CVE-2017-1000405

[mikemoate]

See https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000405 and https://medium.com/bindecy/huge-dirty-cow-cve-2017-1000405-110eca132de0 for details.

When will we have a RancherOS release that patches this?

[mikemoate]

@will-chan @ibuildthecloud given the conversation on #2156 is anyone from Rancher looking at this CVE and how it impacts Rancher OS?

[niusmallnan]

Regarding CVE-2017-1000405:
The patch has been backported to kernel v4.9.x(LTS), we can use the latest version v4.9.67.
http://www.openwall.com/lists/oss-security/2017/11/30/1

Commit: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/commit/?h=linux-4.9.y&id=7031ae2ab37d3df53c4a4e9903329a5d38c745ec

We can build a release with kernel v4.9.67.

[niusmallnan]

Fixed by https://github.com/rancher/os/releases/tag/v1.1.1