Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 92864 - raw, pktcdvd devices local privilege escalation (CAN-2005-{1264,1589})
Summary: raw, pktcdvd devices local privilege escalation (CAN-2005-{1264,1589})
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Kernel (show other bugs)
Hardware: All Linux
: High major (vote)
Assignee: Gentoo Security
URL: http://marc.theaimsgroup.com/?l=linux...
Whiteboard: [linux < 2.6.11.10]
Keywords:
: 92553 92934 (view as bug list)
Depends on:
Blocks:
 
Reported: 2005-05-16 22:51 UTC by Andy Lutomirski
Modified: 2009-05-03 15:24 UTC (History)
5 users (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Andy Lutomirski 2005-05-16 22:51:38 UTC 
(Apologies if this is a dupe, but I couldn't find any refernce to it.)

There are two new holes in 2.6.11.9, fixed in 2.6.11.10, both covered by CAN-2005-1264 as far as I can tell.  This is updated in vanilla-sources, but the rest of the kernels don't seem to have caught up.
Comment 1 Andy Lutomirski 2005-05-17 03:41:55 UTC 
This is probably fixed in gentoo-sources-2.6.11-r9, which should probably be
marked stable as a result.
Comment 2 Tim Yamin (RETIRED) gentoo-dev 2005-05-17 15:13:02 UTC 
*** Bug 92934 has been marked as a duplicate of this bug. ***
Comment 3 Daniel Drake (RETIRED) gentoo-dev 2005-05-18 04:18:06 UTC 
Fixed in genpatches-2.6-11.12, which fixes the following kernels:
gentoo-sources-2.6.11-r9
usermode-sources-2.6.11-r1
win4lin-sources-2.6.11
hardened-sources-2.6.11-r13
Comment 4 Micheal Marineau (RETIRED) gentoo-dev 2005-05-20 17:16:05 UTC 
fixed in ck-sources-2.6.11_p8-r1
Comment 5 Thierry Carrez (RETIRED) gentoo-dev 2005-05-23 05:07:51 UTC 
*** Bug 92553 has been marked as a duplicate of this bug. ***
Comment 6 Tim Yamin (RETIRED) gentoo-dev 2005-11-26 03:25:07 UTC 
All fixed, closing.