Release date:
2026-09-01 12:25:45 UTC
Description:
- CVE-2026-72693: require a matching process owner and controlling
terminal when openvt -u determines the current VT owner, instead of
trusting the ownership of an inherited file descriptor, and refuse
root as a pre-authenticated target. The old check could be satisfied
by a process not owned by the VT owner, starting login -f for the
wrong user without a password.
Updated packages:
-
kbd-2.4.0-11.el9_6.tuxcare.els1.x86_64.rpm
sha:03cf0abd63052623fa97cf193ae3b4d183a74e6e73338f7f759c6be1bb463e1f
-
kbd-legacy-2.4.0-11.el9_6.tuxcare.els1.noarch.rpm
sha:05e49add8a9d5329f51756c4889ffa22b26260716ef2cf8e9b9333da107da095
-
kbd-misc-2.4.0-11.el9_6.tuxcare.els1.noarch.rpm
sha:8eb4fc474cad7565192c3dce9ec3b98fc25609af3eac69252ebe3e72f4646637
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
