OpenVZ Forum: Support » whats with the new kernel bugs...

Home » General » Support » whats with the new kernel bugs...

Show: Today's Messages :: Show Polls :: Message Navigator
E-mail to friend

whats with the new kernel bugs... [message #4605]

Mon, 17 July 2006 21:30

disaster
Messages: 158
Registered: February 2006

Senior Member

Hello!

I ask me if openvz is also affected by the following bugs - and if - why there is no new kernel...

For example the bugs fixed with 2.6.17.6 + 2.6.17.5 + 2.6.17.4.

Thanks!

Report message to a moderator

Re: whats with the new kernel bugs... [message #4607 is a reply to message #4605]

Mon, 17 July 2006 23:27

John Kelly
Messages: 97
Registered: May 2006
Location: Palmetto State

Member

The openvz 2.6.16 kernel is for testing, not production. You can't expect the developers to release a new test kernel every time somebody finds a bug.

If you can't wait, they have a stable kernel. It doesn't have so many bugs.

Report message to a moderator

Re: whats with the new kernel bugs... [message #4612 is a reply to message #4605]

Tue, 18 July 2006 08:34

disaster
Messages: 158
Registered: February 2006

Senior Member

Oh I thought 2.6.8 is also involved - cause the bug with the core dump is also in 2.4 ...

Report message to a moderator

Re: whats with the new kernel bugs... [message #4623 is a reply to message #4605]

Tue, 18 July 2006 18:00

kir
Messages: 1645
Registered: August 2005
Location: Moscow, Russia

Senior Member

We have issued the update (026test015.2) fixing the first bug (the one that was fixed in 2.6.17.4 and 2.6.16.24), but the second bug is not fixed; it will be fixed in 026test016 or *017.

Looks like the stable kernel is not vulnerable.

Kir Kolyshkin

http://static.openvz.org/userbars/openvz-developer.png

Report message to a moderator

Re: whats with the new kernel bugs... [message #4643 is a reply to message #4605]

Thu, 20 July 2006 09:26

disaster
Messages: 158
Registered: February 2006

Senior Member

Are you shure?

In the exploit is written down, that every 2.6.x Kernel is involved. (i mean the proc vuln which was fixed with 2.6.16.25+26)

See for example:
http://lists.grok.org.uk/pipermail/full-disclosure/attachmen ts/20060714/c403c6c1/h00lyshit.bin
or
http://lists.grok.org.uk/pipermail/full-disclosure/2006-July /047907.html

Report message to a moderator

Re: whats with the new kernel bugs... [message #4664 is a reply to message #4623]

Fri, 21 July 2006 07:09

wfischer
Messages: 38
Registered: November 2005
Location: Austria/Germany

Member

Good morning Kir,

could you perhaps give a short info on why the stable openvz kernel 2.6.8-022stab078.10 is not vulnerable?

For Debian Sarge (they use also 2.6.8 as stable kernel) the Debian guys published an update: http://www.debian.org/security/2006/dsa-1111

So to me (without being a kernel hacker) it would be nice to understand why the 2.6.8 of openvz it not vulnerable, while the 2.6.8 of debian was.

thanks in advance,
best wishes from sunny Austria,
Werner

Werner Fischer, Developer of a Virtuozzo-out-of-the-box-cluster solution at Thomas-Krenn.AG