Alerts This Week
Warning Icon 1 664
Alerts This Week
Warning Icon 1 664

openSUSE Leap 42.3: 2017:2846-1 Important: Kernel Security Fixes

opensuse
Calendar Grey October 25, 2017
Dist Opensuse Esm H88
This Fedora security patch introduces essential updates for the Linux kernel, enhancing the system's defense against vulnerabilities.
An update that solves three vulnerabilities and has 60 fixes is now available.

Description

The openSUSE Leap 42.3 kernel was updated to 4.4.92 to receive various

security and bugfixes.

The following security bugs were fixed:

- CVE-2017-13080: Wi-Fi Protected Access (WPA and WPA2) allowed

reinstallation of the Group Temporal Key (GTK) during the group key

handshake, allowing an attacker within radio range to replay frames from

access points to clients (bnc#1063667).

- CVE-2017-15265: Race condition in the ALSA subsystem in the Linux kernel

allowed local users to cause a denial of service (use-after-free) or

possibly have unspecified other impact via crafted /dev/snd/seq ioctl

calls, related to sound/core/seq/seq_clientmgr.c and

sound/core/seq/seq_ports.c (bnc#1062520).

- CVE-2017-15649: net/packet/af_packet.c in the Linux kernel allowed local

users to gain privileges via crafted system calls that trigger

mishandling of packet_fanout data structures, because of a race

condition (involving fanout_add...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory critical security fix important kernel system resilience openSUSE

Patch

Patch Instructions:

To install this openSUSE Security Update use YaST online_update.

Alternatively you can run the command listed for your product:

- openSUSE Leap 42.3:

zypper in -t patch openSUSE-2017-1194=1

To bring your system up-to-date, use "zypper patch".

Package List

- openSUSE Leap 42.3 (noarch):

kernel-devel-4.4.92-31.1

kernel-docs-4.4.92-31.2

kernel-docs-html-4.4.92-31.2

kernel-docs-pdf-4.4.92-31.2

kernel-macros-4.4.92-31.1

kernel-source-4.4.92-31.1

kernel-source-vanilla-4.4.92-31.1

- openSUSE Leap 42.3 (x86_64):

kernel-debug-4.4.92-31.1

kernel-debug-base-4.4.92-31.1

kernel-debug-base-debuginfo-4.4.92-31.1

kernel-debug-debuginfo-4.4.92-31.1

kernel-debug-debugsource-4.4.92-31.1

kernel-debug-devel-4.4.92-31.1

kernel-debug-devel-debuginfo-4.4.92-31.1

kernel-default-4.4.92-31.1

kernel-default-base-4.4.92-31.1

kernel-default-base-debuginfo-4.4.92-31.1

kernel-default-debuginfo-4.4.92-31.1

kernel-default-debugsource-4.4.92-31.1

kernel-default-devel-4.4.92-31.1

kernel-obs-build-4.4.92-31.1

kernel-obs-build-debugsource-4.4.92-31.1

kernel-obs-qa-4.4.92-31.1

kernel-syms-4.4.92-31.1

kernel-vanilla-4.4.92-31.1

kernel-vanilla-base-4.4.92-31.1

kernel-vanilla-base-debuginfo-4.4.92-31.1

kernel-vanilla-debuginfo-4.4.92-31.1

kernel-vanilla-debugsource-4.4.92-31.1

kernel-vanilla-devel-4.4.92-31....

Read the Full Advisory

References

- team: call netdev_change_features out of team lock (bsc#1055567).

- team: fix memory leaks (bnc#1012382).

- ttpci: address stringop overflow warning (bnc#1012382).

- tty: goldfish: Fix a parameter of a call to free_irq (bnc#1012382).

- usb: chipidea: vbus event may exist before starting gadget (bnc#1012382).

- usb: core: harden cdc_parse_cdc_header (bnc#1012382).

- usb: devio: Do not corrupt user memory (bnc#1012382).

- usb: dummy-hcd: fix connection failures (wrong speed) (bnc#1012382).

- usb: dummy-hcd: Fix erroneous synchronization change (bnc#1012382).

- usb: dummy-hcd: fix infinite-loop resubmission bug (bnc#1012382).

- usb: fix out-of-bounds in usb_set_configuration (bnc#1012382).

- usb: gadgetfs: fix copy_to_user while holding spinlock (bnc#1012382).

- usb: gadgetfs: Fix crash caused by inadequate synchronization

(bnc#1012382).

- usb: gadget: inode.c: fix unbalanced spin_lock in ep0_write

(bnc#1012382).

- usb: gadget: mass_storage: set msg_registered after msg registered

(bnc#1012382).

- usb:...

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2017:2846-1
Rating: important
Affected Products: openSUSE Leap 42.3 le.

Topics%20covered

Topics Covered

security advisory critical security fix important kernel system resilience openSUSE

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here