{ "Definition": [ { "ID": "oval:org.altlinux.errata:def:20141189", "Version": "oval:org.altlinux.errata:def:20141189", "Class": "patch", "Metadata": { "Title": "ALT-PU-2014-1189: package `kernel-image-el-def` update to version 2.6.32-alt18", "AffectedList": [ { "Family": "unix", "Platforms": [ "ALT Linux branch p9" ], "Products": [ "ALT Server", "ALT Virtualization Server", "ALT Workstation", "ALT Workstation K", "ALT Education", "Simply Linux", "Starterkit" ] } ], "References": [ { "RefID": "ALT-PU-2014-1189", "RefURL": "https://errata.altlinux.org/ALT-PU-2014-1189", "Source": "ALTPU" }, { "RefID": "BDU:2014-00089", "RefURL": "https://bdu.fstec.ru/vul/2014-00089", "Source": "BDU" }, { "RefID": "BDU:2015-04307", "RefURL": "https://bdu.fstec.ru/vul/2015-04307", "Source": "BDU" }, { "RefID": "BDU:2015-04308", "RefURL": "https://bdu.fstec.ru/vul/2015-04308", "Source": "BDU" }, { "RefID": "BDU:2015-04309", "RefURL": "https://bdu.fstec.ru/vul/2015-04309", "Source": "BDU" }, { "RefID": "BDU:2015-04310", "RefURL": "https://bdu.fstec.ru/vul/2015-04310", "Source": "BDU" }, { "RefID": "CVE-2013-2929", "RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2013-2929", "Source": "CVE" }, { "RefID": "CVE-2013-4588", "RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2013-4588", "Source": "CVE" }, { "RefID": "CVE-2013-6405", "RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2013-6405", "Source": "CVE" } ], "Description": "This update upgrades kernel-image-el-def to version 2.6.32-alt18. \nSecurity Fix(es):\n\n * BDU:2014-00089: Уязвимость операционной системы Linux, приводящая к раскрытию информации\n\n * BDU:2015-04307: Уязвимости операционной системы SUSE Linux Enterprise, позволяющие злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации\n\n * BDU:2015-04308: Уязвимости операционной системы SUSE Linux Enterprise, позволяющие злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации\n\n * BDU:2015-04309: Уязвимости операционной системы SUSE Linux Enterprise, позволяющие злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации\n\n * BDU:2015-04310: Уязвимости операционной системы SUSE Linux Enterprise, позволяющие злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации\n\n * CVE-2013-2929: The Linux kernel before 3.12.2 does not properly use the get_dumpable function, which allows local users to bypass intended ptrace restrictions or obtain sensitive information from IA64 scratch registers via a crafted application, related to kernel/ptrace.c and arch/ia64/include/asm/processor.h.\n\n * CVE-2013-4588: Multiple stack-based buffer overflows in net/netfilter/ipvs/ip_vs_ctl.c in the Linux kernel before 2.6.33, when CONFIG_IP_VS is used, allow local users to gain privileges by leveraging the CAP_NET_ADMIN capability for (1) a getsockopt system call, related to the do_ip_vs_get_ctl function, or (2) a setsockopt system call, related to the do_ip_vs_set_ctl function.