[pve-devel] CVE-2015-5154

Alexandre DERUMIER aderumier at odiso.com
Mon Jul 27 17:15:29 CEST 2015


>>to answer myself. PVE is affected. Every VM with a CDROM can get root. 

yes, indeed :(

https://access.redhat.com/security/cve/CVE-2015-5154

----- Mail original -----
De: "Stefan Priebe" <s.priebe at profihost.ag>
À: "pve-devel" <pve-devel at pve.proxmox.com>
Envoyé: Lundi 27 Juillet 2015 15:39:54
Objet: Re: [pve-devel] CVE-2015-5154

to answer myself. PVE is affected. Every VM with a CDROM can get root. 

Stefan 

Am 27.07.2015 um 14:36 schrieb Stefan Priebe - Profihost AG: 
> Hi, 
> 
> does this affect proxmox? I don't understand why xen is explicit content 
> of the advisory. 
> http://seclists.org/oss-sec/2015/q3/212 
> 
> -- 
> Stefan 
> 
_______________________________________________ 
pve-devel mailing list 
pve-devel at pve.proxmox.com 
http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-devel 



More information about the pve-devel mailing list