Re: [ANNOUNCE] WOLK v4.13s FINAL - Server Edition

On Wednesday 14 April 2004 19:04, Stefan Foerster wrote:

Hi Stefan,

> well, the you better start working right now - or perhaps not. Seen
> the latest Debian Security Advisories and the mentioned CVE numbers?

Good catch. Thank you! So you mean these:

CAN-2004-0003
    A vulnerability has been discovered in the R128 drive in the Linux
    kernel which could potentially lead an attacker to gain
    unauthorised privileges.  Alan Cox and Thomas Biege developed a
    correction for this

	- Has been fixed in v4.11s


CAN-2004-0010
    Arjan van de Ven discovered a stack-based buffer overflow in the
    ncp_lookup function for ncpfs in the Linux kernel, which could
    lead an attacker to gain unauthorised privileges.  Petr Vandrovec
    developed a correction for this.

	- Has been fixed in v4.11s


CAN-2004-0109
    zen-parse discovered a buffer overflow vulnerability in the
    ISO9660 filesystem component of Linux kernel which could be abused
    by an attacker to gain unauthorised root access.  Sebastian
    Krahmer and Ernie Petrides developed a correction for this.

	- Has been fixed for v4.14s. Uploading now.


CAN-2004-0177
    Solar Designer discovered an information leak in the ext3 code of
    Linux.  In a worst case an attacker could read sensitive data such
    as cryptographic keys which would otherwise never hit disk media.
    Theodore Ts'o developed a correction for this.

	- Has been fixed for v4.14s. Uploading now.


CAN-2004-0178
    Andreas Kies discovered a denial of service condition in the Sound
    Blaster driver in Linux.  He also developed a correction for this.

	- Has been fixed for v4.14s. Uploading now.

ciao, Marc


-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
WOLK - Working Overloaded Linux Kernel
[email protected]
https://lists.sourceforge.net/lists/listinfo/wolk-devel