Here are the details from the Slackware 8.1 ChangeLog: Thu Jan 8 18:21:27 PST 2004 patches/kernels/*: These are 2.4.18 kernels containing a backported fix for a security problem with the kernel's mremap() function. A local user could exploit this hole to gain root privileges. For more details, see: https://www.cve.org/CVERecord?id=CVE-CAN-2003-0985 After installing the new kernel, be sure to run 'lilo'. (* Security fix *) patches/packages/kernel-ide-2.4.18-i386-5.tgz: Patched mremap(). (* Security fix *) patches/packages/kernel-source-2.4.18-noarch-6.tgz: This is the source code from kernel-source-2.4.18-noarch-5 with the fix for mremap(). (* Security fix *) WHERE TO FIND THE NEW PACKAGES: Updated packages for Slackware 8.1: An alternate kernel may be installed. Those are found in this directory: ftp://ftp.slackware.com/pub/slackware/slackware-8.1/patches/kernels/ MD5 SIGNATURES: MD5 signatures may be downloaded from our FTP server: Slackware 8.1
Read the Full Advisory
Get the latest Linux and open source security news straight to your inbox.