| Summary: | libcap is missing security update for CVE-2011-4099 | ||
|---|---|---|---|
| Product: | Mageia | Reporter: | David Walser <luigiwalser> |
| Component: | Security | Assignee: | QA Team <qa-bugs> |
| Status: | RESOLVED FIXED | QA Contact: | |
| Severity: | normal | ||
| Priority: | Normal | CC: | anssi.hannula, sysadmin-bugs, tmb |
| Version: | 1 | Keywords: | Security, validated_update |
| Target Milestone: | --- | ||
| Hardware: | i586 | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Source RPM: | libcap-2.19-7.mga1.src.rpm | CVE: | |
| Status comment: | |||
|
Description
David Walser
2011-12-30 03:19:43 CET
Anssi Hannula
2011-12-30 04:33:32 CET
Keywords:
(none) =>
Security Suggested advisory: ======================== Updated libcap package fixes a security vulnerability: capsh program didn't chdir() when using --chroot, allowing the program being run to access outside the chroot. References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4099 http://www.mandriva.com/en/support/security/advisories/?dis=2011&name=MDVSA-2011:185 https://rhn.redhat.com/errata/RHSA-2011-1694.html ======================== Updated package in core/updates_testing: ===================== libcap-utils-2.19-7.1.mga1 from libcap-2.19-7.1.mga1 src.rpm. ===================== Test procedure: ============= 1. Install libcap-utils. 2. Run as root: capsh --chroot=/ -- -c /bin/pwd Result: - good: / - bad: current working directory ============= CC:
(none) =>
anssi.hannula Tested successfully on i586. Testing complete on x86_64 Advisory ------------- Updated libcap package fixes a security vulnerability: capsh program didn't chdir() when using --chroot, allowing the program being run to access outside the chroot. References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4099 http://www.mandriva.com/en/support/security/advisories/?dis=2011&name=MDVSA-2011:185 https://rhn.redhat.com/errata/RHSA-2011-1694.html ------------- SRPM: libcap-2.19-7.1.mga1.src.rpm Could sysadmin please push from core/updates_testing to core/updates Thankyou! Keywords:
(none) =>
validated_update Update pushed. Status:
ASSIGNED =>
RESOLVED
Nicolas Vigier
2014-05-08 18:04:31 CEST
CC:
boklm =>
(none) |