[ Thanks to Michael
Palmer for this link. ]
From the Changelog…
---------------------------------------------------------------------
Tue Mar 18 01:44:41 PST 2003
Slackware 9.0 is released... happy release day!
bootdisks/*: Patched kmod/ptrace hole. (see below)
kernels/*: Patched kmod/ptrace hole. (see below)
a/kernel-ide-2.4.20-i486-5.tgz: Patched kmod/ptrace hole. (see below)
ap/mysql-3.23.56-i386-1.tgz: Upgraded to mysql-3.23.56.
d/ccache-2.2-i386-1.tgz: Added ccache-2.2.
d/kernel-headers-2.4.20-i386-5.tgz: Patched ptrace related headers.
k/kernel-source-2.4.20-noarch-5.tgz: Patched kmod/ptrace hole.
The kernel module loader in Linux kernel 2.2.x before 2.2.25, and 2.4.x
before 2.4.20, allows local users to gain root privileges by using ptrace
to attach to a child process that is spawned by the kernel.
For additional information and references, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0127
(* Security fix *)
+--------------------------+
Mon Mar 17 10:47:33 PST 2003
Slackware 9.0 is (almost) released... happy Saint Patrick's Day! :-)
extra/kernel-modules-2.4.20_xfs/kernel-modules-2.4.20_xfs-i486-6.tgz:
Reverted to the stock ac97_codec/emu10k1 modules, as the ones from CVS
have problems compiling for the 2.4.20-xfs kernel version and won't load.
a/kernel-modules-2.4.20-i486-7.tgz: Updated to the ac97_codec and emu10k1
drivers from CVS (this should support the Audigy cards). Source for these
can be found in source/a/kernel-modules/.
gnome/gnomeicu-0.99-i386-1.tgz: Upgraded to gnomeicu-0.99.
(suggested by Tobias Svensson)