giacomo mulas

I just read the changelog for the 2.4.27-pre1 kernel released by
Marcelo Tosatti, and saw two worrying lines in there:

* Fix potential memory leak in devpts
* Fix potential memory access to free memory in /proc handling

Since most people use devpts and almost all use procfs, this would seem to
affect just about anybody who is using a 2.4.x kernel, right? Can someone
who is current with the linux kernel mailing list comment a bit about
these two problems and their possible security implications? And maybe
send a link to some thread in the mailing archives where these problems
are discussed along with possible fixes for mere mortals like me who
are decent programmers but not kernel hackers...

Thanks, bye
Giacomo

--
__________________________________________________ _______________

Giacomo Mulas <gmulas@ca.astro.it>
__________________________________________________ _______________

OSSERVATORIO ASTRONOMICO DI CAGLIARI
Str. 54, Loc. Poggio dei Pini * 09012 Capoterra (CA)

Tel. (OAC): +39 070 71180 248 Fax : +39 070 71180 222
Tel. (UNICA): +39 070 675 4916
__________________________________________________ _______________

"When the storms are raging around you, stay right where you are"
(Freddy Mercury)
__________________________________________________ _______________


--
To UNSUBSCRIBE, email to debian-security-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

henrique de moraes holschuh

There is also:
* e1000: fix probable security hole

--
"One disk to rule them all, One disk to find them. One disk to bring
them all and in the darkness grind them. In the Land of Redmond
where the shadows lie." -- The Silicon Valley Tarot
Henrique Holschuh


--
To UNSUBSCRIBE, email to debian-security-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

giacomo mulas

yes, but while the other two problems affect almost any Linux workstation
running 2.4.x the latter is relevant only to a specific piece of hardware
(although I do have a few of those as well...). This makes it a bit less
worrisome for me.

Bye
Giacomo
-- __________________________________________________ _______________
Giacomo Mulas <gmulas@ca.astro.it>
__________________________________________________ _______________

OSSERVATORIO ASTRONOMICO DI CAGLIARI
Str. 54, Loc. Poggio dei Pini * 09012 Capoterra (CA)

Tel. (OAC): +39 070 71180 248 Fax : +39 070 71180 222
Tel. (UNICA): +39 070 675 4916
__________________________________________________ _______________

"When the storms are raging around you, stay right where you are"
(Freddy Mercury)
__________________________________________________ _______________


--
To UNSUBSCRIBE, email to debian-security-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org