Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 6 enterprise_linux:6::client | tuned | 0:0.2.19-11.el6 |
| Red Hat · RHEL 6 enterprise_linux:6::client | tuned-utils | 0:0.2.19-11.el6 |
| Red Hat · RHEL 6 enterprise_linux:6::computenode | tuned | 0:0.2.19-11.el6 |
| Red Hat · RHEL 6 enterprise_linux:6::computenode | tuned-utils | 0:0.2.19-11.el6 |
| Red Hat · RHEL 6 enterprise_linux:6::server | tuned | 0:0.2.19-11.el6 |
| Red Hat · RHEL 6 enterprise_linux:6::server | tuned-utils | 0:0.2.19-11.el6 |
| Red Hat · RHEL 6 enterprise_linux:6::workstation | tuned | 0:0.2.19-11.el6 |
| Red Hat · RHEL 6 enterprise_linux:6::workstation | tuned-utils | 0:0.2.19-11.el6 |
Vulnerabilities 1
-
Unscored —
tuned 2.10.0 creates its PID file with insecure permissions which allows local users to kill arbitrary processes.
References
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=784308
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=801561
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=845336
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=887355
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhba-2013_0386.json
-
report
https://access.redhat.com/security/cve/CVE-2012-6136
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=918813
-
advisory
https://www.cve.org/CVERecord?id=CVE-2012-6136
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2012-6136