[Secure-testing-team] Bug#559107: Local root exploit in rtld

[Moritz Muehlenhoff]

Package: kfreebsd-7
Severity: grave
Tags: security

http://seclists.org/fulldisclosure/2009/Nov/371

Colin Percival posted a preliminary patch, a full advisory is announced
for tomorrow.

I suppose this affects Debian/KFreeBSD?

One a side note, what's the status of CVE-2009-114[678] ? #483152 was
filed for it, but it got closed without a solution AFAICT.

Cheers,
        Moritz


-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 2.6.31-1-686 (SMP w/1 CPU core)
Locale: LANG=C, LC_CTYPE=de_DE.ISO-8859-15 at euro (charmap=ISO-8859-15)
Shell: /bin/sh linked to /bin/bash