From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 9FA08138782 for ; Sat, 22 Oct 2016 10:52:34 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 58DB3E0879; Sat, 22 Oct 2016 10:52:26 +0000 (UTC) Received: from mail-qt0-f177.google.com (mail-qt0-f177.google.com [209.85.216.177]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 15BE5E084D for ; Sat, 22 Oct 2016 10:52:25 +0000 (UTC) Received: by mail-qt0-f177.google.com with SMTP id q7so103636699qtq.1 for ; Sat, 22 Oct 2016 03:52:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to; bh=mE3ytvgLwGNGEVQrQzAWi8wyQmNex4aS//CufQnHD8k=; b=iPClq3m9gA8JB8c2/TnG4LHl0QqeRMeDxq9RlQ6P6JHvyuYPA21BbGIT90A68xC86B GEA13cLWrYu06ahnW6DCUSRwPOLYKxnEozOaDT2P4uiM8pwXCQGuADeV6mc3js22UCfw rU95jIWxlOvQbG6Vo8/KDGW8cCk25RUcbXVjLPYfeiDtkGTWep7Bequy55I2oxPEt+cs b3B3i6JKWhmoxtwVq3HnAjMO5gIYmOGuT4uSHTP2oIObcTV8/CSv1QPiqhVI0Z5Q93YW GssiBfkbQer9J2UCneKgqIjpb7oflB7j3/aNJHM9eB6SS5ApuI4VjlHRw5jqVU+S5NAj 8Mbw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to; bh=mE3ytvgLwGNGEVQrQzAWi8wyQmNex4aS//CufQnHD8k=; b=Tth+x+3/WZHk4Nf+Sa2WAG5rxG1CnNJnSHb5rWbthrAKwTkfOGQGpfugSxFSh0/Jku nF5CeTRTBQzVC0uf04HH2nodkqWxIe79II5oPTKiRejNGxoWg+znyez0Todao1GVjeE+ 1+/upQyK4MzVLL8Eyyes3mUxt6hCOupo6t5KZ8cbYaC2bRkzaWuSeUZktCJlV/OQizmU Dc6zs3PG7OYw/ty6xXbOZCmzQntj7636UqAhTBK4lRs2EvXblUWAwHkxldTjuDB1KohE 64T8tObaO5WNWw/Vq7042n4MLHU4uo8ZS5YKigp+yPpic9dLS06VbLMOkQibVvR7AWPq 0LlA== X-Gm-Message-State: ABUngvfk/5132JJjFI3BpfXjAKB3SA4rE/kaFHH7nX7nftG0k7ov0/hVBAQxb2wxH3iSz7SNrIIobKGCawqK+Q== X-Received: by 10.200.45.246 with SMTP id q51mr6003489qta.108.1477133544947; Sat, 22 Oct 2016 03:52:24 -0700 (PDT) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Sender: freemanrich@gmail.com Received: by 10.140.89.83 with HTTP; Sat, 22 Oct 2016 03:52:24 -0700 (PDT) In-Reply-To: <1726449.2yUzKl7bVN@eve> References: <13554879.nzmgk1bOVL@dell_xps> <1726449.2yUzKl7bVN@eve> From: Rich Freeman Date: Sat, 22 Oct 2016 06:52:24 -0400 X-Google-Sender-Auth: XMOGjBakYXzwXTeh9BUu2a2d2hk Message-ID: Subject: Re: [gentoo-user] Dirty COW bug To: gentoo-user@lists.gentoo.org Content-Type: text/plain; charset=UTF-8 X-Archives-Salt: c6de0538-a0ef-416c-bffb-3354df9fd33b X-Archives-Hash: ec4eff20b47e661d0278d9f836c8710c On Sat, Oct 22, 2016 at 4:04 AM, J. Roeleveld wrote: > On Friday, October 21, 2016 11:04:19 AM Rich Freeman wrote: >> On Fri, Oct 21, 2016 at 10:49 AM, Mick wrote: >> > https://github.com/dirtycow/dirtycow.github.io/wiki/VulnerabilityDetails >> > >> > Are we patched? I'm running 4.4.21-gentoo >> >> Not yet: >> https://bugs.gentoo.org/show_bug.cgi?id=597624 >> >> You're probably going to want to update to 4.4.26. It has been >> released, though it doesn't look like it is packaged in Gentoo yet. >> I've been running upstream's git for a while (currently on 4.4.26). > > 4.4.26 is in the tree. You just need to unmask (~amd64/...) it. > Both as gentoo-sources and as vanilla-sources. > It is marked stable now on amd64/x86. I imagine that all archs that the bug applies to will follow quickly. And upstream just released 4.4.27. I'd have to check the history but this feels like 4 kernel updates in about a week. -- Rich