lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  PHC 
Open Source and information security mailing list archives
 
Hash Suite for Android: free password hash cracker in your pocket
[<prev] [next>] [day] [month] [year] [list]
Date: Wed, 16 Dec 2009 14:20:28 -0500
From: rPath Update Announcements <announce-noreply@...th.com>
To: security-announce@...ts.rpath.com,
	update-announce@...ts.rpath.com, product-announce@...ts.rpath.com,
	product-announce@...ts.rpath.com
Cc: full-disclosure@...ts.grok.org.uk, vulnwatch@...nwatch.org,
	bugtraq@...urityfocus.com, lwn@....net
Subject: rPSA-2009-0161-1 hwdata kernel

rPath Security Advisory: 2009-0161-1
Published: 2009-12-16
Products:
    rPath Appliance Platform Linux Service 1
    rPath Appliance Platform Linux Service 2
    rPath Linux 2

Rating: Critical
Exposure Level Classification:
    Remote Root Non-deterministic Denial of Service
Updated Versions:
    hwdata=conary.rpath.com@rpl:1/0.225-0.4-1
    hwdata=conary.rpath.com@rpl:2/0.225-0.1-1
    hwdata=rap.rpath.com@...th:linux-1/0.225-1-1
    hwdata=rap.rpath.com@...th:linux-2/0.225-1-1
    kernel=conary.rpath.com@rpl:2/2.6.29.6-0.7-1
    kernel=rap.rpath.com@...th:linux-1/2.6.29.6-8-1
    kernel=rap.rpath.com@...th:linux-2/2.6.29.6-3-1

rPath Issue Tracking System:
    https://issues.rpath.com/browse/RPL-3154
    https://issues.rpath.com/browse/RPL-3156

References:
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1298

Description:
    Previous kernel versions in the 2.6.29 series are vulnerable to a remote
    Denial-of-Service attack (NULL pointer dereference and hang) via long IP
    packets.  This has been fixed.
    
    Also, support for some new AHCI SATA controllers has been added in this
    update.

http://wiki.rpath.com/Advisories:rPSA-2009-0161

Copyright 2009 rPath, Inc.
This file is distributed under the terms of the MIT License.
A copy is available at http://www.rpath.com/permanent/mit-license.html

Powered by blists - more mailing lists