Download/kernel/rhel6/042stab137.1/changes

From OpenVZ Virtuozzo Containers Wiki
< Download‎ | kernel‎ | rhel6‎ | 042stab137.1
Revision as of 08:52, 6 May 2019 by Vvs (talk | contribs) (Created page with "== Changes == Since {{kernel link|rhel6|042stab136.1}}: * Rebase to RHEL6u10 kernel 2.6.32-754.12.1.el6 * '''[Important]''' A vulnerability was found in the fs/inode.c:inode_...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search

Changes[edit]

Since 042stab136.1:

  • Rebase to RHEL6u10 kernel 2.6.32-754.12.1.el6
  • [Important] A vulnerability was found in the fs/inode.c:inode_init_owner() function logic of the Linux kernel that allows local users to create files with an unintended group ownership and with group execution and SGID permission bits set, in a scenario where a directory is SGID and belongs to a certain group and is writable by a user who is not a member of this group. This can lead to excessive permissions granted in case when they should not. (CVE-2018-13405)
  • Minor ploop improvements.

See also[edit]

Retrieved from "https://wiki.openvz.org/index.php?title=Download/kernel/rhel6/042stab137.1/changes&oldid=23090"