Fwd: SLC5X - x86_64 [SECURITY]: urgent patch for an exploitable kernel vulnerability

[Jason Shih]

fyi, you might have catch up the event from cert earlier.

in case you're running also slc5 and urgent kernel patch is needed
regarding latest announced security exploit and vulnerability.

BR,
J

-------- Original Message --------
Subject: SLC5X - x86_64 [SECURITY]: urgent patch for an exploitable
kernel vulnerability
Date: Thu, 16 Sep 2010 16:23:25 +0200
From: Jaroslaw Polok <Jarosla...@cern.ch>
Organization: CERN
To: linux-announce <linux-a...@cern.ch>

Dear SLC5 x86_64 (64 bit) platform users.

An exploit allowing local user privilege escalation has
been released recently, and has been already seen in the
wild. This exploit allows obtaining root access in an
unauthorized manner due to a vulnerability in the

SLC5 x86_64 (64 bit) kernel.
--------------------

SLC5 i386 (32 bit) and SLC4 (both x86_64 and i386
platforms) are not affected.

In order to protect your system please apply
urgently following update by running as root:

# yum --enablerepo=slc5-testing install kernel

and if your system is an Xen virtual machine or
hypervisor also run:

# yum --enablerepo=slc5-testing install kernel-xen

and reboot your system for the update to take effect.

Please note this is a temporary patched kernel and as
such it has not been thoroughly tested. Therefore,
it will not be released in regular SLC5 updates.

We expect an fully tested kernel update to arrive in
regular update repositories in coming days.

Best Regards

Jaroslaw Polok for Linux....@cern.ch

--
__
-------------------------------------------------------
_ Jaroslaw_Polok __________________ CERN - IT/OIS/ODS _
_ http://home.cern.ch/~jpolok ___ tel_+41_22_767_1834 _
_____________________________________ +41_76_487_9487 _