From: Herbert Poetzl (herbert_at_13thfloor.at)
Date: Sun 04 Jul 2004 - 01:00:42 BST
updated the 1.2 (stable) branch to vs1.28, which
includes two security improvements ...
* the procfs is no longer vulnerable to arbitrary
modifications from inside a vserver
* xattrib modifications of immutable files are
denied if CAP_IMMUTABLE is missing
nothing else has changed, but there is a patch for
2.4.27-rc2, which I would like to see tested, as
the 2.4.27 kernel will be slightly different to
note: the 2.4.26-fpu-state-fix patch avoids the
DoS discovered on 2.4.26, if you use that
version, make sure to apply it ...
Vserver mailing list