Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 492
Alerts This Week
Warning Icon 1 492

Red Hat Enterprise Linux OpenStack 7.0: RHSA-2017:0881-01 Security Update

red hat
Calendar Grey April 5, 2017
Scroller Redhat
A Red Hat announcement regarding a moderate security patch for the V8 engine addressing potential integer overflow vulnerabilities.
An update for v8 is now available for Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Summary

V8 is Google's open source JavaScript engine. V8 is written in C++ and is used in Google Chrome, the open source browser from Google. V8 implements ECMAScript as specified in ECMA-262, 3rd edition.
Security Fix(es):
* An integer-overflow flaw was found in V8's Zone class when allocating new memory (Zone::New() and Zone::NewExpand()). An attacker with the ability to manipulate a large zone could crash the application or, potentially, execute arbitrary code with the application privileges. (CVE-2016-1669)

Topics%20covered

Topics Covered

security advisory security issue buffer overflow Red Hat Enterprise Linux moderate impact integer overflow v8 update

References

https://access.redhat.com/security/cve/CVE-2016-1669 https://access.redhat.com/security/updates/classification/#moderate

Package List

Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7:
Source: v8-3.14.5.10-19.el7ost.src.rpm
x86_64: v8-3.14.5.10-19.el7ost.x86_64.rpm v8-debuginfo-3.14.5.10-19.el7ost.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/


Advisory ID: RHSA-2017:0881-01
Product: Red Hat Enterprise Linux OpenStack Platform
Advisory URL: https://access.redhat.com/errata/RHSA-2017:0881
Issue date: 2017-04-05

Topic

An update for v8 is now available for Red Hat Enterprise Linux OpenStackPlatform 7.0 (Kilo) for RHEL 7.Red Hat Product Security has rated this update as having a security impactof Moderate. A Common Vulnerability Scoring System (CVSS) base score, whichgives a detailed severity rating, is available for each vulnerability fromthe CVE link(s) in the References section.

Topics%20covered

Topics Covered

security advisory security issue buffer overflow Red Hat Enterprise Linux moderate impact integer overflow v8 update

Relevant Releases Architectures

Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7 - x86_64

Bugs Fixed

1335449 - CVE-2016-1669 V8: integer overflow leading to buffer overflow in Zone::New

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.