Simon Horman [Horms]
2004-07-06 11:11:05 UTC
Updated Kernel Packages for all supported Distribitions
Updated kernel packages for are available for Ultra Monkey 2.0.1 to fix
a bug in sys_fchown() (CAN-2004-0497) . This problem manifests when
fsuid is set, which is done using the privelaged sys_setfsuid() call.
This is typically only used by the Linux user-space NFS daemon, which
the call was added for. This vulnerablility may be exploited by remote
users to change the owner of files on systems that run the user-space
NFS daemon and have a kernel that has not been patched. Users who use
the user-space NFS daemon are advised to upgrade.
Updated packages and installation notes are available from
http://www.ultramonkey.org.
* Debian Woody (Stable 3.0) [2.4.22-1-ipvs_2.4.22-7woody.um.5]
* Debian Sid [2.4.22-1-ipvs_2.4.22-7.um.5]
* Fedora Core 1 [2.4.22-1.2197.nptl.um.1]
* Red Hat Enterprise Linux 3.0 [2.4.21-15.0.3.EL.um.1]
* Red Hat 9 [2.4.20-31.9.um.2]
* Red Hat 8 [2.4.20-31.9.um.2]
* Red Hat 7.3 [2.4.20-31.9.um.2]
For more information, please see:
http://www.ultramonkey.org/news_archive.shtml#2004070600
Updated kernel packages for are available for Ultra Monkey 2.0.1 to fix
a bug in sys_fchown() (CAN-2004-0497) . This problem manifests when
fsuid is set, which is done using the privelaged sys_setfsuid() call.
This is typically only used by the Linux user-space NFS daemon, which
the call was added for. This vulnerablility may be exploited by remote
users to change the owner of files on systems that run the user-space
NFS daemon and have a kernel that has not been patched. Users who use
the user-space NFS daemon are advised to upgrade.
Updated packages and installation notes are available from
http://www.ultramonkey.org.
* Debian Woody (Stable 3.0) [2.4.22-1-ipvs_2.4.22-7woody.um.5]
* Debian Sid [2.4.22-1-ipvs_2.4.22-7.um.5]
* Fedora Core 1 [2.4.22-1.2197.nptl.um.1]
* Red Hat Enterprise Linux 3.0 [2.4.21-15.0.3.EL.um.1]
* Red Hat 9 [2.4.20-31.9.um.2]
* Red Hat 8 [2.4.20-31.9.um.2]
* Red Hat 7.3 [2.4.20-31.9.um.2]
For more information, please see:
http://www.ultramonkey.org/news_archive.shtml#2004070600
--
$B%5%$%b%s!&%[!<%^%s(B ($B@>Lg(B $BJuRX(B) | Simon Horman (Horms)
$B%5%$%b%s!&%[!<%^%s(B ($B@>Lg(B $BJuRX(B) | Simon Horman (Horms)