[CentOS] CVE-2016-5195 DirtyCOW: Critical Linux Kernel Flaw

Wed Nov 2 00:05:59 UTC 2016
Richard <lists-centos at listmail.innovate.net>


> Date: Tuesday, November 01, 2016 18:49:56 -0500
> From: Valeri Galtsev <galtsev at kicp.uchicago.edu>
>
> On Tue, November 1, 2016 6:25 pm, Tony Mountifield wrote:
>> In article <5818CD31.4050008 at moving-picture.com>,
>> James Pearson <james-p at moving-picture.com> wrote:
>>> Leonardo Oliveira Ortiz wrote:
>>> > RedHat and Centos 4.x can be explored by this flaw?
>>> 
>>> See:
>>> 
>>>   https://access.redhat.com/security/cve/cve-2016-5195
>> 
>> In other words, no: RHEL 4 and CentOS4 are not affected by this
>> flaw.
> 
> My understanding is: RHEL is obsolete, hence it will not even be
> mentioned on that page, whether it is known to be affected or not.
> 

RHEL/Centos-4 is EOL so wouldn't be updated regardless (at least
under the normal EOL guidelines), but it is mentioned toward the
bottom of that page under "Affected Packages State":

  Red Hat Enterprise Linux 4 	kernel 	Not affected