SCIENTIFIC-LINUX-ERRATA Archives

June 2017

SCIENTIFIC-LINUX-ERRATA@LISTSERV.FNAL.GOV

Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
From:
Pat Riehecky <[log in to unmask]>
Reply To:
Date:
Mon, 19 Jun 2017 20:44:12 -0000
Content-Type:
text/plain
Parts/Attachments:
text/plain (58 lines)
Synopsis:          Important: kernel security update
Advisory ID:       SLSA-2017:1486-1
Issue Date:        2017-06-19
CVE Numbers:       CVE-2017-1000364
--

Security Fix(es):

* A flaw was found in the way memory was being allocated on the stack for
user space binaries. If heap (or different memory region) and stack memory
regions were adjacent to each other, an attacker could use this flaw to
jump over the stack guard gap, cause controlled memory corruption on
process stack or the adjacent memory region, and thus increase their
privileges on the system. This is a kernel-side mitigation which increases
the stack guard gap size from one page to 1 MiB to make successful
exploitation of this issue more difficult. (CVE-2017-1000364, Important)
--

SL6
  x86_64
    kernel-2.6.32-696.3.2.el6.x86_64.rpm
    kernel-debug-2.6.32-696.3.2.el6.x86_64.rpm
    kernel-debug-debuginfo-2.6.32-696.3.2.el6.i686.rpm
    kernel-debug-debuginfo-2.6.32-696.3.2.el6.x86_64.rpm
    kernel-debug-devel-2.6.32-696.3.2.el6.i686.rpm
    kernel-debug-devel-2.6.32-696.3.2.el6.x86_64.rpm
    kernel-debuginfo-2.6.32-696.3.2.el6.i686.rpm
    kernel-debuginfo-2.6.32-696.3.2.el6.x86_64.rpm
    kernel-debuginfo-common-i686-2.6.32-696.3.2.el6.i686.rpm
    kernel-debuginfo-common-x86_64-2.6.32-696.3.2.el6.x86_64.rpm
    kernel-devel-2.6.32-696.3.2.el6.x86_64.rpm
    kernel-headers-2.6.32-696.3.2.el6.x86_64.rpm
    perf-2.6.32-696.3.2.el6.x86_64.rpm
    perf-debuginfo-2.6.32-696.3.2.el6.i686.rpm
    perf-debuginfo-2.6.32-696.3.2.el6.x86_64.rpm
    python-perf-debuginfo-2.6.32-696.3.2.el6.i686.rpm
    python-perf-debuginfo-2.6.32-696.3.2.el6.x86_64.rpm
    python-perf-2.6.32-696.3.2.el6.x86_64.rpm
  i386
    kernel-2.6.32-696.3.2.el6.i686.rpm
    kernel-debug-2.6.32-696.3.2.el6.i686.rpm
    kernel-debug-debuginfo-2.6.32-696.3.2.el6.i686.rpm
    kernel-debug-devel-2.6.32-696.3.2.el6.i686.rpm
    kernel-debuginfo-2.6.32-696.3.2.el6.i686.rpm
    kernel-debuginfo-common-i686-2.6.32-696.3.2.el6.i686.rpm
    kernel-devel-2.6.32-696.3.2.el6.i686.rpm
    kernel-headers-2.6.32-696.3.2.el6.i686.rpm
    perf-2.6.32-696.3.2.el6.i686.rpm
    perf-debuginfo-2.6.32-696.3.2.el6.i686.rpm
    python-perf-debuginfo-2.6.32-696.3.2.el6.i686.rpm
    python-perf-2.6.32-696.3.2.el6.i686.rpm
  noarch
    kernel-abi-whitelists-2.6.32-696.3.2.el6.noarch.rpm
    kernel-doc-2.6.32-696.3.2.el6.noarch.rpm
    kernel-firmware-2.6.32-696.3.2.el6.noarch.rpm

- Scientific Linux Development Team

ATOM RSS1 RSS2