perfSONAR User Q&A and Other Discussion

[Andrew Lake <>]

All,

New web100 kernel packages are now available for users of the perfSONAR Toolkit on CentOS 6. You may run 'yum update' to grab the new kernel. You should restart your host after the upgrade completes. Full details on this particular patch can be found in the previous email.

NOTE: The perfSONAR project will not be applying the web100 patch to any kernels released after October 17, 2017. This patch is only for CentOS 6 as the web100 patch is not compatible with the kernel released for CentOS 7.

Thank you,

The perfSONAR Team

On October 6, 2017 at 2:14:22 PM, Andrew Lake () wrote:

All;

A new kernel has been released for CentOS6. The CVE with details can be found below:

https://access.redhat.com/errata/RHSA-2017:2863

A 'yum update' may give you a new non-web100 kernel and therefore break access to NDT/NPAD. Consult our FAQ for more info: http://www.perfsonar.net/about/faq/#Q25

Our read of the CVE does not find any issue of concern specific to the toolkit. Its possible the host may be vulnerable to some types of DoS attacks in some particular cases. If you are in doubt about your kernel, feel free to review the CVE,  upgrade to the latest version, and forgo NDT/NPAD support for the time being.  We are in the process of building and testing a new kernel, and will alert you when we have our web100 patched version available. We'll try to have it ready as soon as possible.

NOTE: The perfSONAR project will not be applying the web100 patch to any kernels released after October 17, 2017. This patch is only for CentOS 6 as the web100 patch is not compatible with the kernel released for CentOS 7.

Thank you for your patience,

The perfSONAR Team