Sender: =?UTF-8?Q?Timo_Ter=C3=A4s?= <timo.teras@gmail.com>
Date: Fri, 21 Oct 2016 08:30:33 +0300
From: Timo Teras <timo.teras@iki.fi>
To: "Kevin M. Gallagher" <kevingallagher@gmail.com>
Cc: alpine-devel@lists.alpinelinux.org
Subject: Re: [alpine-devel] CVE-2016-5195: Local privilege escalation
 exploit in Linux kernel
Message-ID: <20161021083033.2368d30b@vostro.util.wtbts.net>
In-Reply-To: <CABXMHjXy0Su3Copu5hBOdq=dwt4ET9KJD3WE-_ca+niyEnxsTg@mail.gmail.com>
References: <CABXMHjXy0Su3Copu5hBOdq=dwt4ET9KJD3WE-_ca+niyEnxsTg@mail.gmail.com>
Precedence: list
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit

Hi,

On Thu, 20 Oct 2016 21:53:03 -0700
"Kevin M. Gallagher" <kevingallagher@gmail.com> wrote:

> Details:
> 
> http://dirtycow.ninja/
> https://lkml.org/lkml/2016/10/19/860
> 
> Proof of concept:
> https://github.com/dirtycow/dirtycow.github.io/blob/master/dirtyc0w.c
> 
> I'm using Alpine Linux for a time-urgent and security-critical project
> happening this weekend, and would really like to see this fixed.
> However, I'm not familiar with aports or the way you build kernels in
> Alpine. Is anyone available to update the kernel in linux-grsec in
> the 3.4-stable branch and/or backport the patch, sometime soon?

Depending on CVE extent we sometimes cherry-pick fixes. But this seems
bad enough that they released new upstream kernels with pretty much
nothing else than this fix. So we'll be upgrading to them shortly.

Thanks.
Timo


---
Unsubscribe:  alpine-devel+unsubscribe@lists.alpinelinux.org
Help:         alpine-devel+help@lists.alpinelinux.org
---