Linux 2.6.16 sysfs problem -- any Red Hat guys listening?

[nicstevens42]

I just found this on Digg
http://www.vnunet.com/vnunet/news/21...ad-dos-attacks

Seems there's an issue -- and a kernel fix. I'd rather have the official "blessed" kernel from the Fedora project but yum shows no updates beyond 2.6.16-1.2080.

Any Red Hat folks listening?

[Firewing1]

If you want RedHat guys listneing post at their bugzilla:
bugzilla.redhat.com
Firewing1

[nicstevens42]

Originally Posted by Firewing1

If you want RedHat guys listneing post at their bugzilla:
bugzilla.redhat.com
Firewing1

Yeah, I know about bugzilla -- but I don't have the specifics for the kernel issues. I do know that there are Red Hat folks that visit this site.

[w5set]

RH listening here??--uuhhh, yeah I would figure they do.
And reading Secunia--uhhh yeah, I would figure they even post info to that place.
But a "not critical" vulnerability ususlly rates kind of low in the "things to get done now" department.
Especially one that is "local user" based.
It will probably be quicker to just break a few fingers of your "local malicious users" then wait until the fix comes along--and much more sure to have the desired effect.

[nicstevens42]

Originally Posted by w5set

RH listening here??--uuhhh, yeah I would figure they do.
And reading Secunia--uhhh yeah, I would figure they even post info to that place.
But a "not critical" vulnerability ususlly rates kind of low in the "things to get done now" department.
Especially one that is "local user" based.
It will probably be quicker to just break a few fingers of your "local malicious users" then wait until the fix comes along--and much more sure to have the desired effect.

Well, I hate to say that this particular item being local user based I am not critically worried about it either.

But I am paranoid and think about links in the chain of security as much as the entire chain. Or in other words, if there is, say, another unpublished exploit to service x, this might create a new problem.

Then again, being paranoid, I never consider a computer connected to a network to be entirely secure.

[RahulSundaram]

Originally Posted by nicstevens42

I just found this on Digg
http://www.vnunet.com/vnunet/news/21...ad-dos-attacks

Seems there's an issue -- and a kernel fix. I'd rather have the official "blessed" kernel from the Fedora project but yum shows no updates beyond 2.6.16-1.2080.

Any Red Hat folks listening?

You can post a security bug report or mail the security team.

http://fedoraproject.org/wiki/Security

Kindly avoid posting in this user forum for development or security issues. Its rather likely to get lost in the traffic.