announce - linux-2.2.18-ow4 and 2.0.39-ow2

Openwall GNU/*/Linux 3.0 - a small security-enhanced Linux distro for servers

[<prev] [next>] [day] [month] [year] [list]

Date: Sat, 10 Feb 2001 01:51:48 +0300
From: Solar Designer <solar@...nwall.com>
To: announce@...ts.openwall.com
Subject: linux-2.2.18-ow4 and 2.0.39-ow2

Hi,

Two serious Linux kernel vulnerabilities have just been announced
(information leak in sysctl(2) on Linux 2.2, and a race condition in
execve(2) on both 2.2 and 2.0).  Both can result in a local root
compromise.

I've released updated versions of the kernel patches which include
fixes for these vulnerabilities.  They can be downloaded at the usual
location:

	http://www.openwall.com/linux/

-- 
/sd