516900 – <sys-kernel/openvz-sources-2.6.32.90.5: ptrace SYSRET Path Privilege Escalation Vulnerability

Bug 516900 - <sys-kernel/openvz-sources-2.6.32.90.5: ptrace SYSRET Path Privilege Escalation Vulnerability

Summary: <sys-kernel/openvz-sources-2.6.32.90.5: ptrace SYSRET Path Privilege Escalati...

Status:	RESOLVED OBSOLETE

Alias:	None

Product:	Gentoo Security
Classification:	Unclassified
Component:	Vulnerabilities (show other bugs)
Hardware:	All Linux

Importance:	Normal major
Assignee:	Gentoo Security

URL:	http://secunia.com/advisories/59892/
Whiteboard:	B1 [noglsa]
Keywords:

Depends on:
Blocks:

Reported:	2014-07-11 15:25 UTC by Agostino Sarubbo
Modified:	2016-11-25 10:50 UTC (History)
CC List:	3 users (show)

See Also:	528932
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Agostino Sarubbo gentoo-dev

2014-07-11 15:25:43 UTC

From ${URL} :

OpenVZ has issued an update for kernel. This fixes a vulnerability, which can be exploited by 
malicious, local users to gain escalated privileges.

For more information:
SA59633


Solution:
Update kernel branch RHEL6 to 042stab092.2.

Original Advisory:
OpenVZ:
http://wiki.openvz.org/Download/kernel/rhel6/042stab092.2


@maintainer(s): after the bump, in case we need to stabilize the package, please let us know if it is ready for the stabilization or not.

Comment 1 Peter Volkov (RETIRED) gentoo-dev

2014-07-12 16:57:24 UTC

+  12 Jul 2014; Peter Volkov <pva@gentoo.org>
+  -openvz-sources-2.6.32.90.5.ebuild, openvz-sources-2.6.32.92.2.ebuild:
+  x86/amd64 stable, security bug #516900, thank Agostino Sarubbo for report.

Comment 2 Aaron Bauman (RETIRED) gentoo-dev

2016-11-25 10:50:13 UTC

Over 2 years old.  Closing.