From: Solar Designer (solaropenwall.com)
Date: Thu Apr 22 2004 - 21:53:55 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hi,

A few days ago, I wrote:

On Mon, Apr 19, 2004 at 04:03:22AM +0400, Solar Designer wrote:
> There're no known major security fixes added with Linux 2.4.26.

It is now public knowledge that Linux 2.4.26 does indeed fix a local
root vulnerability:

http://www.isec.pl/vulnerabilities/isec-0015-msfilter.txt

Linux 2.0.x and 2.2.x are unaffected.

Thus, if you're running a Linux 2.4.x kernel, it is highly recommended
that you upgrade to Linux 2.4.26-ow1.

The Openwall Linux kernel patch's web page and the Owl change log
entry have been updated with the vulnerability information.

Owl 1.1-stable has been updated to use Linux 2.4.26-ow1 as the kernel.

--
Alexander Peslyak <solaropenwall.com>
GPG key ID: B35D3598 fp: 6429 0D7E F130 C13E C929 6447 73C3 A290 B35D 3598
http://www.openwall.com - bringing security into open computing environments

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]