Details
The __secure_computing function in kernel/seccomp.c in the seccomp subsystem in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform, when CONFIG_SECCOMP is enabled, does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a 64-bit process making a 32-bit syscall, which allows local users to bypass intended access restrictions via crafted syscalls that are misinterpreted as (a) stat or (b) chmod, a related issue to CVE-2009-0342 and CVE-2009-0343.Novell Bugzilla entry: 483820 SUSE Security Advisories:
- SUSE-SA:2009:021 , published Thu, 16 Apr 2009 15:00:00 +0000
- SUSE-SA:2009:028 , published Wed, 20 May 2009 18:00:00 +0000
- SUSE-SA:2009:030 , published Mon, 08 Jun 2009 18:00:00 +0000
- SUSE-SA:2009:031 , published Mon, 09 Jun 2009 09:00:00 +0000
| Product(s) | Fixed package version(s) | References |
|---|---|---|
| openSUSE 11.1 |
| SAT Patch Nr: 733 |
| openSUSE 11.1 |
| SAT Patch Nr: 733 |
| openSUSE 11.0 |
| SAT Patch Nr: 951 |
| openSUSE 11.0 |
| SAT Patch Nr: 951 |
| SLES 11 DEBUGINFO |
| sle11-debuginfo. ppc sle11-debuginfo. ppc SAT Patch Nr: 725 |
| SLE 11 High Availability Extension |
| sle11-debuginfo. ppc sle11-debuginfo. ppc SAT Patch Nr: 725 |
| SLES 11 |
| sle11-debuginfo. ppc sle11-debuginfo. ppc SAT Patch Nr: 725 |
| SUSE Linux Enterprise 10 SP2 DEBUGINFO for IBM POWER |
| sles10-sp2-debuginfo. ppc sles10-sp2-debuginfo. ppc sles10-sp2-sdk. ppc ZYPP Patch Nr: 6235 |
| SLE SDK 10 SP2 for IBM iSeries and IBM pSeries |
| sles10-sp2-debuginfo. ppc sles10-sp2-debuginfo. ppc sles10-sp2-sdk. ppc ZYPP Patch Nr: 6235 |
| SUSE Linux Enterprise Server 10 SP2 for IBM POWER |
| sles10-sp2-debuginfo. ppc sles10-sp2-debuginfo. ppc sles10-sp2-sdk. ppc ZYPP Patch Nr: 6235 |
| SLES 11 DEBUGINFO |
| sle11-debuginfo. ia64 sle11-debuginfo. ia64 SAT Patch Nr: 714 |
| SLE 11 High Availability Extension |
| sle11-debuginfo. ia64 sle11-debuginfo. ia64 SAT Patch Nr: 714 |
| SLES 11 |
| sle11-debuginfo. ia64 sle11-debuginfo. ia64 SAT Patch Nr: 714 |
| SLES 11 DEBUGINFO |
| sle11-debuginfo. s390x sle11-debuginfo. s390x SAT Patch Nr: 716 |
| SLE 11 High Availability Extension |
| sle11-debuginfo. s390x sle11-debuginfo. s390x SAT Patch Nr: 716 |
| SLES 11 |
| sle11-debuginfo. s390x sle11-debuginfo. s390x SAT Patch Nr: 716 |
| SLES 11 DEBUGINFO |
| sle11-debuginfo. x86-64 sle11-debuginfo. x86-64 sle11-debuginfo. x86-64 SAT Patch Nr: 715 |
| SLE 11 High Availability Extension |
| sle11-debuginfo. x86-64 sle11-debuginfo. x86-64 sle11-debuginfo. x86-64 SAT Patch Nr: 715 |
| SLED 11 |
| sle11-debuginfo. x86-64 sle11-debuginfo. x86-64 sle11-debuginfo. x86-64 SAT Patch Nr: 715 |
| SLES 11 |
| sle11-debuginfo. x86-64 sle11-debuginfo. x86-64 sle11-debuginfo. x86-64 SAT Patch Nr: 715 |
