[Bug 659076] New: /debug/acpi/custom_method is world writable
https://bugzilla.novell.com/show_bug.cgi?id=659076 https://bugzilla.novell.com/show_bug.cgi?id=659076#c0 Summary: /debug/acpi/custom_method is world writable Classification: openSUSE Product: openSUSE 11.3 Version: Final Platform: Other OS/Version: Other Status: ASSIGNED Severity: Critical Priority: P5 - None Component: Kernel AssignedTo: jslaby@novell.com ReportedBy: jslaby@novell.com QAContact: qa@suse.de Found By: --- Blocker: --- Fix is ed3aada1bf34c5a9e98af167f125f8a740fc726a. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=659076 https://bugzilla.novell.com/show_bug.cgi?id=659076#c1 Jiri Slaby <jslaby@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |RESOLVED Resolution| |FIXED --- Comment #1 from Jiri Slaby <jslaby@novell.com> 2010-12-13 09:39:44 UTC --- Committed. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=659076 https://bugzilla.novell.com/show_bug.cgi?id=659076#c2 Marcus Meissner <meissner@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |meissner@novell.com, | |security-team@suse.de --- Comment #2 from Marcus Meissner <meissner@novell.com> 2010-12-15 10:52:09 UTC --- How did you get knowledge of this issue? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=659076 https://bugzilla.novell.com/show_bug.cgi?id=659076#c Marcus Meissner <meissner@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|/debug/acpi/custom_method |VUL-1: kernel: |is world writable |/debug/acpi/custom_method | |is world writable -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=659076 https://bugzilla.novell.com/show_bug.cgi?id=659076#c3 Marcus Meissner <meissner@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED Resolution|FIXED | --- Comment #3 from Marcus Meissner <meissner@novell.com> 2010-12-15 12:13:41 UTC --- reopen for tracking as security issue -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=659076 https://bugzilla.novell.com/show_bug.cgi?id=659076#c Marcus Meissner <meissner@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jslaby@novell.com AssignedTo|jslaby@novell.com |security-team@suse.de -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=659076 https://bugzilla.novell.com/show_bug.cgi?id=659076#c4 --- Comment #4 from Marcus Meissner <meissner@novell.com> 2010-12-15 13:46:08 UTC --- Was introduced in 2.6.33. It was introduced in a1a541d86f50a9957beeedb122a035870d602647 into drivers/acpi/debug.c and it got moved to debugfs.c during 2.6.36 development in a25ee9200eef07377e1703697afbb5d81f89e500. CVE-2010-4347 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=659076 https://bugzilla.novell.com/show_bug.cgi?id=659076#c5 Marcus Meissner <meissner@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|security-team@suse.de |mgalbraith@novell.com --- Comment #5 from Marcus Meissner <meissner@novell.com> 2010-12-15 13:47:03 UTC --- needs to be fixed in SLERT 11 SP1 too I think. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=659076 https://bugzilla.novell.com/show_bug.cgi?id=659076#c6 --- Comment #6 from Jiri Slaby <jslaby@novell.com> 2010-12-16 14:36:55 UTC --- (In reply to comment #2)
How did you get knowledge of this issue?
By noticing a patch in the .35 stable queue... -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=659076 https://bugzilla.novell.com/show_bug.cgi?id=659076#c10 --- Comment #10 from Jiri Slaby <jslaby@novell.com> 2010-12-16 17:00:26 UTC --- (In reply to comment #5)
needs to be fixed in SLERT 11 SP1 too I think.
