Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found -5 articles for you...
200
security advisorykernel updatebug fixScientific Linux: 2017:0307-1 Moderate: Kernel Security Update Details
Moderate: kernel security and bug fix update. Date: Thu, 23 Feb 2017 22:59:57 -0000 Reply-To: scientific-linux-users@ Sender: Security Errata for Scientific Linux From: Connie Sieh Subject: Security ERRATA Moderate: kernel on SL6.x i386/x86_64 MIME-Version: 1.0 Message-ID: Synopsis: Moderate: kernel security and bug fix update Advisory ID: SLSA-2017:0307-1 Issue Date: 2017-02-23 CVE Numbers: CVE-2016-6136 CVE-2016-9555 -- Security Fix(es): * When creating audit records for parameters to executed children processes, an attacker can convince the Linux kernel audit subsystem can create corrupt records which may allow an attacker to misrepresent or evade logging of executing commands. (CVE-2016-6136, Moderate) * A flaw was found in the Linux kernel's implementation of the SCTP protocol. A remote attacker could trigger an out-of-bounds read with an offset of up to 64kB potentially causing the system to crash. (CVE-2016-9555, Moderate) Bug Fix(es): * The qlnic driver previously attempted to fetch pending transmission descriptors before all writes were complete, which lead to firmware hangs. With this update, the qlcnic driver has been fixed to complete all writes before the hardware fetches any pending transmission descriptors. As a result, the firmware no longer hangs with the qlcnic driver. * Previously, when a NFS share was mounted, the file-system (FS) cache was incorrectly enabled even when the "-o fsc" option was not used in the mount command. Consequently, the cachefilesd service stored files in the NFS share even when not instructed to by the user. With this update, NFS does not use the FS cache if not instructed by the "-o fsc" option. As a result, NFS no longer enables caching if the "-o fsc" option is not used. * Previously, an NFS client and NFS server got into a NFS4 protocol loop involving a WRITE action and a NFS4ERR_EXPIRED response when the current_fileid counter got to the wraparound point by overflowing the value of 32 bits. This update fixes the NFS server to handlethe current_fileid wraparound. As a result, the described NFS4 protocol loop no longer occurs. * Previously, certain configurations of the Hewlett Packard Smart Array (HPSA) devices caused hardware to be set offline incorrectly when the HPSA driver was expected to wait for existing I/O operations to complete. Consequently, a kernel panic occurred. This update prevents the described problem. As a result, the kernel panic no longer occurs. * Previously, memory corruption by copying data into the wrong memory locations sometimes occurred, because the __copy_tofrom_user() function was returning incorrect values. This update fixes the __copy_tofrom_user() function so that it no longer returns larger values than the number of bytes it was asked to copy. As a result, memory corruption no longer occurs in he described scenario. * Previously, guest virtual machines (VMs) on a Hyper-V server cluster got in some cases rebooted during the graceful node failover test, because the host kept sending heartbeat packets independently of guests responding to them. This update fixes the bug by properly responding to all the heartbeat messages in the queue, even if they are pending. As a result, guest VMs no longer get rebooted under the described circumstances. * When