ALT-PU-2018-1991: package kernel-image-std-def update to version 4.14.53-alt1
Описание
This update upgrades kernel-image-std-def to version 4.14.53-alt1.
Устраненные уязвимости136
Связанные уязвимости
ALT-PU-2017-1854: package `kernel-image-un-def` update to version 4.12.0-alt1
It was discovered in the Linux kernel before 4.11-rc8 that root can gain direct access to an internal keyring, such as '.dns_resolver' in RHEL-7 or '.builtin_trusted_keys' upstream, by joining it as its session keyring. This allows root to bypass module signature verification by adding a new public key of its own devising to the keyring.
It was discovered in the Linux kernel before 4.11-rc8 that root can gain direct access to an internal keyring, such as '.dns_resolver' in RHEL-7 or '.builtin_trusted_keys' upstream, by joining it as its session keyring. This allows root to bypass module signature verification by adding a new public key of its own devising to the keyring.
It was discovered in the Linux kernel before 4.11-rc8 that root can gain direct access to an internal keyring, such as '.dns_resolver' in RHEL-7 or '.builtin_trusted_keys' upstream, by joining it as its session keyring. This allows root to bypass module signature verification by adding a new public key of its own devising to the keyring.
It was discovered in the Linux kernel before 4.11-rc8 that root can ga ...