https://wiki.openvz.org/index.php?action=history&feed=atom&title=Download%2Fkernel%2Frhel6-testing%2F042stab076.5%2Fchanges 2026-06-13T19:16:24Z Revision history for this page on the wiki MediaWiki 1.31.1 https://wiki.openvz.org/index.php?title=Download/kernel/rhel6-testing/042stab076.5/changes&diff=13547&oldid=prev 2013-03-25T16:06:55Z

<p>created</p> <p><b>New page</b></p><div>== Changes ==<br /> Since {{kernel link|rhel6-testing|042stab076.3}}:<br /> <br /> This kernel is still based on 2.6.32-279.22.1.el6 Red Hat kernel, but a set of<br /> security patches has been backported from kernel-2.6.32-358.2.1.el6 RHEL6.4<br /> kernel (RHSA-2013-0630):<br /> <br /> * A flaw was found in the way the xen_iret() function in the Linux kernel used the DS (the CPU's Data Segment) register. A local, unprivileged user in a 32-bit, para-virtualized Xen hypervisor guest could use this flaw to crash the guest or, potentially, escalate their privileges. (CVE-2013-0228, Important)<br /> <br /> * A flaw was found in the way file permission checks for the &quot;/dev/cpu/[x]/msr&quot; files were performed in restricted root environments (for example, when using a capability-based security model). A local user with the ability to write to these files could use this flaw to escalate their privileges to kernel level, for example, by writing to the SYSENTER_EIP_MSR register. (CVE-2013-0268, Important)</div>

Kir