You are here
Home > Preporuke > Sigurnosni nedostatak Live Patching servisa

Sigurnosni nedostatak Live Patching servisa

  • Detalji os-a: WN7
  • Važnost: IMP
  • Operativni sustavi: L
  • Kategorije: LSU

SUSE Security Update: Security update for Linux Kernel Live Patch 8 for SLE 12 SP1

______________________________________________________________________________

 

Announcement ID:    SUSE-SU-2017:2438-2

Rating:             important

References:         #1052311 #1052368 

Cross-References:   CVE-2017-1000112

Affected Products:

                    SUSE Linux Enterprise Server for SAP 12-SP1

______________________________________________________________________________

 

   An update that solves one vulnerability and has one errata

   is now available.

 

Description:

 

   This update for the Linux Kernel 3.12.62-60_64_8 fixes several issues.

 

   The following security bugs were fixed:

 

   - CVE-2017-1000112: Prevent a race condition in net-packet code that could

     have been exploited by unprivileged users to gain root access

     (bsc#1052368).

 

 

Patch Instructions:

 

   To install this SUSE Security Update use YaST online_update.

   Alternatively you can run the command listed for your product:

 

   - SUSE Linux Enterprise Server for SAP 12-SP1:

 

      zypper in -t patch SUSE-SLE-SAP-12-SP1-2017-1504=1

 

   To bring your system up-to-date, use “zypper patch”.

 

 

Package List:

 

   - SUSE Linux Enterprise Server for SAP 12-SP1 (x86_64):

 

      kgraft-patch-3_12_62-60_64_8-default-11-2.1

      kgraft-patch-3_12_62-60_64_8-xen-11-2.1

 

 

References:

 

   https://www.suse.com/security/cve/CVE-2017-1000112.html

   https://bugzilla.suse.com/1052311

   https://bugzilla.suse.com/1052368

 

– 

To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@opensuse.org

For additional commands, e-mail: opensuse-security-announce+help@opensuse.org

 

 

SUSE Security Update: Security update for Linux Kernel Live Patch 8 for SLE 12 SP1
______________________________________________________________________________

Announcement ID: SUSE-SU-2017:2438-1
Rating: important
References: #1052311 #1052368
Cross-References: CVE-2017-1000112
Affected Products:
SUSE Linux Enterprise Server 12-SP1-LTSS
______________________________________________________________________________

An update that solves one vulnerability and has one errata
is now available.

Description:

This update for the Linux Kernel 3.12.62-60_64_8 fixes several issues.

The following security bugs were fixed:

– CVE-2017-1000112: Prevent a race condition in net-packet code that could
have been exploited by unprivileged users to gain root access
(bsc#1052368).

Patch Instructions:

To install this SUSE Security Update use YaST online_update.
Alternatively you can run the command listed for your product:

– SUSE Linux Enterprise Server 12-SP1-LTSS:

zypper in -t patch SUSE-SLE-SERVER-12-SP1-2017-1504=1

To bring your system up-to-date, use “zypper patch”.

Package List:

– SUSE Linux Enterprise Server 12-SP1-LTSS (x86_64):

kgraft-patch-3_12_62-60_64_8-default-11-2.1
kgraft-patch-3_12_62-60_64_8-xen-11-2.1

References:

https://www.suse.com/security/cve/CVE-2017-1000112.html
https://bugzilla.suse.com/1052311
https://bugzilla.suse.com/1052368


To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@opensuse.org
For additional commands, e-mail: opensuse-security-announce+help@opensuse.org
 

 

SUSE Security Update: Security update for Linux Kernel Live Patch 9 for SLE 12 SP1

______________________________________________________________________________

 

Announcement ID:    SUSE-SU-2017:2443-1

Rating:             important

References:         #1052311 #1052368 

Cross-References:   CVE-2017-1000112

Affected Products:

                    SUSE Linux Enterprise Server for SAP 12-SP1

                    SUSE Linux Enterprise Server 12-SP1-LTSS

______________________________________________________________________________

 

   An update that solves one vulnerability and has one errata

   is now available.

 

Description:

 

   This update for the Linux Kernel 3.12.67-60_64_18 fixes several issues.

 

   The following security bugs were fixed:

 

   - CVE-2017-1000112: Prevent a race condition in net-packet code that could

     have been exploited by unprivileged users to gain root access

     (bsc#1052368).

 

 

Patch Instructions:

 

   To install this SUSE Security Update use YaST online_update.

   Alternatively you can run the command listed for your product:

 

   - SUSE Linux Enterprise Server for SAP 12-SP1:

 

      zypper in -t patch SUSE-SLE-SAP-12-SP1-2017-1511=1

 

   - SUSE Linux Enterprise Server 12-SP1-LTSS:

 

      zypper in -t patch SUSE-SLE-SERVER-12-SP1-2017-1511=1

 

   To bring your system up-to-date, use “zypper patch”.

 

 

Package List:

 

   - SUSE Linux Enterprise Server for SAP 12-SP1 (x86_64):

 

      kgraft-patch-3_12_67-60_64_18-default-10-2.1

      kgraft-patch-3_12_67-60_64_18-xen-10-2.1

 

   - SUSE Linux Enterprise Server 12-SP1-LTSS (x86_64):

 

      kgraft-patch-3_12_67-60_64_18-default-10-2.1

      kgraft-patch-3_12_67-60_64_18-xen-10-2.1

 

 

References:

 

   https://www.suse.com/security/cve/CVE-2017-1000112.html

   https://bugzilla.suse.com/1052311

   https://bugzilla.suse.com/1052368

 

– 

To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@opensuse.org

For additional commands, e-mail: opensuse-security-announce+help@opensuse.org

 

SUSE Security Update: Security update for Linux Kernel Live Patch 10 for SLE 12 SP1
______________________________________________________________________________

Announcement ID: SUSE-SU-2017:2424-1
Rating: important
References: #1052311 #1052368
Cross-References: CVE-2017-1000112
Affected Products:
SUSE Linux Enterprise Server for SAP 12-SP1
SUSE Linux Enterprise Server 12-SP1-LTSS
______________________________________________________________________________

An update that solves one vulnerability and has one errata
is now available.

Description:

This update for the Linux Kernel 3.12.67-60_64_21 fixes several issues.

The following security bugs were fixed:

– CVE-2017-1000112: Prevent a race condition in net-packet code that could
have been exploited by unprivileged users to gain root access
(bsc#1052368).

Patch Instructions:

To install this SUSE Security Update use YaST online_update.
Alternatively you can run the command listed for your product:

– SUSE Linux Enterprise Server for SAP 12-SP1:

zypper in -t patch SUSE-SLE-SAP-12-SP1-2017-1501=1

– SUSE Linux Enterprise Server 12-SP1-LTSS:

zypper in -t patch SUSE-SLE-SERVER-12-SP1-2017-1501=1

To bring your system up-to-date, use “zypper patch”.

