{ "Definition": [ { "ID": "oval:org.altlinux.errata:def:20142023", "Version": "oval:org.altlinux.errata:def:20142023", "Class": "patch", "Metadata": { "Title": "ALT-PU-2014-2023: package `kernel-image-led-ws` update to version 3.15.10-alt4", "AffectedList": [ { "Family": "unix", "Platforms": [ "ALT Linux branch p9" ], "Products": [ "ALT Server", "ALT Virtualization Server", "ALT Workstation", "ALT Workstation K", "ALT Education", "Simply Linux", "Starterkit" ] } ], "References": [ { "RefID": "ALT-PU-2014-2023", "RefURL": "https://errata.altlinux.org/ALT-PU-2014-2023", "Source": "ALTPU" }, { "RefID": "CVE-2014-5206", "RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2014-5206", "Source": "CVE" }, { "RefID": "CVE-2014-5207", "RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2014-5207", "Source": "CVE" } ], "Description": "This update upgrades kernel-image-led-ws to version 3.15.10-alt4. \nSecurity Fix(es):\n\n * CVE-2014-5206: The do_remount function in fs/namespace.c in the Linux kernel through 3.16.1 does not maintain the MNT_LOCK_READONLY bit across a remount of a bind mount, which allows local users to bypass an intended read-only restriction and defeat certain sandbox protection mechanisms via a \"mount -o remount\" command within a user namespace.\n\n * CVE-2014-5207: fs/namespace.c in the Linux kernel through 3.16.1 does not properly restrict clearing MNT_NODEV, MNT_NOSUID, and MNT_NOEXEC and changing MNT_ATIME_MASK during a remount of a bind mount, which allows local users to gain privileges, interfere with backups and auditing on systems that had atime enabled, or cause a denial of service (excessive filesystem updating) on systems that had atime disabled via a \"mount -o remount\" command within a user namespace.", "Advisory": { "From": "errata.altlinux.org", "Severity": "High", "Rights": "Copyright 2024 BaseALT Ltd.", "Issued": { "Date": "2014-08-21" }, "Updated": { "Date": "2014-08-21" }, "BDUs": null, "CVEs": [ { "ID": "CVE-2014-5206", "CVSS": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "CWE": "CWE-269", "Href": "https://nvd.nist.gov/vuln/detail/CVE-2014-5206", "Impact": "High", "Public": "20140818" }, { "ID": "CVE-2014-5207", "CVSS": "AV:L/AC:H/Au:N/C:C/I:C/A:C", "CWE": "CWE-269", "Href": "https://nvd.nist.gov/vuln/detail/CVE-2014-5207", "Impact": "Low", "Public": "20140818" } ], "AffectedCPEs": { "CPEs": [ "cpe:/o:alt:kworkstation:9", "cpe:/o:alt:workstation:9", "cpe:/o:alt:server:9", "cpe:/o:alt:server-v:9", "cpe:/o:alt:education:9", "cpe:/o:alt:slinux:9", "cpe:/o:alt:starterkit:p9", "cpe:/o:alt:kworkstation:9.1", "cpe:/o:alt:workstation:9.1", "cpe:/o:alt:server:9.1", "cpe:/o:alt:server-v:9.1", "cpe:/o:alt:education:9.1", "cpe:/o:alt:slinux:9.1", "cpe:/o:alt:starterkit:9.1", "cpe:/o:alt:kworkstation:9.2", "cpe:/o:alt:workstation:9.2", "cpe:/o:alt:server:9.2", "cpe:/o:alt:server-v:9.2", "cpe:/o:alt:education:9.2", "cpe:/o:alt:slinux:9.2", "cpe:/o:alt:starterkit:9.2" ] } } }, "Criteria": { "Operator": "AND", "Criterions": [ { "TestRef": "oval:org.altlinux.errata:tst:1001", "Comment": "ALT Linux must be installed" } ], "Criterias": [ { "Operator": "OR", "Criterions": [ { "TestRef": "oval:org.altlinux.errata:tst:20142023001", "Comment": "firmware-kernel-led-ws is earlier than 0:3.15.10-alt4" }, { "TestRef": "oval:org.altlinux.errata:tst:20142023002", "Comment": "kernel-doc-led-ws is earlier than 0:3.15.10-alt4" }, { "TestRef": "oval:org.altlinux.errata:tst:20142023003", "Comment": "kernel-docbook-led-ws is earlier than 0:3.15.10-alt4" }, { "TestRef": "oval:org.altlinux.errata:tst:20142023004", "Comment": "kernel-headers-led-ws is earlier than 0:3.15.10-alt4" }, { "TestRef": "oval:org.altlinux.errata:tst:20142023005", "Comment": "kernel-headers-modules-led-ws is earlier than 0:3.15.10-alt4" }, { "TestRef": "oval:org.altlinux.errata:tst:20142023006", "Comment": "kernel-image-led-ws is