ALT-BU-2017-3547-2

Branch sisyphus update bulletin.

Package freeipa updated to version 4.6.1-alt1.S1 for branch sisyphus in task 194779.

FreeIPA might display user data improperly via vectors involving non-printable characters.

Severity: MEDIUM (5.0)Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

Severity: HIGH (7.5)Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

References:

Package kernel-image-std-def updated to version 4.9.67-alt1 for branch sisyphus in task 195878.

Уязвимость функции dccp_disconnect (net/dccp/proto.c) ядра операционной системы Linux, позволяющая нарушителю выполнить произвольный код

Severity: HIGH (7.8)Vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity: MEDIUM (6.8)Vector: AV:L/AC:L/Au:S/C:C/I:C/A:C

References:

CVE-2017-8824

The dccp_disconnect function in net/dccp/proto.c in the Linux kernel through 4.14.3 allows local users to gain privileges or cause a denial of service (use-after-free) via an AF_UNSPEC connect system call during the DCCP_LISTEN state.

Severity: HIGH (7.2)Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Severity: HIGH (7.8)Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References:

Package kernel-image-std-pae updated to version 4.4.104-alt1 for branch sisyphus in task 195880.

Severity: HIGH (7.8)Vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity: MEDIUM (6.8)Vector: AV:L/AC:L/Au:S/C:C/I:C/A:C

References:

CVE-2017-8824

Severity: HIGH (7.2)Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Severity: HIGH (7.8)Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References:

Version: 2.1.2

Branch sisyphus update on 2017-12-07

ALT-BU-2017-3547-2

ALT-PU-2017-2751-1

Closed vulnerabilities

CVE-2015-5179

ALT-PU-2017-2752-2

Closed vulnerabilities

BDU:2021-04144

CVE-2017-8824

ALT-PU-2017-2753-1

Closed vulnerabilities

BDU:2021-04144

CVE-2017-8824