Hi, is this problem already fixed in the kernels that were announced in SUSE-SA:2004:044? http://www.isec.pl/vulnerabilities/isec-0021-uselib.txt This email claims it has been discussed with Sebastian Kraemer in Dezember already, but it looks like the email is *not* from Stefan Esser, so I'm not sure if the Disclosure Timeline is just faked. If it's not in the last kernel, is there a fix in the kotd somewhere already? cu, Frank -- Dipl.-Inform. Frank Steiner Web: http://www.bio.ifi.lmu.de/~steiner/ Lehrstuhl f. Bioinformatik Mail: http://www.bio.ifi.lmu.de/~steiner/m/ LMU, Amalienstr. 17 Phone: +49 89 2180-4049 80333 Muenchen, Germany Fax: +49 89 2180-99-4049 * Rekursion kann man erst verstehen, wenn man Rekursion verstanden hat. *
Frank Steiner wrote
Hi,
is this problem already fixed in the kernels that were announced in SUSE-SA:2004:044? http://www.isec.pl/vulnerabilities/isec-0021-uselib.txt
This email claims it has been discussed with Sebastian Kraemer in Dezember already, but it looks like the email is *not* from Stefan Esser, so I'm not sure if the Disclosure Timeline is just faked.
Sorry, I forgot the link: http://lists.immunitysec.com/pipermail/dailydave/2005-January/001371.html -- Dipl.-Inform. Frank Steiner Web: http://www.bio.ifi.lmu.de/~steiner/ Lehrstuhl f. Bioinformatik Mail: http://www.bio.ifi.lmu.de/~steiner/m/ LMU, Amalienstr. 17 Phone: +49 89 2180-4049 80333 Muenchen, Germany Fax: +49 89 2180-99-4049 * Rekursion kann man erst verstehen, wenn man Rekursion verstanden hat. *
On Fri, Jan 07, 2005 at 04:41:29PM +0100, Frank Steiner wrote:
Hi,
is this problem already fixed in the kernels that were announced in SUSE-SA:2004:044? http://www.isec.pl/vulnerabilities/isec-0021-uselib.txt
This email claims it has been discussed with Sebastian Kraemer in Dezember already, but it looks like the email is *not* from Stefan Esser, so I'm not sure if the Disclosure Timeline is just faked.
If it's not in the last kernel, is there a fix in the kotd somewhere already?
No, this is a new problem. We are working on a fix and it should soon show up in the kernel of the days and after fix/QA turnaround as a security update. Ciao, Marcus
Marcus Meissner wrote
No, this is a new problem. We are working on a fix and it should soon show up in the kernel of the days a
Btw, is there a maintainer for the kernel of the day? Checking ftp://ftp.suse.com/pub/projects/kernel/kotd/i386/HEAD/ I saw that the kotd is already at 2.6.10, but only for the kernel rpms. The kernel-source.src.rpm which I always use to draw some of SuSEs fixes to put them into my own kernel, is still at 2.6.8. Is there anyone I can ask where to find the kernel-source-2.6.10.src.rpm that was the base for all the kernels in the kotd directory? (So that the moment the fix occurs, we can pull it out of the src.rpm :-)) Thanks! cu, Frank -- Dipl.-Inform. Frank Steiner Web: http://www.bio.ifi.lmu.de/~steiner/ Lehrstuhl f. Bioinformatik Mail: http://www.bio.ifi.lmu.de/~steiner/m/ LMU, Amalienstr. 17 Phone: +49 89 2180-4049 80333 Muenchen, Germany Fax: +49 89 2180-99-4049 * Rekursion kann man erst verstehen, wenn man Rekursion verstanden hat. *
On Mon, Jan 10, 2005 at 11:54:21AM +0100, Frank Steiner wrote:
Marcus Meissner wrote
No, this is a new problem. We are working on a fix and it should soon show up in the kernel of the days a
Btw, is there a maintainer for the kernel of the day? Checking
ftp://ftp.suse.com/pub/projects/kernel/kotd/i386/HEAD/
I saw that the kotd is already at 2.6.10, but only for the kernel rpms. The kernel-source.src.rpm which I always use to draw some of SuSEs fixes to put them into my own kernel, is still at 2.6.8. Is there anyone I can ask where to find the kernel-source-2.6.10.src.rpm that was the base for all the kernels in the kotd directory? (So that the moment the fix occurs, we can pull it out of the src.rpm :-))
Yes, there is a maintainer. I have forwarded your mail to him. The fix will show up in the other trees today. Ciao, Marcus
Marcus Meissner wrote
Yes, there is a maintainer. I have forwarded your mail to him.
The fix will show up in the other trees today.
Thanks! -- Dipl.-Inform. Frank Steiner Web: http://www.bio.ifi.lmu.de/~steiner/ Lehrstuhl f. Bioinformatik Mail: http://www.bio.ifi.lmu.de/~steiner/m/ LMU, Amalienstr. 17 Phone: +49 89 2180-4049 80333 Muenchen, Germany Fax: +49 89 2180-99-4049 * Rekursion kann man erst verstehen, wenn man Rekursion verstanden hat. *
participants (2)
-
Frank Steiner -
Marcus Meissner