Otkriven je sigurnosni nedostatak jezgre operacijskog sustava kojeg lokalni napadači mogu iskoristiti za pokretanje programskog koda i izvođenje DoS napada.
Nedostatak je otkriven u "/mm/oom_kill.c", a očituje se kao cjelobrojno prepisivanje.
Posljedica:
Slanjem jako velikog ulaznog niza znakova, lokalni napadač može dobiti mogućnost pokretanja proizvoljnog programskog koda ili srušiti jezgru operacijskog sustava (DoS napad).
Rješenje:
Preporuča se primjena odgovarajuće programske zakrpe.
---------------------------------------------------------------------------=
-----
Fedora Update Notification
FEDORA-2011-15323
2011-11-02 18:19:15.399701
---------------------------------------------------------------------------=
-----
Name : kernel
Product : Fedora 16
Version : 3.1.0
Release : 7.fc16
URL : http://www.kernel.org/
Summary : The Linux kernel
Description :
The kernel package contains the Linux kernel (vmlinuz), the core of any
Linux operating system. The kernel handles the basic functions
of the operating system: memory allocation, process allocation, device
input and output, etc.
---------------------------------------------------------------------------=
-----
Update Information:
This update fixes a regression in booting via EFI on some machines.
---------------------------------------------------------------------------=
-----
References:
[ 1 ] Bug #748516 - kernel does not boot with patch to fix invalid EFI re=
map calls from 2011-10-18
https://bugzilla.redhat.com/show_bug.cgi?id=3D748516
[ 2 ] Bug #749887 - [abrt] kernel: WARNING: at drivers/block/floppy.c:104=
1 setup_rw_floppy+0x188/0x241 [floppy]()
https://bugzilla.redhat.com/show_bug.cgi?id=3D749887
[ 3 ] Bug #750402 - CVE-2011-4097 kernel: oom_badness() integer overflow =
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=3D750402
---------------------------------------------------------------------------=
-----
This update can be installed with the "yum" update program. Use =
su -c 'yum update kernel' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on t=
he
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
---------------------------------------------------------------------------=
-----
_______________________________________________
package-announce mailing list
Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.
https://admin.fedoraproject.org/mailman/listinfo/package-announce
Posljednje sigurnosne preporuke