Package List:

– SUSE Linux Enterprise Server for SAP 12-SP1 (x86_64):

kgraft-patch-3_12_67-60_64_21-default-9-2.2
kgraft-patch-3_12_67-60_64_21-xen-9-2.2

– SUSE Linux Enterprise Server 12-SP1-LTSS (x86_64):

kgraft-patch-3_12_67-60_64_21-default-9-2.2
kgraft-patch-3_12_67-60_64_21-xen-9-2.2

References:

https://www.suse.com/security/cve/CVE-2017-1000112.html
https://bugzilla.suse.com/1052311
https://bugzilla.suse.com/1052368


To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@opensuse.org
For additional commands, e-mail: opensuse-security-announce+help@opensuse.org

SUSE Security Update: Security update for Linux Kernel Live Patch 11 for SLE 12 SP1
______________________________________________________________________________

Announcement ID: SUSE-SU-2017:2423-1
Rating: important
References: #1052311 #1052368
Cross-References: CVE-2017-1000112
Affected Products:
SUSE Linux Enterprise Server for SAP 12-SP1
SUSE Linux Enterprise Server 12-SP1-LTSS
______________________________________________________________________________

An update that solves one vulnerability and has one errata
is now available.

Description:

This update for the Linux Kernel 3.12.67-60_64_24 fixes several issues.

The following security bugs were fixed:

– CVE-2017-1000112: Prevent a race condition in net-packet code that could
have been exploited by unprivileged users to gain root access
(bsc#1052368).

Patch Instructions:

To install this SUSE Security Update use YaST online_update.
Alternatively you can run the command listed for your product:

– SUSE Linux Enterprise Server for SAP 12-SP1:

zypper in -t patch SUSE-SLE-SAP-12-SP1-2017-1502=1

– SUSE Linux Enterprise Server 12-SP1-LTSS:

zypper in -t patch SUSE-SLE-SERVER-12-SP1-2017-1502=1

To bring your system up-to-date, use “zypper patch”.

Package List:

– SUSE Linux Enterprise Server for SAP 12-SP1 (x86_64):

kgraft-patch-3_12_67-60_64_24-default-8-2.1
kgraft-patch-3_12_67-60_64_24-xen-8-2.1

– SUSE Linux Enterprise Server 12-SP1-LTSS (x86_64):

kgraft-patch-3_12_67-60_64_24-default-8-2.1
kgraft-patch-3_12_67-60_64_24-xen-8-2.1

References:

https://www.suse.com/security/cve/CVE-2017-1000112.html
https://bugzilla.suse.com/1052311
https://bugzilla.suse.com/1052368


To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@opensuse.org
For additional commands, e-mail: opensuse-security-announce+help@opensuse.org

SUSE Security Update: Security update for Linux Kernel Live Patch 12 for SLE 12 SP1
______________________________________________________________________________

Announcement ID: SUSE-SU-2017:2437-1
Rating: important
References: #1052311 #1052368
Cross-References: CVE-2017-1000112
Affected Products:
SUSE Linux Enterprise Server for SAP 12-SP1
SUSE Linux Enterprise Server 12-SP1-LTSS
______________________________________________________________________________

An update that solves one vulnerability and has one errata
is now available.

Description:

This update for the Linux Kernel 3.12.69-60_64_29 fixes several issues.

The following security bugs were fixed:

– CVE-2017-1000112: Prevent a race condition in net-packet code that could
have been exploited by unprivileged users to gain root access
(bsc#1052368).

Patch Instructions:

To install this SUSE Security Update use YaST online_update.
Alternatively you can run the command listed for your product:

– SUSE Linux Enterprise Server for SAP 12-SP1:

zypper in -t patch SUSE-SLE-SAP-12-SP1-2017-1505=1

– SUSE Linux Enterprise Server 12-SP1-LTSS:

zypper in -t patch SUSE-SLE-SERVER-12-SP1-2017-1505=1

To bring your system up-to-date, use “zypper patch”.

Package List:

– SUSE Linux Enterprise Server for SAP 12-SP1 (x86_64):

kgraft-patch-3_12_69-60_64_29-default-7-2.1
kgraft-patch-3_12_69-60_64_29-xen-7-2.1

– SUSE Linux Enterprise Server 12-SP1-LTSS (x86_64):

kgraft-patch-3_12_69-60_64_29-default-7-2.1
kgraft-patch-3_12_69-60_64_29-xen-7-2.1

References:

https://www.suse.com/security/cve/CVE-2017-1000112.html
https://bugzilla.suse.com/1052311
https://bugzilla.suse.com/1052368


To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@opensuse.org
For additional commands, e-mail: opensuse-security-announce+help@opensuse.org

SUSE Security Update: Security update for Linux Kernel Live Patch 13 for SLE 12 SP1
______________________________________________________________________________

Announcement ID: SUSE-SU-2017:2440-1
Rating: important
References: #1052311 #1052368
Cross-References: CVE-2017-1000112
Affected Products:
SUSE Linux Enterprise Server for SAP 12-SP1
SUSE Linux Enterprise Server 12-SP1-LTSS
______________________________________________________________________________

An update that solves one vulnerability and has one errata
is now available.

Description:

This update for the Linux Kernel 3.12.69-60_64_32 fixes several issues.

The following security bugs were fixed:

– CVE-2017-1000112: Prevent a race condition in net-packet code that could
have been exploited by unprivileged users to gain root access
(bsc#1052368).

Patch Instructions:

To install this SUSE Security Update use YaST online_update.
Alternatively you can run the command listed for your product:

– SUSE Linux Enterprise Server for SAP 12-SP1:

zypper in -t patch SUSE-SLE-SAP-12-SP1-2017-1506=1

– SUSE Linux Enterprise Server 12-SP1-LTSS:

zypper in -t patch SUSE-SLE-SERVER-12-SP1-2017-1506=1

To bring your system up-to-date, use “zypper patch”.

Package List:

– SUSE Linux Enterprise Server for SAP 12-SP1 (x86_64):

kgraft-patch-3_12_69-60_64_32-default-6-2.1
kgraft-patch-3_12_69-60_64_32-xen-6-2.1

– SUSE Linux Enterprise Server 12-SP1-LTSS (x86_64):

kgraft-patch-3_12_69-60_64_32-default-6-2.1
kgraft-patch-3_12_69-60_64_32-xen-6-2.1

References:

https://www.suse.com/security/cve/CVE-2017-1000112.html
https://bugzilla.suse.com/1052311
https://bugzilla.suse.com/1052368


To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@opensuse.org
For additional commands, e-mail: opensuse-security-announce+help@opensuse.org
 

 

SUSE Security Update: Security update for Linux Kernel Live Patch 14 for SLE 12 SP1

______________________________________________________________________________

 

Announcement ID:    SUSE-SU-2017:2442-1

Rating:             important

References:         #1052311 #1052368 

Cross-References:   CVE-2017-1000112

Affected Products:

                    SUSE Linux Enterprise Server for SAP 12-SP1

                    SUSE Linux Enterprise Server 12-SP1-LTSS

______________________________________________________________________________

 

   An update that solves one vulnerability and has one errata

   is now available.

 

Description:

 

   This update for the Linux Kernel 3.12.69-60_64_35 fixes several issues.