the "punching hole" feature of the fallocate utility was used on an ext4 file system inode with extent depth of 1, the extent tree of the inode sometimes became corrupted. With this update, the underlying source code has been fixed, and extent tree corruption no longer occurs in the described situation. -- SL6 x86_64 kernel-2.6.32-642.15.1.el6.x86_64.rpm kernel-debug-2.6.32-642.15.1.el6.x86_64.rpm kernel-debug-debuginfo-2.6.32-642.15.1.el6.i686.rpm kernel-debug-debuginfo-2.6.32-642.15.1.el6.x86_64.rpm kernel-debug-devel-2.6.32-642.15.1.el6.i686.rpm kernel-debug-devel-2.6.32-642.15.1.el6.x86_64.rpm kernel-debuginfo-2.6.32-642.15.1.el6.i686.rpm kernel-debuginfo-2.6.32-642.15.1.el6.x86_64.rpm kernel-debuginfo-common-i686-2.6.32-642.15.1.el6.i686.rpm kernel-debuginfo-common-x86_64-2.6.32-642.15.1.el6.x86_64.rpm kernel-devel-2.6.32-642.15.1.el6.x86_64.rpm kernel-headers-2.6.32-642.15.1.el6.x86_64.rpm perf-2.6.32-642.15.1.el6.x86_64.rpm perf-debuginfo-2.6.32-642.15.1.el6.i686.rpm perf-debuginfo-2.6.32-642.15.1.el6.x86_64.rpm python-perf-debuginfo-2.6.32-642.15.1.el6.i686.rpm python-perf-debuginfo-2.6.32-642.15.1.el6.x86_64.rpm python-perf-2.6.32-642.15.1.el6.x86_64.rpm i386 kernel-2.6.32-642.15.1.el6.i686.rpm kernel-debug-2.6.32-642.15.1.el6.i686.rpm kernel-debug-debuginfo-2.6.32-642.15.1.el6.i686.rpm kernel-debug-devel-2.6.32-642.15.1.el6.i686.rpm kernel-debuginfo-2.6.32-642.15.1.el6.i686.rpm kernel-debuginfo-common-i686-2.6.32-642.15.1.el6.i686.rpm kernel-devel-2.6.32-642.15.1.el6.i686.rpm kernel-headers-2.6.32-642.15.1.el6.i686.rpm perf-2.6.32-642.15.1.el6.i686.rpm perf-debuginfo-2.6.32-642.15.1.el6.i686.rpm python-perf-debuginfo-2.6.32-642.15.1.el6.i686.rpm python-perf-2.6.32-642.15.1.el6.i686.rpm noarch kernel-abi-whitelists-2.6.32-642.15.1.el6.noarch.rpm kernel-doc-2.6.32-642.15.1.el6.noarch.rpm kernel-firmware-2.6.32-642.15.1.el6.noarch.rpm - Scientific Linux Development Team . Updates to kernel security and bug fixes for Scientific Linux have been released, tackling various moderate vulnerabilities and system bugs.. Kernel Security Fixes, Scientific Linux Updates, Moderate Vulnerability Patches. . LinuxSecurity.com Team
Feb 23, 2017
Scientific Linux
98
security advisorymoderatesecurity issueRed Hat: RHSA-2017:0307-01 Moderate: Kernel Security Update and Fixes
An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: kernel security and bug fix update Advisory ID: RHSA-2017:0307-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2017:0307.html Issue date: 2017-02-23 CVE Names: CVE-2016-6136 CVE-2016-9555 ==================================================================== 1. Summary: An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Desktop (v. 6) - i386, noarch, x86_64 Red Hat Enterprise Linux Desktop Optional (v. 6) - i386, x86_64 Red Hat Enterprise Linux HPC Node (v. 6) - noarch, x86_64 Red Hat Enterprise Linux HPC Node Optional (v. 6) - x86_64 Red Hat Enterprise Linux Server (v. 6) - i386, noarch, ppc64, s390x, x86_64 Red Hat Enterprise Linux Server Optional (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 6) - i386, noarch, x86_64 Red Hat Enterprise Linux Workstation Optional (v. 6) - i386, x86_64 3. Description: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * When creating audit records for parameters to executed children processes, an attacker can convince the Linux kernel audit subsystem can create corrupt records which mayallow an attacker to misrepresent or evade