Hole-In-Linux-Kernel-Provides-Root-Rights

[m.ardito]

Hi all,

i've just read this:
http://linux.slashdot.org/story/10/09/18/2325240/Hole-In-Linux-Kernel-Provides-Root-Rights

and asked myself if pve, being based on a 64 bit system could be affected by this, and in general if the kernels provided with it are or will be patched for security issues alike?

Marco

 

[tom]

see http://forum.proxmox.com/threads/4689-New-2.6.32-3-Kernel-in-pvetest-repository

just see the latest kernel from pvetest repo.

 

[m.ardito]

yes, but i'm running 1.5 with 2.6.18 kernel. is this system vulnerable too? and what about 2.6.24?

 

[dietmar]

yes, but i'm running 1.5 with 2.6.18 kernel. is this system vulnerable too? and what about 2.6.24?

we are working on that (just uploaded fix for 2.6.24 to pvetest)

 

[m.ardito]

thanks, i will check again later

Marco