Stay Secure with the Latest Linux Advisories

security advisoryFedorainteger overflow

Fedora 24: Security Update for Libnl3 Addressing Integer Overflow Issue

lib: check for integer overflow in nlmsg_reserve() (rh#1440788, rh#1440789, CVE-2017-0553). --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-7a5363b41d 2017-05-04 13:28:25.130390 --------------------------------------------------------------------------------Name : libnl3 Product : Fedora 24 Version : 3.2.28 Release : 5.fc24 URL : http://www.infradead.org/~tgr/libnl/ Summary : Convenience library for kernel netlink sockets Description : This package contains a convenience library to simplify using the Linux kernel's netlink sockets interface for network manipulation --------------------------------------------------------------------------------Update Information: lib: check for integer overflow in nlmsg_reserve() (rh#1440788, rh#1440789, CVE-2017-0553) --------------------------------------------------------------------------------References: [ 1 ] Bug #1440789 - CVE-2017-0553 libnl3: libnl: Integer overflow in nlmsg_reserve() [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1440789 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade libnl3' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. . The recent patch for libnl3 in Fedora 24 fixes a buffer overflow issue in nlmsg_reserve, bolstering overall network safety.. libnl3, integer overflow, networkmanipulation, Fedora 24, security update. . Severity: Critical. LinuxSecurity.com Team

May 04, 2017 •Critical Fedora