earlier than 0:3.15.10-alt4" }, { "TestRef": "oval:org.altlinux.errata:tst:20142023007", "Comment": "kernel-man-led-ws is earlier than 0:3.15.10-alt4" }, { "TestRef": "oval:org.altlinux.errata:tst:20142023008", "Comment": "kernel-modules-drivers-extra-led-ws is earlier than 0:3.15.10-alt4" }, { "TestRef": "oval:org.altlinux.errata:tst:20142023009", "Comment": "kernel-modules-drm-led-ws is earlier than 0:3.15.10-alt4" }, { "TestRef": "oval:org.altlinux.errata:tst:20142023010", "Comment": "kernel-modules-edac-led-ws is earlier than 0:3.15.10-alt4" }, { "TestRef": "oval:org.altlinux.errata:tst:20142023011", "Comment": "kernel-modules-fglrx-led-ws is earlier than 0:14.10.1006.1001_3.15.10-alt4" }, { "TestRef": "oval:org.altlinux.errata:tst:20142023012", "Comment": "kernel-modules-fs-extra-led-ws is earlier than 0:3.15.10-alt4" }, { "TestRef": "oval:org.altlinux.errata:tst:20142023013", "Comment": "kernel-modules-guest-led-ws is earlier than 0:3.15.10-alt4" }, { "TestRef": "oval:org.altlinux.errata:tst:20142023014", "Comment": "kernel-modules-ide-led-ws is earlier than 0:3.15.10-alt4" }, { "TestRef": "oval:org.altlinux.errata:tst:20142023015", "Comment": "kernel-modules-infiniband-led-ws is earlier than 0:3.15.10-alt4" }, { "TestRef": "oval:org.altlinux.errata:tst:20142023016", "Comment": "kernel-modules-input-extra-led-ws is earlier than 0:3.15.10-alt4" }, { "TestRef": "oval:org.altlinux.errata:tst:20142023017", "Comment": "kernel-modules-ipmi-led-ws is earlier than 0:3.15.10-alt4" }, { "TestRef": "oval:org.altlinux.errata:tst:20142023018", "Comment": "kernel-modules-ipt_NETFLOW-led-ws is earlier than 0:2.0_3.15.10-alt4" }, { "TestRef": "oval:org.altlinux.errata:tst:20142023019", "Comment": "kernel-modules-kvm-led-ws is earlier than 0:3.15.10-alt4" }, { "TestRef": "oval:org.altlinux.errata:tst:20142023020", "Comment": "kernel-modules-media-led-ws is earlier than 0:3.15.10-alt4" }, { "TestRef": "oval:org.altlinux.errata:tst:20142023021", "Comment": "kernel-modules-mtd-led-ws is earlier than 0:3.15.10-alt4" }, { "TestRef": "oval:org.altlinux.errata:tst:20142023022", "Comment": "kernel-modules-net-extra-led-ws is earlier than 0:3.15.10-alt4" }, { "TestRef": "oval:org.altlinux.errata:tst:20142023023", "Comment": "kernel-modules-oprofile-led-ws is earlier than 0:3.15.10-alt4" }, { "TestRef": "oval:org.altlinux.errata:tst:20142023024", "Comment": "kernel-modules-scsi-led-ws is earlier than 0:3.15.10-alt4" }, { "TestRef": "oval:org.altlinux.errata:tst:20142023025", "Comment": "kernel-modules-sound-led-ws is earlier than 0:3.15.10-alt4" }, { "TestRef": "oval:org.altlinux.errata:tst:20142023026", "Comment": "kernel-modules-usb-gadget-led-ws is earlier than 0:3.15.10-alt4" }, { "TestRef": "oval:org.altlinux.errata:tst:20142023027", "Comment": "kernel-modules-vboxguest-led-ws is earlier than 0:4.3.14_3.15.10-alt4" }, { "TestRef": "oval:org.altlinux.errata:tst:20142023028", "Comment": "kernel-modules-vboxhost-led-ws is earlier than 0:4.3.14_3.15.10-alt4" }, { "TestRef": "oval:org.altlinux.errata:tst:20142023029", "Comment": "kernel-modules-video-led-ws is earlier than 0:3.15.10-alt4" }, { "TestRef": "oval:org.altlinux.errata:tst:20142023030", "Comment": "kernel-modules-vmware-led-ws is earlier than 0:6.0.2_3.15.10-alt4" }, { "TestRef": "oval:org.altlinux.errata:tst:20142023031", "Comment": "kernel-modules-watchdog-led-ws is earlier than 0:3.15.10-alt4" }, { "TestRef": "oval:org.altlinux.errata:tst:20142023032", "Comment": "kernel-modules-zfs-led-ws is earlier than 0:0.6.3_3.15.10-alt4" }, { "TestRef": "oval:org.altlinux.errata:tst:20142023033", "Comment": "kernel-src-led-ws is earlier than 0:3.15.10-alt4" }, { "TestRef": "oval:org.altlinux.errata:tst:20142023034", "Comment": "lkvm is earlier than 0:3.15.10-alt4" }, { "TestRef": "oval:org.altlinux.errata:tst:20142023035", "Comment": "perf is earlier than 0:3.15.10-alt4" } ] } ] } } ] }