Hello all,

This has been patched in /dev now too.
The fixed package is 
pkg://openindiana.org/system/[email protected],5.11-0.151.1.9:20141210T124421Z

We're not aware of any reasons to prefer a8 over a9 for any use.

Regards,
Jon




----- Original Message -----
From: Stefan Müller-Wilken <[email protected]>
To: Discussion list for OpenIndiana <[email protected]>
Cc: 
Sent: Tuesday, 9 December 2014, 19:34
Subject: Re: [OpenIndiana-discuss] 5421 issue allowing local user to panic the 
system

Hmmm... while I find it pretty cool that we get a patch for this, it raises a 
question: is that the ultimate sign that all serious users will finally have to 
switch to hipster? Shellshock only for a9, zone panic patch only for hipster - 
is there any justification left for a8 which was previously called the revision 
designated for production use?

Cheers
Stefan

________________________________________
Von: Alexander Pyhalov [[email protected]]
Gesendet: Dienstag, 9. Dezember 2014 11:54
An: Discussion list for OpenIndiana
Betreff: [OpenIndiana-discuss] 5421 issue allowing local user to panic the      
system

Hello, all.

A critical issue was found in illumos, allowing local global zone user
to panic the machine.

All people running OI Hipster are advised to update to
consolidation/osnet/[email protected]  or later.

Issue: https://www.illumos.org/issues/5421
Commit with fix:
https://github.com/illumos/illumos-gate/commit/d65686849024838243515b5c40ae2c479460b4b5
CVE Request: http://seclists.org/oss-sec/2014/q4/983
--
Best regards,
Alexander Pyhalov,
system administrator of Southern Federal University IT department

_______________________________________________
openindiana-discuss mailing list
[email protected]
http://openindiana.org/mailman/listinfo/openindiana-discuss

________________________________
Acando GmbH, Millerntorplatz 1, 20359 Hamburg, Germany | Geschäftsführer: Guido 
Ahle | Amtsgericht Hamburg, HRB 76048 | Ust.Ident-Nr.:DE208833022

_______________________________________________
openindiana-discuss mailing list
[email protected]
http://openindiana.org/mailman/listinfo/openindiana-discuss


_______________________________________________
openindiana-discuss mailing list
[email protected]
http://openindiana.org/mailman/listinfo/openindiana-discuss

Reply via email to