[Comm] Fwd: [sisyphus] Информация по CVE-2018-14634

Aleksey Novodvorsky

2018-10-01 10:11:57 UTC

Ð ÑÐ²ÐµÐŽÐµÐœÐžÑ.

Rgrds, ÐÐ»ÐµÐºÑÐµÐ¹

---------- Forwarded message ---------
From: Anton V. Boyarshinov <***@altlinux.org>
Date: Ð¿Ðœ, 1 ÐŸÐºÑ. 2018 Ð³., 13:10
Subject: [sisyphus] ÐÐœÑÐŸÑÐŒÐ°ÑÐžÑ Ð¿ÐŸ CVE-2018-14634
To: <***@lists.altlinux.org>

ÐÐ° Ð²ÑÑÐºÐžÐ¹ ÑÐ»ÑÑÐ°Ð¹ ÑÐŸÐŸÐ±ÑÐ°Ñ Ð¿ÐŸ Ð¿ÐŸÐ²ÐŸÐŽÑ ÐœÐ°ÑÑÐŒÐµÐ²ÑÐµÐ¹ CVE-2018-14634

ÐÐŸ Ð²ÑÐµÑ Ð°ÐºÑÑÐ°Ð»ÑÐœÑÑ Ð±ÑÐ°ÐœÑÐ°Ñ, Ð²ÐŸ Ð²ÑÐµÑ Ð°ÐºÑÑÐ°Ð»ÑÐœÑÑ Ð±ÑÐ°ÐœÑÐ°Ñ ÐŸÐœÐ° Ð·Ð°ÐºÑÑÑÐ°
(ÐœÐ°ÑÐºÐŸÐ»ÑÐºÐŸ Ñ Ð¿ÐŸÐœÐžÐŒÐ°Ñ, ÐºÐ°Ð¶ÐŽÑÐ¹ ÐžÐ· ÑÑÐžÑ ÐºÐŸÐŒÐŒÐžÑÐŸÐ² Ð·Ð°ÐºÑÑÐ²Ð°ÐµÑ ÐµÑ ÐŽÐ°Ð¶Ðµ Ð²
ÐŸÐŽÐžÐœÐŸÑÐµÑÑÐ²Ðµ):

Ð¡ommit ff6f95dcf55d34def126a3c7aae3080af66eada7
Author: Dmitry V. Levin <***@altlinux.org>
Date: Tue May 30 15:37:59 2017 +0000

get_arg_page: limit argv+env strings size for suid/sgid binaries

commit 86949eb96466ec182303afc3c386bd70cc67b991
Author: Kees Cook <***@chromium.org>
Date: Fri Jul 7 11:57:29 2017 -0700

exec: Limit arg stack to at most 75% of _STK_LIM
_______________________________________________
Sisyphus mailing list
***@lists.altlinux.org
https://lists.altlinux.org/mailman/listinfo/sisyphus