[lug] SuSE Security Announcement

[Ferdinand Schmid]

This is a late response to your question - but the optional kernel
update that
you did does in fact fix the problem.  This was discussed on the suse
security
list, which I can highly recommend.  Minimal noise, reasonably low
traffic,
and good info for SuSE users.

It also never hurts to do a rpm -q --changelog k_deflt

Ferdinand

--On Thursday, December 04, 2003 09:36:54 AM -0700 Gary Hodges
<Gary.Hodges at noaa.gov> wrote:

> I just got the email from SuSE about the Kernel brk() vulnerability.
> Going through the instructions in the email I see that kernel
> 
> k_athlon-2.4.21-144.i586.rpm
> 
> is what I'm supposed to download.  About a week ago there was a
> kernel update that I did with YaST/YOU.  It is the same version
> number as the one listed for the current security announcement.
> 
> ~>rpm -q k_athlon
> k_athlon-2.4.21-144
> 
> I'm I correct to assume that I'm OK?  Is it possible that changes
> were made but the version number didn't change?
> 
> Cheers,
> Gary
> 
> _______________________________________________
> Web Page:  http://lug.boulder.co.us
> Mailing List: http://lists.lug.boulder.co.us/mailman/listinfo/lug
> Join us on IRC: lug.boulder.co.us port=6667 channel=#colug



--
Ferdinand Schmid
Architectural Energy Corporation
Celebrating over 20 Years of Improving Building Energy Performance
http://www.archenergy.com