gpp_maybe Security update for linux kernel live patch 20 for sle 12

SUSE-SLE-SERVER-12-2017-763

This update the for Linux Kernel 3.12.61-52.69 fixes one issue. The following security bug was fixed: - CVE-2017-5970: The ipv4_pktinfo_prepare function in net/ipv4/ip_sockglue.c in the Linux kernel allowed attackers to cause a denial of service (system crash) via (1) an application that made crafted system calls or possibly (2) IPv4 traffic with invalid IP options (bsc#1025013). - CVE-2017-7308: The packet_set_ring function in net/packet/af_packet.c in the Linux kernel did not properly validate certain block-size data, which allowed local users to cause a denial of service (overflow) or possibly have unspecified other impact via crafted system calls (bsc#1030575, bsc#1031660).

• Release Date
  May 15 2017
• References
  Bugzilla: 1025013, 1030575, 1031660
  CVEs: CVE-2017-7308, CVE-2017-5970
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server LTSS 12 x86_64

• Packages
  kgraft-patch-3_12_61-52_69-default
  Kgraft patch module

  2-4.1 lock rpm

  kgraft-patch-3_12_61-52_69-xen
  Kgraft patch module

  2-4.1 lock rpm

  kgraft-patch-SLE12_Update_20
  Kgraft patch module

  2-4.1 lock src