Monthly Archives: June 2016

CentOS

Updated Vagrant Box's are now available : 1605

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

Updated Vagrant box's are now available for CentOS Linux 7/x86_64 and
for the first time for CentOS Linux 6/x86_64; We are providing box's
for Livbirt provider and the Virtual Box provider.

ref: https://atlas.hashicorp.com/centos/boxes/6
     https://atlas.hashicorp.com/centos/boxes/7

Release Notes for these images are published at :

https://seven.centos.org/2016/06/updated-centos-vagrant-images-available
/

regards,

- -- 
Karanbir Singh, Project Lead, The CentOS Project
+44-207-0999389 | http://www.centos.org/ | twitter.com/CentOS
GnuPG Key : http://www.karan.org/publickey.asc
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAEBAgAGBQJXYro+AAoJEI3Oi2Mx7xbtD0wH/258qtXogCXBwFDOId4d7PmV
bRVyYp+i0wX+yG6xWrziDXjWoRB/xa+YUJX39qvhP2PGikJg7aj9K+z5DS9Y9Dfp
hBMfmQ17MvIV53cfPeNnL06wSOZ+Y93awN7fr7It8nR4imAgXXouAX0YjDioOP2j
GTteuu0ieyYU87sG/CZuHBGPgvsL4u5XVba19VY+0b12pv3z9kHJeHIwReQX3WVT
7C2cstXTsnEC/BYdbfPj+hFKRZGwuAiA5JDLN53eoOuQReIfnYfU2a/ugebTUH8G
X12J64IaKDfCd6018DC+uUDtmaiFwXlxeaKyHqXO7m6EiCMQrhRty2CPNajVk08=
=wR1K
-----END PGP SIGNATURE-----
Security

Chrome GPU Process MailboxManagerImpl Double Read

Several functions in the GPU command buffer service interact with the GPU mailbox manager (gpu/command_buffer/service/mailbox_manager_impl.cc), passing a reference to shared memory as the mailbox argument. MailboxManagerImpl does not expect this mailbox argument to be malleable in this way, and it is in several places copied and passed to various stl functions, resulting in unexpected behavior from double-reads when an attacker modifies the mailbox name mid function.