Hi, Goswin von Brederlow wrote:
Hi, I saw that the amd64 kernel has a root exploit: http://www.heise.de/newsticker/data/dab-23.01.04-001/ http://rhn.redhat.com/errata/RHSA-2004-017.html http://www.suse.de/de/security/2004_03_linux_kernel.html Does anyone have the patch for that? Both RH and SuSe only seem to provide a full kernel source.
If someone here has access to RedHat Bugzilla (http://bugzilla.redhat.com/bugzilla/), he could look to bug #113106 and see if a patch is available
FWIW, I have extracted a patch from the 2.6.2-rc1 kernel that seems to work on my 2.4.23 kernel tree. I could have put it in attachment but I'm hesitant : if this patch has not been published yet, maybe it's for security reasons (i.e. to keep someone from undertsandind how to use this vulnerability maliciously). Before all, tell me whether I may publish it on this list or not.
Xavier