Date: Fri, 23 Jun 2017 01:19:05 +0200 From: Michelle Sullivan <michelle@sorbs.net> To: Peter Jeremy <peter@rulingia.com> Cc: "freebsd-security@freebsd.org" <freebsd-security@freebsd.org> Subject: Re: The Stack Clash vulnerability Message-ID: <fd64b255-6c47-1ac1-b5df-2edbdc02d550@sorbs.net> In-Reply-To: <20170622222930.GA36405@server.rulingia.com> References: <F9B7242B-ED83-45C5-9196-6FD095AD9497@gvcgroup.com> <CAPyFy2CicxYBZpyy-pHS%2BQ=wTvwhpqi0fOKahEBDqiVe5h084A@mail.gmail.com> <CAPyFy2C4-hKG=hh0=th%2BRDwBzmMUqMqdg4YYZ76WxGS-JLnLBA@mail.gmail.com> <a1c45d20-78f9-e7d7-2f3e-d18c1723c5d5@sorbs.net> <0F042A4B-CB52-47EB-A191-D7617E51789A@FreeBSD.org> <187b2241-510e-20f8-50c6-16b318e22e89@sorbs.net> <20170622222930.GA36405@server.rulingia.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Peter, Peter Jeremy wrote: > > paying someone to provide whatever level of support you want. With > respect to your 9.x servers, no-one is saying you must replace the > hardware, just that the FreeBSD Project will not continue to provide > you with free support whilst you choose to run 9.x on them. Note that > You mistake me for someone who needs or is asking for support. I already have the proposed patch available to me on my servers, I'm not convinced it solves the issue, merely making it a *lot* more difficult to exploit, however that was my 'first look' I have a lot more to understand and think about and there are many more people of higher intelligence looking at it than me. That said, I'm suggesting that given the amount of time this issue has been around and that it was supposedly fixed many years ago, that one should consider a special case backport for those that are not capable of creating their own patches... and before throwing accusations around you should consider how many times I have ever suggested that a particular bug gets backported... If you can't be bothered to check, this is the first since I started using FreeBSD in 2003. -- Michelle Sullivan http://www.mhix.org/
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?fd64b255-6c47-1ac1-b5df-2edbdc02d550>