Fedora 22 Security Update: compat-libuv010-0.10.34-1.fc22

Resolved Bugs
1194651 – CVE-2015-0278 libuv: incorrect revocation order while relinquishing privileges
1194653 – libuv: incorrect revocation order while relinquishing privileges [fedora-all]<br
It was found that libuv does not call setgoups before calling setuid/setgid.
This may potentially allow an attacker to gain elevated privileges.

Leave a Reply