Synopsis: Early update for local privilege escalation using ptrace: CVE-2014-4699.
We felt that it's important to ship this update early, before distributions released kernels that fix the problem, because our audit showed that we have a large number of customers affected by the CVE. DESCRIPTION * CVE-2014-4699: Privilege escalation in ptrace() RIP modification. Missing validation of the RIP value could allow an unprivileged user to cause the CPU to fetch instructions from a non-canonical address. On some CPUs this could result in a denial-of-service or potentially allow escalation of privileges. INSTALLING THE UPDATES On systems that have "autoinstall = yes" in /etc/uptrack/uptrack.conf, these updates will be installed automatically and you do not need to take any action. Alternatively, you can install these updates by running: # /usr/sbin/uptrack-upgrade -y SUPPORT Ksplice support is available at [email protected] _______________________________________________ Ksplice-EL6-Updates mailing list [email protected] https://oss.oracle.com/mailman/listinfo/ksplice-el6-updates
