Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 464
Alerts This Week
Warning Icon 1 464

SUSE 11 SP3 2014:1316-1 Important: Critical Security Update Details

suse
Calendar Grey October 22, 2014
Scroller Suse
Essential patch release for Debian Linux core, tackling various flaws and improving overall system reliability.
An update that solves 11 vulnerabilities and has 64 fixes An update that solves 11 vulnerabilities and has 64 fixes An update that solves 11 vulnerabilities and has 64 fixes is now...

Summary

The SUSE Linux Enterprise 11 Service Pack 3 kernel has been updated to fix various bugs and security issues. The following security bugs have been fixed: * CVE-2014-1739: The media_device_enum_entities function in drivers/media/media-device.c in the Linux kernel before 3.14.6 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory by leveraging /dev/media0 read access for a MEDIA_IOC_ENUM_ENTITIES ioctl call (bnc#882804). * CVE-2014-4171: mm/shmem.c in the Linux kernel through 3.15.1 does not properly implement the interaction between range notification and hole punching, which allows local users to cause a denial of service (i_mutex hold) by using the mmap system call to access a hole, as demonstrated by

Topics%20covered

Topics Covered

security advisory denial of service bug fix important system update suse linux kernel

References

#774818 #806990 #816708 #826486 #832309 #849123

#855657 #859840 #860441 #860593 #863586 #866130

#866615 #866864 #866911 #869055 #869934 #870161

#871797 #876017 #876055 #876114 #876590 #879921

#880344 #880370 #881051 #881759 #882317 #882639

#882804 #882900 #883376 #883518 #883724 #884333

#884582 #884725 #884767 #885262 #885382 #885422

#885509 #886840 #887082 #887503 #887608 #887645

#887680 #888058 #888105 #888591 #888607 #888847

#888849 #888968 #889061 #889173 #889451 #889614

#889727 #890297 #890426 #890513 #890526 #891087

#891259 #891619 #892200 #892490 #892723 #893064

#893496 #893596 #894200

Cross- CVE-2013-1979 CVE-2014-1739 CVE-2014-2706

CVE-2014-4027 CVE-2014-4171 CVE-2014-4508

CVE-2014-4667 CVE...

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2014:1316-1
Rating: important

Topics%20covered

Topics Covered

security advisory denial of service bug fix important system update suse linux kernel

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.