Security issue in kernel-vserver (all versions)

Arkadiusz Miskiewicz arekm at pld-linux.org
Fri Apr 28 09:05:22 CEST 2006


On Thursday 27 April 2006 12:03, Jan Rekorajski wrote:
> There is a serious security issue with all versions of linux-vserver.
> All versions 2.0 and above are vulnerable.
>
> Description:
> Setting context capability (ccapabilities) gives rights to use
> operations allowed by this capability to all users inside vserver.
>
> All users of kernel-vserver are urged to upgrade to latest kernel from
> CVS.

Trzeba na coś uważać przy upgrade? np. wymaganie nowszych utilsów, coś w 
konfigu zmienione etc?

> Jan

-- 
Arkadiusz Miśkiewicz        PLD/Linux Team
arekm / maven.pl            http://ftp.pld-linux.org/



More information about the pld-devel-pl mailing list