Re: [oss-security] Summary of security bugs (now fixed) in user namespaces

2013-04-16 Thread Florian Weimer
On 04/13/2013 07:16 PM, Andy Lutomirski wrote: I previously reported these bugs privatley. I'm summarizing them for the historical record. These bugs were never exploitable on a default-configured released kernel, but some 3.8 versions are vulnerable depending on configuration. Looking at

Re: [oss-security] Summary of security bugs (now fixed) in user namespaces

2013-04-16 Thread Florian Weimer
On 04/13/2013 07:16 PM, Andy Lutomirski wrote: I previously reported these bugs privatley. I'm summarizing them for the historical record. These bugs were never exploitable on a default-configured released kernel, but some 3.8 versions are vulnerable depending on configuration. Looking at