oss-security - re: Summary of security bugs (now fixed) in user namespaces

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <alpine.LNX.2.00.1304151733030.4835@forced.attrition.org>
Date: Mon, 15 Apr 2013 17:34:30 -0500 (CDT)
From: Brian Martin <brian@...nsecurityfoundation.org>
To: luto@...capital.net
cc: oss-security@...ts.openwall.com
Subject: re: Summary of security bugs (now fixed) in user namespaces

Andy;

: I previously reported these bugs privatley.  I'm summarizing them for
: the historical record.  These bugs were never exploitable on a
: default-configured released kernel, but some 3.8 versions are
: vulnerable depending on configuration.

Do you know if these were patched, and therefore possibly disclosed via 
the commits? With these details, it is difficult to line them up to 
existing reports.

Thanks,

Brian

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.