 

   The following security bugs were fixed:

 

   - CVE-2017-1000112: Prevent a race condition in net-packet code that could

     have been exploited by unprivileged users to gain root access

     (bsc#1052368).

 

 

Patch Instructions:

 

   To install this SUSE Security Update use YaST online_update.

   Alternatively you can run the command listed for your product:

 

   - SUSE Linux Enterprise Server for SAP 12-SP1:

 

      zypper in -t patch SUSE-SLE-SAP-12-SP1-2017-1512=1

 

   - SUSE Linux Enterprise Server 12-SP1-LTSS:

 

      zypper in -t patch SUSE-SLE-SERVER-12-SP1-2017-1512=1

 

   To bring your system up-to-date, use “zypper patch”.

 

 

Package List:

 

   - SUSE Linux Enterprise Server for SAP 12-SP1 (x86_64):

 

      kgraft-patch-3_12_69-60_64_35-default-5-2.1

      kgraft-patch-3_12_69-60_64_35-xen-5-2.1

 

   - SUSE Linux Enterprise Server 12-SP1-LTSS (x86_64):

 

      kgraft-patch-3_12_69-60_64_35-default-5-2.1

      kgraft-patch-3_12_69-60_64_35-xen-5-2.1

 

 

References:

 

   https://www.suse.com/security/cve/CVE-2017-1000112.html

   https://bugzilla.suse.com/1052311

   https://bugzilla.suse.com/1052368

 

– 

To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@opensuse.org

For additional commands, e-mail: opensuse-security-announce+help@opensuse.org

 

SUSE Security Update: Security update for Linux Kernel Live Patch 15 for SLE 12 SP1
______________________________________________________________________________

Announcement ID: SUSE-SU-2017:2436-1
Rating: important
References: #1052311 #1052368
Cross-References: CVE-2017-1000112
Affected Products:
SUSE Linux Enterprise Server for SAP 12-SP1
SUSE Linux Enterprise Server 12-SP1-LTSS
______________________________________________________________________________

An update that solves one vulnerability and has one errata
is now available.

Description:

This update for the Linux Kernel 3.12.74-60_64_40 fixes several issues.

The following security bugs were fixed:

– CVE-2017-1000112: Prevent a race condition in net-packet code that could
have been exploited by unprivileged users to gain root access
(bsc#1052368).

Patch Instructions:

To install this SUSE Security Update use YaST online_update.
Alternatively you can run the command listed for your product:

– SUSE Linux Enterprise Server for SAP 12-SP1:

zypper in -t patch SUSE-SLE-SAP-12-SP1-2017-1507=1

– SUSE Linux Enterprise Server 12-SP1-LTSS:

zypper in -t patch SUSE-SLE-SERVER-12-SP1-2017-1507=1

To bring your system up-to-date, use “zypper patch”.

Package List:

– SUSE Linux Enterprise Server for SAP 12-SP1 (x86_64):

kgraft-patch-3_12_74-60_64_40-default-4-2.1
kgraft-patch-3_12_74-60_64_40-xen-4-2.1

– SUSE Linux Enterprise Server 12-SP1-LTSS (x86_64):

kgraft-patch-3_12_74-60_64_40-default-4-2.1
kgraft-patch-3_12_74-60_64_40-xen-4-2.1

References:

https://www.suse.com/security/cve/CVE-2017-1000112.html
https://bugzilla.suse.com/1052311
https://bugzilla.suse.com/1052368


To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@opensuse.org
For additional commands, e-mail: opensuse-security-announce+help@opensuse.org

SUSE Security Update: Security update for Linux Kernel Live Patch 16 for SLE 12 SP1
______________________________________________________________________________

Announcement ID: SUSE-SU-2017:2439-1
Rating: important
References: #1052311 #1052368
Cross-References: CVE-2017-1000112
Affected Products:
SUSE Linux Enterprise Server for SAP 12-SP1
SUSE Linux Enterprise Server 12-SP1-LTSS
______________________________________________________________________________

An update that solves one vulnerability and has one errata
is now available.

Description:

This update for the Linux Kernel 3.12.74-60_64_45 fixes several issues.

The following security bugs were fixed:

– CVE-2017-1000112: Prevent a race condition in net-packet code that could
have been exploited by unprivileged users to gain root access
(bsc#1052368).

Patch Instructions:

To install this SUSE Security Update use YaST online_update.
Alternatively you can run the command listed for your product:

– SUSE Linux Enterprise Server for SAP 12-SP1:

zypper in -t patch SUSE-SLE-SAP-12-SP1-2017-1508=1

– SUSE Linux Enterprise Server 12-SP1-LTSS:

zypper in -t patch SUSE-SLE-SERVER-12-SP1-2017-1508=1

To bring your system up-to-date, use “zypper patch”.

Package List:

– SUSE Linux Enterprise Server for SAP 12-SP1 (x86_64):

kgraft-patch-3_12_74-60_64_45-default-4-2.1
kgraft-patch-3_12_74-60_64_45-xen-4-2.1

– SUSE Linux Enterprise Server 12-SP1-LTSS (x86_64):

kgraft-patch-3_12_74-60_64_45-default-4-2.1
kgraft-patch-3_12_74-60_64_45-xen-4-2.1

References:

https://www.suse.com/security/cve/CVE-2017-1000112.html
https://bugzilla.suse.com/1052311
https://bugzilla.suse.com/1052368


To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@opensuse.org
For additional commands, e-mail: opensuse-security-announce+help@opensuse.org
 

 

SUSE Security Update: Security update for Linux Kernel Live Patch 16 for SLE 12

______________________________________________________________________________

 

Announcement ID:    SUSE-SU-2017:2509-1

Rating:             important

References:         #1052311 #1052368 

Cross-References:   CVE-2017-1000112

Affected Products:

                    SUSE Linux Enterprise Server 12-LTSS

______________________________________________________________________________

 

   An update that solves one vulnerability and has one errata

   is now available.

 

Description:

 

   This update for the Linux Kernel 3.12.60-52_57 fixes several issues.

 

   The following security bugs were fixed:

 

   - CVE-2017-1000112: Prevent a race condition in net-packet code that could

     have been exploited by unprivileged users to gain root access

     (bsc#1052368).

 

 

Patch Instructions:

 

   To install this SUSE Security Update use YaST online_update.

   Alternatively you can run the command listed for your product:

 

   - SUSE Linux Enterprise Server 12-LTSS:

 

      zypper in -t patch SUSE-SLE-SERVER-12-2017-1551=1

 

   To bring your system up-to-date, use “zypper patch”.

 

 

Package List:

 

   - SUSE Linux Enterprise Server 12-LTSS (x86_64):

 

      kgraft-patch-3_12_60-52_57-default-9-2.2

      kgraft-patch-3_12_60-52_57-xen-9-2.2

 

 

References:

 

   https://www.suse.com/security/cve/CVE-2017-1000112.html

   https://bugzilla.suse.com/1052311

   https://bugzilla.suse.com/1052368

 

– 

To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@opensuse.org

For additional commands, e-mail: opensuse-security-announce+help@opensuse.org

 

 

 

   SUSE Security Update: Security update for Linux Kernel Live Patch 17 for SLE 12

______________________________________________________________________________

 

Announcement ID:    SUSE-SU-2017:2508-1

Rating:             important

References:         #1052311 #1052368 

Cross-References:   CVE-2017-1000112

Affected Products:

                    SUSE Linux Enterprise Server 12-LTSS

______________________________________________________________________________

 

   An update that solves one vulnerability and has one errata

   is now available.

