870937 – (CVE-2022-2995) <app-containers/cri-o-1.25.0: incorrect handling of supplementary groups

Bug 870937 (CVE-2022-2995) - <app-containers/cri-o-1.25.0: incorrect handling of supplementary groups

Summary: <app-containers/cri-o-1.25.0: incorrect handling of supplementary groups

Status:	RESOLVED FIXED

Alias:	CVE-2022-2995

Product:	Gentoo Security
Classification:	Unclassified
Component:	Vulnerabilities (show other bugs)
Hardware:	All Linux

Importance:	Normal trivial
Assignee:	Gentoo Security

URL:	https://www.benthamsgaze.org/2022/08/...
Whiteboard:	~4 [noglsa]
Keywords:

Depends on:
Blocks:

Reported:	2022-09-17 18:14 UTC by John Helmert III
Modified:	2022-09-18 21:01 UTC (History)
CC List:	1 user (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description John Helmert III archtester

2022-09-17 18:14:37 UTC

Patch is in 1.25.0: https://github.com/cri-o/cri-o/commit/42b58538426711eeb8a57f841dc3e2d97881f49d

Please cleanup.

Comment 1 Larry the Git Cow gentoo-dev

2022-09-18 17:12:06 UTC

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=91729deddcdd7a21e48ef8ab6b3af32d6bbfb44e

commit 91729deddcdd7a21e48ef8ab6b3af32d6bbfb44e
Author:     Zac Medico <zmedico@gentoo.org>
AuthorDate: 2022-09-18 17:11:29 +0000
Commit:     Zac Medico <zmedico@gentoo.org>
CommitDate: 2022-09-18 17:11:44 +0000

    app-containers/cri-o: drop 1.24.1
    
    Bug: https://bugs.gentoo.org/870937
    Signed-off-by: Zac Medico <zmedico@gentoo.org>

 app-containers/cri-o/Manifest            |   1 -
 app-containers/cri-o/cri-o-1.24.1.ebuild | 101 -------------------------------
 2 files changed, 102 deletions(-)

Comment 2 John Helmert III archtester

2022-09-18 21:01:31 UTC

Thanks, all done!