Upstream information
Description
ld.so in the GNU C Library (aka glibc or libc6) before 2.11.3, and 2.12.x before 2.12.2, does not properly restrict use of the LD_AUDIT environment variable to reference dynamic shared objects (DSOs) as audit objects, which allows local users to gain privileges by leveraging an unsafe DSO located in a trusted library directory, as demonstrated by libpcprofile.so.NVD CVSS v2 Base Score: 7.2 (AV:L/AC:L/Au:N/C:C/I:C/A:C)
Novell/SUSE information
Novell Bugzilla entry: 646960, 648020 SUSE Security Advisories:- SUSE-SA:2010:052, published Thu, 28 Oct 2010 09:00:00 +0000
- openSUSE-SU-2010:0912-1, published Thu, 28 Oct 2010 01:08:19 +0200 (CEST)
- openSUSE-SU-2010:0913-1, published Thu, 28 Oct 2010 02:08:09 +0200 (CEST)
- openSUSE-SU-2010:0914-1, published Thu, 28 Oct 2010 02:08:13 +0200 (CEST)
List of released packages
| Product(s) | Fixed package version(s) | References |
|---|---|---|
| openSUSE 11.3 |
| |
| openSUSE 11.3 |
| |
| SLE 11 SP1 DEBUGINFO |
| sles11-sp1-vmware.x86 sled11-sp1.x86-64 sles11-sp1.s390x sles11-sp1.x86-64 sled11-sp1.x86 sles11-sp1.ia64 sle11-sp1-sdk.x86 sles11-sp1-vmware.x86-64 sle11-sp1-sdk.x86-64 sles11-sp1.x86 sles11-sp1.ppc SAT Patch Nr: 3392 |
| SLE 11 SP1 DEBUGINFO |
| sles11-sp1-vmware.x86 sled11-sp1.x86-64 sles11-sp1.s390x sles11-sp1.x86-64 sled11-sp1.x86 sles11-sp1.ia64 sle11-sp1-sdk.x86 sles11-sp1-vmware.x86-64 sle11-sp1-sdk.x86-64 sles11-sp1.x86 sles11-sp1.ppc SAT Patch Nr: 3392 |
| SLE 11 SP1 DEBUGINFO |
| sles11-sp1-vmware.x86 sled11-sp1.x86-64 sles11-sp1.s390x sles11-sp1.x86-64 sled11-sp1.x86 sles11-sp1.ia64 sle11-sp1-sdk.x86 sles11-sp1-vmware.x86-64 sle11-sp1-sdk.x86-64 sles11-sp1.x86 sles11-sp1.ppc SAT Patch Nr: 3392 |
| SUSE Linux Enterprise Software Development Kit 11 SP1 |
| sles11-sp1-vmware.x86 sled11-sp1.x86-64 sles11-sp1.s390x sles11-sp1.x86-64 sled11-sp1.x86 sles11-sp1.ia64 sle11-sp1-sdk.x86 sles11-sp1-vmware.x86-64 sle11-sp1-sdk.x86-64 sles11-sp1.x86 sles11-sp1.ppc SAT Patch Nr: 3392 |
| SUSE Linux Enterprise Desktop 11 SP1 |
| sles11-sp1-vmware.x86 sled11-sp1.x86-64 sles11-sp1.s390x sles11-sp1.x86-64 sled11-sp1.x86 sles11-sp1.ia64 sle11-sp1-sdk.x86 sles11-sp1-vmware.x86-64 sle11-sp1-sdk.x86-64 sles11-sp1.x86 sles11-sp1.ppc SAT Patch Nr: 3392 |
| SUSE Linux Enterprise Desktop 11 SP1 |
| sles11-sp1-vmware.x86 sled11-sp1.x86-64 sles11-sp1.s390x sles11-sp1.x86-64 sled11-sp1.x86 sles11-sp1.ia64 sle11-sp1-sdk.x86 sles11-sp1-vmware.x86-64 sle11-sp1-sdk.x86-64 sles11-sp1.x86 sles11-sp1.ppc SAT Patch Nr: 3392 |
| SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server 11 SP1 for VMware |
| sles11-sp1-vmware.x86 sled11-sp1.x86-64 sles11-sp1.s390x sles11-sp1.x86-64 sled11-sp1.x86 sles11-sp1.ia64 sle11-sp1-sdk.x86 sles11-sp1-vmware.x86-64 sle11-sp1-sdk.x86-64 sles11-sp1.x86 sles11-sp1.ppc SAT Patch Nr: 3392 |