 

Description:

 

   This update for the Linux Kernel 3.12.60-52_60 fixes several issues.

 

   The following security bugs were fixed:

 

   - CVE-2017-1000112: Prevent a race condition in net-packet code that could

     have been exploited by unprivileged users to gain root access

     (bsc#1052368).

 

 

Patch Instructions:

 

   To install this SUSE Security Update use YaST online_update.

   Alternatively you can run the command listed for your product:

 

   - SUSE Linux Enterprise Server 12-LTSS:

 

      zypper in -t patch SUSE-SLE-SERVER-12-2017-1552=1

 

   To bring your system up-to-date, use “zypper patch”.

 

 

Package List:

 

   - SUSE Linux Enterprise Server 12-LTSS (x86_64):

 

      kgraft-patch-3_12_60-52_60-default-8-2.2

      kgraft-patch-3_12_60-52_60-xen-8-2.2

 

 

References:

 

   https://www.suse.com/security/cve/CVE-2017-1000112.html

   https://bugzilla.suse.com/1052311

   https://bugzilla.suse.com/1052368

 

– 

To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@opensuse.org

For additional commands, e-mail: opensuse-security-announce+help@opensuse.org

 

 

 

   SUSE Security Update: Security update for Linux Kernel Live Patch 18 for SLE 12

______________________________________________________________________________

 

Announcement ID:    SUSE-SU-2017:2506-1

Rating:             important

References:         #1052311 #1052368 

Cross-References:   CVE-2017-1000112

Affected Products:

                    SUSE Linux Enterprise Server 12-LTSS

______________________________________________________________________________

 

   An update that solves one vulnerability and has one errata

   is now available.

 

Description:

 

   This update for the Linux Kernel 3.12.60-52_63 fixes several issues.

 

   The following security bugs were fixed:

 

   - CVE-2017-1000112: Prevent a race condition in net-packet code that could

     have been exploited by unprivileged users to gain root access

     (bsc#1052368).

 

 

Patch Instructions:

 

   To install this SUSE Security Update use YaST online_update.

   Alternatively you can run the command listed for your product:

 

   - SUSE Linux Enterprise Server 12-LTSS:

 

      zypper in -t patch SUSE-SLE-SERVER-12-2017-1553=1

 

   To bring your system up-to-date, use “zypper patch”.

 

 

Package List:

 

   - SUSE Linux Enterprise Server 12-LTSS (x86_64):

 

      kgraft-patch-3_12_60-52_63-default-8-2.2

      kgraft-patch-3_12_60-52_63-xen-8-2.2

 

 

References:

 

   https://www.suse.com/security/cve/CVE-2017-1000112.html

   https://bugzilla.suse.com/1052311

   https://bugzilla.suse.com/1052368

 

– 

To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@opensuse.org

For additional commands, e-mail: opensuse-security-announce+help@opensuse.org

 

 

SUSE Security Update: Security update for Linux Kernel Live Patch 19 for SLE 12

______________________________________________________________________________

 

Announcement ID:    SUSE-SU-2017:2510-1

Rating:             important

References:         #1052311 #1052368 

Cross-References:   CVE-2017-1000112

Affected Products:

                    SUSE Linux Enterprise Server 12-LTSS

______________________________________________________________________________

 

   An update that solves one vulnerability and has one errata

   is now available.

 

Description:

 

   This update for the Linux Kernel 3.12.61-52_66 fixes several issues.

 

   The following security bugs were fixed:

 

   - CVE-2017-1000112: Prevent a race condition in net-packet code that could

     have been exploited by unprivileged users to gain root access

     (bsc#1052368).

 

 

Patch Instructions:

 

   To install this SUSE Security Update use YaST online_update.

   Alternatively you can run the command listed for your product:

 

   - SUSE Linux Enterprise Server 12-LTSS:

 

      zypper in -t patch SUSE-SLE-SERVER-12-2017-1554=1

 

   To bring your system up-to-date, use “zypper patch”.

 

 

Package List:

 

   - SUSE Linux Enterprise Server 12-LTSS (x86_64):

 

      kgraft-patch-3_12_61-52_66-default-7-2.2

      kgraft-patch-3_12_61-52_66-xen-7-2.2

 

 

References:

 

   https://www.suse.com/security/cve/CVE-2017-1000112.html

   https://bugzilla.suse.com/1052311

   https://bugzilla.suse.com/1052368

 

– 

To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@opensuse.org

For additional commands, e-mail: opensuse-security-announce+help@opensuse.org

 

 

   SUSE Security Update: Security update for Linux Kernel Live Patch 20 for SLE 12

______________________________________________________________________________

 

Announcement ID:    SUSE-SU-2017:2498-1

Rating:             important

References:         #1052311 #1052368 

Cross-References:   CVE-2017-1000112

Affected Products:

                    SUSE Linux Enterprise Server 12-LTSS

______________________________________________________________________________

 

   An update that solves one vulnerability and has one errata

   is now available.

 

Description:

 

   This update for the Linux Kernel 3.12.61-52_69 fixes several issues.

 

   The following security bugs were fixed:

 

   - CVE-2017-1000112: Prevent a race condition in net-packet code that could

     have been exploited by unprivileged users to gain root access

     (bsc#1052368).

 

 

Patch Instructions:

 

   To install this SUSE Security Update use YaST online_update.

   Alternatively you can run the command listed for your product:

 

   - SUSE Linux Enterprise Server 12-LTSS:

 

      zypper in -t patch SUSE-SLE-SERVER-12-2017-1544=1

 

   To bring your system up-to-date, use “zypper patch”.

 

 

Package List:

 

   - SUSE Linux Enterprise Server 12-LTSS (x86_64):

 

      kgraft-patch-3_12_61-52_69-default-5-2.2

      kgraft-patch-3_12_61-52_69-xen-5-2.2

 

 

References:

 

   https://www.suse.com/security/cve/CVE-2017-1000112.html

   https://bugzilla.suse.com/1052311

   https://bugzilla.suse.com/1052368

 

– 

To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@opensuse.org

For additional commands, e-mail: opensuse-security-announce+help@opensuse.org

 

 

 

   SUSE Security Update: Security update for Linux Kernel Live Patch 21 for SLE 12

______________________________________________________________________________

 

Announcement ID:    SUSE-SU-2017:2511-1

Rating:             important

References:         #1052311 #1052368 

Cross-References:   CVE-2017-1000112

Affected Products:

                    SUSE Linux Enterprise Server 12-LTSS

______________________________________________________________________________

 

   An update that solves one vulnerability and has one errata

   is now available.

 

Description:

 

   This update for the Linux Kernel 3.12.61-52_72 fixes several issues.

 

   The following security bugs were fixed:

 

   - CVE-2017-1000112: Prevent a race condition in net-packet code that could

     have been exploited by unprivileged users to gain root access

     (bsc#1052368).

