Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
Remove ulnerability To Dirty Cow [SOLVED]
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Kernel & Hardware
View previous topic :: View next topic  
Author Message
msulli1355
Apprentice
Apprentice


Joined: 24 Nov 2005
Posts: 179
Location: OKlahoma, USA

PostPosted: Tue Oct 25, 2016 12:21 am    Post subject: Remove ulnerability To Dirty Cow [SOLVED] Reply with quote

I saw a thread in the linux group at Yahoo yesterday about Dirty Cow. It made reference to the following website:

http://www.theregister.co.uk/2016/10/21/linux_privilege_escalation_hole/

I installed the Gentoo system I'm currently using last April. Am I vulnerable to this? I searched google for "gentoo, dirty cow" and didn't come up with anything. Also, I grepped glsa-check -d all for CVE-2016-5195 and came up empty on that as well. What do I need to do (if anything) to deal with this?


Last edited by msulli1355 on Tue Oct 25, 2016 9:39 pm; edited 1 time in total
Back to top
View user's profile Send private message
russK
l33t
l33t


Joined: 27 Jun 2006
Posts: 630

PostPosted: Tue Oct 25, 2016 12:45 am    Post subject: Reply with quote

If you use gentoo-sources update to sys-kernel/gentoo-sources-4.4.26, it has the patch and it's been marked stable.

It's been talked about here: 1053368
Back to top
View user's profile Send private message
msulli1355
Apprentice
Apprentice


Joined: 24 Nov 2005
Posts: 179
Location: OKlahoma, USA

PostPosted: Tue Oct 25, 2016 1:39 am    Post subject: Reply with quote

I'm running 4.5.1, so I should be okay, yes?

michael@caitlyn ~ $ uname -a
Linux caitlyn 4.5.1-gentoo #3 SMP Thu Jun 30 19:03:51 CDT 2016 x86_64 GNU/Linux
Back to top
View user's profile Send private message
Buffoon
Veteran
Veteran


Joined: 17 Jun 2015
Posts: 1074
Location: EU or US

PostPosted: Tue Oct 25, 2016 1:44 am    Post subject: Reply with quote

msulli1355 wrote:
I'm running 4.5.1, so I should be okay, yes?

michael@caitlyn ~ $ uname -a
Linux caitlyn 4.5.1-gentoo #3 SMP Thu Jun 30 19:03:51 CDT 2016 x86_64 GNU/Linux


Nope.
Back to top
View user's profile Send private message
russK
l33t
l33t


Joined: 27 Jun 2006
Posts: 630

PostPosted: Tue Oct 25, 2016 1:49 am    Post subject: Reply with quote

Judging by the Changelog here: https://packages.gentoo.org/packages/sys-kernel/gentoo-sources

You may want to move on to 4.7.10 or 4.8.4
Back to top
View user's profile Send private message
Hu
Moderator
Moderator


Joined: 06 Mar 2007
Posts: 13855

PostPosted: Tue Oct 25, 2016 3:38 am    Post subject: Reply with quote

msulli1355 wrote:
I'm running 4.5.1, so I should be okay, yes?

michael@caitlyn ~ $ uname -a
Linux caitlyn 4.5.1-gentoo #3 SMP Thu Jun 30 19:03:51 CDT 2016 x86_64 GNU/Linux
Your kernel was built in June. The patch was written in October. You need a kernel that predates the bug (~2.6.22 if I understand correctly) or something patched within about the last week. I strongly recommend going forward, not backward.
Back to top
View user's profile Send private message
msulli1355
Apprentice
Apprentice


Joined: 24 Nov 2005
Posts: 179
Location: OKlahoma, USA

PostPosted: Tue Oct 25, 2016 9:39 pm    Post subject: Reply with quote

Now I"ve got 4.7.10, so I should be good now.

michael@caitlyn ~ $ uname -a
Linux caitlyn 4.7.10-gentoo #1 SMP Tue Oct 25 10:49:52 CDT 2016 x86_64 GNU/Linux
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Kernel & Hardware All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum