Изпечатай

[Bogo]

Ползвам услугите на ко-локейшън, и преди три дена получих от тях имейл, съдържанието съм постнал по-долу.
Става въпрос за открит пропуск, проблем в ядрото.

Dear Customer,



Are you running a Linux based operating system?  If you are running an oper
ating system such as CentOS, Red Hat, Debian, or Ubuntu you are most likely
 vulnerable to a recent security exploit found in the Linux kernel.



We are always following the latest news and events when it
comes to server security, and we wanted to alert you to the presence of a p
articularly serious vulnerability in Linux based operating systems called D
irty Cow.  Dirty Cow is a privilege escalation vulnerability, which means i
t can be used to gain higher levels of access on your server without permis
sion.



You can find more information about the vulnerability online, for example t
his article is fairly comprehensive: https://www.linux.com/blog/how-bad-dir
ty-cow



Provided your distribution has released an updated kernel to fix Dirty Cow,
 fixing this issue is as simple as installing all of your available updates
 and rebooting your server in order to load the new kernel.





--- How Can I Tell If I Am Vulnerable? ---

To tell if you are vulnerable to Dirty Cow, simply check your kernel versio
n.



** CentOS  Red Hat **

On CentOS, you can run this command to use the script provided by Red Hat f
or RHEL to test if you are vulnerable.  The output from the command will te
ll you if you are vulnerable or not.



curl -sq https://access.redhat.com/sites/default/files/rh-cve-2016-5195_1.s
h | bash





** Debian  Ubuntu **

You can obtain your kernel version by running this command:

uname -rv



Then compare it to this list of kernel versions.  If your kernel version is
 earlier than the version listed below (a lower number), you are vulnerable
.



3.16.36-1+deb8u2 for Debian 8

3.2.82-1 for Debian 7

4.7.8-1 for Debian unstable

4.8.0-26.28 for Ubuntu 16.10

4.4.0-45.66 for Ubuntu 16.04 LTS

3.13.0-100.147 for Ubuntu 14.04 LTS

3.2.0-113.155 for Ubuntu 12.04 LTS





--- How Do I Patch My System? ---



The below commands will help you to upgrade all software on your server.  P
lease note that these commands will upgrade everything - if you only want t
o patch for Dirty Cow but you do not want to upgrade other software on your
 server, you will only need to update the Linux kernel packages.



If you are running a Red Hat based Linux distribution such as CentOS, you c
an update your system by running these commands:

sudo yum update -y

reboot



If you are running a Debian based Linux distribution such as Ubuntu, you ca
n update your system by running these commands:

sudo apt-get update

sudo apt-get dist-upgrade -y

reboot

[Demayl]

Да. И какъв е въпроса. Описали са какво може да се направи.

[spec1a]

   Предполагам пича просто предупреждава за потенциални проблеми
със сигурността.
   Вече кернелите,поне на повечето популярни дистрибуции, са пачнати.

[Naka]

Баси мамата.... Как изобщо са работили тези ликукси като проблема е от почти 10 години - от 2007 година.
Това само показва колко несириозни и опасни са линуксите! Я виж другите ОС-и ги ъпгейдват през два три месеца и всичко им оправят.

[spec1a]

   Ти това windows NSA edition(а.к.а. windows 10) за операционна с-ма
ли го смяташ 

[geroy]

Бъгът е стар, но в старите кърнъли е много по-трудно да сработи, отколкото при новите.