Re: [CentOS] Hole in 64-bit Linux kernel provides root rights

2010-09-21 Thread Rudi Ahlers
On Tue, Sep 21, 2010 at 1:45 AM, Christopher Chan christopher.c...@bradbury.edu.hk wrote: Karanbir Singh wrote: On 09/21/2010 12:32 AM, Christopher Chan wrote: Will there be a special case for this particular issue like an early release of a Centos fixed kernel instead of waiting for the

Re: [CentOS] Hole in 64-bit Linux kernel provides root rights

2010-09-21 Thread Karanbir Singh
On 09/21/2010 06:10 AM, Rudi Ahlers wrote: Does anyone know what this exploit does, exactly. And which 64bit kernels are vulnrable? Yes, go read the details in the issue report posted. All centos-5 kernels are affected. - KB ___ CentOS mailing list

Re: [CentOS] Hole in 64-bit Linux kernel provides root rights

2010-09-21 Thread Morten P.D. Stevens
On Tue, Sep 21, 2010 at 12:44 PM, Karanbir Singh mail-li...@karan.org wrote: All centos-5 kernels are affected. - KB Here is the updated kernel source from upstream: kernel-2.6.18-194.11.4.el5.src.rpm https://rhn.redhat.com/errata/RHSA-2010-0704.html Best regards, Morten

Re: [CentOS] Hole in 64-bit Linux kernel provides root rights

2010-09-21 Thread Karanbir Singh
On 09/21/2010 05:02 PM, Morten P.D. Stevens wrote: kernel-2.6.18-194.11.4.el5.src.rpm https://rhn.redhat.com/errata/RHSA-2010-0704.html We just released it about 10 minutes back. Should be visible soon. - KB ___ CentOS mailing list CentOS@centos.org

[CentOS] Hole in 64-bit Linux kernel provides root rights

2010-09-20 Thread Dave
From fedora list: On Mon, Sep 20, 2010 at 4:13 AM, Zbigniew Fiedorowicz fiedo...@math.ohio-state.edu wrote: Further story: http://www.theregister.co.uk/2010/09/15/linux_kernel_regression_bug/ This is a very serious problem which puts multiuser 64-bit Linux systems absolutely at the mercy of

Re: [CentOS] Hole in 64-bit Linux kernel provides root rights

2010-09-20 Thread Karanbir Singh
On 09/20/2010 09:20 PM, Dave wrote: http://www.theregister.co.uk/2010/09/15/linux_kernel_regression_bug/ Any equivalent for centos yet? http://bugs.centos.org/view.php?id=4518 We are tracking the issue here. - KB ___ CentOS mailing list

Re: [CentOS] Hole in 64-bit Linux kernel provides root rights

2010-09-20 Thread Christopher Chan
Karanbir Singh wrote: On 09/20/2010 09:20 PM, Dave wrote: http://www.theregister.co.uk/2010/09/15/linux_kernel_regression_bug/ Any equivalent for centos yet? http://bugs.centos.org/view.php?id=4518 We are tracking the issue here. Oh cool, two other schools recently had a ddos bot

Re: [CentOS] Hole in 64-bit Linux kernel provides root rights

2010-09-20 Thread Karanbir Singh
On 09/21/2010 12:32 AM, Christopher Chan wrote: Will there be a special case for this particular issue like an early release of a Centos fixed kernel instead of waiting for the powers that be at Redhat? There is a kernel in the c5-testing repo ( details in the issue report ) that Tru put

Re: [CentOS] Hole in 64-bit Linux kernel provides root rights

2010-09-20 Thread Christopher Chan
Karanbir Singh wrote: On 09/21/2010 12:32 AM, Christopher Chan wrote: Will there be a special case for this particular issue like an early release of a Centos fixed kernel instead of waiting for the powers that be at Redhat? There is a kernel in the c5-testing repo ( details in the issue