[OpenIndiana-discuss] 5421 issue allowing local user to panic the system

Jon Tibble meths at btinternet.com
Wed Dec 10 16:44:02 UTC 2014


Hello all,

This has been patched in /dev now too.
The fixed package is pkg://openindiana.org/system/kernel@0.5.11,5.11-0.151.1.9:20141210T124421Z

We're not aware of any reasons to prefer a8 over a9 for any use.

Regards,
Jon




----- Original Message -----
From: Stefan Müller-Wilken <stefan.mueller-wilken at acando.de>
To: Discussion list for OpenIndiana <openindiana-discuss at openindiana.org>
Cc: 
Sent: Tuesday, 9 December 2014, 19:34
Subject: Re: [OpenIndiana-discuss] 5421 issue allowing local user to panic the system

Hmmm... while I find it pretty cool that we get a patch for this, it raises a question: is that the ultimate sign that all serious users will finally have to switch to hipster? Shellshock only for a9, zone panic patch only for hipster - is there any justification left for a8 which was previously called the revision designated for production use?

Cheers
Stefan

________________________________________
Von: Alexander Pyhalov [alp at rsu.ru]
Gesendet: Dienstag, 9. Dezember 2014 11:54
An: Discussion list for OpenIndiana
Betreff: [OpenIndiana-discuss] 5421 issue allowing local user to panic the      system

Hello, all.

A critical issue was found in illumos, allowing local global zone user
to panic the machine.

All people running OI Hipster are advised to update to
consolidation/osnet/osnet-incorporation at 0.5.11-2014.1.3.14795  or later.

Issue: https://www.illumos.org/issues/5421
Commit with fix:
https://github.com/illumos/illumos-gate/commit/d65686849024838243515b5c40ae2c479460b4b5
CVE Request: http://seclists.org/oss-sec/2014/q4/983
--
Best regards,
Alexander Pyhalov,
system administrator of Southern Federal University IT department

_______________________________________________
openindiana-discuss mailing list
openindiana-discuss at openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss

________________________________
Acando GmbH, Millerntorplatz 1, 20359 Hamburg, Germany | Geschäftsführer: Guido Ahle | Amtsgericht Hamburg, HRB 76048 | Ust.Ident-Nr.:DE208833022

_______________________________________________
openindiana-discuss mailing list
openindiana-discuss at openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss




More information about the openindiana-discuss mailing list