2016-02-20
ALT-BU-2016-2596-1
Branch p7 update bulletin.
Package kernel-image-std-pae updated to version 3.14.61-alt0.M70P.1 for branch p7 in task 159711.
Closed vulnerabilities
Published: 2016-01-19
BDU:2016-00187
Уязвимость ядра операционной системы Linux, позволяющая нарушителю повысить свои привилегии и выполнить произвольный код на целевой системе
Severity: HIGH (7.8)
Vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References:
Published: 2016-02-08
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2016-0728
The join_session_keyring function in security/keys/process_keys.c in the Linux kernel before 4.4.1 mishandles object references in a certain error case, which allows local users to gain privileges or cause a denial of service (integer overflow and use-after-free) via crafted keyctl commands.
Severity: HIGH (7.8)
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References:
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=23567fd052a9abb6d67fe8e7a9ccdd9800a540f2
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=23567fd052a9abb6d67fe8e7a9ccdd9800a540f2
- FEDORA-2016-5d43766e33
- FEDORA-2016-5d43766e33
- FEDORA-2016-b59fd603be
- FEDORA-2016-b59fd603be
- SUSE-SU-2016:0205
- SUSE-SU-2016:0205
- SUSE-SU-2016:0341
- SUSE-SU-2016:0341
- SUSE-SU-2016:0745
- SUSE-SU-2016:0745
- SUSE-SU-2016:0746
- SUSE-SU-2016:0746
- SUSE-SU-2016:0747
- SUSE-SU-2016:0747
- SUSE-SU-2016:0750
- SUSE-SU-2016:0750
- SUSE-SU-2016:0751
- SUSE-SU-2016:0751
- SUSE-SU-2016:0752
- SUSE-SU-2016:0752
- SUSE-SU-2016:0753
- SUSE-SU-2016:0753
- SUSE-SU-2016:0755
- SUSE-SU-2016:0755
- SUSE-SU-2016:0756
- SUSE-SU-2016:0756
- SUSE-SU-2016:0757
- SUSE-SU-2016:0757
- http://perception-point.io/2016/01/14/analysis-and-exploitation-of-a-linux-kernel-vulnerability-cve-2016-0728/
- http://perception-point.io/2016/01/14/analysis-and-exploitation-of-a-linux-kernel-vulnerability-cve-2016-0728/
- RHSA-2016:0064
- RHSA-2016:0064
- RHSA-2016:0065
- RHSA-2016:0065
- RHSA-2016:0068
- RHSA-2016:0068
- http://source.android.com/security/bulletin/2016-03-01.html
- http://source.android.com/security/bulletin/2016-03-01.html
- DSA-3448
- DSA-3448
- http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.1
- http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.1
- [oss-security] 20160119 Linux kernel: use after free in keyring facility.
- [oss-security] 20160119 Linux kernel: use after free in keyring facility.
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- 81054
- 81054
- 1034701
- 1034701
- USN-2870-1
- USN-2870-1
- USN-2870-2
- USN-2870-2
- USN-2871-1
- USN-2871-1
- USN-2871-2
- USN-2871-2
- USN-2872-1
- USN-2872-1
- USN-2872-2
- USN-2872-2
- USN-2872-3
- USN-2872-3
- USN-2873-1
- USN-2873-1
- https://bto.bluecoat.com/security-advisory/sa112
- https://bto.bluecoat.com/security-advisory/sa112
- https://bugzilla.redhat.com/show_bug.cgi?id=1297475
- https://bugzilla.redhat.com/show_bug.cgi?id=1297475
- https://github.com/torvalds/linux/commit/23567fd052a9abb6d67fe8e7a9ccdd9800a540f2
- https://github.com/torvalds/linux/commit/23567fd052a9abb6d67fe8e7a9ccdd9800a540f2
- HPSBHF03436
- HPSBHF03436
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05130958
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05130958
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380
- https://security.netapp.com/advisory/ntap-20160211-0001/
- https://security.netapp.com/advisory/ntap-20160211-0001/
- 39277
- 39277
Package thunderbird-esr updated to version 38.6.0-alt0.M70P.1 for branch p7 in task 159730.
Closed vulnerabilities
No data currently available.
No data currently available.
No data currently available.
No data currently available.