Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2017:1912-1

Опубликовано: 20 июл. 2017
Источник: suse-cvrf

Описание

Security update for Linux Kernel Live Patch 22 for SLE 12

This update for the Linux Kernel 3.12.61-52_77 fixes several issues.

The following bugs were fixed:

  • CVE-2017-1000364: The previous fix for the stack gap increase tracked by CVE-2017-1000364 had a regression, which is fixed by this follow up patch. (bsc#1039496)

Список пакетов

SUSE Linux Enterprise Server 12-LTSS
kgraft-patch-3_12_61-52_77-default-2-2.1
kgraft-patch-3_12_61-52_77-xen-2-2.1
SUSE Linux Enterprise Server for SAP Applications 12
kgraft-patch-3_12_61-52_77-default-2-2.1
kgraft-patch-3_12_61-52_77-xen-2-2.1

Ссылки

Описание

An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be "jumped" over (the stack guard page is bypassed), this affects Linux Kernel versions 4.11.5 and earlier (the stackguard page was introduced in 2010).

Затронутые продукты
SUSE Linux Enterprise Server 12-LTSS:kgraft-patch-3_12_61-52_77-default-2-2.1
SUSE Linux Enterprise Server 12-LTSS:kgraft-patch-3_12_61-52_77-xen-2-2.1
SUSE Linux Enterprise Server for SAP Applications 12:kgraft-patch-3_12_61-52_77-default-2-2.1
SUSE Linux Enterprise Server for SAP Applications 12:kgraft-patch-3_12_61-52_77-xen-2-2.1
Ссылки