Re: [gentoo-server] Root exploit in virtually all 2.4 kernels ... fixed

[Kerin Millar]

On Thu, 2003-12-04 at 19:56, Ken Tossell wrote:
> On Thu, 4 Dec 2003, Matthew Baxa wrote:
>
> > How recently is "very recently"?
>
> 2.4.23 is the first patched release.

True, in so far as the scope of that comment goes. But /not/ so from the
perspective of the Gentoo user who uses ebuilds as a method to obtain
kernel sources with which to build a kernel (and this is a Gentoo list,
after all)! Some might take this as meaning you need to run 2.4.23 or
higher.

Let me make it perfectly clear that every version of every single set of
kernel sources in ebuild now applies a patch to rectify the
vulnerability, if required. Even vanilla-sources-2.4.20 is now safe, for
example.

--Kerin Francis Millar