 

 

Patch Instructions:

 

   To install this SUSE Security Update use YaST online_update.

   Alternatively you can run the command listed for your product:

 

   - SUSE Linux Enterprise Server 12-LTSS:

 

      zypper in -t patch SUSE-SLE-SERVER-12-2017-1555=1

 

   To bring your system up-to-date, use “zypper patch”.

 

 

Package List:

 

   - SUSE Linux Enterprise Server 12-LTSS (x86_64):

 

      kgraft-patch-3_12_61-52_72-default-4-2.2

      kgraft-patch-3_12_61-52_72-xen-4-2.2

 

 

References:

 

   https://www.suse.com/security/cve/CVE-2017-1000112.html

   https://bugzilla.suse.com/1052311

   https://bugzilla.suse.com/1052368

 

– 

To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@opensuse.org

For additional commands, e-mail: opensuse-security-announce+help@opensuse.org

 

 

 

   SUSE Security Update: Security update for Linux Kernel Live Patch 22 for SLE 12

______________________________________________________________________________

 

Announcement ID:    SUSE-SU-2017:2499-1

Rating:             important

References:         #1052311 #1052368 

Cross-References:   CVE-2017-1000112

Affected Products:

                    SUSE Linux Enterprise Server 12-LTSS

______________________________________________________________________________

 

   An update that solves one vulnerability and has one errata

   is now available.

 

Description:

 

   This update for the Linux Kernel 3.12.61-52_77 fixes several issues.

 

   The following security bugs were fixed:

 

   - CVE-2017-1000112: Prevent a race condition in net-packet code that could

     have been exploited by unprivileged users to gain root access

     (bsc#1052368).

 

 

Patch Instructions:

 

   To install this SUSE Security Update use YaST online_update.

   Alternatively you can run the command listed for your product:

 

   - SUSE Linux Enterprise Server 12-LTSS:

 

      zypper in -t patch SUSE-SLE-SERVER-12-2017-1545=1

 

   To bring your system up-to-date, use “zypper patch”.

 

 

Package List:

 

   - SUSE Linux Enterprise Server 12-LTSS (x86_64):

 

      kgraft-patch-3_12_61-52_77-default-4-2.2

      kgraft-patch-3_12_61-52_77-xen-4-2.2

 

 

References:

 

   https://www.suse.com/security/cve/CVE-2017-1000112.html

   https://bugzilla.suse.com/1052311

   https://bugzilla.suse.com/1052368

 

– 

To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@opensuse.org

For additional commands, e-mail: opensuse-security-announce+help@opensuse.org

 

 

 

   SUSE Security Update: Security update for Linux Kernel Live Patch 23 for SLE 12

______________________________________________________________________________

 

Announcement ID:    SUSE-SU-2017:2500-1

Rating:             important

References:         #1052311 #1052368 

Cross-References:   CVE-2017-1000112

Affected Products:

                    SUSE Linux Enterprise Server 12-LTSS

______________________________________________________________________________

 

   An update that solves one vulnerability and has one errata

   is now available.

 

Description:

 

   This update for the Linux Kernel 3.12.61-52_80 fixes several issues.

 

   The following security bugs were fixed:

 

   - CVE-2017-1000112: Prevent a race condition in net-packet code that could

     have been exploited by unprivileged users to gain root access

     (bsc#1052368).

 

 

Patch Instructions:

 

   To install this SUSE Security Update use YaST online_update.

   Alternatively you can run the command listed for your product:

 

   - SUSE Linux Enterprise Server 12-LTSS:

 

      zypper in -t patch SUSE-SLE-SERVER-12-2017-1546=1

 

   To bring your system up-to-date, use “zypper patch”.

 

 

Package List:

 

   - SUSE Linux Enterprise Server 12-LTSS (x86_64):

 

      kgraft-patch-3_12_61-52_80-default-3-2.2

      kgraft-patch-3_12_61-52_80-xen-3-2.2

 

 

References:

 

   https://www.suse.com/security/cve/CVE-2017-1000112.html

   https://bugzilla.suse.com/1052311

   https://bugzilla.suse.com/1052368

 

– 

To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@opensuse.org

For additional commands, e-mail: opensuse-security-announce+help@opensuse.org

 

SUSE Security Update: Security update for Linux Kernel Live Patch 17 for SLE 12 SP1
______________________________________________________________________________

Announcement ID: SUSE-SU-2017:2441-1
Rating: important
References: #1052311 #1052368
Cross-References: CVE-2017-1000112
Affected Products:
SUSE Linux Enterprise Server for SAP 12-SP1
SUSE Linux Enterprise Server 12-SP1-LTSS
______________________________________________________________________________

An update that solves one vulnerability and has one errata
is now available.

Description:

This update for the Linux Kernel 3.12.74-60_64_48 fixes several issues.

The following security bugs were fixed:

– CVE-2017-1000112: Prevent a race condition in net-packet code that could
have been exploited by unprivileged users to gain root access
(bsc#1052368).

Patch Instructions:

To install this SUSE Security Update use YaST online_update.
Alternatively you can run the command listed for your product:

– SUSE Linux Enterprise Server for SAP 12-SP1:

zypper in -t patch SUSE-SLE-SAP-12-SP1-2017-1509=1

– SUSE Linux Enterprise Server 12-SP1-LTSS:

zypper in -t patch SUSE-SLE-SERVER-12-SP1-2017-1509=1

To bring your system up-to-date, use “zypper patch”.

Package List:

– SUSE Linux Enterprise Server for SAP 12-SP1 (x86_64):

kgraft-patch-3_12_74-60_64_48-default-3-2.1
kgraft-patch-3_12_74-60_64_48-xen-3-2.1

– SUSE Linux Enterprise Server 12-SP1-LTSS (x86_64):

kgraft-patch-3_12_74-60_64_48-default-3-2.1
kgraft-patch-3_12_74-60_64_48-xen-3-2.1

References:

https://www.suse.com/security/cve/CVE-2017-1000112.html
https://bugzilla.suse.com/1052311
https://bugzilla.suse.com/1052368


To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@opensuse.org
For additional commands, e-mail: opensuse-security-announce+help@opensuse.org

 

SUSE Security Update: Security update for Linux Kernel Live Patch 18 for SLE 12 SP1

______________________________________________________________________________

 

Announcement ID:    SUSE-SU-2017:2447-1

Rating:             important

References:         #1038564 #1042892 #1052311 #1052368 

Cross-References:   CVE-2017-1000112 CVE-2017-8890 CVE-2017-9242

                   

Affected Products:

                    SUSE Linux Enterprise Server for SAP 12-SP1

                    SUSE Linux Enterprise Server 12-SP1-LTSS

______________________________________________________________________________

 

   An update that solves three vulnerabilities and has one

   errata is now available.

 

Description:

 

   This update for the Linux Kernel 3.12.74-60_64_51 fixes several issues.

 

   The following security bugs were fixed:

 

   - CVE-2017-1000112: Prevent a race condition in net-packet code that could

     have been exploited by unprivileged users to gain root access

     (bsc#1052368).

