Stay Secure with the Latest Linux Advisories

security advisoryFedorasyscall

Fedora 23 FEDORA-2015-73cdd43bc0 Critical: Pax-Utils Syscall Enhancements

Changes since 1.0.5: * security: whitelist the getcwd syscall * security: fix build on systems w/out si_syscall * security: whitelist the futex syscall * security: whitelist dup syscalls * security: do not warn when seccomp is disabled in the kernel * security: whitelist fakeroot syscalls * security: add a debug handler for seccomp * security: clean up syscall ifdefs * security: use. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-73cdd43bc0 2015-12-09 18:50:09.116091 -------------------------------------------------------------------------------- Name : pax-utils Product : Fedora 23 Version : 1.1.4 Release : 1.fc23 URL : https://wiki.gentoo.org/wiki/Project:Hardened Summary : PaX aware and related utilities for ELF binaries Description : pax-utils is a small set of various PaX aware and related utilities for ELF binaries. It was written for ELF Q/A on Gentoo systems but can be used on any distro. -------------------------------------------------------------------------------- Update Information: Changes since 1.0.5: * security: whitelist the getcwd syscall * security: fix build on systems w/out si_syscall * security: whitelist the futex syscall * security: whitelist dup syscalls * security: do not warn when seccomp is disabled in the kernel * security: whitelist fakeroot syscalls * security: add a debug handler for seccomp * security: clean up syscall ifdefs * security: use seccomp to lock ourselves down * security: lock down privs a bit via prctl * security: leverage namespaces to restrict the runtime a bit * lddtree.sh: fix interp handling when doing a full listing * lddtree.py: fix glob handling w/ld.so.conf * scanelf: fix memory leak with the -s option -------------------------------------------------------------------------------- References: [ 1 ] Bug #1286232 - pax-utils-1.1.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1286232 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update pax-utils' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/admin/lists/package-announce.lists.fedoraproject.org/ . The recent Fedora Update Announcement for pax-utils highlights critical updates focusing on syscall whitelisting as well as enhancements to runtime efficiency.. Fedora 23 Pax Utils Security Update, ELF Binaries, Security Enhancements. . LinuxSecurity.com Team

Dec 09, 2015 Fedora