gpp_maybe Security update for kernel live patch 1

SUSE-SLE-Live-Patching-12-2016-441

This kernel live patch for Linux Kernel 3.12.51-60.20.2 fixes three security issues: Fixes: - CVE-2016-0728: A reference leak in keyring handling with join_session_keyring() could lead to local attackers gain root privileges. (bsc#962078). - CVE-2015-8660: The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended access restrictions and modify the attributes of arbitrary overlay files via a crafted application. (bsc#960329) - CVE-2013-7446: Use-after-free vulnerability in net/unix/af_unix.c in the Linux kernel allowed local users to bypass intended AF_UNIX socket permissions or cause a denial of service (panic) via crafted epoll_ctl calls. (bsc#955837)

• Release Date
  Mar 14 2016
• References
  Bugzilla: 962078, 955837, 960329
  CVEs: CVE-2013-7446, CVE-2016-0728, CVE-2015-8660
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Live Patching 12 x86_64

• Packages
  kgraft-patch-3_12_51-60_20-default
  Kgraft patch module

  3-2.1 lock rpm

  kgraft-patch-3_12_51-60_20-xen
  Kgraft patch module

  3-2.1 lock rpm

  kgraft-patch-SLE12-SP1_Update_1
  Kgraft patch module

  3-2.1 lock src