Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 516900 - <sys-kernel/openvz-sources-2.6.32.90.5: ptrace SYSRET Path Privilege Escalation Vulnerability
Summary: <sys-kernel/openvz-sources-2.6.32.90.5: ptrace SYSRET Path Privilege Escalati...
Status: RESOLVED OBSOLETE
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal major (vote)
Assignee: Gentoo Security
URL: http://secunia.com/advisories/59892/
Whiteboard: B1 [noglsa]
Keywords:
Depends on:
Blocks:
 
Reported: 2014-07-11 15:25 UTC by Agostino Sarubbo
Modified: 2016-11-25 10:50 UTC (History)
3 users (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Agostino Sarubbo gentoo-dev 2014-07-11 15:25:43 UTC 
From ${URL} :

OpenVZ has issued an update for kernel. This fixes a vulnerability, which can be exploited by 
malicious, local users to gain escalated privileges.

For more information:
SA59633


Solution:
Update kernel branch RHEL6 to 042stab092.2.

Original Advisory:
OpenVZ:
http://wiki.openvz.org/Download/kernel/rhel6/042stab092.2


@maintainer(s): after the bump, in case we need to stabilize the package, please let us know if it is ready for the stabilization or not.
Comment 1 Peter Volkov (RETIRED) gentoo-dev 2014-07-12 16:57:24 UTC 
+  12 Jul 2014; Peter Volkov <pva@gentoo.org>
+  -openvz-sources-2.6.32.90.5.ebuild, openvz-sources-2.6.32.92.2.ebuild:
+  x86/amd64 stable, security bug #516900, thank Agostino Sarubbo for report.
Comment 2 Aaron Bauman (RETIRED) gentoo-dev 2016-11-25 10:50:13 UTC 
Over 2 years old.  Closing.