Re: [cobalt-security] Linux cap kernel bug...

[Jeff Lovell <jlovell@xxxxxxxxxx>]

Jeff Lovell wrote:
Thought I would repost this since it seems it was missed
by someone......

> Gossi The Dog wrote:
> >
> > Aha.  This might explain a few things, then.
> >
> > Is there a patch forthcoming?  I run a large multiuser system with Cobalt
> > OS 5, and can't really afford to leave well documented holes like this
> > open :(
> 
> Yes, there is a forthcoming patch.  There were some issues noted with
> OSUpdate 3.0 with named ( too many open sockets ) that a new kernel
> is being tested.  This kernel includes the security problem as mentioned
> on Bugtraq.

This patch became publicly available the same day as this post.
It is downloadable from:

http://ftp.cobalt.com/pub/packages/raq3/eng/All-Kernel_i386-1.1.pkg

Jeff

-- 
Jeff Lovell
Cobalt Networks, Inc.