Red Hat Security AdvisoryRHSA-2011:1694
libcap security and bug fix update
Released 2011-12-05 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) libcap-2.16-5.5.el6
- Red Hat Enterprise Linux Desktop Optional (v. 6) libcap-2.16-5.5.el6, libcap-devel-2.16-5.5.el6
- Red Hat Enterprise Linux HPC Node (v. 6) libcap-2.16-5.5.el6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) libcap-2.16-5.5.el6, libcap-devel-2.16-5.5.el6
- Red Hat Enterprise Linux Server (v. 6) libcap-2.16-5.5.el6, libcap-2.16-5.5.el6.ppc, libcap-devel-2.16-5.5.el6 +1
- Red Hat Enterprise Linux Workstation (v. 6) libcap-2.16-5.5.el6, libcap-devel-2.16-5.5.el6
Fixes 1 record
Priority LOW 21
The capsh program in libcap before 2.22 does not change the current working directory when the --chroot option is specified, which allows local users to bypass the chroot restrictions via unspecified vectors.
CVSS 2.0MEDIUM 4.6· Local · No auth · Interaction — · EPSS 0.00382 · Published 2014-02-08 · Fixed CWE-264
