File _patchinfo of Package patchinfo.import4148
<patchinfo incident="libcgroup-devel" version="4148"> <issue tracker="bnc" id="675506" /> <issue tracker="bnc" id="675048" /> <issue tracker="CVE" id="CVE-2011-1006" /> <issue tracker="CVE" id="CVE-2011-1022" /> <category>security</category> <rating>low</rating> <summary>libcgroup1: Fixed heap-based buffer overflow in libcgroup</summary> <description>Two security bugfixes in libcgroup1 were done: libcgroup suffered from a heap based buffer overflow (CVE-2011-1006). The cgrulesengd daemon did not verify the origin of netlink messages, allowing local users to spoof events (CVE-2011-1022). </description> <packager>adrianSuSE</packager> </patchinfo>