Re: [CentOS] Kernel NULL pointer vulnerability

2009-08-18 Thread Lorenzo Quatrini
James Matthews ha scritto: There is a very large issue with all people running VPS machines that are waiting for upgrades. Looks like, at least for openvz, virtualized machines are safe http://openvz.org/pipermail/users/2009-August/002961.html ___

Re: [CentOS] Kernel NULL pointer vulnerability

2009-08-17 Thread Johnny Hughes
James Matthews wrote: There is a very large issue with all people running VPS machines that are waiting for upgrades. Why is that, there is NO upgrade for this issue from upstream. We can not possibly release something before it is released by Red Hat does. snip signature.asc

Re: [CentOS] Kernel NULL pointer vulnerability

2009-08-16 Thread Ian Murray
There is a very large issue with all people running VPS machines that are waiting for upgrades. Why are VPS's any more affected than bare-metal machines? It will be greatly ironic if Redhat release the fix after they release 5.4, or as part of 5.4. I will try not to say I told you so.

Re: [CentOS] Kernel NULL pointer vulnerability

2009-08-15 Thread James Matthews
There is a very large issue with all people running VPS machines that are waiting for upgrades. On Fri, Aug 14, 2009 at 2:44 PM, Akemi Yagi amy...@gmail.com wrote: On Fri, Aug 14, 2009 at 8:15 AM, Akemi Yagiamy...@gmail.com wrote: Upstream bugzilla to follow:

[CentOS] Kernel NULL pointer vulnerability

2009-08-14 Thread Marcus Moeller
Hi all. Julien Tinnes and Tavis Ormandy from the Google Security Team have recently found a Linux kernel vulnerability which affects all 2.4 and 2.6 kernels since 2001 on all architectures. Please read the announcement on LWM: http://lwn.net/Articles/347006/ for further information about the

Re: [CentOS] Kernel NULL pointer vulnerability

2009-08-14 Thread Kai Schaetzl
Marcus Moeller wrote on Fri, 14 Aug 2009 14:24:39 +0200: The only workaroud that is known to me atm is to disable the affected kernel modules (which should be handled with care as some of them may provide necessary functionality in your operating environment): If vm.mmap_min_addr is 0 you

Re: [CentOS] Kernel NULL pointer vulnerability

2009-08-14 Thread Peter Kjellstrom
On Friday 14 August 2009, Kai Schaetzl wrote: Marcus Moeller wrote on Fri, 14 Aug 2009 14:24:39 +0200: The only workaroud that is known to me atm is to disable the affected kernel modules (which should be handled with care as some of them may provide necessary functionality in your

Re: [CentOS] Kernel NULL pointer vulnerability

2009-08-14 Thread Marcus Moeller
Hi again. alias net-pf-24 # PPPoE Sorry, typo in pf-24. grep -q '^alias net-pf-3 off' /etc/modprobe.conf || \ echo 'alias net-pf-3 off' /etc/modprobe.conf grep -q '^alias net-pf-4 off' /etc/modprobe.conf || \ echo 'alias net-pf-4 off' /etc/modprobe.conf grep -q '^alias net-pf-5 off'

Re: [CentOS] Kernel NULL pointer vulnerability

2009-08-14 Thread Akemi Yagi
Upstream bugzilla to follow: https://bugzilla.redhat.com/show_bug.cgi?id=516949 Akemi ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] Kernel NULL pointer vulnerability

2009-08-14 Thread Akemi Yagi
On Fri, Aug 14, 2009 at 8:15 AM, Akemi Yagiamy...@gmail.com wrote: Upstream bugzilla to follow: https://bugzilla.redhat.com/show_bug.cgi?id=516949 Just a note to say that the issue is also being tracked in the CentOS forums: