Mandriva issued this update on December 12: http://lists.mandriva.com/security-announce/2011-12/msg00007.php
Keywords: (none) => SecurityStatus: NEW => ASSIGNEDAssignee: bugsquad => anssi.hannula
Suggested advisory: ======================== Updated libcap package fixes a security vulnerability: capsh program didn't chdir() when using --chroot, allowing the program being run to access outside the chroot. References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4099 http://www.mandriva.com/en/support/security/advisories/?dis=2011&name=MDVSA-2011:185 https://rhn.redhat.com/errata/RHSA-2011-1694.html ======================== Updated package in core/updates_testing: ===================== libcap-utils-2.19-7.1.mga1 from libcap-2.19-7.1.mga1 src.rpm. ===================== Test procedure: ============= 1. Install libcap-utils. 2. Run as root: capsh --chroot=/ -- -c /bin/pwd Result: - good: / - bad: current working directory =============
CC: (none) => anssi.hannulaAssignee: anssi.hannula => qa-bugs
Tested successfully on i586.
Testing complete on x86_64 Advisory ------------- Updated libcap package fixes a security vulnerability: capsh program didn't chdir() when using --chroot, allowing the program being run to access outside the chroot. References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4099 http://www.mandriva.com/en/support/security/advisories/?dis=2011&name=MDVSA-2011:185 https://rhn.redhat.com/errata/RHSA-2011-1694.html ------------- SRPM: libcap-2.19-7.1.mga1.src.rpm Could sysadmin please push from core/updates_testing to core/updates Thankyou!
Keywords: (none) => validated_updateCC: (none) => sysadmin-bugs
Update pushed.
Status: ASSIGNED => RESOLVEDCC: (none) => tmbResolution: (none) => FIXED
*** Bug 3245 has been marked as a duplicate of this bug. ***
CC: (none) => boklm
CC: boklm => (none)