FEDORA-2017-090a9c11db — security update for libnl3

stable

libnl3-3.2.29-2.fc25

FEDORA-2017-090a9c11db created by thaller 6 years ago for Fedora 25

Update with patches from upstream

check valid input arguments for nla_reserve() (rh #1414305, CVE-2017-0386)
fix crash during SRIOV parsing
lazyly read psched settings
use O_CLOEXEC when creating file descriptors with fopen()

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2017-090a9c11db

This update has been submitted for testing by thaller.

6 years ago

laine commented & provided feedback 6 years ago

karma

This solves the crash when parsing SRIOV VF info. Also tested basic runtime functionality, and built both libvirt and netcf packages (which use libnl3-devel during the build)

This update has been pushed to testing.

6 years ago

cserpentis commented & provided feedback 6 years ago

karma

works for me

This update has been submitted for stable by bodhi.

6 years ago

besser82 commented & provided feedback 6 years ago

karma

Works great! LGTM! =)

This update has been pushed to stable.

6 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Builds

libnl3-3.2.29-2.fc25

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

6 years ago

in testing

6 years ago

in stable

6 years ago

BZ#1414304 CVE-2017-0386 libnl: Privilege escalation due to insufficient data checks in nla_reserve and nla_put

BZ#1414305 CVE-2017-0386 libnl3: libnl: Privilege escalation due to insufficient data checks in nla_reserve and nla_put [fedora-all]

libnl3-3.2.29-2.fc25

Automated Test Results

None