Printable View
i've been running the knoppix 3.3(not sure which iteration) with the 2.4.22-xfs kernel. the exploit that hit the debian servers recently is in kernels below 2.4.23, unless patched.
are the default knoppix kernels patched?
how can i check if mine is?
btw, i've started several people down the linux path thanks to knoppix, but i would like to know if i need to tell them to upgrade or not.
TIA
Phrostie
Klaus use vanilla kernel+XFS so the patch is definitely not in what KNOPPIX used.Quote:
Originally Posted by phrostie
This exploit is quite serious and every linux(2.4+) IMO should be upgraded right away and have a thorough check, like what debian did. No one knows if there are dormant exploit waiting to attack and the worst thing is, it seems that none of those security enhanced measure would work and give any protection to this exploit.
I've looked at security.debian.org and am a little confused about what needs to be done to upgrade the Kernel.
Is it a matter of typing apt-get upgrade, then apt-get update?
How would I know my Kernel has been patched?
Thanks,
You need to go to the kernel.org and get the 2.4.23 kernel source and use the kernel package program to compile and then install the new kernel. A guide to compiling a kernel the Debian way if you decide to take this route.Quote:
Originally Posted by bsaunders
Stephen,
Thanks, as usual, your posts are most enlightening.
Brent
thank you.