Re: [vserver] CVE-2016-10229: MSG_PEEK - URGENT patch needed

From: Herbert Poetzl <herbert_at_13thfloor.at>
Date: Mon 01 May 2017 - 11:47:55 BST
Message-ID: <20170501104755.GB31632@MAIL.13thfloor.at>

On Mon, May 01, 2017 at 11:12:52AM +0930, Mike O'Connor wrote:
> Hi All

Hey Mike,

> I'm running 3.18.44-vs2.3.7.5-beng which is vulnerable to
> CVE-2016-10229. I checked the code again the details in
> this link
> http://ewen.mcneill.gen.nz/blog/entry/2017-04-17-cve-2016-10229-msg-peek/

> A patch is mentioned
> https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=197c949e7798fbf28cfadc69d9ca0c2abbf93191
> and I checked the source code and the issue is there.

> I'm hoping that Ben can release patched kernel.

And patching it yourself is not an option why?

Best,
Herbert

> This is an issue for my systems as I do have systems running
> that use the MSG_PEEK in udp services.

> Thanks

> MIke
Received on Mon May 1 11:48:00 2017

[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Mon 01 May 2017 - 11:48:00 BST by hypermail 2.1.8