From jesus at omniti.com  Sat Jun 16 00:49:51 2012
From: jesus at omniti.com (Theo Schlossnagle)
Date: Sat, 16 Jun 2012 00:49:51 -0400
Subject: [OmniOS-discuss] OmniOS and US-CERT Vulnerability Note VU#649219
Message-ID: <CACLsApvgPYGGhfCxwirnuiiq2Z-x60Mjikvj-uYghoRBSQm_DQ@mail.gmail.com>

Some 64-bit operating systems and virtualization software running on
Intel CPU hardware are vulnerable to a local privilege escalation
attack. The vulnerability may be exploited for local privilege
escalation or a guest-to-host virtual machine escape. More complete
details are available here: http://www.kb.cert.org/vuls/id/649219

OmniOS, like other Illumos-based operating systems, was vulnerable to
this attack and has since been fixed:

  http://omnios.omniti.com/changeset.php/core/illumos-omnios/6ba2dbf5e79c7fc6e1221844ddaa2c88a42a3fc1

Updated packages for both the OmniOS release and "bloody"
distributions are now available in the public package repositories.

If you are running an OmniOS system, it is highly recommended that you
upgrade immediately.  As this problem is in-kernel, a reboot will be
required to put the fixes in place.

Thanks and happy updating and stay safe!

-- 
Theo Schlossnagle
http://omniti.com/is/theo-schlossnagle

From esproul at omniti.com  Mon Jun 18 17:46:36 2012
From: esproul at omniti.com (Eric Sproul)
Date: Mon, 18 Jun 2012 17:46:36 -0400
Subject: [OmniOS-discuss] Updated release: r151002l
Message-ID: <CA+QY2RQA0mfstV0LGNZP09DapDnHcJodAjda=x8f9utj0zHiRA@mail.gmail.com>

OmniOS weekly release r151002l contains the recent kernel fix for the
SYSRET vulnerability on Intel CPUs.  The vulnerability may be
exploited for local privilege escalation or a guest-to-host virtual
machine escape.  A reboot will be required to complete the update.

Also updated is the NTP server package, to restore the traditional
Solaris default config file location (/etc/inet/ntp.conf) which is a
compile-time option.

http://omnios.omniti.com/wiki.php/ReleaseNotes#r151002l