| SUSE Linux Enterprise Server 11 SP1 |
| sles11-sp1-vmware.x86 sled11-sp1.x86-64 sles11-sp1.s390x sles11-sp1.x86-64 sled11-sp1.x86 sles11-sp1.ia64 sle11-sp1-sdk.x86 sles11-sp1-vmware.x86-64 sle11-sp1-sdk.x86-64 sles11-sp1.x86 sles11-sp1.ppc SAT Patch Nr: 3392 |
| SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server 11 SP1 for VMware |
| sles11-sp1-vmware.x86 sled11-sp1.x86-64 sles11-sp1.s390x sles11-sp1.x86-64 sled11-sp1.x86 sles11-sp1.ia64 sle11-sp1-sdk.x86 sles11-sp1-vmware.x86-64 sle11-sp1-sdk.x86-64 sles11-sp1.x86 sles11-sp1.ppc SAT Patch Nr: 3392 |
| SUSE Linux Enterprise 11 GA DEBUGINFO |
| sles11.ppc SAT Patch Nr: 3406 |
| SUSE Linux Enterprise Server 11 GA |
| sles11.ppc SAT Patch Nr: 3406 |
| openSUSE 11.2 |
| |
| openSUSE 11.2 |
| |
| openSUSE 11.1 |
| |
| openSUSE 11.1 |
| |
| SUSE Linux Enterprise 11 Moblin 2.0 |
| SAT Patch Nr: 3385 |
| SUSE Linux Enterprise 11 Moblin 2.0 |
| SAT Patch Nr: 3385 |
| SUSE Linux Enterprise Desktop 10 SP3 for x86 |
| sles10-sp3.x86-64 sles10-sp3-debuginfo.x86 sles10-sp3-debuginfo.ia64 sle10-sp3-sdk.x86-64 sles10-sp3.s390x sles10-sp3-debuginfo.x86-64 sle10-sp3-sdk.ia64 sles10-sp3-debuginfo.ppc sle10-sp3-sdk.x86 sle10-sp3-sdk.ppc sled10-sp3.x86 sles10-sp3-debuginfo.s390x sles10-sp3.ppc sles10-sp3.x86 sled10-sp3.x86-64 sle10-sp3-sdk.s390x sles10-sp3.ia64 ZYPP Patch Nr: 7201 |
| SUSE Linux Enterprise Desktop 10 SP3 for AMD64 and Intel EM64T |
| sles10-sp3.x86-64 sles10-sp3-debuginfo.x86 sles10-sp3-debuginfo.ia64 sle10-sp3-sdk.x86-64 sles10-sp3.s390x sles10-sp3-debuginfo.x86-64 sle10-sp3-sdk.ia64 sles10-sp3-debuginfo.ppc sle10-sp3-sdk.x86 sle10-sp3-sdk.ppc sled10-sp3.x86 sles10-sp3-debuginfo.s390x sles10-sp3.ppc sles10-sp3.x86 sled10-sp3.x86-64 sle10-sp3-sdk.s390x sles10-sp3.ia64 ZYPP Patch Nr: 7201 |
| SUSE Linux Enterprise Server 10 SP3 DEBUGINFO |
| sles10-sp3.x86-64 sles10-sp3-debuginfo.x86 sles10-sp3-debuginfo.ia64 sle10-sp3-sdk.x86-64 sles10-sp3.s390x sles10-sp3-debuginfo.x86-64 sle10-sp3-sdk.ia64 sles10-sp3-debuginfo.ppc sle10-sp3-sdk.x86 sle10-sp3-sdk.ppc sled10-sp3.x86 sles10-sp3-debuginfo.s390x sles10-sp3.ppc sles10-sp3.x86 sled10-sp3.x86-64 sle10-sp3-sdk.s390x sles10-sp3.ia64 ZYPP Patch Nr: 7201 |
| SUSE Linux Enterprise SDK 10 SP3 SUSE Linux Enterprise Server 10 SP3 SUSE Linux Enterprise Server for SAP 10 SP3 |
| sles10-sp3.x86-64 sles10-sp3-debuginfo.x86 sles10-sp3-debuginfo.ia64 sle10-sp3-sdk.x86-64 sles10-sp3.s390x sles10-sp3-debuginfo.x86-64 sle10-sp3-sdk.ia64 sles10-sp3-debuginfo.ppc sle10-sp3-sdk.x86 sle10-sp3-sdk.ppc sled10-sp3.x86 sles10-sp3-debuginfo.s390x sles10-sp3.ppc sles10-sp3.x86 sled10-sp3.x86-64 sle10-sp3-sdk.s390x sles10-sp3.ia64 ZYPP Patch Nr: 7201 |
| SUSE Linux Enterprise SDK 10 SP3 |
