On Tuesday 02 December 2003 23:00, Post, Mark K wrote:
> With the recent kernel vulnerabilities announced, I think it's important
> that one of two things happen:
> Either backport the fix(es) from 2.4.23 into the versions supported by
> Boeblingen
> or
> Put out mainframe support patches for 2.4.23.
>
> Ideally, I would like to see both, but don't expect that to happen.
>
> The vulnerability is listed as "local" not "remote," but given the
> percentages, that's still a very high-impact problem.
Which vulnerabilities are you referring to? The brk() attack obviously
can't work on s390, is there any other one that needs to be dealt
with?
Arnd <><