logging of executing commands. (CVE-2016-6136, Moderate) * A flaw was found in the Linux kernel's implementation of the SCTP protocol. A remote attacker could trigger an out-of-bounds read with an offset of up to 64kB potentially causing the system to crash. (CVE-2016-9555, Moderate) Bug Fix(es): * The qlnic driver previously attempted to fetch pending transmission descriptors before all writes were complete, which lead to firmware hangs. With this update, the qlcnic driver has been fixed to complete all writes before the hardware fetches any pending transmission descriptors. As a result, the firmware no longer hangs with the qlcnic driver. (BZ#1403143) * Previously, when a NFS share was mounted, the file-system (FS) cache was incorrectly enabled even when the "-o fsc" option was not used in the mount command. Consequently, the cachefilesd service stored files in the NFS share even when not instructed to by the user. With this update, NFS does not use the FS cache if not instructed by the "-o fsc" option. As a result, NFS no longer enables caching if the "-o fsc" option is not used. (BZ#1399172) * Previously, an NFS client and NFS server got into a NFS4 protocol loop involving a WRITE action and a NFS4ERR_EXPIRED response when the current_fileid counter got to the wraparound point by overflowing the value of 32 bits. This update fixes the NFS server to handle the current_fileid wraparound. As a result, the described NFS4 protocol loop no longer occurs. (BZ#1399174) * Previously, certain configurations of the Hewlett Packard Smart Array (HPSA) devices caused hardware to be set offline incorrectly when the HPSA driver was expected to wait for existing I/O operations to complete. Consequently, a kernel panic occurred. This update prevents the described problem. As a result, the kernel panic no longer occurs. (BZ#1399175) * Previously, memory corruption by copying data into the wrong memory locations sometimes occurred, because the __copy_tofrom_user() functionwas returning incorrect values. This update fixes the __copy_tofrom_user() function so that it no longer returns larger values than the number of bytes it was asked to copy. As a result, memory corruption no longer occursin he described scenario. (BZ#1398185) * Previously, guest virtual machines (VMs) on a Hyper-V server cluster got in some cases rebooted during the graceful node failover test, because the host kept sending heartbeat packets independently of guests responding to them. This update fixes the bug by properly responding to all the heartbeat messages in the queue, even if they are pending. As a result, guest VMs no longer get rebooted under the described circumstances. (BZ#1397739) * When the "punching hole" feature of the fallocate utility was used on an ext4 file system inode with extent depth of 1, the extent tree of the inode sometimes became corrupted. With this update, the underlying source code has been fixed, and extent tree corruption no longer occurs in the described situation. (BZ#1397808) 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. 