[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244411

 
 

909

 
 

193363

 
 

277

Paid content will be excluded from the download.


Download | Alert*
OVAL

CESA-2017:1842 -- centos 7 python-perf,perf

ID: oval:org.secpod.oval:def:204584Date: (C)2018-04-30   (M)2024-02-19
Class: PATCHFamily: unix




The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix: * An use-after-free flaw was found in the Linux kernel which enables a race condition in the L2TPv3 IP Encapsulation feature. A local user could use this flaw to escalate their privileges or crash the system. * A flaw was found that can be triggered in keyring_search_iterator in keyring.c if type-gt;match is NULL. A local user could use this flaw to crash the system or, potentially, escalate their privileges. * It was found that the NFSv4 server in the Linux kernel did not properly validate layout type when processing NFSv4 pNFS LAYOUTGET and GETDEVICEINFO operands. A remote attacker could use this flaw to soft-lockup the system and thus cause denial of service. This update also fixes multiple Moderate and Low impact security issues: * CVE-2015-8839, CVE-2015-8970, CVE-2016-9576, CVE-2016-7042, CVE-2016-7097, CVE-2016-8645, CVE-2016-9576, CVE-2016-9588, CVE-2016-9806, CVE-2016-10088, CVE-2016-10147, CVE-2017-2596, CVE-2017-2671, CVE-2017-5970, CVE-2017-6001, CVE-2017-6951, CVE-2017-7187, CVE-2017-7616, CVE-2017-7889, CVE-2017-8890, CVE-2017-9074, CVE-2017-8890, CVE-2017-9075, CVE-2017-8890, CVE-2017-9076, CVE-2017-8890, CVE-2017-9077, CVE-2017-9242, CVE-2014-7970, CVE-2014-7975, CVE-2016-6213, CVE-2016-9604, CVE-2016-9685 Documentation for these issues is available from the Release Notes document linked from the References section. Red Hat would like to thank Igor Redko and Andrey Ryabinin for reporting CVE-2017-2647; Igor Redko and Vasily Averin for reporting CVE-2015-8970; Marco Grassi for reporting CVE-2016-8645; and Dmitry Vyukov for reporting CVE-2017-2596. The CVE-2016-7042 issue was discovered by Ondrej Kozina ; the CVE-2016-7097 issue was discovered by Andreas Gruenbacher and Jan Kara ; the CVE-2016-6213 and CVE-2016-9685 issues were discovered by Qian Cai ; and the CVE-2016-9604 issue was discovered by David Howells . Additional Changes: For detailed information on other changes in this release, see the Red Hat Enterprise Linux 7.4 Release Notes linked from the References section.

Platform:
CentOS 7
Product:
python-perf
perf
Reference:
CESA-2017:1842
CVE-2017-1000379
CVE-2017-9242
CVE-2017-9077
CVE-2017-9076
CVE-2017-9075
CVE-2017-9074
CVE-2017-8890
CVE-2017-8797
CVE-2017-7889
CVE-2017-7616
CVE-2017-7495
CVE-2017-7187
CVE-2017-6951
CVE-2017-6001
CVE-2017-5970
CVE-2017-5551
CVE-2017-2671
CVE-2017-2647
CVE-2017-2596
CVE-2017-2584
CVE-2016-10741
CVE-2016-10200
CVE-2016-10147
CVE-2016-10088
CVE-2016-9806
CVE-2016-9685
CVE-2016-9604
CVE-2016-9588
CVE-2016-9576
CVE-2016-8645
CVE-2016-7097
CVE-2016-7042
CVE-2016-6213
CVE-2015-8970
CVE-2015-8839
CVE-2014-7975
CVE-2014-7970
CVE-2017-1000253
CVE    38
CVE-2016-10147
CVE-2016-10200
CVE-2016-10088
CVE-2016-7042
...
CPE    10
cpe:/o:centos:centos:7.1611
cpe:/o:centos:centos:6.1
cpe:/o:centos:centos:6.3
cpe:/o:centos:centos:6.2
...

© SecPod Technologies