Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 544
Alerts This Week
Warning Icon 1 544

Fedora 25: libnl3 Moderate Update - Input Validation Issues and Crash Fix

fedora
Calendar Grey January 20, 2017
Scroller Fedora Esm H88
The latest libnl3 update for Fedora 25 resolves input validation concerns and addresses a critical crash problem. Key security enhancements are incorporated.
Update with patches from upstream - check valid input arguments for nla_reserve() (rh #1414305, CVE-2017-0386) - fix crash during SRIOV parsing - lazyly read psched settings - u...

Summary

This package contains a convenience library to simplify

using the Linux kernel's netlink sockets interface for

network manipulation

Update Information:

Update with patches from upstream - check valid input arguments for nla_reserve() (rh #1414305, CVE-2017-0386) - fix crash during SRIOV parsing - lazyly read psched settings - use O_CLOEXEC when creating file descriptorswith fopen()

Topics%20covered

Topics Covered

security advisory update Fedora privilege escalation input validation crash fix libnl3

Change Log

References


[ 1 ] Bug #1414304 - CVE-2017-0386 libnl: Privilege escalation due to insufficient data checks in nla_reserve and nla_put https://bugzilla.redhat.com/show_bug.cgi?id=1414304

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade libnl3' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Name: libnl3
Product: Fedora 25
Version: 3.2.29
Release: 2.fc25
URL: http://www.infradead.org/~tgr/libnl/
Summary: Convenience library for kernel netlink sockets

Topics%20covered

Topics Covered

security advisory update Fedora privilege escalation input validation crash fix libnl3

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.