5. Bugs fixed (https://bugzilla.redhat.com/): 1353533 - CVE-2016-6136 kernel: Race condition vulnerability in execve argv arguments 1397930 - CVE-2016-9555 kernel: Slab out-of-bounds access in sctp_sf_ootb() 6. Package List: Red Hat Enterprise Linux Desktop (v.6): Source: kernel-2.6.32-642.15.1.el6.src.rpm i386: kernel-2.6.32-642.15.1.el6.i686.rpm kernel-debug-2.6.32-642.15.1.el6.i686.rpm kernel-debug-debuginfo-2.6.32-642.15.1.el6.i686.rpm kernel-debug-devel-2.6.32-642.15.1.el6.i686.rpm kernel-debuginfo-2.6.32-642.15.1.el6.i686.rpm kernel-debuginfo-common-i686-2.6.32-642.15.1.el6.i686.rpm kernel-devel-2.6.32-642.15.1.el6.i686.rpm kernel-headers-2.6.32-642.15.1.el6.i686.rpm perf-2.6.32-642.15.1.el6.i686.rpm perf-debuginfo-2.6.32-642.15.1.el6.i686.rpm python-perf-debuginfo-2.6.32-642.15.1.el6.i686.rpm noarch: kernel-abi-whitelists-2.6.32-642.15.1.el6.noarch.rpm kernel-doc-2.6.32-642.15.1.el6.noarch.rpm kernel-firmware-2.6.32-642.15.1.el6.noarch.rpm x86_64: kernel-2.6.32-642.15.1.el6.x86_64.rpm kernel-debug-2.6.32-642.15.1.el6.x86_64.rpm kernel-debug-debuginfo-2.6.32-642.15.1.el6.i686.rpm kernel-debug-debuginfo-2.6.32-642.15.1.el6.x86_64.rpm kernel-debug-devel-2.6.32-642.15.1.el6.i686.rpm kernel-debug-devel-2.6.32-642.15.1.el6.x86_64.rpm kernel-debuginfo-2.6.32-642.15.1.el6.i686.rpm kernel-debuginfo-2.6.32-642.15.1.el6.x86_64.rpm kernel-debuginfo-common-i686-2.6.32-642.15.1.el6.i686.rpm kernel-debuginfo-common-x86_64-2.6.32-642.15.1.el6.x86_64.rpm kernel-devel-2.6.32-642.15.1.el6.x86_64.rpm kernel-headers-2.6.32-642.15.1.el6.x86_64.rpm perf-2.6.32-642.15.1.el6.x86_64.rpm perf-debuginfo-2.6.32-642.15.1.el6.i686.rpm perf-debuginfo-2.6.32-642.15.1.el6.x86_64.rpm python-perf-debuginfo-2.6.32-642.15.1.el6.i686.rpm python-perf-debuginfo-2.6.32-642.15.1.el6.x86_64.rpm Red Hat Enterprise Linux Desktop Optional (v.6): i386: kernel-debug-debuginfo-2.6.32-642.15.1.el6.i686.rpm kernel-debuginfo-2.6.32-642.15.1.el6.i686.rpm kernel-debuginfo-common-i686-2.6.32-642.15.1.el6.i686.rpm perf-debuginfo-2.6.32-642.15.1.el6.i686.rpm python-perf-2.6.32-642.15.1.el6.i686.rpm python-perf-debuginfo-2.6.32-642.15.1.el6.i686.rpm x86_64: kernel-debug-debuginfo-2.6.32-642.15.1.el6.x86_64.rpm kernel-debuginfo-2.6.32-642.15.1.el6.x86_64.rpm kernel-debuginfo-common-x86_64-2.6.32-642.15.1.el6.x86_64.rpm perf-debuginfo-2.6.32-642.15.1.el6.x86_64.rpm python-perf-2.6.32-642.15.1.el6.x86_64.rpm python-perf-debuginfo-2.6.32-642.15.1.el6.x86_64.rpm Red Hat Enterprise Linux HPC Node (v. 6): Source: kernel-2.6.32-642.15.1.el6.src.rpm noarch: kernel-abi-whitelists-2.6.32-642.15.1.el6.noarch.rpm kernel-doc-2.6.32-642.15.1.el6.noarch.rpm kernel-firmware-2.6.32-642.15.1.el6.noarch.rpm x86_64: kernel-2.6.32-642.15.1.el6.x86_64.rpm kernel-debug-2.6.32-642.15.1.el6.x86_64.rpm kernel-debug-debuginfo-2.6.32-642.15.1.el6.i686.rpm kernel-debug-debuginfo-2.6.32-642.15.1.el6.x86_64.rpm kernel-debug-devel-2.6.32-642.15.1.el6.i686.rpm kernel-debug-devel-2.6.32-642.15.1.el6.x86_64.rpm kernel-debuginfo-2.6.32-642.15.1.el6.i686.rpm kernel-debuginfo-2.6.32-642.15.1.el6.x86_64.rpm kernel-debuginfo-common-i686-2.6.32-642.15.1.el6.i686.rpm kernel-debuginfo-common-x86_64-2.6.32-642.15.1.el6.x86_64.rpm kernel-devel-2.6.32-642.15.1.el6.x86_64.rpm kernel-headers-2.6.32-642.15.1.el6.x86_64.rpm perf-2.6.32-642.15.1.el6.x86_64.rpm perf-debuginfo-2.6.32-642.15.1.el6.i686.rpm perf-debuginfo-2.6.32-642.15.1.el6.x86_64.rpm python-perf-debuginfo-2.6.32-642.15.1.el6.i686.rpm python-perf-debuginfo-2.6.32-642.15.1.el6.x86_64.rpm Red Hat Enterprise Linux HPC Node Optional (v.6): x86_64: kernel-debug-debuginfo-2.6.32-642.15.1.el6.x86_64.rpm kernel-debuginfo-2.6.32-642.15.1.el6.x86_64.rpm kernel-debuginfo-common-x86_64-2.6.32-642.15.1.el6.x86_64.rpm perf-debuginfo-2.6.32-642.15.1.el6.x86_64.rpm python-perf-2.6.32-642.15.1.el6.x86_64.rpm python-perf-debuginfo-2.6.32-642.15.1.el6.x86_64.rpm