы Linux, позволяющая злоумышленнику вызвать отказ в обслуживании

Severity: MEDIUM (5.7) Vector: AV:A/AC:M/Au:N/C:N/I:N/A:C
References:
Published: 2013-12-14
Modified: 2025-04-11

CVE-2013-6367

The apic_get_tmcct function in arch/x86/kvm/lapic.c in the KVM subsystem in the Linux kernel through 3.12.5 allows guest OS users to cause a denial of service (divide-by-zero error and host OS crash) via crafted modifications of the TMICT value.

Severity: MEDIUM (5.7) Vector: AV:A/AC:M/Au:N/C:N/I:N/A:C
References:
Published: 2013-12-14
Modified: 2025-04-11

CVE-2013-6368

The KVM subsystem in the Linux kernel through 3.12.5 allows local users to gain privileges or cause a denial of service (system crash) via a VAPIC synchronization operation involving a page-end address.

Severity: MEDIUM (6.2) Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
References:

ALT-PU-2014-1027-1

Package kernel-image-ovz-el updated to version 2.6.32-alt109 for branch t7 in task 111646.

Closed vulnerabilities

Published: 2013-06-07
Modified: 2025-04-11

CVE-2013-2141

The do_tkill function in kernel/signal.c in the Linux kernel before 3.8.9 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory via a crafted application that makes a (1) tkill or (2) tgkill system call.

Severity: LOW (2.1) Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
References:
Published: 2013-11-04
Modified: 2025-04-11

CVE-2013-4470

The Linux kernel before 3.12, when UDP Fragmentation Offload (UFO) is enabled, does not properly initialize certain data structures, which allows local users to cause a denial of service (memory corruption and system crash) or possibly gain privileges via a crafted application that uses the UDP_CORK option in a setsockopt system call and sends both short and long packets, related to the ip_ufo_append_data function in net/ipv4/ip_output.c and the ip6_ufo_append_data function in net/ipv6/ip6_output.c.

Severity: MEDIUM (6.9) Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C
References:
VKontakte | Telegram | YouTube | Forum | GitHub | Bugzilla
Version: 2.1.2
Back to top