[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[suse-security] dates on new kernels don't agree with release announcement?

On Friday 05 December 2003 02:39, Olaf Kirch wrote:
>                         SUSE Security Announcement
>         Package:                Linux Kernel
>         Announcement-ID:        SuSE-SA:2003:049
>         Date:                   Thursday, December 4th 2003 15:30 MET


>     Intel i386 Platform:
>     SuSE-9.0:
>     ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/

So the  -144 version (k_deflt-2.4.21-144.i586.rpm)  is named as the fix
 but on all the mirrors I checked it is dated Nov 20 - Nov 24 ???
Same for all the other kernel types and suse versions.

And the info file doesn't mention the "brk() vulnerability",
 IS this today's fix?

Sorry taking up time on a busy day, but I'm confused...


Michael James                         michael.james@xxxxxxxx
System Administrator                    voice:  02 6246 5040
CSIRO Bioinformatics Facility             fax:  02 6246 5166

Check the headers for your unsubscription address
For additional commands, e-mail: suse-security-help@xxxxxxxx
Security-related bug reports go to security@xxxxxxx, not here