CentOS 6

A new exploit vulnerability has been found: CVE-2015-7547: glibc getaddrinfo stack-based buffer overflow . According to the CVE, "A stack-based buffer overflow was found in the way the libresolv library performed dual A/AAAA DNS queries. A remote attacker could create a specially crafted DNS response which could cause libresolv to crash or, ... Read More...

CentOS 6 Linux kernel 2.6.32-573.18.1 has recently been released. Update type(s): bugfix Full details can be found here. Updating the Kernel You can either initiate a full yum update: Alternatively, just update the kernel packages: Cached repo data can also prevent new updates from being found. To clear your yum cache, run: ... Read More...

CentOS 6 Linux kernel 2.6.32-573.7.1 has recently been released. Update type(s): bugfix Resolved CVEs: CVE-2015-5364 CVE-2015-5366 * When logging in as a user and trying to mount a share using the "cd" command, the UID and GID autofs additional variables previously took incorrect values, taking root UID and GID instead of user's UID and GID. The bug ... Read More...

CentOS 6 Linux kernel 2.6.32-573.3.1 has recently been released. Update type(s): security and bugfix Resolved CVEs: CVE-2015-5364 CVE-2015-5366 * When removing a directory, and a reference was held to that directory by a reference to a negative child dentry, the directory dentry was previously not killed. In addition, once the negative child dentry was killed, an unlinked and unused ... Read More...

CentOS 6 Linux kernel 2.6.32-504.30.3 has recently been released. Update type(s): security Resolved CVEs: CVE-2011-5321 CVE-2015-1593 CVE-2015-2830 CVE-2015-2922 CVE-2015-3636 A NULL pointer dereference flaw was found in the way the Linux kernel's virtual console implementation handled reference counting when accessing pseudo-terminal device files (/dev/pts/*). A local, unprivileged attacker could use this flaw to crash the system. (CVE-2011-5321, Moderate) * It was found that ... Read More...

CentOS 6 Linux kernel 2.6.32-504.16.2 was released on 09 June. Update type(s): security, bugfix and enhancement Resolved CVEs: CVE-2014-9419 CVE-2014-9420 CVE-2014-9585 CVE-2015-1805 CVE-2015-3331 * It was found that the Linux kernel's implementation of vectored pipe read and write functionality did not take into account the I/O vectors that were already processed when retrying after a failed atomic access operation, potentially resulting in ... Read More...