gpp_maybe Security update for the linux kernel (live patch 25 for sle 12 sp1)

SUSE-SLE-SERVER-12-SP1-2018-695

This update for the Linux Kernel 3.12.74-60_64_82 fixes several issues. The following security issues were fixed: - CVE-2017-13166: An elevation of privilege vulnerability was fixed in the kernel v4l2 video driver. (bsc#1085447). - CVE-2018-1068: A flaw was found in the Linux kernels implementation of 32-bit syscall interface for bridging. This allowed a privileged user to arbitrarily write to a limited range of kernel memory (bsc#1085114). - CVE-2018-7566: The Linux kernel had a buffer overflow via an SNDRV_SEQ_IOCTL_SET_CLIENT_POOL ioctl write operation to /dev/snd/seq by a local user (bsc#1083488).

• Release Date
  Apr 20 2018
• References
  Bugzilla: 1083488, 1085114, 1085447
  CVEs: CVE-2017-13166, CVE-2018-1068, CVE-2018-7566
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server LTSS 12.1 x86_64

• Packages
  kgraft-patch-3_12_74-60_64_82-default
  Kgraft patch module

  2-2.1 lock rpm

  kgraft-patch-3_12_74-60_64_82-xen
  Kgraft patch module

  2-2.1 lock rpm

  kgraft-patch-SLE12-SP1_Update_25
  Kgraft patch module

  2-2.1 lock src