drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Mangelnde Rechteprüfung in cgmanager
Name: |
Mangelnde Rechteprüfung in cgmanager |
|
ID: |
USN-2451-1 |
|
Distribution: |
Ubuntu |
|
Plattformen: |
Ubuntu 14.04 LTS, Ubuntu 14.10 |
|
Datum: |
Di, 6. Januar 2015, 09:43 |
|
Referenzen: |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1425 |
|
Applikationen: |
cgmanager |
|
Originalnachricht |
--===============1659371945851291380== Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="+QahgC5+KEYLbs62" Content-Disposition: inline
--+QahgC5+KEYLbs62 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline
========================================================================== Ubuntu Security Notice USN-2451-1 January 06, 2015
cgmanager vulnerability ==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 14.10 - Ubuntu 14.04 LTS
Summary:
cgmanager could be made to expose sensitive information or devices to containers running on the system.
Software Description: - cgmanager: Central cgroup manager daemon
Details:
Serge Hallyn discovered that cgmanager did not consistently enforce proper nesting when modifying cgroup properties. A local attacker in a privileged container could use this to set cgroup values for all cgroups.
Update instructions:
The problem can be corrected by updating your system to the following package versions:
Ubuntu 14.10: cgmanager 0.32-4ubuntu1.1
Ubuntu 14.04 LTS: cgmanager 0.24-0ubuntu7.1
After a standard system update you need to reboot your computer to make all the necessary changes.
References: http://www.ubuntu.com/usn/usn-2451-1 CVE-2014-1425
Package Information: https://launchpad.net/ubuntu/+source/cgmanager/0.32-4ubuntu1.1 https://launchpad.net/ubuntu/+source/cgmanager/0.24-0ubuntu7.1
--+QahgC5+KEYLbs62 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1
iQEcBAEBAgAGBQJUq1F5AAoJEPMhclmdjS6XajcH/ig90HHGpAp/9qtgozmcSVWu n+GzE3EsfcV1UzKUCxiSTYWMUZ05fUAEOU6XhBGo/iCpQpcmHSF7qIecGKX4XbY7 Ae4r3XJl6c0TDpYukzhHQc5lrsepanFdSF30DcaiVSX2jQlA9ORsEzuELlZ/msJf 8ZyWVAH5oXkBrj47katHJ1E7RS3pesb/C78J4IxsDnQ6ixlB9XfwSMmGBEeIpUrP kyuZh/yavODvEO5v83AoVYg07hfESag0ZC2P8yfNe8FRWfkoDCfXuW8uSpNCN+lk KCYJJE6jDpNKEQsU801MJqUNq4gyHigfJGNJTTnm0tgexfpb3eKxpiM3sRHhL+o= =lVn4 -----END PGP SIGNATURE-----
--+QahgC5+KEYLbs62--
--===============1659371945851291380== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline
-- ubuntu-security-announce mailing list ubuntu-security-announce@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce
--===============1659371945851291380==--
|
|
|
|