Red Hat Security Advisory

RHSA-2019:2047

libcgroup security update

Released 2019-08-06 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) libcgroup-0.41-21.el7, libcgroup-tools-0.41-21.el7
Red Hat Enterprise Linux Client Optional (v. 7) libcgroup-devel-0.41-21.el7, libcgroup-pam-0.41-21.el7
Red Hat Enterprise Linux ComputeNode (v. 7) libcgroup-0.41-21.el7, libcgroup-tools-0.41-21.el7
Red Hat Enterprise Linux ComputeNode Optional (v. 7) libcgroup-devel-0.41-21.el7, libcgroup-pam-0.41-21.el7
Red Hat Enterprise Linux Server (v. 7) libcgroup-0.41-21.el7, libcgroup-0.41-21.el7.ppc, libcgroup-tools-0.41-21.el7
Red Hat Enterprise Linux Server Optional (v. 7) libcgroup-devel-0.41-21.el7, libcgroup-devel-0.41-21.el7.ppc, libcgroup-pam-0.41-21.el7 +1
Red Hat Enterprise Linux Workstation (v. 7) libcgroup-0.41-21.el7, libcgroup-tools-0.41-21.el7
Red Hat Enterprise Linux Workstation Optional (v. 7) libcgroup-devel-0.41-21.el7, libcgroup-pam-0.41-21.el7

TI-2018-10291 CVE-2018-14348 · GHSA-pp2m-446r-52q7

MEDIUM 40

libcgroup up to and including 0.41 creates /var/log/cgred with mode 0666 regardless of the configured umask, leading to disclosure of information.

CVSS 3.0HIGH 8.1 Network Low privileges No interaction EPSS 0.02316 Published 2018-08-14 Partial fix CWE-200