   - CVE-2017-9242: The __ip6_append_data function in net/ipv6/ip6_output.c

     in the Linux kernel was too late in checking whether an overwrite of an

     skb data structure may occur, which allowed local users to cause a

     denial of service (system crash) via crafted system calls (bsc#1038564,

     bsc#1042892).

   - CVE-2017-8890: The inet_csk_clone_lock function in

     net/ipv4/inet_connection_sock.c in the Linux kernel allowed attackers to

     cause a denial of service (double free) or possibly have unspecified

     other impact by leveraging use of the accept system call (bsc#1038564).

 

 

Patch Instructions:

 

   To install this SUSE Security Update use YaST online_update.

   Alternatively you can run the command listed for your product:

 

   - SUSE Linux Enterprise Server for SAP 12-SP1:

 

      zypper in -t patch SUSE-SLE-SAP-12-SP1-2017-1513=1

 

   - SUSE Linux Enterprise Server 12-SP1-LTSS:

 

      zypper in -t patch SUSE-SLE-SERVER-12-SP1-2017-1513=1

 

   To bring your system up-to-date, use “zypper patch”.

 

 

Package List:

 

   - SUSE Linux Enterprise Server for SAP 12-SP1 (x86_64):

 

      kgraft-patch-3_12_74-60_64_51-default-2-2.1

      kgraft-patch-3_12_74-60_64_51-xen-2-2.1

 

   - SUSE Linux Enterprise Server 12-SP1-LTSS (x86_64):

 

      kgraft-patch-3_12_74-60_64_51-default-2-2.1

      kgraft-patch-3_12_74-60_64_51-xen-2-2.1

 

 

References:

 

   https://www.suse.com/security/cve/CVE-2017-1000112.html

   https://www.suse.com/security/cve/CVE-2017-8890.html

   https://www.suse.com/security/cve/CVE-2017-9242.html

   https://bugzilla.suse.com/1038564

   https://bugzilla.suse.com/1042892

   https://bugzilla.suse.com/1052311

   https://bugzilla.suse.com/1052368

 

– 

To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@opensuse.org

For additional commands, e-mail: opensuse-security-announce+help@opensuse.org

 

 

SUSE Security Update: Security update for Linux Kernel Live Patch 20 for SLE 12 SP1

______________________________________________________________________________

 

Announcement ID:    SUSE-SU-2017:2448-1

Rating:             important

References:         #1038564 #1042892 #1052311 #1052368 

Cross-References:   CVE-2017-1000112 CVE-2017-8890 CVE-2017-9242

                   

Affected Products:

                    SUSE Linux Enterprise Server for SAP 12-SP1

                    SUSE Linux Enterprise Server 12-SP1-LTSS

______________________________________________________________________________

 

   An update that solves three vulnerabilities and has one

   errata is now available.

 

Description:

 

   This update for the Linux Kernel 3.12.74-60_64_57 fixes several issues.

 

   The following security bugs were fixed:

 

   - CVE-2017-9242: The __ip6_append_data function in net/ipv6/ip6_output.c

     in the Linux kernel was too late in checking whether an overwrite of an

     skb data structure may occur, which allowed local users to cause a

     denial of service (system crash) via crafted system calls (bsc#1038564,

     bsc#1042892).

   - CVE-2017-8890: The inet_csk_clone_lock function in

     net/ipv4/inet_connection_sock.c in the Linux kernel allowed attackers to

     cause a denial of service (double free) or possibly have unspecified

     other impact by leveraging use of the accept system call (bsc#1038564).

 

 

Patch Instructions:

 

   To install this SUSE Security Update use YaST online_update.

   Alternatively you can run the command listed for your product:

 

   - SUSE Linux Enterprise Server for SAP 12-SP1:

 

      zypper in -t patch SUSE-SLE-SAP-12-SP1-2017-1515=1

 

   - SUSE Linux Enterprise Server 12-SP1-LTSS:

 

      zypper in -t patch SUSE-SLE-SERVER-12-SP1-2017-1515=1

 

   To bring your system up-to-date, use “zypper patch”.

 

 

Package List:

 

   - SUSE Linux Enterprise Server for SAP 12-SP1 (x86_64):

 

      kgraft-patch-3_12_74-60_64_57-default-2-2.1

      kgraft-patch-3_12_74-60_64_57-xen-2-2.1

 

   - SUSE Linux Enterprise Server 12-SP1-LTSS (x86_64):

 

      kgraft-patch-3_12_74-60_64_57-default-2-2.1

      kgraft-patch-3_12_74-60_64_57-xen-2-2.1

 

 

References:

 

   https://www.suse.com/security/cve/CVE-2017-1000112.html

   https://www.suse.com/security/cve/CVE-2017-8890.html

   https://www.suse.com/security/cve/CVE-2017-9242.html

   https://bugzilla.suse.com/1038564

   https://bugzilla.suse.com/1042892

   https://bugzilla.suse.com/1052311

   https://bugzilla.suse.com/1052368

 

– 

To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@opensuse.org

For additional commands, e-mail: opensuse-security-announce+help@opensuse.org

   SUSE Security Update: Security update for Linux Kernel Live Patch 26 for SLE 12
______________________________________________________________________________

Announcement ID:    SUSE-SU-2017:2476-1
Rating:             important
References:         #1042892 #1046191 #1052311 #1052368
Cross-References:   CVE-2017-1000112 CVE-2017-7645 CVE-2017-9242
                  
Affected Products:
                    SUSE Linux Enterprise Server 12-LTSS
______________________________________________________________________________

   An update that solves three vulnerabilities and has one
   errata is now available.

Description:

   This update for the Linux Kernel 3.12.61-52_89 fixes several issues.

   The following security bugs were fixed:

   – CVE-2017-9242: The __ip6_append_data function in net/ipv6/ip6_output.c
     in the Linux kernel was too late in checking whether an overwrite of an
     skb data structure may occur, which allowed local users to cause a
     denial of service (system crash) via crafted system calls (bsc#1042892).
   – CVE-2017-7645: The NFSv2/NFSv3 server in the nfsd subsystem in the Linux
     kernel allowed remote attackers to cause a denial of service (system
     crash) via a long RPC reply (bsc#1046191).

Patch Instructions:

   To install this SUSE Security Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   – SUSE Linux Enterprise Server 12-LTSS:

      zypper in -t patch SUSE-SLE-SERVER-12-2017-1543=1

   To bring your system up-to-date, use “zypper patch”.

Package List:

   – SUSE Linux Enterprise Server 12-LTSS (x86_64):

      kgraft-patch-3_12_61-52_89-default-2-2.2
      kgraft-patch-3_12_61-52_89-xen-2-2.2

References:

   https://www.suse.com/security/cve/CVE-2017-1000112.html
   https://www.suse.com/security/cve/CVE-2017-7645.html
   https://www.suse.com/security/cve/CVE-2017-9242.html
   https://bugzilla.suse.com/1042892
   https://bugzilla.suse.com/1046191
   https://bugzilla.suse.com/1052311
   https://bugzilla.suse.com/1052368


To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@opensuse.org
For additional commands, e-mail: opensuse-security-announce+help@opensuse.org

   SUSE Security Update: Security update for Linux Kernel Live Patch 0 for SLE 12 SP2
______________________________________________________________________________

Announcement ID:    SUSE-SU-2017:2474-1
Rating:             important
References:         #1052311 #1052368
Cross-References:   CVE-2017-1000112
Affected Products:
                    SUSE Linux Enterprise Live Patching 12
______________________________________________________________________________

   An update that solves one vulnerability and has one errata
   is now available.

