Lucene search

K
oraclelinuxOracleLinuxELSA-2017-0654
HistoryMar 27, 2017 - 12:00 a.m.

coreutils security and bug fix update

2017-03-2700:00:00
linux.oracle.com
17

4.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

4.7 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

0.0004 Low

EPSS

Percentile

5.7%

[8.4-46.0.1]

  • clean up empty file if cp is failed [Orabug 15973168]
    [8.4-46]
  • pure rebuild to bring back support for acl_extended_file_nofollow() on x86_64
    [8.4-45]
  • su: deny killing other processes with root privileges (CVE-2017-2616)
    [8.4-44]
  • fix the functionality of ‘sort -h -k …’ in multi-byte locales (#1357979)
  • use correct path to grep(1) in colorls.sh (#1376892)
  • make colorls.sh compatible with ksh (#1321643)

4.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

4.7 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

0.0004 Low

EPSS

Percentile

5.7%