| sles10-sp3.x86-64 sles10-sp3-debuginfo.x86 sles10-sp3-debuginfo.ia64 sle10-sp3-sdk.x86-64 sles10-sp3.s390x sles10-sp3-debuginfo.x86-64 sle10-sp3-sdk.ia64 sles10-sp3-debuginfo.ppc sle10-sp3-sdk.x86 sle10-sp3-sdk.ppc sled10-sp3.x86 sles10-sp3-debuginfo.s390x sles10-sp3.ppc sles10-sp3.x86 sled10-sp3.x86-64 sle10-sp3-sdk.s390x sles10-sp3.ia64 ZYPP Patch Nr: 7201 |
| SUSE Linux Enterprise SDK 10 SP3 |
| sles10-sp3.x86-64 sles10-sp3-debuginfo.x86 sles10-sp3-debuginfo.ia64 sle10-sp3-sdk.x86-64 sles10-sp3.s390x sles10-sp3-debuginfo.x86-64 sle10-sp3-sdk.ia64 sles10-sp3-debuginfo.ppc sle10-sp3-sdk.x86 sle10-sp3-sdk.ppc sled10-sp3.x86 sles10-sp3-debuginfo.s390x sles10-sp3.ppc sles10-sp3.x86 sled10-sp3.x86-64 sle10-sp3-sdk.s390x sles10-sp3.ia64 ZYPP Patch Nr: 7201 |
| SUSE Linux Enterprise SDK 10 SP3 |
| sles10-sp3.x86-64 sles10-sp3-debuginfo.x86 sles10-sp3-debuginfo.ia64 sle10-sp3-sdk.x86-64 sles10-sp3.s390x sles10-sp3-debuginfo.x86-64 sle10-sp3-sdk.ia64 sles10-sp3-debuginfo.ppc sle10-sp3-sdk.x86 sle10-sp3-sdk.ppc sled10-sp3.x86 sles10-sp3-debuginfo.s390x sles10-sp3.ppc sles10-sp3.x86 sled10-sp3.x86-64 sle10-sp3-sdk.s390x sles10-sp3.ia64 ZYPP Patch Nr: 7201 |
| SUSE Linux Enterprise SDK 10 SP3 |
| sles10-sp3.x86-64 sles10-sp3-debuginfo.x86 sles10-sp3-debuginfo.ia64 sle10-sp3-sdk.x86-64 sles10-sp3.s390x sles10-sp3-debuginfo.x86-64 sle10-sp3-sdk.ia64 sles10-sp3-debuginfo.ppc sle10-sp3-sdk.x86 sle10-sp3-sdk.ppc sled10-sp3.x86 sles10-sp3-debuginfo.s390x sles10-sp3.ppc sles10-sp3.x86 sled10-sp3.x86-64 sle10-sp3-sdk.s390x sles10-sp3.ia64 ZYPP Patch Nr: 7201 |
| SUSE Linux Enterprise Server 10 SP3 |
| sles10-sp3.x86-64 sles10-sp3-debuginfo.x86 sles10-sp3-debuginfo.ia64 sle10-sp3-sdk.x86-64 sles10-sp3.s390x sles10-sp3-debuginfo.x86-64 sle10-sp3-sdk.ia64 sles10-sp3-debuginfo.ppc sle10-sp3-sdk.x86 sle10-sp3-sdk.ppc sled10-sp3.x86 sles10-sp3-debuginfo.s390x sles10-sp3.ppc sles10-sp3.x86 sled10-sp3.x86-64 sle10-sp3-sdk.s390x sles10-sp3.ia64 ZYPP Patch Nr: 7201 |
| SUSE Linux Enterprise Server 10 SP3 |
| sles10-sp3.x86-64 sles10-sp3-debuginfo.x86 sles10-sp3-debuginfo.ia64 sle10-sp3-sdk.x86-64 sles10-sp3.s390x sles10-sp3-debuginfo.x86-64 sle10-sp3-sdk.ia64 sles10-sp3-debuginfo.ppc sle10-sp3-sdk.x86 sle10-sp3-sdk.ppc sled10-sp3.x86 sles10-sp3-debuginfo.s390x sles10-sp3.ppc sles10-sp3.x86 sled10-sp3.x86-64 sle10-sp3-sdk.s390x sles10-sp3.ia64 ZYPP Patch Nr: 7201 |
| SUSE Linux Enterprise Server 10 SP3 |
| sles10-sp3.x86-64 sles10-sp3-debuginfo.x86 sles10-sp3-debuginfo.ia64 sle10-sp3-sdk.x86-64 sles10-sp3.s390x sles10-sp3-debuginfo.x86-64 sle10-sp3-sdk.ia64 sles10-sp3-debuginfo.ppc sle10-sp3-sdk.x86 sle10-sp3-sdk.ppc sled10-sp3.x86 sles10-sp3-debuginfo.s390x sles10-sp3.ppc sles10-sp3.x86 sled10-sp3.x86-64 sle10-sp3-sdk.s390x sles10-sp3.ia64 ZYPP Patch Nr: 7201 |
| SUSE Linux Enterprise 11 Moblin 2.1 DEBUGINFO |
| SAT Patch Nr: 3386 |
| SUSE Linux Enterprise 11 Moblin 2.1 |
| SAT Patch Nr: 3386 |
