sticky_chicken
02-12-2003, 03:36 PM
For those who are running linux, you might want to think about upgrading your kernel to fix the following security issue which has been reported. This is from Redhat's support page.
Note that this isn't just a Redhat problem, rather a generic linux kernel issue
Updated kernel packages are now available that fix a security vulnerability
leading to a possible privilege escalation.
The Linux kernel handles the basic functions of the operating system.
A flaw in bounds checking in the do_brk() function in the Linux kernel
versions 2.4.22 and previous can allow a local attacker to gain root
privileges. This issue is known to be exploitable; an exploit has been
seen in the wild that takes advantage of this vulnerability. The Common
Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name
CAN-2003-0961 to this issue.
All users are advised to upgrade to these errata packages, which contain
a backported security patch that corrects this vulnerability.
Important:
If you use Red Hat Linux 7.1, you must have installed quota-3.06-9.71 from
RHSA-2003:187, and if you use Red Hat Linux 7.2 or 7.3, you must have
installed quota-3.06-9.7 from RHSA-2003:187
Note that this isn't just a Redhat problem, rather a generic linux kernel issue
Updated kernel packages are now available that fix a security vulnerability
leading to a possible privilege escalation.
The Linux kernel handles the basic functions of the operating system.
A flaw in bounds checking in the do_brk() function in the Linux kernel
versions 2.4.22 and previous can allow a local attacker to gain root
privileges. This issue is known to be exploitable; an exploit has been
seen in the wild that takes advantage of this vulnerability. The Common
Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name
CAN-2003-0961 to this issue.
All users are advised to upgrade to these errata packages, which contain
a backported security patch that corrects this vulnerability.
Important:
If you use Red Hat Linux 7.1, you must have installed quota-3.06-9.71 from
RHSA-2003:187, and if you use Red Hat Linux 7.2 or 7.3, you must have
installed quota-3.06-9.7 from RHSA-2003:187