Red Hat Enterprise Linux Server (v.6): Source: kernel-2.6.32-642.15.1.el6.src.rpm i386: kernel-2.6.32-642.15.1.el6.i686.rpm kernel-debug-2.6.32-642.15.1.el6.i686.rpm kernel-debug-debuginfo-2.6.32-642.15.1.el6.i686.rpm kernel-debug-devel-2.6.32-642.15.1.el6.i686.rpm kernel-debuginfo-2.6.32-642.15.1.el6.i686.rpm kernel-debuginfo-common-i686-2.6.32-642.15.1.el6.i686.rpm kernel-devel-2.6.32-642.15.1.el6.i686.rpm kernel-headers-2.6.32-642.15.1.el6.i686.rpm perf-2.6.32-642.15.1.el6.i686.rpm perf-debuginfo-2.6.32-642.15.1.el6.i686.rpm python-perf-debuginfo-2.6.32-642.15.1.el6.i686.rpm noarch: kernel-abi-whitelists-2.6.32-642.15.1.el6.noarch.rpm kernel-doc-2.6.32-642.15.1.el6.noarch.rpm kernel-firmware-2.6.32-642.15.1.el6.noarch.rpm ppc64: kernel-2.6.32-642.15.1.el6.ppc64.rpm kernel-bootwrapper-2.6.32-642.15.1.el6.ppc64.rpm kernel-debug-2.6.32-642.15.1.el6.ppc64.rpm kernel-debug-debuginfo-2.6.32-642.15.1.el6.ppc64.rpm kernel-debug-devel-2.6.32-642.15.1.el6.ppc64.rpm kernel-debuginfo-2.6.32-642.15.1.el6.ppc64.rpm kernel-debuginfo-common-ppc64-2.6.32-642.15.1.el6.ppc64.rpm kernel-devel-2.6.32-642.15.1.el6.ppc64.rpm kernel-headers-2.6.32-642.15.1.el6.ppc64.rpm perf-2.6.32-642.15.1.el6.ppc64.rpm perf-debuginfo-2.6.32-642.15.1.el6.ppc64.rpm python-perf-debuginfo-2.6.32-642.15.1.el6.ppc64.rpm s390x: kernel-2.6.32-642.15.1.el6.s390x.rpm kernel-debug-2.6.32-642.15.1.el6.s390x.rpm kernel-debug-debuginfo-2.6.32-642.15.1.el6.s390x.rpm kernel-debug-devel-2.6.32-642.15.1.el6.s390x.rpm kernel-debuginfo-2.6.32-642.15.1.el6.s390x.rpm kernel-debuginfo-common-s390x-2.6.32-642.15.1.el6.s390x.rpm kernel-devel-2.6.32-642.15.1.el6.s390x.rpm kernel-headers-2.6.32-642.15.1.el6.s390x.rpm kernel-kdump-2.6.32-642.15.1.el6.s390x.rpm kernel-kdump-debuginfo-2.6.32-642.15.1.el6.s390x.rpm kernel-kdump-devel-2.6.32-642.15.1.el6.s390x.rpm perf-2.6.32-642.15.1.el6.s390x.rpm perf-debuginfo-2.6.32-642.15.1.el6.s390x.rpm python-perf-debuginfo-2.6.32-642.15.1.el6.s390x.rpm x86_64: kernel-2.6.32-642.15.1.el6.x86_64.rpm kernel-debug-2.6.32-642.15.1.el6.x86_64.rpm kernel-debug-debuginfo-2.6.32-642.15.1.el6.i686.rpm kernel-debug-debuginfo-2.6.32-642.15.1.el6.x86_64.rpm kernel-debug-devel-2.6.32-642.15.1.el6.i686.rpm kernel-debug-devel-2.6.32-642.15.1.el6.x86_64.rpm kernel-debuginfo-2.6.32-642.15.1.el6.i686.rpm kernel-debuginfo-2.6.32-642.15.1.el6.x86_64.rpm kernel-debuginfo-common-i686-2.6.32-642.15.1.el6.i686.rpm kernel-debuginfo-common-x86_64-2.6.32-642.15.1.el6.x86_64.rpm kernel-devel-2.6.32-642.15.1.el6.x86_64.rpm kernel-headers-2.6.32-642.15.1.el6.x86_64.rpm perf-2.6.32-642.15.1.el6.x86_64.rpm perf-debuginfo-2.6.32-642.15.1.el6.i686.rpm perf-debuginfo-2.6.32-642.15.1.el6.x86_64.rpm python-perf-debuginfo-2.6.32-642.15.1.el6.i686.rpm python-perf-debuginfo-2.6.32-642.15.1.el6.x86_64.rpm Red Hat Enterprise Linux Server Optional (v. 6): i386: kernel-debug-debuginfo-2.6.32-642.15.1.el6.i686.rpm kernel-debuginfo-2.6.32-642.15.1.el6.i686.rpm kernel-debuginfo-common-i686-2.6.32-642.15.1.el6.i686.rpm perf-debuginfo-2.6.32-642.15.1.el6.i686.rpm python-perf-2.6.32-642.15.1.el6.i686.rpm python-perf-debuginfo-2.6.32-642.15.1.el6.i686.rpm ppc64: kernel-debug-debuginfo-2.6.32-642.15.1.el6.ppc64.rpm kernel-debuginfo-2.6.32-642.15.1.el6.ppc64.rpm kernel-debuginfo-common-ppc64-2.6.32-642.15.1.el6.ppc64.rpm perf-debuginfo-2.6.32-642.15.1.el6.ppc64.rpm python-perf-2.6.32-642.15.1.el6.ppc64.rpm python-perf-debuginfo-2.6.32-642.15.1.el6.ppc64.rpm s390x: