From: Herbert Poetzl (herbert_at_13thfloor.at)
Date: Fri 06 Feb 2004 - 00:00:57 GMT
Hello Folks!
as promised, the security bugfix release (1.25) for
the linux-vserver stable branch is now available at
http://www.13thfloor.at/vserver/s_release/v1.25/
you can download an all-in-one patch for 2.4.24
as well as tar archives of the broken out patches
(patches for older kernels available on request,
a patch for 2.4.25i-rcX will be available soon)
this release fixes the chmod() security issue, first
reported by Markus Müller, which allows vserver root
to escape the chroot() jail by tampering with the
000 barrier.
upgrade or use of the fix (patch) is advised.
HTH,
Herbert
_______________________________________________
Vserver mailing list
Vserver_at_list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver