[arch-security] Linux 3.14.3 (CVE-2014-0196)

[Pierre Schmitz]

Am 08.05.2014 12:16, schrieb Xan:
> Hi,
> 
> To everyone: this
> [http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0196]
> affects us?
> 
> Thanks,
> Xan.

Yes, here is a working exploit: (tested on 3.14.3-1-ARCH)
http://www.openwall.com/lists/oss-security/2014/05/12/3

I wonder why there is no new kernel release; seems pretty critical to 
me.

Greetings,

Pierre

-- 
Pierre Schmitz, https://pierre-schmitz.com