kernel-debug-debuginfo-2.6.32-642.15.1.el6.s390x.rpm kernel-debuginfo-2.6.32-642.15.1.el6.s390x.rpm kernel-debuginfo-common-s390x-2.6.32-642.15.1.el6.s390x.rpm kernel-kdump-debuginfo-2.6.32-642.15.1.el6.s390x.rpm perf-debuginfo-2.6.32-642.15.1.el6.s390x.rpm python-perf-2.6.32-642.15.1.el6.s390x.rpm python-perf-debuginfo-2.6.32-642.15.1.el6.s390x.rpm x86_64: kernel-debug-debuginfo-2.6.32-642.15.1.el6.x86_64.rpm kernel-debuginfo-2.6.32-642.15.1.el6.x86_64.rpm kernel-debuginfo-common-x86_64-2.6.32-642.15.1.el6.x86_64.rpm perf-debuginfo-2.6.32-642.15.1.el6.x86_64.rpm python-perf-2.6.32-642.15.1.el6.x86_64.rpm python-perf-debuginfo-2.6.32-642.15.1.el6.x86_64.rpm RedHat Enterprise Linux Workstation (v. 6): Source: kernel-2.6.32-642.15.1.el6.src.rpm i386: kernel-2.6.32-642.15.1.el6.i686.rpm kernel-debug-2.6.32-642.15.1.el6.i686.rpm kernel-debug-debuginfo-2.6.32-642.15.1.el6.i686.rpm kernel-debug-devel-2.6.32-642.15.1.el6.i686.rpm kernel-debuginfo-2.6.32-642.15.1.el6.i686.rpm kernel-debuginfo-common-i686-2.6.32-642.15.1.el6.i686.rpm kernel-devel-2.6.32-642.15.1.el6.i686.rpm kernel-headers-2.6.32-642.15.1.el6.i686.rpm perf-2.6.32-642.15.1.el6.i686.rpm perf-debuginfo-2.6.32-642.15.1.el6.i686.rpm python-perf-debuginfo-2.6.32-642.15.1.el6.i686.rpm noarch: kernel-abi-whitelists-2.6.32-642.15.1.el6.noarch.rpm kernel-doc-2.6.32-642.15.1.el6.noarch.rpm kernel-firmware-2.6.32-642.15.1.el6.noarch.rpm x86_64: kernel-2.6.32-642.15.1.el6.x86_64.rpm kernel-debug-2.6.32-642.15.1.el6.x86_64.rpm kernel-debug-debuginfo-2.6.32-642.15.1.el6.i686.rpm kernel-debug-debuginfo-2.6.32-642.15.1.el6.x86_64.rpm kernel-debug-devel-2.6.32-642.15.1.el6.i686.rpm kernel-debug-devel-2.6.32-642.15.1.el6.x86_64.rpm kernel-debuginfo-2.6.32-642.15.1.el6.i686.rpm kernel-debuginfo-2.6.32-642.15.1.el6.x86_64.rpm kernel-debuginfo-common-i686-2.6.32-642.15.1.el6.i686.rpm kernel-debuginfo-common-x86_64-2.6.32-642.15.1.el6.x86_64.rpm kernel-devel-2.6.32-642.15.1.el6.x86_64.rpm kernel-headers-2.6.32-642.15.1.el6.x86_64.rpm perf-2.6.32-642.15.1.el6.x86_64.rpm perf-debuginfo-2.6.32-642.15.1.el6.i686.rpm perf-debuginfo-2.6.32-642.15.1.el6.x86_64.rpm python-perf-debuginfo-2.6.32-642.15.1.el6.i686.rpm python-perf-debuginfo-2.6.32-642.15.1.el6.x86_64.rpm Red Hat Enterprise Linux Workstation Optional (v.6): i386: kernel-debug-debuginfo-2.6.32-642.15.1.el6.i686.rpm kernel-debuginfo-2.6.32-642.15.1.el6.i686.rpm kernel-debuginfo-common-i686-2.6.32-642.15.1.el6.i686.rpm perf-debuginfo-2.6.32-642.15.1.el6.i686.rpm python-perf-2.6.32-642.15.1.el6.i686.rpm python-perf-debuginfo-2.6.32-642.15.1.el6.i686.rpm x86_64: kernel-debug-debuginfo-2.6.32-642.15.1.el6.x86_64.rpm kernel-debuginfo-2.6.32-642.15.1.el6.x86_64.rpm kernel-debuginfo-common-x86_64-2.6.32-642.15.1.el6.x86_64.rpm perf-debuginfo-2.6.32-642.15.1.el6.x86_64.rpm python-perf-2.6.32-642.15.1.el6.x86_64.rpm python-perf-debuginfo-2.6.32-642.15.1.el6.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2016-6136 https://access.redhat.com/security/cve/CVE-2016-9555 https://access.redhat.com/security/updates/classification/#moderate https://access.redhat.com/security/vulnerabilities/2706661 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2017 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iD8DBQFYrx/HXlSAg2UNWIIRApU4AJ9l6szvNPjDAgH1twm0WZQtFSL+eACbBZsL 3UKxmm2CJO6fK4ol4lktDrA=ZuqW -----END PGP SIGNATURE----- -- Enterprise-watch-list mailing list
Feb 23, 2017
Red Hat
172
