Red Hat Security AdvisoryRHSA-2011:0320
libcgroup security update
Released 2011-03-03 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) libcgroup-0.36.1-6.el6_0.1
- Red Hat Enterprise Linux Desktop Optional (v. 6) libcgroup-0.36.1-6.el6_0.1, libcgroup-devel-0.36.1-6.el6_0.1, libcgroup-pam-0.36.1-6.el6_0.1
- Red Hat Enterprise Linux HPC Node (v. 6) libcgroup-0.36.1-6.el6_0.1
- Red Hat Enterprise Linux HPC Node Optional (v. 6) libcgroup-0.36.1-6.el6_0.1, libcgroup-devel-0.36.1-6.el6_0.1, libcgroup-pam-0.36.1-6.el6_0.1
- Red Hat Enterprise Linux Server (v. 6) libcgroup-0.36.1-6.el6_0.1, libcgroup-0.36.1-6.el6_0.1.ppc, libcgroup-devel-0.36.1-6.el6_0.1 +1
- Red Hat Enterprise Linux Server Optional (v. 6) libcgroup-0.36.1-6.el6_0.1, libcgroup-pam-0.36.1-6.el6_0.1, libcgroup-pam-0.36.1-6.el6_0.1.ppc
- Red Hat Enterprise Linux Workstation (v. 6) libcgroup-0.36.1-6.el6_0.1, libcgroup-devel-0.36.1-6.el6_0.1
- Red Hat Enterprise Linux Workstation Optional (v. 6) libcgroup-0.36.1-6.el6_0.1, libcgroup-pam-0.36.1-6.el6_0.1
Fixes 2 records
Priority LOW 32
Heap-based buffer overflow in the parse_cgroup_spec function in tools/tools-common.c in the Control Group Configuration Library (aka libcgroup or libcg) before 0.37.1 allows local users to gain privileges via a crafted c…
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00419 · Published 2011-03-22 · Fixed CWE-119
Priority LOW 11
The cgre_receive_netlink_msg function in daemon/cgrulesengd.c in cgrulesengd in the Control Group Configuration Library (aka libcgroup or libcg) before 0.37.1 does not verify that netlink messages originated in the kerne…
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00386 · Published 2011-03-22 · Fixed CWE-264
