gpp_maybe Security update for the linux kernel

SUSE-SLE-Live-Patching-12-2017-2007

The SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-1000405: A bug in the THP CoW support could be used by local attackers to corrupt memory of other processes and cause them to crash (bnc#1069496). - CVE-2017-16939: The XFRM dump policy implementation in net/xfrm/xfrm_user.c in the Linux kernel allowed local users to gain privileges or cause a denial of service (use-after-free) via a crafted SO_RCVBUF setsockopt system call in conjunction with XFRM_MSG_GETPOLICY Netlink messages (bnc#1069702). The following non-security bugs were fixed: Fix a build issue on ppc64le systems (bsc#1070805)

• Release Date
  Dec 6 2017
• References
  Bugzilla: 1069496, 1069702, 1070805
  CVEs: CVE-2017-16939, CVE-2017-1000405
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Live Patching 12 x86_64

• Packages
  kgraft-patch-4_4_90-92_50-default
  Kgraft patch module

  1-4.1 lock rpm

  kgraft-patch-SLE12-SP2_Update_15
  Kgraft patch module

  1-4.1 lock src