security advisorydenial of servicecriticalUbuntu 16.04 LTS USN-3084-3 Critical: Kernel Denial Of Service Issues
Several security issues were fixed in the kernel.. =========================================================================Ubuntu Security Notice USN-3084-3 September 19, 2016 linux-raspi2 vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 16.04 LTS Summary: Several security issues were fixed in the kernel. Software Description: - linux-raspi2: Linux kernel for Raspberry Pi 2 Details: Pengfei Wang discovered a race condition in the audit subsystem in the Linux kernel. A local attacker could use this to corrupt audit logs or disrupt system-call auditing. (CVE-2016-6136) It was discovered that the powerpc and powerpc64 hypervisor-mode KVM implementation in the Linux kernel for did not properly maintain state about transactional memory. An unprivileged attacker in a guest could cause a denial of service (CPU lockup) in the host OS. (CVE-2016-5412) Pengfei Wang discovered a race condition in the Chrome OS embedded controller device driver in the Linux kernel. A local attacker could use this to cause a denial of service (system crash). (CVE-2016-6156) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 16.04 LTS: linux-image-4.4.0-1023-raspi2 4.4.0-1023.29 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-3084-1 CVE-2016-5412, CVE-2016-6136, CVE-2016-6156 Package Information: https://launchpad.net/ubuntu/+source/linux-raspi2/4.4.0-1023.29 . Updates resolving linux-raspi2 problems rolled out in Ubuntu 16.04 LTS. Major security flaws mitigated along with guidance on applying the upgrades.. Raspberry Pi, Linux Kernel, Ubuntu 16.04, Security Update, System Upgrade. . Severity: Critical. LinuxSecurity.com Team
Sep 19, 2016
•Critical
Ubuntu
172
security advisorydenial of servicekernel updateUbuntu 12.04 LTS: USN-2313-1 Critical: Kernel Crash Risk
The system could be made to crash under certain conditions.. =========================================================================Ubuntu Security Notice USN-2313-1 August 13, 2014 linux-lts-trusty vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 12.04 LTS Summary: The system could be made to crash under certain conditions. Software Description: - linux-lts-trusty: Linux hardware enablement kernel from Trusty Details: An flaw was discovered in the Linux kernel's audit subsystem when auditing certain syscalls. A local attacker could exploit this flaw to obtain potentially sensitive single-bit values from kernel memory or cause a denial of service (OOPS). Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 12.04 LTS: linux-image-3.13.0-33-generic 3.13.0-33.58~precise1 linux-image-3.13.0-33-generic-lpae 3.13.0-33.58~precise1 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. If you use linux-restricted-modules, you have to update that package as well to get modules which work with the new kernel version. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-server, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-2313-1 CVE-2014-3917 Package Information: https://launchpad.net/ubuntu/+source/linux-lts-trusty/3.13.0-33.58~precise1 . Resolving security issues in Ubuntu 12.04 LTS that lead to kernel instabilities and service interruptions. Apply patches according to officialguidance.. Ubuntu Security Management, Kernel Threats Analysis, Audit Subsystem Issues. . Severity: Critical. LinuxSecurity.com Team
Aug 13, 2014
•Critical
Ubuntu
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!