Messages in this thread | | | Date | Thu, 12 May 2005 10:48:41 +0200 | From | Willy Tarreau <> | Subject | Linux 2.4.30-hf2 - security fix |
| |
Hi all,
here comes the second hotfix for 2.4.30, which addresses the vulnerability reported in CAN-2005-1263 by Paul Starzetz from ISEC :
http://linux.exosec.net/kernel/2.4-hf/
The fix was backported and tested by Chris Wright from Greg's 2.6 patch.
Every 2.4.30[-hf1] user should apply the fix. 2.4.29 users can download the 2.4.29-hf9 release from the same site.
Changelog From 2.4.30-hf1 to 2.4.30-hf2 (semi-automated) --------------------------------------- '+' = added ; '-' = removed
+ 2.4.30-vuln-CAN-2005-1263-1 (Greg KH, Chris Wright)
From Paul Starzetz: A locally exploitable flaw has been found in the Linux ELF binary format loader's core dump function that allows local users to gain root privileges and also execute arbitrary code at kernel privilege level.
Regards, Willy
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |