Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2017-1854

Критический

ALT-PU-2017-1854: package kernel-image-un-def update to version 4.12.0-alt1

Источник
errata.altlinux.org
Дата публикации
12.07.2017
Дата обновления
04.02.2026
Устраненные уязвимости
58

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades kernel-image-un-def to version 4.12.0-alt1.

Устраненные уязвимости58

Связанные уязвимости

CVSS3: 4.4
ubuntu
больше 8 лет назад

It was discovered in the Linux kernel before 4.11-rc8 that root can gain direct access to an internal keyring, such as '.dns_resolver' in RHEL-7 or '.builtin_trusted_keys' upstream, by joining it as its session keyring. This allows root to bypass module signature verification by adding a new public key of its own devising to the keyring.

CVSS3: 4.4
redhat
больше 9 лет назад

It was discovered in the Linux kernel before 4.11-rc8 that root can gain direct access to an internal keyring, such as '.dns_resolver' in RHEL-7 or '.builtin_trusted_keys' upstream, by joining it as its session keyring. This allows root to bypass module signature verification by adding a new public key of its own devising to the keyring.

CVSS3: 4.4
nvd
больше 8 лет назад

It was discovered in the Linux kernel before 4.11-rc8 that root can gain direct access to an internal keyring, such as '.dns_resolver' in RHEL-7 or '.builtin_trusted_keys' upstream, by joining it as its session keyring. This allows root to bypass module signature verification by adding a new public key of its own devising to the keyring.

CVSS3: 4.4
debian
больше 8 лет назад

It was discovered in the Linux kernel before 4.11-rc8 that root can ga ...

suse-cvrf
около 9 лет назад

Security update for the Linux Kernel