| Description: | Description:
The remote host is missing an update to kernel
announced via advisory MDKSA-2003:066-2.
Multiple vulnerabilities were discovered and fixed in the Linux kernel.
For a complete list of fixes, please visit the
referenced security advisory.
MandrakeSoft encourages all users to upgrade to these new kernels.
Updated kernels will be available shortly for other supported platforms
and architectures.
For full instructions on how to properly upgrade your kernel, please
review http://www.mandrakesecure.net/en/docs/magic.php.
Update:
The kernels provided in MDKSA-2003:066-1 (2.4.21-0.24mdk) had a problem
where all files created on any filesystem other than XFS, and using any
kernel other than kernel-secure, would be created with mode 0666, or
world writeable. The 0.24mdk kernels have been removed from the
mirrors and users are encouraged to upgrade and remove those kernels
from their systems to prevent accidentally booting into them.
That issue has been addressed and fixed with these new kernels.
Affected versions: 9.1
Solution:
To upgrade automatically use MandrakeUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.
http://www.securityspace.com/smysecure/catid.html?in=MDKSA-2003:066-2
http://marc.theaimsgroup.com/?l=bugtraq&m=105664924024009&w=2
Risk factor : Critical
CVSS Score:
10.0
|
