<html><head></head><body><div>only impacts RHEL and Fedora (and CentOS and Scientific Linux)</div><div><br></div><div>It's very specific in the way a script in NetworkManager handles returning data from a DHCP server. The script runs as root and can be overrun with remote shell commands. Oops.</div><div><br></div><div>On Thu, 2018-05-17 at 11:36 -0400, James Taylor via Ale wrote:</div><blockquote type="cite" style="margin:0 0 0 .8ex; border-left:2px #729fcf solid;padding-left:1ex"><pre>I guessing because he cut & pasted the headline from the article. No big deal.
I'm curious, though, the article and the CERT advisory only reference Red Hat 6 & 7.
There's no CVE number and they don't mention any other distributions.
Is this a Red Hat only issue? Seems unlikely.
-jt
James Taylor
678-697-9420
<a href="mailto:james.taylor@eastcobbgroup.com">james.taylor@eastcobbgroup.com</a>
<blockquote type="cite" style="margin:0 0 0 .8ex; border-left:2px #729fcf solid;padding-left:1ex">
<blockquote type="cite" style="margin:0 0 0 .8ex; border-left:2px #729fcf solid;padding-left:1ex">
<blockquote type="cite" style="margin:0 0 0 .8ex; border-left:2px #729fcf solid;padding-left:1ex">
"Lightner, Jeffrey via Ale" <<a href="mailto:ale@ale.org">ale@ale.org</a>> 5/17/2018 11:30 AM >>>
</blockquote>
</blockquote>
</blockquote>
And you're shouting because...?
As the article notes RedHat released patches already. It also notes this is an issue only for systems that use dhcp and finally notes that one has to be on the same network with the machines in question. The discussion notes this is more a user for laptop users on external wifi than for anything else.
-----Original Message-----
From: Ale [<a href="mailto:ale-bounces@ale.org">mailto:ale-bounces@ale.org</a>] On Behalf Of Scott M. Jones via Ale
Sent: Thursday, May 17, 2018 11:13 AM
To: Atlanta Linux Enthusiasts
Subject: [ale] CRITICAL LINUX FLAW OPENS THE DOOR TO FULL ROOT ACCESS (RHE)
CRITICAL LINUX FLAW OPENS THE DOOR TO FULL ROOT ACCESS
(Threatpost)
<a href="https://threatpost.com/critical-linux-flaw-opens-the-door-to-full-root-access/132034/">https://threatpost.com/critical-linux-flaw-opens-the-door-to-full-root-access/132034/</a>
_______________________________________________
Ale mailing list
<a href="mailto:Ale@ale.org">Ale@ale.org</a>
<a href="https://mail.ale.org/mailman/listinfo/ale">https://mail.ale.org/mailman/listinfo/ale</a>
See JOBS, ANNOUNCE and SCHOOLS lists at
<a href="http://mail.ale.org/mailman/listinfo">http://mail.ale.org/mailman/listinfo</a>
_______________________________________________
Ale mailing list
<a href="mailto:Ale@ale.org">Ale@ale.org</a>
<a href="https://mail.ale.org/mailman/listinfo/ale">https://mail.ale.org/mailman/listinfo/ale</a>
See JOBS, ANNOUNCE and SCHOOLS lists at
<a href="http://mail.ale.org/mailman/listinfo">http://mail.ale.org/mailman/listinfo</a>
_______________________________________________
Ale mailing list
<a href="mailto:Ale@ale.org">Ale@ale.org</a>
<a href="https://mail.ale.org/mailman/listinfo/ale">https://mail.ale.org/mailman/listinfo/ale</a>
See JOBS, ANNOUNCE and SCHOOLS lists at
<a href="http://mail.ale.org/mailman/listinfo">http://mail.ale.org/mailman/listinfo</a>
</pre></blockquote><div><span><pre><pre>-- <br></pre>James P. Kinney III
Every time you stop a school, you will have to build a jail. What you
gain at one end you lose at the other. It's like feeding a dog on his
own tail. It won't fatten the dog.
- Speech 11/23/1900 Mark Twain
http://heretothereideas.blogspot.com/
</pre></span></div></body></html>