Security update for Linux Kernel Live Patch 6 for SLE 12 SP2
| Announcement ID: | SUSE-SU-2017:1925-1 |
|---|---|
| Rating: | important |
| References: | |
| Cross-References: | |
| CVSS scores: |
|
| Affected Products: |
|
An update that solves one vulnerability and has two security fixes can now be installed.
Description:
This update for the Linux Kernel 4.4.49-92_14 fixes several issues.
The following security bugs were fixed:
- CVE-2017-1000364: An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be "jumped" over (the stack guard page is bypassed) (bsc#1039496).
Patch Instructions:
To install this SUSE update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
-
SUSE Linux Enterprise Live Patching 12
zypper in -t patch SUSE-SLE-Live-Patching-12-2017-1196=1 -
SUSE Linux Enterprise Server for SAP Applications 12 SP1
zypper in -t patch SUSE-SLE-SAP-12-SP1-2017-1210=1 -
SUSE Linux Enterprise Server 12 SP1 LTSS 12-SP1
zypper in -t patch SUSE-SLE-SERVER-12-SP1-2017-1210=1
Package List:
-
SUSE Linux Enterprise Live Patching 12 (x86_64)
- kgraft-patch-4_4_49-92_14-default-3-3.1
-
SUSE Linux Enterprise Server for SAP Applications 12 SP1 (x86_64)
- kgraft-patch-3_12_69-60_64_35-xen-3-3.1
- kgraft-patch-3_12_69-60_64_35-default-3-3.1
-
SUSE Linux Enterprise Server 12 SP1 LTSS 12-SP1 (x86_64)
- kgraft-patch-3_12_69-60_64_35-xen-3-3.1
- kgraft-patch-3_12_69-60_64_35-default-3-3.1