full-disclosure - Re: The story of the Linux kernel 3.x...

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Wed, 16 May 2012 23:49:40 +0200
From: Adam Zabrocki <pi3@....com.pl>
To: full-disclosure <full-disclosure@...ts.grok.org.uk>
Cc: taviso@...xchg8b.com
Subject: Re: The story of the Linux kernel 3.x...

Hi Tavis,

Yes this is stock kernels and yes you must believe it is so simple mistake ;)
All systems was installed as VM in default installation using official ISOs.

And of course this is configuration mistake not kernel problem(!) - my mistake
if I wasn't clear in the write-up.

Anyway Suse ISO which I used:

$ md5sum /media/pi3/openSUSE-12.1-DVD-x86_64.iso 
4cfe8229111ef723ae7aa541fd2c87b7  /media/pi3/openSUSE-12.1-DVD-x86_64.iso
$ md5sum /media/pi3/openSUSE-12.1-DVD-i586.iso 
22b4d6bfdb11f5bdd36a05f9968a780c  /media/pi3/openSUSE-12.1-DVD-i586.iso

After reading opensuse kernel developers list I found a problem and gentle fix:

http://lists.opensuse.org/opensuse-kernel/2012-03/msg00056.html

so the latest update has this fix but still official ISO has old kernel. Fix was applied
in March/April. So again _sock kernels_ have/had so simple mistake ;)

Best regards,
Adam

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/