Arch-security

Download

arch-security@lists.archlinux.org

May 2014

12 participants
12 discussions

[arch-security] [linux] CVE-2014-2739 :: cma_req_handler function in drivers/infiniband/core/cma.c
by Billy McCann 02 May '14

02 May '14

Not sure if this one applies to Arch. I'll put this here for those in the know. CVE-2014-2729 :: [linux] The cma_req_handler function in drivers/infiniband/core/cma.c in the Linux kernel 3.14.x through 3.14.1 attempts to resolve an RDMA over Converged Ethernet (aka RoCE) address that is properly resolved within a different module, which allows remote attackers to cause a denial of service (incorrect pointer dereference and system crash) via crafted network traffic. INFO: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2739 https://bugzilla.redhat.com/show_bug.cgi?id=1085415 UPSTREAM FIX: https://patchwork.kernel.org/patch/3896781/

1 0

[arch-security] PHP CVE-2014-0185
by Pierre Schmitz 01 May '14

01 May '14

Hi all, just to let you know, Arch was not affected by CVE-2014-0185 as I always patched the default config of FPM. (Unless users decided to change the default config) Greetings, Pierre -- Pierre Schmitz, https://pierre-schmitz.com

1 0