[17669] in bugtraq
Immunix OS Security update for modutils
daemon@ATHENA.MIT.EDU (Greg KH)
Thu Nov 16 18:23:22 2000
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-md5;
protocol="application/pgp-signature"; boundary="s5/bjXLgkIwAv6Hi"
Content-Disposition: inline
Message-Id: <20001116113627.J10309@wirex.com>
Date: Thu, 16 Nov 2000 11:36:27 -0800
Reply-To: Greg KH <greg@WIREX.COM>
From: Greg KH <greg@WIREX.COM>
To: BUGTRAQ@SECURITYFOCUS.COM
--s5/bjXLgkIwAv6Hi
Content-Type: text/plain; charset=us-ascii
Content-Disposition: attachment; filename=IMNX-2000-70-006-01
-----------------------------------------------------------------------
Immunix OS Security Advisory
Packages updated: modutils
Effected products: Immunix OS 6.2, Immunix OS 7.0-beta
Bugs Fixed: immunix/1292
Date: November 16, 2000
Advisory ID: IMNX-2000-70-006-01
Author: Greg Kroah-Hartman <greg@wirex.com>
-----------------------------------------------------------------------
Description:
A local root exploit in the modutils package has been fixed.
This problem was originally found by Sebastian Krahmer and Michal
Zalewski (see Michal's posting at
http://www.securityfocus.com/archive/1/144552 for more information.)
This problems effects both Immunix 6.2 and 7.0 beta. Packages have
been created and released for both versions.
This update also has the added benefit of providing a modutils
package that supports the latest Linux USB hotplug support :)
Package names and locations:
Precompiled binary packages for Immunix 6.2 are available at:
http://www.immunix.org:8080/ImmunixOS/6.2/updates/RPMS/modutils-2.3.20-0.6.2_StackGuard.i386.rpm
Source packages for Immunix 6.2 are available at:
http://www.immunix.org:8080/ImmunixOS/6.2/updates/SRPMS/modutils-2.3.20-0.6.2_StackGuard.src.rpm
Precompiled binary packages for Immunix System 7 beta are available at:
http://www.immunix.org:8080/ImmunixOS/7.0-beta/updates/RPMS/modutils-2.3.20-1_StackGuard.i386.rpm
Source packages for Immunix 7.0 are available at:
http://www.immunix.org:8080/ImmunixOS/7.0-beta/updates/SRPMS/modutils-2.3.20-1_StackGuard.src.rpm
md5sums of the packages:
c3f8322355850af8a4e08e979582925d 6.2/updates/RPMS/modutils-2.3.20-0.6.2_StackGuard.i386.rpm
5d283311a5733e998d7175f892eaae6b 6.2/updates/SRPMS/modutils-2.3.20-0.6.2_StackGuard.src.rpm
81e5afdda886b840e36457c4c3cfe9d8 7.0-beta/updates/RPMS/modutils-2.3.20-1_StackGuard.i386.rpm
b1037bce7256337420c52f0225271c4b 7.0-beta/updates/SRPMS/modutils-2.3.20-1_StackGuard.src.rpm
--s5/bjXLgkIwAv6Hi
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.4 (GNU/Linux)
Comment: For info see http://www.gnupg.org
iD8DBQE6FDc7Al5ylTeuKpURAv9dAKCw+f701L5L3+Bz/Y63aIFGFTu31gCeLcw+
6vH8re4EB8qnNm8BYuGWlR8=
=oFEt
-----END PGP SIGNATURE-----
--s5/bjXLgkIwAv6Hi--
