Hi
* Tue May 06 2014 Josh Boyer jwboyer@fedoraproject.org - CVE-2014-0196 pty race leading to memory corruption (rhbz 1094232 1094240)
is that only missing in the kernel-3.14.3-100.fc19 but present or only kernel-3.14.3-200.fc20 for now contains that fix?
there was also a warning on the CentOS list for that issue
-------- Original-Nachricht -------- Betreff: [CentOS] Heads up on local root escalation Datum: Mon, 12 May 2014 19:13:12 +0100 Von: James Hogarth james.hogarth@gmail.com Antwort an: CentOS mailing list centos@centos.org An: CentOS mailing list centos@centos.org
Remember to be especially aware if you have systems that can potentially have code uploaded and run (ftp to httpd vhost or improper php config and file ownership/permissions).
This does not affect el5 ... an el6 update is pending.
On Mon, May 12, 2014 at 3:41 PM, Reindl Harald h.reindl@thelounge.net wrote:
Hi
- Tue May 06 2014 Josh Boyer jwboyer@fedoraproject.org
- CVE-2014-0196 pty race leading to memory corruption (rhbz 1094232 1094240)
is that only missing in the kernel-3.14.3-100.fc19 but present or only kernel-3.14.3-200.fc20 for now contains that fix?
Someone already asked this in the bug referenced. It's included in the F19 3.14.3 rebase in updates-testing.
josh
Am 12.05.2014 21:46, schrieb Josh Boyer:
On Mon, May 12, 2014 at 3:41 PM, Reindl Harald h.reindl@thelounge.net wrote:
Hi
- Tue May 06 2014 Josh Boyer jwboyer@fedoraproject.org
- CVE-2014-0196 pty race leading to memory corruption (rhbz 1094232 1094240)
is that only missing in the kernel-3.14.3-100.fc19 but present or only kernel-3.14.3-200.fc20 for now contains that fix?
Someone already asked this in the bug referenced. It's included in the F19 3.14.3 rebase in updates-testing
thank you!
kernel@lists.fedoraproject.org
-
Josh Boyer -
Reindl Harald