SUSE-SU-2017:3314-1 Security update for the Linux Kernel (Live Patch 3 for SLE 12 SP3)

This update for the Linux Kernel 4.4.82-69 fixes several issues. The following security issues were fixed: - CVE-2017-1000405: Problematic use of pmdmkdirty in the touchpmd function allowed users to overwrite read-only huge pages e.g. the zero huge page and sealed shmem files bsc1070307. -...

SUSE-SU-2017:3324-1 Security update for the Linux Kernel (Live Patch 2 for SLE 12 SP3)

This update for the Linux Kernel 4.4.82-66 fixes several issues. The following security issues were fixed: - CVE-2017-1000405: Problematic use of pmdmkdirty in the touchpmd function allowed users to overwrite read-only huge pages e.g. the zero huge page and sealed shmem files bsc1070307. -...

SUSE-SU-2017:3290-1 Security update for the Linux Kernel (Live Patch 5 for SLE 12 SP2)

This update for the Linux Kernel 4.4.49-9211 fixes several issues. The following security issues were fixed: - CVE-2017-16939: The XFRM dump policy implementation in net/xfrm/xfrmuser.c kernel allowed local users to gain privileges or cause a denial of service use-after-free via a crafted SORCVBU...

SUSE-SU-2017:3285-1 Security update for the Linux Kernel (Live Patch 14 for SLE 12 SP2)

This update for the Linux Kernel 4.4.90-9245 fixes several issues. The following security issues were fixed: - CVE-2017-1000405: Problematic use of pmdmkdirty in the touchpmd function allowed users to overwrite read-only huge pages e.g. the zero huge page and sealed shmem files bsc1070307. -...

SUSE-SU-2017:3297-1 Security update for the Linux Kernel (Live Patch 13 for SLE 12 SP2)

This update for the Linux Kernel 4.4.74-9238 fixes several issues. The following security issues were fixed: - CVE-2017-1000405: Problematic use of pmdmkdirty in the touchpmd function allowed users to overwrite read-only huge pages e.g. the zero huge page and sealed shmem files bsc1070307. -...

SUSE-SU-2017:3295-1 Security update for the Linux Kernel (Live Patch 12 for SLE 12 SP2)

This update for the Linux Kernel 4.4.74-9235 fixes several issues. The following security issues were fixed: - CVE-2017-1000405: Problematic use of pmdmkdirty in the touchpmd function allowed users to overwrite read-only huge pages e.g. the zero huge page and sealed shmem files bsc1070307. -...

SUSE-SU-2017:3291-1 Security update for the Linux Kernel (Live Patch 6 for SLE 12 SP2)

This update for the Linux Kernel 4.4.49-9214 fixes several issues. The following security issues were fixed: - CVE-2017-16939: The XFRM dump policy implementation in net/xfrm/xfrmuser.c kernel allowed local users to gain privileges or cause a denial of service use-after-free via a crafted SORCVBU...

SUSE-SU-2017:3310-1 Security update for the Linux Kernel (Live Patch 7 for SLE 12 SP2)

This update for the Linux Kernel 4.4.59-9217 fixes several issues. The following security issues were fixed: - CVE-2017-1000405: Problematic use of pmdmkdirty in the touchpmd function allowed users to overwrite read-only huge pages e.g. the zero huge page and sealed shmem files bsc1070307. -...

SUSE-SU-2017:3288-1 Security update for the Linux Kernel (Live Patch 4 for SLE 12 SP2)

This update for the Linux Kernel 4.4.38-93 fixes several issues. The following security issues were fixed: - CVE-2017-16939: The XFRM dump policy implementation in net/xfrm/xfrmuser.c kernel allowed local users to gain privileges or cause a denial of service use-after-free via a crafted SORCVBUF...

SUSE-SU-2017:3292-1 Security update for the Linux Kernel (Live Patch 2 for SLE 12 SP2)

This update for the Linux Kernel 4.4.21-84 fixes several issues. The following security issues were fixed: - CVE-2017-16939: The XFRM dump policy implementation in net/xfrm/xfrmuser.c kernel allowed local users to gain privileges or cause a denial of service use-after-free via a crafted SORCVBUF...

SUSE-SU-2017:3306-1 Security update for the Linux Kernel (Live Patch 3 for SLE 12 SP2)

This update for the Linux Kernel 4.4.21-90 fixes several issues. The following security issues were fixed: - CVE-2017-16939: The XFRM dump policy implementation in net/xfrm/xfrmuser.c kernel allowed local users to gain privileges or cause a denial of service use-after-free via a crafted SORCVBUF...

SUSE-SU-2017:3286-1 Security update for the Linux Kernel (Live Patch 8 for SLE 12 SP2)

This update for the Linux Kernel 4.4.59-9220 fixes several issues. The following security issues were fixed: - CVE-2017-1000405: Problematic use of pmdmkdirty in the touchpmd function allowed users to overwrite read-only huge pages e.g. the zero huge page and sealed shmem files bsc1070307. -...

SUSE-SU-2017:3296-1 Security update for the Linux Kernel (Live Patch 9 for SLE 12 SP2)

This update for the Linux Kernel 4.4.59-9224 fixes several issues. The following security issues were fixed: - CVE-2017-1000405: Problematic use of pmdmkdirty in the touchpmd function allowed users to overwrite read-only huge pages e.g. the zero huge page and sealed shmem files bsc1070307. -...

XenServer Loses Network connectivity on Pool join (LACP bond entry incomplete)

Upon adding a host to an existing Pool configured with NIC Bonding of type LACP , the newly added host's NIC bond entry never finishes updating, as seen on the image below, where the Management interface never merges with the bond. The previous NIC remains as IP Setup None and the bond shows...

CentOS 6 : kernel (CESA-2017:3200)

An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20171115)

Security Fixes : - A race condition issue leading to a use-after-free flaw was found in the way the raw packet sockets are implemented in the Linux kernel networking subsystem handling synchronization. A local user able to open a raw packet socket requires the CAPNETRAW capability could use this...

Travel to the dark of the door! Debugee in QEMU-vulnerability warning-the black bar safety net

I haven't to secure guest posting, just recently the contact vulnerability discovery, and have been reading some of the classic fuzzer source code, at the same time also began to contact the virtualization escape this piece of content, at this time happened to come across two very classic exploit...

Fedora 25 : 2:qemu (2017-f941184db1)

CVE-2017-7718: cirrus: OOB read access issue bz 1443443 - CVE-2016-9603: cirrus: heap buffer overflow via vnc connection bz 1432040 - CVE-2017-7377: 9pfs: fix file descriptor leak bz 1437872 - CVE-2017-7980: cirrus: OOB r/w access issues in bitblt bz 1444372 - CVE-2017-8112: vmwpvscsi: infinite...

Debian DSA-3920-1 : qemu - security update

Multiple vulnerabilities were found in qemu, a fast processor emulator : - CVE-2017-9310 Denial of service via infinite loop in e1000e NIC emulation. - CVE-2017-9330 Denial of service via infinite loop in USB OHCI emulation. - CVE-2017-9373 Denial of service via memory leak in IDE AHCI emulation....

Debian Security Advisory DSA 3920-1 (qemu - security update)

Multiple vulnerabilities were found in qemu, a fast processor emulator: CVE-2017-9310 Denial of service via infinite loop in e1000e NIC emulation. CVE-2017-9330 Denial of service via infinite loop in USB OHCI emulation. CVE-2017-9373 Denial of service via memory leak in IDE AHCI emulation...