Re: [vserver] CVE-2016-10229: MSG_PEEK - URGENT patch needed

From: Mike O'Connor <vserver_at_pineview.net>
Date: Tue 02 May 2017 - 02:30:10 BST
Message-ID: <2c44d0e4-ffc1-7c9b-ca0e-021bb492592a@pineview.net>

On 1/05/2017 8:17 PM, Herbert Poetzl wrote:
> On Mon, May 01, 2017 at 11:12:52AM +0930, Mike O'Connor wrote:
>> Hi All
> Hey Mike,
>
>> I'm running 3.18.44-vs2.3.7.5-beng which is vulnerable to
>> CVE-2016-10229. I checked the code again the details in
>> this link
>> http://ewen.mcneill.gen.nz/blog/entry/2017-04-17-cve-2016-10229-msg-peek/
>> A patch is mentioned
>> https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=197c949e7798fbf28cfadc69d9ca0c2abbf93191
>> and I checked the source code and the issue is there.
>> I'm hoping that Ben can release patched kernel.
> And patching it yourself is not an option why?
>
No reason other than it would be good for everyone to have it and I'm
not sure how to create the Deb files like you do.

Regards
Mike
Received on Tue May 2 02:30:26 2017

[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Tue 02 May 2017 - 02:30:26 BST by hypermail 2.1.8