Description:

   This update for the Linux Kernel 4.4.21-69 fixes several issues.

   The following security bugs were fixed:

   – CVE-2017-1000112: Prevent a race condition in net-packet code that could
     have been exploited by unprivileged users to gain root access
     (bsc#1052368).

Patch Instructions:

   To install this SUSE Security Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   – SUSE Linux Enterprise Live Patching 12:

      zypper in -t patch SUSE-SLE-Live-Patching-12-2017-1541=1

   To bring your system up-to-date, use “zypper patch”.

Package List:

   – SUSE Linux Enterprise Live Patching 12 (x86_64):

      kgraft-patch-4_4_21-69-default-9-18.10.1

References:

   https://www.suse.com/security/cve/CVE-2017-1000112.html
   https://bugzilla.suse.com/1052311
   https://bugzilla.suse.com/1052368


To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@opensuse.org
For additional commands, e-mail: opensuse-security-announce+help@opensuse.org

   SUSE Security Update: Security update for Linux Kernel Live Patch 10 for SLE 12 SP2
______________________________________________________________________________

Announcement ID:    SUSE-SU-2017:2472-1
Rating:             important
References:         #1052311 #1052368
Cross-References:   CVE-2017-1000112
Affected Products:
                    SUSE Linux Enterprise Live Patching 12
______________________________________________________________________________

   An update that solves one vulnerability and has one errata
   is now available.

Description:

   This update for the Linux Kernel 4.4.74-92_29 fixes several issues.

   The following security bugs were fixed:

   – CVE-2017-1000112: Prevent a race condition in net-packet code that could
     have been exploited by unprivileged users to gain root access
     (bsc#1052368).

Patch Instructions:

   To install this SUSE Security Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   – SUSE Linux Enterprise Live Patching 12:

      zypper in -t patch SUSE-SLE-Live-Patching-12-2017-1539=1

   To bring your system up-to-date, use “zypper patch”.

Package List:

   – SUSE Linux Enterprise Live Patching 12 (x86_64):

      kgraft-patch-4_4_74-92_29-default-3-2.1

References:

   https://www.suse.com/security/cve/CVE-2017-1000112.html
   https://bugzilla.suse.com/1052311
   https://bugzilla.suse.com/1052368


To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@opensuse.org
For additional commands, e-mail: opensuse-security-announce+help@opensuse.org

   SUSE Security Update: Security update for Linux Kernel Live Patch 4 for SLE 12 SP2
______________________________________________________________________________

Announcement ID:    SUSE-SU-2017:2471-1
Rating:             important
References:         #1052311 #1052368
Cross-References:   CVE-2017-1000112
Affected Products:
                    SUSE Linux Enterprise Live Patching 12
______________________________________________________________________________

   An update that solves one vulnerability and has one errata
   is now available.

Description:

   This update for the Linux Kernel 4.4.38-93 fixes several issues.

   The following security bugs were fixed:

   – CVE-2017-1000112: Prevent a race condition in net-packet code that could
     have been exploited by unprivileged users to gain root access
     (bsc#1052368).

Patch Instructions:

   To install this SUSE Security Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   – SUSE Linux Enterprise Live Patching 12:

      zypper in -t patch SUSE-SLE-Live-Patching-12-2017-1535=1

   To bring your system up-to-date, use “zypper patch”.

Package List:

   – SUSE Linux Enterprise Live Patching 12 (x86_64):

      kgraft-patch-4_4_38-93-default-8-2.1

References:

   https://www.suse.com/security/cve/CVE-2017-1000112.html
   https://bugzilla.suse.com/1052311
   https://bugzilla.suse.com/1052368


To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@opensuse.org
For additional commands, e-mail: opensuse-security-announce+help@opensuse.org

   SUSE Security Update: Security update for Linux Kernel Live Patch 8 for SLE 12 SP2
______________________________________________________________________________

Announcement ID:    SUSE-SU-2017:2465-1
Rating:             important
References:         #1052311 #1052368
Cross-References:   CVE-2017-1000112
Affected Products:
                    SUSE Linux Enterprise Live Patching 12
______________________________________________________________________________

   An update that solves one vulnerability and has one errata
   is now available.

Description:

   This update for the Linux Kernel 4.4.59-92_20 fixes several issues.

   The following security bugs were fixed:

   – CVE-2017-1000112: Prevent a race condition in net-packet code that could
     have been exploited by unprivileged users to gain root access
     (bsc#1052368).

Patch Instructions:

   To install this SUSE Security Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   – SUSE Linux Enterprise Live Patching 12:

      zypper in -t patch SUSE-SLE-Live-Patching-12-2017-1537=1

   To bring your system up-to-date, use “zypper patch”.

Package List:

   – SUSE Linux Enterprise Live Patching 12 (x86_64):

      kgraft-patch-4_4_59-92_20-default-4-2.1

References:

   https://www.suse.com/security/cve/CVE-2017-1000112.html
   https://bugzilla.suse.com/1052311
   https://bugzilla.suse.com/1052368


To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@opensuse.org
For additional commands, e-mail: opensuse-security-announce+help@opensuse.org

   SUSE Security Update: Security update for Linux Kernel Live Patch 9 for SLE 12 SP2
______________________________________________________________________________

Announcement ID:    SUSE-SU-2017:2469-1
Rating:             important
References:         #1052311 #1052368
Cross-References:   CVE-2017-1000112
Affected Products:
                    SUSE Linux Enterprise Live Patching 12
______________________________________________________________________________

   An update that solves one vulnerability and has one errata
   is now available.

Description:

   This update for the Linux Kernel 4.4.59-92_24 fixes several issues.

   The following security bugs were fixed:

   – CVE-2017-1000112: Prevent a race condition in net-packet code that could
     have been exploited by unprivileged users to gain root access
     (bsc#1052368).

Patch Instructions:

   To install this SUSE Security Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   – SUSE Linux Enterprise Live Patching 12:

      zypper in -t patch SUSE-SLE-Live-Patching-12-2017-1538=1

   To bring your system up-to-date, use “zypper patch”.

Package List:

   – SUSE Linux Enterprise Live Patching 12 (x86_64):

      kgraft-patch-4_4_59-92_24-default-3-2.1

References:

   https://www.suse.com/security/cve/CVE-2017-1000112.html
   https://bugzilla.suse.com/1052311
   https://bugzilla.suse.com/1052368


To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@opensuse.org
For additional commands, e-mail: opensuse-security-announce+help@opensuse.org

   SUSE Security Update: Security update for Linux Kernel Live Patch 3 for SLE 12 SP2
______________________________________________________________________________

Announcement ID:    SUSE-SU-2017:2464-1
Rating:             important
References:         #1052311 #1052368
Cross-References:   CVE-2017-1000112
Affected Products:
                    SUSE Linux Enterprise Live Patching 12
______________________________________________________________________________

   An update that solves one vulnerability and has one errata
   is now available.