Correct. Pushed out right now. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=659076 https://bugzilla.novell.com/show_bug.cgi?id=659076#c11 Thomas Biege <thomas@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P3 - Medium --- Comment #11 from Thomas Biege <thomas@novell.com> 2010-12-17 10:25:40 UTC --- p5->p3 mass change -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=659076 https://bugzilla.novell.com/show_bug.cgi?id=659076#c12 Mike Galbraith <mgalbraith@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|mgalbraith@novell.com |security-team@suse.de --- Comment #12 from Mike Galbraith <mgalbraith@novell.com> 2010-12-20 08:02:55 UTC --- Since Jiri pushed the fix for SLE11-SP1-RT(thanks), reassigning to the security team as usual. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=659076 https://bugzilla.novell.com/show_bug.cgi?id=659076#c13 Swamp Workflow Management <swamp@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status Whiteboard| |maint:released:11.3:37798 --- Comment #13 from Swamp Workflow Management <swamp@suse.com> 2011-01-03 08:31:45 UTC --- Update released for: kernel-debug, kernel-debug-base, kernel-debug-base-debuginfo, kernel-debug-debuginfo, kernel-debug-debugsource, kernel-debug-devel, kernel-debug-devel-debuginfo, kernel-default, kernel-default-base, kernel-default-base-debuginfo, kernel-default-debuginfo, kernel-default-debugsource, kernel-default-devel, kernel-default-devel-debuginfo, kernel-desktop, kernel-desktop-base, kernel-desktop-base-debuginfo, kernel-desktop-debuginfo, kernel-desktop-debugsource, kernel-desktop-devel, kernel-desktop-devel-debuginfo, kernel-devel, kernel-ec2, kernel-ec2-base, kernel-ec2-base-debuginfo, kernel-ec2-debuginfo, kernel-ec2-debugsource, kernel-ec2-devel, kernel-ec2-devel-debuginfo, kernel-ec2-extra, kernel-ec2-extra-debuginfo, kernel-pae, kernel-pae-base, kernel-pae-base-debuginfo, kernel-pae-debuginfo, kernel-pae-debugsource, kernel-pae-devel, kernel-pae-devel-debuginfo, kernel-source, kernel-source-vanilla, kernel-syms, kernel-trace, kernel-trace-base, kernel-trace-base-debuginfo, kernel-trace-debuginfo, kernel-trace-debugsource, kernel-trace-devel, kernel-trace-devel-debuginfo, kernel-vanilla, kernel-vanilla-base, kernel-vanilla-base-debuginfo, kernel-vanilla-debuginfo, kernel-vanilla-debugsource, kernel-vanilla-devel, kernel-vanilla-devel-debuginfo, kernel-vmi, kernel-vmi-base, kernel-vmi-base-debuginfo, kernel-vmi-debuginfo, kernel-vmi-debugsource, kernel-vmi-devel, kernel-vmi-devel-debuginfo, kernel-xen, kernel-xen-base, kernel-xen-base-debuginfo, kernel-xen-debuginfo, kernel-xen-debugsource, kernel-xen-devel, kernel-xen-devel-debuginfo, preload-kmp-default, preload-kmp-desktop Products: openSUSE 11.3 (debug, i586, x86_64) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=659076 https://bugzilla.novell.com/show_bug.cgi?id=659076#c14 Swamp Workflow Management <swamp@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status Whiteboard|maint:released:11.3:37798 |maint:released:11.3:37798 | |maint:released:sle11-sp1:38 | |374 --- Comment #14 from Swamp Workflow Management <swamp@suse.com> 2011-02-07 11:51:27 UTC --- Update released for: brocade-bna-kmp-rt, iscsitarget-kmp-rt, kernel-rt, kernel-rt-base, kernel-rt-debuginfo, kernel-rt-debugsource, kernel-rt-devel, kernel-rt-devel-debuginfo, kernel-rt-extra, kernel-rt_trace, kernel-rt_trace-base, kernel-rt_trace-debuginfo, kernel-rt_trace-debugsource, kernel-rt_trace-devel, kernel-rt_trace-devel-debuginfo, kernel-rt_trace-extra, kernel-source-rt, kernel-source-rt-debuginfo, kernel-syms-rt, ofed-kmp-rt Products: SLE-RT 11-SP1 (x86_64) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=659076 https://bugzilla.novell.com/show_bug.cgi?id=659076#c15 Marcus Meissner <meissner@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|REOPENED |RESOLVED Resolution| |FIXED --- Comment #15 from Marcus Meissner <meissner@novell.com> 2011-02-11 12:36:20 UTC --- in everywhere -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply＠novell.com