Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 547
Alerts This Week
Warning Icon 1 547

Fedora 25: dracut Moderate Update - Local File Disclosure and Fix

fedora
Calendar Grey November 19, 2016
Scroller Fedora Esm H88
Fedora System Alert regarding dracut modifies initramfs access rights to resolve a localized data exposure vulnerability.
- fixed permissions of initramfs file, if microcode is prepended (CVE-2016-8637)

Summary

dracut contains tools to create a bootable initramfs for 2.6 Linux kernels.

Unlike existing implementations, dracut does hard-code as little as possible

into the initramfs. dracut contains various modules which are driven by the

event-based udev. Having root on MD, DM, LVM2, LUKS is supported as well as

NFS, iSCSI, NBD, FCoE with the dracut-network package.

Update Information:

- fixed permissions of initramfs file, if microcode is prepended (CVE-2016-8637)

Topics%20covered

Topics Covered

security advisory update Fedora information disclosure file permissions dracut local disclosure

Change Log

References


[ 1 ] Bug #1392435 - CVE-2016-8637 dracut: Local information disclosure of initramfs when early cpio is used [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1392435

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade dracut' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Name: dracut
Product: Fedora 25
Version: 044
Release: 78.fc25
URL: https://github.com/dracutdevs/dracut/wiki/
Summary: Initramfs generator using udev

Topics%20covered

Topics Covered

security advisory update Fedora information disclosure file permissions dracut local disclosure

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.