| SUSE Linux Enterprise 10 SP2 DEBUGINFO for IPF |
| sles10-sp2-sdk. ia64 sles10-sp2-debuginfo. ia64 sles10-sp2-debuginfo. ia64 ZYPP Patch Nr: 6234 |
| SLE SDK 10 SP2 for IPF |
| sles10-sp2-sdk. ia64 sles10-sp2-debuginfo. ia64 sles10-sp2-debuginfo. ia64 ZYPP Patch Nr: 6234 |
| SUSE Linux Enterprise Server 10 SP2 for IPF |
| sles10-sp2-sdk. ia64 sles10-sp2-debuginfo. ia64 sles10-sp2-debuginfo. ia64 ZYPP Patch Nr: 6234 |
| SLES 11 DEBUGINFO |
| sle11. x86 sle11-debuginfo. x86 sle11. x86 SAT Patch Nr: 713 |
| SLE 11 High Availability Extension |
| sle11. x86 sle11-debuginfo. x86 sle11. x86 SAT Patch Nr: 713 |
| SLED 11 |
| sle11. x86 sle11-debuginfo. x86 sle11. x86 SAT Patch Nr: 713 |
| SLES 11 |
| sle11. x86 sle11-debuginfo. x86 sle11. x86 SAT Patch Nr: 713 |
| SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T |
| sles10-sp2-debuginfo. x86-64 sles10-sp2-sdk. x86-64 sles10-sp2-debuginfo. x86-64 sled10-sp2-debuginfo. x86-64 ZYPP Patch Nr: 6236 |
| SUSE Linux Enterprise 10 SP2 DEBUGINFO for AMD64 and Intel EM64T |
| sles10-sp2-debuginfo. x86-64 sles10-sp2-sdk. x86-64 sles10-sp2-debuginfo. x86-64 sled10-sp2-debuginfo. x86-64 ZYPP Patch Nr: 6236 |
| SLE SDK 10 SP2 for X86-64 |
| sles10-sp2-debuginfo. x86-64 sles10-sp2-sdk. x86-64 sles10-sp2-debuginfo. x86-64 sled10-sp2-debuginfo. x86-64 ZYPP Patch Nr: 6236 |
| SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T |
| sles10-sp2-debuginfo. x86-64 sles10-sp2-sdk. x86-64 sles10-sp2-debuginfo. x86-64 sled10-sp2-debuginfo. x86-64 ZYPP Patch Nr: 6236 |
| SUSE Linux Enterprise Desktop 10 SP2 for x86 |
| sled10-sp2-debuginfo. x86 sles10-sp2-debuginfo. x86 sles10-sp2-debuginfo. x86 sles10-sp2-sdk. x86 ZYPP Patch Nr: 6237 |
| SUSE Linux Enterprise 10 SP2 DEBUGINFO for x86 |
| sled10-sp2-debuginfo. x86 sles10-sp2-debuginfo. x86 sles10-sp2-debuginfo. x86 sles10-sp2-sdk. x86 ZYPP Patch Nr: 6237 |
| SLE SDK 10 SP2 for x86 |
| sled10-sp2-debuginfo. x86 sles10-sp2-debuginfo. x86 sles10-sp2-debuginfo. x86 sles10-sp2-sdk. x86 ZYPP Patch Nr: 6237 |
| SUSE Linux Enterprise Server 10 SP2 for x86 |
| sled10-sp2-debuginfo. x86 sles10-sp2-debuginfo. x86 sles10-sp2-debuginfo. x86 sles10-sp2-sdk. x86 ZYPP Patch Nr: 6237 |
| openSUSE 10.3 |
| |
| SUSE Linux Enterprise Server RT Solution 10 for x86 |
| sles10-sp2. x86-64 sles10-sp2. x86 ZYPP Patch Nr: 6334 |
| SUSE Linux Enterprise Server RT Solution 10 for AMD64 and Intel EM64T |
| sles10-sp2. x86-64 sles10-sp2. x86 ZYPP Patch Nr: 6334 |
| SUSE Linux Enterprise 10 SP2 DEBUGINFO for IBM zSeries 64bit |
| sles10-sp2-debuginfo. s390x sles10-sp2-debuginfo. s390x ZYPP Patch Nr: 6238 |
| SUSE Linux Enterprise Server 10 SP2 for IBM zSeries 64bit |
| sles10-sp2-debuginfo. s390x sles10-sp2-debuginfo. s390x ZYPP Patch Nr: 6238 |