[K12OSN] Linux kernel DoS exploit -- don't need root!

[Huck]

to patch with apt-get will the following work?



apt-get update kernel 



oddly enough yum takes hours to complete a simple update
while apt-get take less than 20 minutes...
is this because of the size of repositories or just some funkyness with
my test-server?


I ask, because it seems any time I've done a complete upgrade that my
config settings get all messed up(overwritten).

--Huck



-----Original Message-----
From: k12osn-bounces at redhat.com [mailto:k12osn-bounces at redhat.com] On
Behalf Of Terrell Prude'
Sent: Monday, June 14, 2004 11:58 AM
To: k12osn at redhat.com
Subject: [K12OSN] Linux kernel DoS exploit -- don't need root!


Hello folks,

I don't have read-access to my K12OSN folder, as I am at work, so if 
this has already been announced, my apologies.

There is a newly-discovered bug in the Linux kernel versions 2.4 and 2.6

(nearly every version on nearly every distro) that will lock a GNU/Linux

box.  All you need is shell access; *you do not need root*.  That means 
that any rambunctious kid could lock your K12LTSP server(s)!

Yes, there is a patch.  I don't know if there's a Fedora-, WBEL-, or 
RHEL-specific update at this time.

Here's the link:

http://linuxreviews.org/news/2004-06-11_kernel_crash/index.html

--TP


_______________________________________________
K12OSN mailing list
K12OSN at redhat.com https://www.redhat.com/mailman/listinfo/k12osn
For more info see <http://www.k12os.org>