Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 521
Alerts This Week
Warning Icon 1 521

SUSE Linux 11-SP4: 2016:1672-1 Important: Kernel Security Update

suse
Calendar Grey June 24, 2016
Scroller Suse
SUSE Security Bulletin detailing a critical update focused on kernel vulnerabilities featuring 61 resolved issues and significant modifications.
An update that solves 29 vulnerabilities and has 61 fixes An update that solves 29 vulnerabilities and has 61 fixes An update that solves 29 vulnerabilities and has 61 fixes is now...

Summary

The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes. Notable changes in this kernel: - It is now possible to mount a NFS export on the exporting host directly. The following security bugs were fixed: - CVE-2016-5244: A kernel information leak in rds_inc_info_copy was fixed that could leak kernel stack memory to userspace (bsc#983213). - CVE-2016-1583: Prevent the usage of mmap when the lower file system does not allow it. This could have lead to local privilege escalation when ecryptfs-utils was installed and /sbin/mount.ecryptfs_private was setuid (bsc#983143). - CVE-2016-4913: The get_rock_ridge_filename function in fs/isofs/rock.c in the Linux kernel mishandles NM (aka alternate name) entries containing \0 characters, which allowed local users to obtain sensitive

Topics%20covered

Topics Covered

security advisory denial of service kernel update bug fix local escalation SUSE Linux important patch

References

#676471 #866130 #898592 #936530 #940413 #944309

#946122 #949752 #953369 #956491 #956852 #957986

#957988 #957990 #959381 #960458 #960857 #961512

#961518 #963762 #963998 #965319 #965860 #965923

#966245 #967863 #967914 #968010 #968018 #968141

#968500 #968566 #968670 #968687 #969149 #969391

#969571 #970114 #970504 #970892 #970909 #970911

#970948 #970956 #970958 #970970 #971124 #971125

#971126 #971360 #971433 #971446 #971729 #971944

#971947 #971989 #972363 #973237 #973378 #973556

#973570 #974646 #974787 #975358 #975772 #975945

#976739 #976868 #978401 #978821 #978822 #979213

#979274 #979347 #979419 #979548 #979595 #979867

#979879 #980371 #980725 #980788 #980931 #981231

#981267 #982532 #982691 #983143 #983...

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2016:1672-1
Rating: important

Topics%20covered

Topics Covered

security advisory denial of service kernel update bug fix local escalation SUSE Linux important patch

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.