[Ksplice][Virtuozzo 4.7 Updates] New updates available via Ksplice (2.6.32-042stab092.1)
Jamie Iles
jamie.iles at oracle.com
Fri Jul 4 11:15:44 PDT 2014
Synopsis: 2.6.32-042stab092.1 can now be patched using Ksplice
CVEs: CVE-2013-6378 CVE-2014-0196 CVE-2014-1737 CVE-2014-1738 CVE-2014-1874
Systems running Virtuozzo 4.7 or the OpenVZ RHEL 6 kernel can now use
Ksplice to patch against the latest Parallels Virtuozzo Containers 4.7
kernel security update, 2.6.32-042stab092.1.
INSTALLING THE UPDATES
We recommend that all users of Ksplice Uptrack on Virtuozzo 4.7 or
OpenVZ on RHEL 6 install these updates.
On systems that have "autoinstall = yes" in /etc/uptrack/uptrack.conf,
these updates will be installed automatically and you do not need to
take any action.
Alternatively, you can install these updates by running:
# /usr/sbin/uptrack-upgrade -y
DESCRIPTION
* CVE-2014-1737, CVE-2014-1738: Local privilege escalation in floppy ioctl.
The floppy driver would leak internal memory addresses to userspace,
and would allow unprivileged userspace code to overwrite those
addresses, allowing for a local privilege escalation and gaining
of root.
* CVE-2014-0196: Pseudo TTY device write buffer handling race.
A race in how the pseudo ttyp (pty) device handled device writes when
two threads/processes wrote to the same pty, the buffer end could be
overwritten. An attacker could use this to cause a denial-of-service or
gain root privileges.
* CVE-2013-6378: Denial-of-service in Marvell 8xxx Libertas WLAN driver.
Incorrect validation of user supplied data in the Marvell 8xxx Libertas
WLAN driver could allow a privileged user to trigger an invalid pointer
dereference and crash the system.
* CVE-2014-1874: Denial-of-service in SELinux on empty security context.
Incorrect input validation in the SELinux subsystem could lead to a NULL
pointer dereference. A local, privileged user could use this flaw to cause
a denial-of-service.
* NULL pointer dereference in disk quota subsystem.
A race condition in quota management could result in a NULL pointer
dereference and kernel crash when initializing a disk quota.
* Use-after-free in checkpoint-restore mount failure handling.
Incorrect error logging could result in a use-after-free and a kernel
crash when a mount point restore operation failed.
SUPPORT
Ksplice support is available at ksplice-support_ww at oracle.com.
More information about the Ksplice-VZ4.7-Updates
mailing list