Operating Systems > Linux and UNIX

Big kernel hole

(1/2) > >>

mobrien_12:
Slashdot Article

Someone just found a serious root exploit in the Linux kernel, even the latest ones.  Basically, if you can log in and run a program, you can crack root.  

Hopefully the kernel team will fix it soon... but it  didn't look like a simple error to me, and exploit proof of concept code is already out.

Orethrius:
Did I ever mention this site is tech-comedy gold?

"Re:*sits back* (Score:5, Funny)
by darc (532156) on Friday January 07, @08:24PM (#11293496)
(Last Journal: Friday August 29, @06:09PM)

Yeah yeah, that's the responsible thing to say. But responsible stuff is sooooooooo boring. I mean, if we were all responsible people that wanted stability, we'd all be running kernel 2.2, Apache 1.1, many year old revisions of programs patched to all heck, never install any packages that aren't yet at least of legal age, and still tout ISA support as a bleeding edge feature.

Hmm. Wait, I think I just described Debian Stable.

*is hit by a gigantic potato from the debian crowd*

(Yes, I am aware that stable is called Woody, and the last version was called Potato. But if I said "is hit by a gigantic woody..." i'd probably get murdered. Oops.)"

Classic.     :D  

EDIT: Added URL livelinks.  :cool:

[ January 08, 2005: Message edited by: Midnight Candidate/BOB ]

WMD:
Now that you mention Slashdot being comedy gold...here's some more from that thread:

 
quote: Re:*sits back* (Score:5, Funny)
by ackthpt (218170) * Alter Relationship on Friday January 07, @04:43PM (#11291506)
(http://www.dragonswest.com/ | Last Journal: Friday October 08, @01:07PM)
*awaits justifications and explanations of why this is nothing like Microsoft*

Because in this case Linus Torvalds is our new overlord, and I for one, welcome him.
--- End quote ---


And this from an earlier thread about Macexpo:
 
quote: Re:Misleading Article (Score:4, Funny)
by northcat (827059) on Friday January 07, @12:56PM (#11289241)
(Last Journal: Thursday January 06, @11:15AM)
How can his post be rated informatve when it isn't true?

You must be new here.
--- End quote ---

KernelPanic:
Nasty, but judging from LKML there should be a fix in -ac over the weekend.

[ January 08, 2005: Message edited by: Tux ]

Calum:
and for us normal lusers, do you think this will trickle down into the apt repositories etc in a hurry? or should i recompile on my own, when the rectified code appears? (actually slack slapt-get 9.1 repositories)

[ January 08, 2005: Message edited by: Calum is NOT a moderator ]

Navigation

[0] Message Index

[#] Next page

Go to full version