Download/kernel/rhel6/042stab137.1/changes

From OpenVZ Virtuozzo Containers Wiki
Jump to: navigation, search

Changes[edit]

Since 042stab136.1:

  • Rebase to RHEL6u10 kernel 2.6.32-754.12.1.el6
  • [Important] A vulnerability was found in the fs/inode.c:inode_init_owner() function logic of the Linux kernel that allows local users to create files with an unintended group ownership and with group execution and SGID permission bits set, in a scenario where a directory is SGID and belongs to a certain group and is writable by a user who is not a member of this group. This can lead to excessive permissions granted in case when they should not. (CVE-2018-13405)
  • Minor ploop improvements.

See also[edit]

Retrieved from "https://wiki.openvz.org/index.php?title=Download/kernel/rhel6/042stab137.1/changes&oldid=23090"