linux attack threat, users urged to patch.

[kronas]

linux users are being urged to patch systems, after serious vulnerabilitys were found, which could enable root privledges on a machine.

versions affected

2.4 series to 2.4.24, all 2.2 kernels to 2.2.25 and the 2.6 kernel series including 2.6.2.

source: computerworld

http://www.computerworld.com/securitytopics/security/holes/story/0,10801,90359,00.html?f=x10

techincal details:

http://isec.pl/vulnerabilities/isec-0014-mremap-unmap.txt

major vender links for patches:

redhat:

https://rhn.redhat.com/errata/RHSA-2004-065.html

SUSE:

http://www.suse.com/de/security/2004_05_linux_kernel.html

Linux AG:

http://www.suse.com/de/security/2004_05_linux_kernel.html

[Tricky]

Cheers for this, I was just downloading all the patches for my redhat 9 server before I spotted this... (couldn't get mandrake to do what I wanted (off topic but relates to another thread!))

TRICKY EDIT: Patches/Updates downloaded approx 3 hours, one of the packages failed part way through install now get a load of errors and cannot get back to X windows....At least XP/W2K3 works!

Attempting an "Upgrade" from the media disks now to try recover my box!

[kronas]

no problem tricky, shame about the borked setup afterwards :disturbd: :erm:

[philip.j.fry]

Bah, just as I finished compiling 2.6.2 as well!! At least the config shouldn't be too different so I can just compile 2.6.3

[Paul]

What - a hole in Linux - can this be :eek:

I wondered why they wern't all out MS bashing again ........ ;)

[Stuartbe]

What - a hole in Linux - can this be :eek:

I wondered why they wern't all out MS bashing again ........ ;)

It wont take long.... Mind you this is the first linux hole I have heard about for a while !

[zoombini]

OMG! MS will certainly be making the most of this one..

[Tricky]

One Redhat v9 server patched with 182 fixes and the like...Come on!!
Now where is my copy of ghost I need a backup of this beast