Description:

   This update for the Linux Kernel 4.4.21-90 fixes several issues.

   The following security bugs were fixed:

   – CVE-2017-1000112: Prevent a race condition in net-packet code that could
     have been exploited by unprivileged users to gain root access
     (bsc#1052368).

Patch Instructions:

   To install this SUSE Security Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   – SUSE Linux Enterprise Live Patching 12:

      zypper in -t patch SUSE-SLE-Live-Patching-12-2017-1534=1

   To bring your system up-to-date, use “zypper patch”.

Package List:

   – SUSE Linux Enterprise Live Patching 12 (x86_64):

      kgraft-patch-4_4_21-90-default-8-2.1

References:

   https://www.suse.com/security/cve/CVE-2017-1000112.html
   https://bugzilla.suse.com/1052311
   https://bugzilla.suse.com/1052368


To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@opensuse.org
For additional commands, e-mail: opensuse-security-announce+help@opensuse.org

   SUSE Security Update: Security update for Linux Kernel Live Patch 7 for SLE 12 SP2
______________________________________________________________________________

Announcement ID:    SUSE-SU-2017:2455-1
Rating:             important
References:         #1052311 #1052368
Cross-References:   CVE-2017-1000112
Affected Products:
                    SUSE Linux Enterprise Live Patching 12
______________________________________________________________________________

   An update that solves one vulnerability and has one errata
   is now available.

Description:

   This update for the Linux Kernel 4.4.59-92_17 fixes several issues.

   The following security bugs were fixed:

   – CVE-2017-1000112: Prevent a race condition in net-packet code that could
     have been exploited by unprivileged users to gain root access
     (bsc#1052368).

Patch Instructions:

   To install this SUSE Security Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   – SUSE Linux Enterprise Live Patching 12:

      zypper in -t patch SUSE-SLE-Live-Patching-12-2017-1524=1

   To bring your system up-to-date, use “zypper patch”.

Package List:

   – SUSE Linux Enterprise Live Patching 12 (x86_64):

      kgraft-patch-4_4_59-92_17-default-4-2.1

References:

   https://www.suse.com/security/cve/CVE-2017-1000112.html
   https://bugzilla.suse.com/1052311
   https://bugzilla.suse.com/1052368


To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@opensuse.org
For additional commands, e-mail: opensuse-security-announce+help@opensuse.org

   SUSE Security Update: Security update for Linux Kernel Live Patch 12 for SLE 12 SP2
______________________________________________________________________________

Announcement ID:    SUSE-SU-2017:2456-1
Rating:             important
References:         #1052368
Cross-References:   CVE-2017-1000112 CVE-2017-100012
Affected Products:
                    SUSE Linux Enterprise Live Patching 12
______________________________________________________________________________

   An update that fixes two vulnerabilities is now available.

Description:

   This update for the Linux Kernel 4.4.74-92_35 fixes one issue.

   The following security bugs were fixed:

Patch Instructions:

   To install this SUSE Security Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   – SUSE Linux Enterprise Live Patching 12:

      zypper in -t patch SUSE-SLE-Live-Patching-12-2017-1525=1

   To bring your system up-to-date, use “zypper patch”.

Package List:

   – SUSE Linux Enterprise Live Patching 12 (x86_64):

      kgraft-patch-4_4_74-92_35-default-2-2.1

References:

   https://www.suse.com/security/cve/CVE-2017-1000112.html
   https://www.suse.com/security/cve/CVE-2017-100012.html
   https://bugzilla.suse.com/1052368


To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@opensuse.org
For additional commands, e-mail: opensuse-security-announce+help@opensuse.org

   SUSE Security Update: Security update for Linux Kernel Live Patch 5 for SLE 12 SP2
______________________________________________________________________________

Announcement ID:    SUSE-SU-2017:2457-1
Rating:             important
References:         #1052311 #1052368
Cross-References:   CVE-2017-1000112
Affected Products:
                    SUSE Linux Enterprise Live Patching 12
______________________________________________________________________________

   An update that solves one vulnerability and has one errata
   is now available.

Description:

   This update for the Linux Kernel 4.4.49-92_11 fixes several issues.

   The following security bugs were fixed:

   – CVE-2017-1000112: Prevent a race condition in net-packet code that could
     have been exploited by unprivileged users to gain root access
     (bsc#1052368).

Patch Instructions:

   To install this SUSE Security Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   – SUSE Linux Enterprise Live Patching 12:

      zypper in -t patch SUSE-SLE-Live-Patching-12-2017-1523=1

   To bring your system up-to-date, use “zypper patch”.

Package List:

   – SUSE Linux Enterprise Live Patching 12 (x86_64):

      kgraft-patch-4_4_49-92_11-default-6-2.1

References:

   https://www.suse.com/security/cve/CVE-2017-1000112.html
   https://bugzilla.suse.com/1052311
   https://bugzilla.suse.com/1052368


To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@opensuse.org
For additional commands, e-mail: opensuse-security-announce+help@opensuse.org

   SUSE Security Update: Security update for Linux Kernel Live Patch 2 for SLE 12 SP2
______________________________________________________________________________

Announcement ID:    SUSE-SU-2017:2454-1
Rating:             important
References:         #1052311 #1052368
Cross-References:   CVE-2017-1000112
Affected Products:
                    SUSE Linux Enterprise Live Patching 12
______________________________________________________________________________

   An update that solves one vulnerability and has one errata
   is now available.

Description:

   This update for the Linux Kernel 4.4.21-84 fixes several issues.

   The following security bugs were fixed:

   – CVE-2017-1000112: Prevent a race condition in net-packet code that could
     have been exploited by unprivileged users to gain root access
     (bsc#1052368).

Patch Instructions:

   To install this SUSE Security Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   – SUSE Linux Enterprise Live Patching 12:

      zypper in -t patch SUSE-SLE-Live-Patching-12-2017-1522=1

   To bring your system up-to-date, use “zypper patch”.

Package List:

   – SUSE Linux Enterprise Live Patching 12 (x86_64):

      kgraft-patch-4_4_21-84-default-8-2.1

References:

   https://www.suse.com/security/cve/CVE-2017-1000112.html
   https://bugzilla.suse.com/1052311
   https://bugzilla.suse.com/1052368

 

AutorVlatka Misic
Cert idNCERT-REF-2017-09-0068-ADV
CveCERT-CVE-DUMMY
ID izvornikaCERT-ORIGID-DUMMY
ProizvodCERT-DUMMY-PRODUCT
Izvorhttp://www.adobe.com/
Top
More in Preporuke
Sigurnosni nedostaci jezgre operacijskog sustava

Otkriveni su sigurnosni nedostaci u radu jezgre operacijskog sustava Fedora. Otkriveni nedostaci potencijalnim napadačima omogućuju otkrivanje osjetljivih informacija zaobilaženjem KASLR...

Close