Bug 140303

Summary:

sys-kernel/xen-sources revision bump to fix security bug Privilege escalation through prctl() and suid_dumpable (CVE-2006-2451)

Product:

Gentoo Security

Reporter:

Tuan Van (RETIRED) <langthang>

Component:

Kernel

Assignee:

Gentoo Security <security>

Status:

RESOLVED DUPLICATE

Severity:

critical

CC:

agriffis, chrb

Priority:

High

Version:

unspecified

Hardware:

All

OS:

Linux

URL:

http://lists.xensource.com/archives/html/xen-devel/2006-07/msg00425.html

Whiteboard:

Package list:

Runtime testing required:

---

Attachments:

Description	Flags
patch against xen-sources-2.6.16.18.patch ebuild	none
files/xen-sources-2.6.16.18-CVE-2006-2451.patch	none

Description Tuan Van (RETIRED) gentoo-dev

2006-07-13 23:41:09 UTC

I rate this critical some people got owned by this bug.
Patches to follow.

Comment 1 Tuan Van (RETIRED) gentoo-dev

2006-07-13 23:44:15 UTC

Created attachment 91683 [details, diff]
patch against xen-sources-2.6.16.18.patch ebuild

Comment 2 Tuan Van (RETIRED) gentoo-dev

2006-07-13 23:46:05 UTC

Created attachment 91684 [details, diff]
files/xen-sources-2.6.16.18-CVE-2006-2451.patch

patch taken from http://lists.xensource.com/archives/html/xen-devel/2006-07/msg00425.html

Comment 3 Tim Yamin (RETIRED) gentoo-dev

2006-07-14 02:01:05 UTC

Duping against the main bug; this is fixed in 2.6.16.24 to which xen-sources should be updated instead.

*** This bug has been marked as a duplicate of 139475 ***