Test ID:	1.3.6.1.4.1.25623.1.0.64770
Category:	Slackware Local Security Checks
Title:	Slackware: Security Advisory (SSA:2009-231-01)
Summary:	The remote host is missing an update for the 'kernel' package(s) announced via the SSA:2009-231-01 advisory.
Description:	Summary: The remote host is missing an update for the 'kernel' package(s) announced via the SSA:2009-231-01 advisory. Vulnerability Insight: This is a followup to the SSA:2009-230-01 advisory noting some errata. The generic SMP kernel update for Slackware 12.2 was built using the .config for a huge kernel, not a generic one. The kernel previously published as kernel-generic-smp and in the gemsmp.s directory works and is secure, but is larger than it needs to be. It has been replaced in the Slackware 12.2 patches with a generic SMP kernel. A new svgalib_helper package (compiled for a 2.6.27.31 kernel) was added to the Slackware 12.2 /patches. An error was noticed in the SSA:2009-230-01 advisory concerning the packages for Slackware -current 32-bit. The http links given refer to packages with a -1 build version. The actual packages have a build number of -2. Here are the details from the Slackware 12.2 ChangeLog: +--------------------------+ patches/packages/linux-2.6.27.31/kernel-modules-smp-2.6.27.31_smp-i686-2.tgz: Rebuilt the modules using the config-generic-smp-2.6.27.31-smp .config. patches/packages/linux-2.6.27.31/kernel-generic-smp-2.6.27.31_smp-i686-2.tgz: Fixed the .config to use config-generic-smp-2.6.27.31-smp. The config-generic-huge-2.6.27.31-smp was mistakenly used for build -1. Thanks to Chuck56 for the report. patches/packages/linux-2.6.27.31/kernel-source-2.6.27.31_smp-noarch-2.tgz: Changed the included .config to the config-generic-smp-2.6.27.31-smp version. patches/packages/svgalib_helper-1.9.25_2.6.27.31-i486-1_slack12.2.tgz: Recompiled for 2.6.27.31. +--------------------------+ Affected Software/OS: 'kernel' package(s) on Slackware 12.2. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Copyright	Copyright (C) 2012 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.