Описание
Security update for kdump
This update for kdump provides several fixes and enhancements:
- Refresh kdumprd if /etc/hosts or /etc/nsswitch.conf is changed. (bsc#943214)
- Add a separate systemd service to rebuild kdumprd at boot. (bsc#943214)
- Improve network setup in the kdump environment by reading configuration from wicked by default (system configuration files are used as a fallback). (bsc#980328)
- Use the last mount entry in kdump_get_mountpoints(). (bsc#951844)
- Remove 'notsc' from the kdump kernel command line. (bsc#973213)
- Handle dump files with many program headers. (bsc#932339, bsc#970708)
- Fall back to stat() if file type is DT_UNKNOWN. (bsc#964206)
- Remove vm. sysctls from kdump initrd. (bsc#927451, bsc#987862)
- Use the exit code of kexec, not that of 'local'. (bsc#984799)
- Convert sysroot to a bind mount in kdump initrd. (bsc#976864)
- Distinguish between Xenlinux (aka Xenified or SUSE) and pvops Xen kernels, as the latter can run on bare metal. (bsc#974270)
- CVE-2016-5759: Use full path to dracut as argument to bash. (bsc#989972, bsc#990200)
Список пакетов
SUSE Linux Enterprise Desktop 12 SP1
kdump-0.8.15-29.1
SUSE Linux Enterprise Server 12 SP1
kdump-0.8.15-29.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1
kdump-0.8.15-29.1
Ссылки
- Link for SUSE-SU-2016:2553-1
- E-Mail link for SUSE-SU-2016:2553-1
- SUSE Security Ratings
- SUSE Bug 927451
- SUSE Bug 932339
- SUSE Bug 943214
- SUSE Bug 951844
- SUSE Bug 964206
- SUSE Bug 970708
- SUSE Bug 973213
- SUSE Bug 974270
- SUSE Bug 976864
- SUSE Bug 980328
- SUSE Bug 984799
- SUSE Bug 987862
- SUSE Bug 989972
- SUSE Bug 990200
- SUSE CVE CVE-2016-5759 page
Описание
The mkdumprd script called "dracut" in the current working directory "." allows local users to trick the administrator into executing code as root.
Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP1:kdump-0.8.15-29.1
SUSE Linux Enterprise Server 12 SP1:kdump-0.8.15-29.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1:kdump-0.8.15-29.1
Ссылки
- CVE-2016-5759
- SUSE Bug 990200