\n\n * CVE-2013-6405: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-7263, CVE-2013-7264, CVE-2013-7265, CVE-2013-7281. Reason: This candidate is a duplicate of CVE-2013-7263, CVE-2013-7264, CVE-2013-7265, and CVE-2013-7281. Notes: All CVE users should reference CVE-2013-7263, CVE-2013-7264, CVE-2013-7265, and/or CVE-2013-7281 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage", "Advisory": { "From": "errata.altlinux.org", "Severity": "Critical", "Rights": "Copyright 2024 BaseALT Ltd.", "Issued": { "Date": "2014-02-12" }, "Updated": { "Date": "2014-02-12" }, "BDUs": [ { "ID": "BDU:2014-00089", "CVSS": "AV:L/AC:M/Au:N/C:P/I:P/A:N", "CWE": "CWE-119", "Href": "https://bdu.fstec.ru/vul/2014-00089", "Impact": "Low", "Public": "20131209" }, { "ID": "BDU:2015-04307", "CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "Href": "https://bdu.fstec.ru/vul/2015-04307", "Impact": "Critical", "Public": "20130122" }, { "ID": "BDU:2015-04308", "CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "Href": "https://bdu.fstec.ru/vul/2015-04308", "Impact": "Critical" }, { "ID": "BDU:2015-04309", "CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "Href": "https://bdu.fstec.ru/vul/2015-04309", "Impact": "Critical" }, { "ID": "BDU:2015-04310", "CVSS": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "Href": "https://bdu.fstec.ru/vul/2015-04310", "Impact": "Critical" } ], "CVEs": [ { "ID": "CVE-2013-2929", "CVSS": "AV:L/AC:M/Au:N/C:P/I:P/A:N", "CWE": "CWE-264", "Href": "https://nvd.nist.gov/vuln/detail/CVE-2013-2929", "Impact": "Low", "Public": "20131209" }, { "ID": "CVE-2013-4588", "CVSS": "AV:L/AC:M/Au:N/C:C/I:C/A:C", "CVSS3": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "CWE": "CWE-119", "Href": "https://nvd.nist.gov/vuln/detail/CVE-2013-4588", "Impact": "High", "Public": "20131120" }, { "ID": "CVE-2013-6405", "Href": "https://nvd.nist.gov/vuln/detail/CVE-2013-6405", "Impact": "None", "Public": "20140106" } ], "AffectedCPEs": { "CPEs": [ "cpe:/o:alt:kworkstation:9", "cpe:/o:alt:workstation:9", "cpe:/o:alt:server:9", "cpe:/o:alt:server-v:9", "cpe:/o:alt:education:9", "cpe:/o:alt:slinux:9", "cpe:/o:alt:starterkit:p9", "cpe:/o:alt:kworkstation:9.1", "cpe:/o:alt:workstation:9.1", "cpe:/o:alt:server:9.1", "cpe:/o:alt:server-v:9.1", "cpe:/o:alt:education:9.1", "cpe:/o:alt:slinux:9.1", "cpe:/o:alt:starterkit:9.1", "cpe:/o:alt:kworkstation:9.2", "cpe:/o:alt:workstation:9.2", "cpe:/o:alt:server:9.2", "cpe:/o:alt:server-v:9.2", "cpe:/o:alt:education:9.2", "cpe:/o:alt:slinux:9.2", "cpe:/o:alt:starterkit:9.2" ] } } }, "Criteria": { "Operator": "AND", "Criterions": [ { "TestRef": "oval:org.altlinux.errata:tst:1001", "Comment": "ALT Linux must be installed" } ], "Criterias": [ { "Operator": "OR", "Criterions": [ { "TestRef": "oval:org.altlinux.errata:tst:20141189001", "Comment": "firmware-kernel-el-def is earlier than 0:2.6.32-alt18" }, { "TestRef": "oval:org.altlinux.errata:tst:20141189002", "Comment": "kernel-doc-el-def is earlier than 0:2.6.32-alt18" }, { "TestRef": "oval:org.altlinux.errata:tst:20141189003", "Comment": "kernel-docbook-el-def is earlier than 0:2.6.32-alt18" }, { "TestRef": "oval:org.altlinux.errata:tst:20141189004", "Comment": "kernel-headers-el-def is earlier than 0:2.6.32-alt18" }, { "TestRef": "oval:org.altlinux.errata:tst:20141189005", "Comment": "kernel-headers-modules-el-def is earlier than 0:2.6.32-alt18" }, { "TestRef": "oval:org.altlinux.errata:tst:20141189006", "Comment": "kernel-image-el-def is earlier than 0:2.6.32-alt18" }, { "TestRef": "oval:org.altlinux.errata:tst:20141189007", "Comment": "kernel-man-el-def is earlier than 0:2.6.32-alt18" }, { "TestRef": "oval:org.altlinux.errata:tst:20141189008", "Comment": "kernel-src-el-def is earlier than 0:2.6.32-alt18" } ] } ] } } ] }