Confirm? New local root exploits

[Szabó Ákos]

On Fri, 2005-01-07 at 17:52 -0500, Alan Cox wrote:

Its fixed in 2.6.10-ac6 along with the following
> 	-	DoS/oops in setsid (user triggerable)
> 	-	Coda unverified user data (only if using Coda)
> 	-	XFS unverified user data (only if using XFS)
> 	-	Bridge ioctl (only if using bridge and already net_admin)
> 	-	Rose ioctl (only if using rose and already net_admin)
> 	-	SDLA firmware ioctls (only if net_admin and using sdla)


Brad Spengler send a mail to the grsecurity list, and He wrote:

3) 2.4/2.6 random poolsize sysctl handler integer overflow
4) 2.6 scsi ioctl integer overflow and information leak
5) 2.2/2.4/2.6 moxa serial driver bss overflow
6) 2.4/2.6 RLIMIT_MEMLOCK bypass and (2.6) unprivileged user DoS
7) Attachments, including patches for all vulns, a POC for #3, and a
   working exploit for #6

He talk about 2.4.28, and 2.6.10. If You want, I can forward the whole
message.

The -ac6 patch fixed those problems?

-- 
Fonya

     Amióta NT-t installáltam a porszívómra, semmi szívás nincs vele.
                PGP key ID F86614E5, GPG key ID 83AD9365