0 releases 24 tags

RSS feed

• imports/c10s/kbd-2.6.4-8.el10 7ba08a9eff

  Compare

  Fix CVE-2026-72693: openvt -u process matching made more conservative

  Ghost released this 2026-08-11 09:37:17 +00:00 | -165 commits to c8 since this release

  Backport upstream commit 78d5ae119742e87baa7dbe0f5c4107e7533fd698
  to fix CVE-2026-72693 in openvt's -u option. The patch makes VT
  owner process matching stricter by reading /proc/pid/stat for
  tty matching instead of relying on inherited file descriptor
  ownership, adds root rejection for pre-authentication, and
  filters /proc entries to digits only. The man page is updated
  to document the tighter -u behavior.

  CVE: CVE-2026-72693
  Upstream patches:

  • github.com/legionus/kbd@78d5ae1197.patch
    Resolves: RHEL-235987

  This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

  Assisted-by: Ymir

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads