Day for update, 2.4.26 is out, and it has some security updates. I saw what the security problems were, and almost died laughing:
\n * CAN-2004-0003<\/p>\n
The R128 DRI bounds checking bug is a potential local root exploit.
\n According to this patch [iu.edu] 2.4.26 contains the fix.<\/p>\n
* CAN-2004-0109<\/p>\n
The isofs bug. It is locally exploitable iff you have hardware access or if you can induce someone to mount a compromised medium.<\/p>\n
* CAN-2004-0177<\/p>\n
The ext3 information leak. It cannot lead to any exploit and has only the tiniest chances of giving an attacker any usable information.<\/p>\n
* CAN-2004-0178<\/p>\n
The SoundBlaster Denial of Service.<\/p>\n
Okay, I’ll upgrade, I don’t have a lot more to do today, and it doesn’t take time (it’s already compiled, I’ll call the people who have more important services, and will reboot).<\/p>\n
I’ll be ashamed all day. In a document me and chervarium have written, that 40+18=48. I’ll borrow his first grade math textbook, that we gave hi as a birthday present a few years ago, and will reread it…<\/p>\n
Shame.ludost.net is getting up to speed and visits, judging by the stats, and has a good number of comments. I probably should find a way to get it to the people that are described there, to know, that they aren’t getting away with being idiots any more :)<\/p>\n