Re: [gentoo-server] Root exploit in virtually all 2.4 kernels ... fixed

[Dan Shookowsky]

I've been waiting for the patched version of gaming-sources, but
when I tried to emerge gamin-sources last night, I received a
message stating that all of the ebuilds were masked.  I assumed
it was because they were in the process of being patched. 
Should I just emerge -u gaming-sources<explicit-version>?



--- Andy Dustman <adustman@×××××××××.edu> wrote:
> On Thu, 2003-12-04 at 15:18, Kerin Millar wrote:
> > Let me make it perfectly clear that every version of every
> single set of
> > kernel sources in ebuild now applies a patch to rectify the
> > vulnerability, if required. Even vanilla-sources-2.4.20 is
> now safe, for
> > example.
>
> Not all of the ebuilds have been bumped a revision number, so
> you won't
> get the patch with emerge --update world; you'll need to
> explicitly
> re-emerge. In particular, vanilla-sources were not bumped.
> wolk-sources
> were bumped (to 4.9-r2) within the last day (or moved to
> stable),
> although 4.9-r1 also has the patch. And I may be wrong but it
> appears
> redhat-sources does not have the fix unless it was previously
> incorporated by Red Hat. (I don't use that package so I can't
> say
> authoritatively).
> --
> Andy Dustman <adustman@×××××××××.edu>
> Office of Information Technology, Terry College of Business,
> UGA
>


=====
--------
Dan Shookowsky
shookow@×××××.com

__________________________________
Do you Yahoo!?
Free Pop-Up Blocker - Get it now
http://companion.yahoo.com/