Description
chpst in runit 1.3.3-1 for Debian GNU/Linux, when compiled on little endian i386 machines against dietlibc, does not properly handle when multiple groups are specified in the -u option, which causes chpst to assign permissions for the root group due to inconsistent bit sizes for the gid_t type.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | runit | 1.4.1-1 | — |
| Debian 13 | runit | 1.4.1-1 | — |
| Debian 12 | runit | 1.4.1-1 | — |
References
- 17179 vdb-entry
- runit-chpst-gain-privileges(25419) vdb-entry
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=356016
- 19323 third-party-advisory