Gentoo Logo
Gentoo Spaceship




Note: Due to technical difficulties, the Archives are currently not up to date. GMANE provides an alternative service for most mailing lists.
c.f. bug 424647
List Archive: gentoo-security
Navigation:
Lists: gentoo-security: < Prev By Thread Next > < Prev By Date Next >
Headers:
To: gentoo-security@g.o
From: pb <pb@...>
Subject: Re: new kernel vulnerability in 2.2, 2.4 and 2.6 series
Date: Tue, 06 Jan 2004 07:27:32 +0100
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Tobias Weisserth wrote:
> Hello everybody,
>
> there is a new kernel vulnerability in the mremap system call. This
> affects all kernels of the 2.2, 2,4 and 2.6 series with the exception of
> 2.4.24. There is some information on this at
> http://isec.pl/vulnerabilities/isec-0013-mremap.txt.
>

Here's a hotfix from Wojtek Kaniewski for <=2.4.23 kernels

# wget http://toxygen.net/hotfixes/mremap.c
# gcc -Wall -O3 -fomit-frame-pointer -I/usr/src/linux/include -c -o
mremap.o mremap.c
# insmod mremap.o

pb


PS. gentoo-security doesn't have "Reply-To:
gentoo-security@g.o" so i accidentally sent the yesterdays'
answer to Tobias only.


- --
Public Key: http://teleinfo.tu.kielce.pl/~pb/gpg.asc

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQE/+lVTTE0TNzgUY2sRAq4fAKDHehiYVpSOLI4435bsqidVygKBJACgxFWW
Mahk3BIPWjrBE59Vj1ptrCw=
=IP4U
-----END PGP SIGNATURE-----


--
gentoo-security@g.o mailing list

Replies:
Re: new kernel vulnerability in 2.2, 2.4 and 2.6 series
-- Tobias Weisserth
References:
new kernel vulnerability in 2.2, 2.4 and 2.6 series
-- Tobias Weisserth
Navigation:
Lists: gentoo-security: < Prev By Thread Next > < Prev By Date Next >
Previous by thread:
Re: new kernel vulnerability in 2.2, 2.4 and 2.6 series
Next by thread:
Re: new kernel vulnerability in 2.2, 2.4 and 2.6 series
Previous by date:
Re: new kernel vulnerability in 2.2, 2.4 and 2.6 series
Next by date:
Re: new kernel vulnerability in 2.2, 2.4 and 2.6 series


Updated Jun 17, 2009

Summary: Archive of the gentoo-security mailing list.

Donate to support our development efforts.

Copyright 2001-2013 Gentoo Foundation, Inc. Questions, Comments? Contact us.