Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
openSUSE:Leap:42.1:Update
patchinfo.6714
_patchinfo
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File _patchinfo of Package patchinfo.6714
<patchinfo incident="6714"> <issue id="1012829" tracker="bnc">Backport fixes to SLE12 SP2</issue> <issue id="1012876" tracker="bnc">kernel: backport fixes to Leap 42.1</issue> <issue id="1028415" tracker="bnc">VUL-0: CVE-2016-10200: kernel-source: l2tp: fix racy SOCK_ZAPPED flag check in l2tp_ip{,6}_bind()</issue> <issue id="1030213" tracker="bnc">VUL-0: CVE-2017-7187: kernel-source: The sg_ioctl function in drivers/scsi/sg.c in the Linux kernel through 4.10.4allows local users to ...</issue> <issue id="1031003" tracker="bnc">VUL-0: CVE-2017-2671: kernel: crash in AF_LLC/ping</issue> <issue id="1031052" tracker="bnc">VUL-0: CVE-2017-7261: kernel-source: drm/vmwgfx: check that number of mip levels is above zero</issue> <issue id="1031440" tracker="bnc">VUL-0: CVE-2017-7294: kernel-source: The vmw_surface_define_ioctl function indrivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel...</issue> <issue id="1031579" tracker="bnc">VUL-0: CVE-2017-7308: kernel-source: The packet_set_ring function in net/packet/af_packet.c in the Linux kernelthrough 4.10.6 does not p...</issue> <issue id="1032435" tracker="bnc">VUL-1: CVE-2016-10318: kernel-source: A missing authorization check in the fscrypt_process_policy function infs/crypto/policy.c in the ex...</issue> <issue id="1033336" tracker="bnc">VUL-0: CVE-2017-7616: kernel-source: Incorrect error handling in the set_mempolicy and mbind compat syscalls in mm/mempolicy.c</issue> <issue id="1033340" tracker="bnc">VUL-0: CVE-2017-7618: kernel-source: denial of service by triggering EBUSY on a full queue (crypto/ahash.c)</issue> <issue id="1033518" tracker="bnc">ata: ahci_xgene: free structure returned by acpi_get_object_info()</issue> <issue id="1034670" tracker="bnc">VUL-0: CVE-2017-7645: kernel-source: The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernelthrough 4.10.11 allows remote attac...</issue> <issue id="930399" tracker="bnc">Soft lockup: route replace leaves out hops and duplicate gateway entries in the routing table; attempt to delete it causes lockup</issue> <issue id="970083" tracker="bnc">netfilter LOG rule handling in net_ns broken in SLES 12</issue> <issue id="2017-7618" tracker="cve" /> <issue id="2016-10318" tracker="cve" /> <issue id="2017-7616" tracker="cve" /> <issue id="2017-7308" tracker="cve" /> <issue id="2017-2671" tracker="cve" /> <issue id="2017-7294" tracker="cve" /> <issue id="2017-7261" tracker="cve" /> <issue id="2017-7187" tracker="cve" /> <category>security</category> <rating>important</rating> <packager>tiwai</packager> <reboot_needed/> <description> The openSUSE Leap 42.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-7618: crypto/ahash.c in the Linux kernel allowed attackers to cause a denial of service (API operation calling its own callback, and infinite recursion) by triggering EBUSY on a full queue (bnc#1033340). - CVE-2016-10318: A missing authorization check in the fscrypt_process_policy function in fs/crypto/policy.c in the ext4 and f2fs filesystem encryption support in the Linux kernel allowed a user to assign an encryption policy to a directory owned by a different user, potentially creating a denial of service (bnc#1032435). - CVE-2017-7616: Incorrect error handling in the set_mempolicy and mbind compat syscalls in mm/mempolicy.c in the Linux kernel allowed local users to obtain sensitive information from uninitialized stack data by triggering failure of a certain bitmap operation (bnc#1033336). - CVE-2017-7308: The packet_set_ring function in net/packet/af_packet.c in the Linux kernel did not properly validate certain block-size data, which allowed local users to cause a denial of service (overflow) or possibly have unspecified other impact via crafted system calls (bnc#1031579). - CVE-2017-2671: The ping_unhash function in net/ipv4/ping.c in the Linux kernel is too late in obtaining a certain lock and consequently cannot ensure that disconnect function calls are safe, which allowed local users to cause a denial of service (panic) by leveraging access to the protocol value of IPPROTO_ICMP in a socket system call (bnc#1031003). - CVE-2017-7294: The vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel did not validate addition of certain levels data, which allowed local users to trigger an integer overflow and out-of-bounds write, and cause a denial of service (system hang or crash) or possibly gain privileges, via a crafted ioctl call for a /dev/dri/renderD* device (bnc#1031440). - CVE-2017-7261: The vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel did not check for a zero value of certain levels data, which allowed local users to cause a denial of service (ZERO_SIZE_PTR dereference, and GPF and possibly panic) via a crafted ioctl call for a /dev/dri/renderD* device (bnc#1031052). - CVE-2017-7187: The sg_ioctl function in drivers/scsi/sg.c in the Linux kernel allowed local users to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact via a large command size in an SG_NEXT_CMD_LEN ioctl call, leading to out-of-bounds write access in the sg_write function (bnc#1030213). The following non-security bugs were fixed: - ata: ahci_xgene: free structure returned by acpi_get_object_info() (bsc#1033518). - doc/README.SUSE: update links to KMP manual - ext4: do not perform data journaling when data is encrypted (bsc#1012876). - ext4: fix use-after-iput when fscrypt contexts are inconsistent (bsc#1012829). - ext4: mark inode dirty after converting inline directory (bsc#1012876). - ext4: reject inodes with negative size (bsc#1012876). - fs, seqfile: always allow oom killer (bsc#1012876). - ipv6: make ECMP route replacement less greedy (bsc#930399). - l2tp: hold tunnel socket when handling control frames in l2tp_ip and l2tp_ip6 (bsc#1028415). - mm: filemap: do not plant shadow entries without radix tree node (bsc#1012876). - netfilter: allow logging from non-init namespaces (bsc#970083). - nfsd4: minor NFSv2/v3 write decoding cleanup (bsc#1034670 CVE#2017-7645). - nfsd: check for oversized NFSv2/v3 arguments (bsc#1034670 CVE#2017-7645). - nfsd: stricter decoding of write-like NFSv2/v3 ops (bsc#1034670 CVE#2017-7645). </description> <summary>Security update for the Linux Kernel</summary> </patchinfo>
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor