Print

Print


Synopsis:          Important: kernel security update
Advisory ID:       SLSA-2017:1484-1
Issue Date:        2017-06-19
CVE Numbers:       CVE-2017-1000364
--

Security Fix(es):

* A flaw was found in the way memory was being allocated on the stack for
user space binaries. If heap (or different memory region) and stack memory
regions were adjacent to each other, an attacker could use this flaw to
jump over the stack guard gap, cause controlled memory corruption on
process stack or the adjacent memory region, and thus increase their
privileges on the system. This is a kernel-side mitigation which increases
the stack guard gap size from one page to 1 MiB to make successful
exploitation of this issue more difficult. (CVE-2017-1000364, Important)
--

SL7
  x86_64
    kernel-debug-debuginfo-3.10.0-514.21.2.el7.x86_64.rpm
    kernel-debuginfo-common-x86_64-3.10.0-514.21.2.el7.x86_64.rpm
    kernel-tools-debuginfo-3.10.0-514.21.2.el7.x86_64.rpm
    python-perf-debuginfo-3.10.0-514.21.2.el7.x86_64.rpm
    perf-debuginfo-3.10.0-514.21.2.el7.x86_64.rpm
    kernel-3.10.0-514.21.2.el7.x86_64.rpm
    kernel-debug-3.10.0-514.21.2.el7.x86_64.rpm
    kernel-debug-devel-3.10.0-514.21.2.el7.x86_64.rpm
    kernel-debuginfo-3.10.0-514.21.2.el7.x86_64.rpm
    kernel-devel-3.10.0-514.21.2.el7.x86_64.rpm
    kernel-headers-3.10.0-514.21.2.el7.x86_64.rpm
    kernel-tools-3.10.0-514.21.2.el7.x86_64.rpm
    kernel-tools-libs-3.10.0-514.21.2.el7.x86_64.rpm
    perf-3.10.0-514.21.2.el7.x86_64.rpm
    python-perf-3.10.0-514.21.2.el7.x86_64.rpm
    kernel-tools-libs-devel-3.10.0-514.21.2.el7.x86_64.rpm
  noarch
    kernel-abi-whitelists-3.10.0-514.21.2.el7.noarch.rpm
    kernel-doc-3.10.0-514.21.2.el7.noarch.rpm

- Scientific Linux Development Team