CentOS - Apr 2009 - Local root vulnerability in udev

I just saw this thread in the OLM forum. Possibly of interest, since
they say it includes CentOS 5, if the update hasn't been released yet.
Always good  to keep boxes updated, for security and stability
reasons.

<http://forums.olm.net/showthread.php?t=2137>

2009/4/19 Lanny Marcus <lmmailinglists at gmail.com>
> I just saw this thread in the OLM forum. Possibly of interest, since
> they say it includes CentOS 5, if the update hasn't been released yet.
> Always good  to keep boxes updated, for security and stability
> reasons.
>
> <http://forums.olm.net/showthread.php?t=2137>
>
FYI, advisory IDs mentioned by upstream are

CVE-2009-1185
RHSA-2009:0427-01

The CentOS update hasn't been released yet, but, I would expect it to make
it out this weekend...

d
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.centos.org/pipermail/centos/attachments/20090419/a3f1028c/attachment-0002.html>

On Sun, Apr 19, 2009 at 12:10 AM, D Tucny <d at tucny.com>
wrote:
> 2009/4/19 Lanny Marcus <lmmailinglists at gmail.com>
>> I just saw this thread in the OLM forum. Possibly of interest, since
>> they say it includes CentOS 5, if the update hasn't been released
yet.
>> Always good ?to keep boxes updated, for security and stability
>> reasons.
>>
>> <http://forums.olm.net/showthread.php?t=2137>
>
> FYI, advisory IDs mentioned by upstream are
>
> CVE-2009-1185
> RHSA-2009:0427-01
>
> The CentOS update hasn't been released yet, but, I would expect it to
make
> it out this weekend...
Anyone who has a CentOS 5 server with web sites on it should pay
attention to this one.

On Sat, Apr 18, 2009 at 9:12 PM, Lanny Marcus <lmmailinglists at
gmail.com> wrote:
> I just saw this thread in the OLM forum. Possibly of interest, since
> they say it includes CentOS 5, if the update hasn't been released yet.
> Always good ?to keep boxes updated, for security and stability
> reasons.
>
> <http://forums.olm.net/showthread.php?t=2137>
>
I posted the above Saturday night and there was very little activity
in this mailing list over the weekend. Anyone using Apache on CentOS
5, heads up!