Branch sisyphus update bulletin.

Package slim updated to version 1.3.6-alt2 for branch sisyphus in task 169385.

Slim не работает без ~/.xinitrc , прошу подправить его конфиг!

Package livecd-net-eth updated to version 0.4.2-alt1 for branch sisyphus in task 169402.

unrealistic DHCP timeout after installation (too short)

Package kernel-image-std-def updated to version 4.4.21-alt1 for branch sisyphus in task 169390.

Published: 2016-01-04

BDU:2017-00894

Уязвимость компонента udp.c ядра операционной системы Linux, позволяющая нарушителю выполнить произвольный код

Severity: CRITICAL (9.8) Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References:

Published: 2016-03-09

BDU:2017-02329

Уязвимость функции xt_alloc_table_info в net/netfilter/x_tables.c ядра операционной системы Linux, позволяющая нарушителю повысить свои привилегии или вызвать отказ в обслуживании

Severity: HIGH (7.8) Vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References:

Published: 2016-03-09

BDU:2017-02330

Severity: HIGH (7.8) Vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References:

Published: 2016-06-27
Modified: 2024-11-21

CVE-2016-0758

Integer overflow in lib/asn1_decoder.c in the Linux kernel before 4.6 allows local users to gain privileges via crafted ASN.1 data.

Severity: HIGH (7.8) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References:

Published: 2017-04-04
Modified: 2025-01-03

CVE-2016-10229

udp.c in the Linux kernel before 4.5 allows remote attackers to execute arbitrary code via UDP traffic that triggers an unsafe second checksum calculation during execution of a recv system call with the MSG_PEEK flag.

Severity: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References:

Published: 2016-04-27
Modified: 2024-11-21

CVE-2016-3135

Integer overflow in the xt_alloc_table_info function in net/netfilter/x_tables.c in the Linux kernel through 4.5.2 on 32-bit platforms allows local users to gain privileges or cause a denial of service (heap memory corruption) via an IPT_SO_SET_REPLACE setsockopt call.

Severity: HIGH (7.8) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References:

Version: 2.1.0

Branch sisyphus update on 2016-09-16

ALT-BU-2016-2990-1

ALT-PU-2016-1972-1

Closed bugs

Bug #32389

ALT-PU-2016-1974-1

Closed bugs

Bug #32397

ALT-PU-2016-1975-1

Closed vulnerabilities

BDU:2017-00894

BDU:2017-02329

BDU:2017-02330

CVE-2016-0758

CVE-2016-10229

CVE-2016-3135