kernel, perf, python security update

2013-02-2720:10:11

CentOS Project

lists.centos.org

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

10.3%

JSON

CentOS Errata and Security Advisory CESA-2013:0567

The kernel packages contain the Linux kernel, the core of any Linux
operating system.

This update fixes the following security issue:

A race condition was found in the way the Linux kernel’s ptrace
implementation handled PTRACE_SETREGS requests when the debuggee was woken
due to a SIGKILL signal instead of being stopped. A local, unprivileged
user could use this flaw to escalate their privileges. (CVE-2013-0871,
Important)

Users should upgrade to these updated packages, which contain a backported
patch to correct this issue. The system must be rebooted for this update to
take effect.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2013-March/081787.html
https://lists.centos.org/pipermail/centos-cr-announce/2013-February/027078.html

Affected packages:
kernel
kernel-debug
kernel-debug-devel
kernel-devel
kernel-doc
kernel-firmware
kernel-headers
perf
python-perf

Upstream details at:
https://access.redhat.com/errata/RHSA-2013:0567

OSVersionArchitecturePackageVersionFilename
CentOS6i686kernel< 2.6.32-358.0.1.el6kernel-2.6.32-358.0.1.el6.i686.rpm
CentOS6i686kernel-debug< 2.6.32-358.0.1.el6kernel-debug-2.6.32-358.0.1.el6.i686.rpm
CentOS6i686kernel-debug-devel< 2.6.32-358.0.1.el6kernel-debug-devel-2.6.32-358.0.1.el6.i686.rpm
CentOS6i686kernel-devel< 2.6.32-358.0.1.el6kernel-devel-2.6.32-358.0.1.el6.i686.rpm
CentOS6noarchkernel-doc< 2.6.32-358.0.1.el6kernel-doc-2.6.32-358.0.1.el6.noarch.rpm
CentOS6noarchkernel-firmware< 2.6.32-358.0.1.el6kernel-firmware-2.6.32-358.0.1.el6.noarch.rpm
CentOS6i686kernel-headers< 2.6.32-358.0.1.el6kernel-headers-2.6.32-358.0.1.el6.i686.rpm
CentOS6i686perf< 2.6.32-358.0.1.el6perf-2.6.32-358.0.1.el6.i686.rpm
CentOS6i686python-perf< 2.6.32-358.0.1.el6python-perf-2.6.32-358.0.1.el6.i686.rpm
CentOS6x86_64kernel< 2.6.32-358.0.1.el6kernel-2.6.32-358.0.1.el6.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
CentOS	6	i686	kernel	< 2.6.32-358.0.1.el6	kernel-2.6.32-358.0.1.el6.i686.rpm
CentOS	6	i686	kernel-debug	< 2.6.32-358.0.1.el6	kernel-debug-2.6.32-358.0.1.el6.i686.rpm
CentOS	6	i686	kernel-debug-devel	< 2.6.32-358.0.1.el6	kernel-debug-devel-2.6.32-358.0.1.el6.i686.rpm
CentOS	6	i686	kernel-devel	< 2.6.32-358.0.1.el6	kernel-devel-2.6.32-358.0.1.el6.i686.rpm
CentOS	6	noarch	kernel-doc	< 2.6.32-358.0.1.el6	kernel-doc-2.6.32-358.0.1.el6.noarch.rpm
CentOS	6	noarch	kernel-firmware	< 2.6.32-358.0.1.el6	kernel-firmware-2.6.32-358.0.1.el6.noarch.rpm
CentOS	6	i686	kernel-headers	< 2.6.32-358.0.1.el6	kernel-headers-2.6.32-358.0.1.el6.i686.rpm
CentOS	6	i686	perf	< 2.6.32-358.0.1.el6	perf-2.6.32-358.0.1.el6.i686.rpm
CentOS	6	i686	python-perf	< 2.6.32-358.0.1.el6	python-perf-2.6.32-358.0.1.el6.i686.rpm
CentOS	6	x86_64	kernel	< 2.6.32-358.0.1.el6	kernel-2.6.32-358.0.1.el6.x86_64.rpm