Difference between revisions of "Download/kernel/rhel6/042stab125.3/changes"

From OpenVZ Virtuozzo Containers Wiki
Jump to: navigation, search
(Created page with "== Changes == Since {{kernel link|rhel6|042stab125.1}}: * [Important] A flaw was found in the way the Linux kernel loaded ELF executables. Provided that an application was bu...")
 
(2.6.32-042stab125.5 changes)
Line 3: Line 3:
  
 
* [Important] A flaw was found in the way the Linux kernel loaded ELF executables. Provided that an application was built as Position Independent Executable (PIE), the loader could allow part of that application's data segment to map over the memory area reserved for its stack, potentially resulting in memory corruption. An unprivileged local user with access to SUID (or otherwise privileged) PIE binary could use this flaw to escalate their privileges on the system. (CVE-2017-1000253)  
 
* [Important] A flaw was found in the way the Linux kernel loaded ELF executables. Provided that an application was built as Position Independent Executable (PIE), the loader could allow part of that application's data segment to map over the memory area reserved for its stack, potentially resulting in memory corruption. An unprivileged local user with access to SUID (or otherwise privileged) PIE binary could use this flaw to escalate their privileges on the system. (CVE-2017-1000253)  
 +
* Improved the hash function for IPv6 neighbours to increase system responsiveness under IPv6 flooding attacks. (PSBM-73496)
 +
* Stopping NFS server inside a container could cause the host to crash. (PSBM-74832)
  
 
=== See also ===
 
=== See also ===
 
* {{CVE|2017-1000253}}
 
* {{CVE|2017-1000253}}

Revision as of 06:34, 24 October 2017

Changes

Since 042stab125.1:

  • [Important] A flaw was found in the way the Linux kernel loaded ELF executables. Provided that an application was built as Position Independent Executable (PIE), the loader could allow part of that application's data segment to map over the memory area reserved for its stack, potentially resulting in memory corruption. An unprivileged local user with access to SUID (or otherwise privileged) PIE binary could use this flaw to escalate their privileges on the system. (CVE-2017-1000253)
  • Improved the hash function for IPv6 neighbours to increase system responsiveness under IPv6 flooding attacks. (PSBM-73496)
  • Stopping NFS server inside a container could cause the host to crash. (PSBM-74832)

See also