Branch p8 update bulletin.

Package mate-panel updated to version 1.12.2-alt1_1.M80P.3 for branch p8 in task 187650.

После перезагрузки >1 панели на одном крае вызывает зависание mate-panel

Package kernel-image-un-def updated to version 4.9.46-alt0.M80P.1 for branch p8 in task 187636.

Published: 2017-11-29
Modified: 2024-11-21

CVE-2017-17052

The mm_init function in kernel/fork.c in the Linux kernel before 4.12.10 does not clear the ->exe_file member of a new process's mm_struct, allowing a local attacker to achieve a use-after-free or possibly have unspecified other impact by running a specially crafted program.

Severity: HIGH (7.8) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References:

Published: 2017-11-29
Modified: 2024-11-21

CVE-2017-17053

The init_new_context function in arch/x86/include/asm/mmu_context.h in the Linux kernel before 4.12.10 does not correctly handle errors from LDT table allocation when forking a new process, allowing a local attacker to achieve a use-after-free or possibly have unspecified other impact by running a specially crafted program. This vulnerability only affected kernels built with CONFIG_MODIFY_LDT_SYSCALL=y.

Severity: HIGH (7.0) Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

References:

Version: 2.1.0

Branch p8 update on 2017-09-01

ALT-BU-2017-3329-1

ALT-PU-2017-2134-1

Closed bugs

Bug #33751

ALT-PU-2017-2135-1

Closed vulnerabilities

CVE-2017-17052

CVE-2017-17053