CentOS - Nov 2016 - CVE-2016-5195 DirtyCOW: Critical Linux Kernel Flaw

On Tue, November 1, 2016 6:25 pm, Tony Mountifield
wrote:
> In article <5818CD31.4050008 at moving-picture.com>,
> James Pearson <james-p at moving-picture.com> wrote:
>> Leonardo Oliveira Ortiz wrote:
>> > RedHat and Centos 4.x can be explored by this flaw?
>>
>> See:
>>
>>   https://access.redhat.com/security/cve/cve-2016-5195
>
> In other words, no: RHEL 4 and CentOS4 are not affected by this flaw.
My understanding is: RHEL is obsolete, hence it will not even be mentioned
on that page, whether it is known to be affected or not.

Valeri
>
> Tony
> --
> Tony Mountifield
> Work: tony at softins.co.uk - http://www.softins.co.uk
> Play: tony at mountifield.org - http://tony.mountifield.org
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> https://lists.centos.org/mailman/listinfo/centos
>

++++++++++++++++++++++++++++++++++++++++
Valeri Galtsev
Sr System Administrator
Department of Astronomy and Astrophysics
Kavli Institute for Cosmological Physics
University of Chicago
Phone: 773-702-4247
++++++++++++++++++++++++++++++++++++++++

> Date: Tuesday, November 01, 2016 18:49:56 -0500
> From: Valeri Galtsev <galtsev at kicp.uchicago.edu>
>
> On Tue, November 1, 2016 6:25 pm, Tony Mountifield wrote:
>> In article <5818CD31.4050008 at moving-picture.com>,
>> James Pearson <james-p at moving-picture.com> wrote:
>>> Leonardo Oliveira Ortiz wrote:
>>> > RedHat and Centos 4.x can be explored by this flaw?
>>> 
>>> See:
>>> 
>>>   https://access.redhat.com/security/cve/cve-2016-5195
>> 
>> In other words, no: RHEL 4 and CentOS4 are not affected by this
>> flaw.
> 
> My understanding is: RHEL is obsolete, hence it will not even be
> mentioned on that page, whether it is known to be affected or not.
> 
RHEL/Centos-4 is EOL so wouldn't be updated regardless (at least
under the normal EOL guidelines), but it is mentioned toward the
bottom of that page under "Affected Packages State":

  Red Hat Enterprise Linux 4 	kernel 	Not affected

Dear Sir/s,

Can a crashed centos system be restore to its previous state before it crash?
And if so, can you please tell me how to do it?
Thanks, your help is very much appreciated.

----- Original Message -----
From: "Richard" <lists-centos at listmail.innovate.net>
To: "CentOS mailing list" <centos at centos.org>
Sent: Tuesday, November 1, 2016 5:05:59 PM
Subject: Re: [CentOS] CVE-2016-5195 DirtyCOW: Critical Linux Kernel Flaw
> Date: Tuesday, November 01, 2016 18:49:56 -0500
> From: Valeri Galtsev <galtsev at kicp.uchicago.edu>
>
> On Tue, November 1, 2016 6:25 pm, Tony Mountifield wrote:
>> In article <5818CD31.4050008 at moving-picture.com>,
>> James Pearson <james-p at moving-picture.com> wrote:
>>> Leonardo Oliveira Ortiz wrote:
>>> > RedHat and Centos 4.x can be explored by this flaw?
>>> 
>>> See:
>>> 
>>>   https://access.redhat.com/security/cve/cve-2016-5195
>> 
>> In other words, no: RHEL 4 and CentOS4 are not affected by this
>> flaw.
> 
> My understanding is: RHEL is obsolete, hence it will not even be
> mentioned on that page, whether it is known to be affected or not.
> 
RHEL/Centos-4 is EOL so wouldn't be updated regardless (at least
under the normal EOL guidelines), but it is mentioned toward the
bottom of that page under "Affected Packages State":

  Red Hat Enterprise Linux 4 	kernel 	Not affected



_______________________________________________
CentOS mailing list
CentOS at centos.org
https://lists.centos.org/mailman/listinfo/centos

On 02/11/16 13:05, Richard wrote:
> RHEL/Centos-4 is EOL so wouldn't be updated regardless (at least
> under the normal EOL guidelines), but it is mentioned toward the
> bottom of that page under "Affected Packages State":
> 
>   Red Hat Enterprise Linux 4 	kernel 	Not affected
It is mentioned because RHEL4 is in extended life phase, so not EOL yet.

CentOS 4 is EOL as CentOS does not track the extended life phase of Red Hat.


Peter