Quote Originally Posted by phrostie
i've been running the knoppix 3.3(not sure which iteration) with the 2.4.22-xfs kernel. the exploit that hit the debian servers recently is in kernels below 2.4.23, unless patched.

are the default knoppix kernels patched?
how can i check if mine is?

btw, i've started several people down the linux path thanks to knoppix, but i would like to know if i need to tell them to upgrade or not.

TIA

Phrostie
Klaus use vanilla kernel+XFS so the patch is definitely not in what KNOPPIX used.

This exploit is quite serious and every linux(2.4+) IMO should be upgraded right away and have a thorough check, like what debian did. No one knows if there are dormant exploit waiting to attack and the worst thing is, it seems that none of those security enhanced measure would work and give any protection to this exploit.