ALT Linux Team

Branch sisyphus update on 2015-09-16

2015-09-16

ALT-BU-2015-2641-1

Branch sisyphus update bulletin.

ALT-PU-2015-1783-1

Package libunwind updated to version 1.1-alt2 for branch sisyphus in task 149157.

Closed vulnerabilities

Published: 2015-08-26
Modified: 2024-11-21

CVE-2015-3239

Off-by-one error in the dwarf_to_unw_regnum function in include/dwarf_i.h in libunwind 1.1 allows local users to have unspecified impact via invalid dwarf opcodes.

Severity: LOW (3.3)
References:

ALT-PU-2015-1784-1

Package lxc updated to version 1.1.3-alt1 for branch sisyphus in task 149288.

Closed vulnerabilities

Published: 2015-08-12
Modified: 2024-11-21

CVE-2015-1331

lxclock.c in LXC 1.1.2 and earlier allows local users to create arbitrary files via a symlink attack on /run/lock/lxc/*.

Severity: MEDIUM (4.9)
References:
Published: 2015-08-12
Modified: 2024-11-21

CVE-2015-1334

attach.c in LXC 1.1.2 and earlier uses the proc filesystem in a container, which allows local container users to escape AppArmor or SELinux confinement by mounting a proc filesystem with a crafted (1) AppArmor profile or (2) SELinux label.

Severity: MEDIUM (4.6)
References:
VKontakte | Telegram | YouTube | Forum | GitHub | Bugzilla
Version: 2.1.0
Back to top