Important kernel security update: CVE-2017-1000253; new kernel 2.6.32-042stab125.3 for Virtuozzo Containers for Linux 4.7, Server Bare Metal 5.0¶

1. Overview¶

This update provides the new kernel 2.6.32-042stab125.3 for Virtuozzo Containers for Linux 4.7, Server Bare Metal 5.0 based on the Red Hat Enterprise Linux 6.9 kernel 2.6.32-696.10.2.el6. The new kernel introduces a security fix.

2. Security Fixes¶

• [Important] A flaw was found in the way the Linux kernel loaded ELF executables. Provided that an application was built as Position Independent Executable (PIE), the loader could allow part of that application’s data segment to map over the memory area reserved for its stack, potentially resulting in memory corruption. An unprivileged local user with access to SUID (or otherwise privileged) PIE binary could use this flaw to escalate their privileges on the system. (CVE-2017-1000253)

3. Installing the Update¶

Install the update with the ‘vzup2date’ utility included in the distribution.

4. References¶

• https://access.redhat.com/security/cve/CVE-2017-1000253

The JSON file with the list of new and updated packages is available at http://docs.virtuozzo.com/vza/VZA-2017-089.json.