Slashdot Mirror


Kernel 2.4.26 Out

StupidKatz writes "Fresh from the oven, the fine folks at kernel.org have released 2.4.26, filled with such yummy goodness as fixes for those damnable mmap() vulns, among other things. Remember to use your favorite mirror!"

4 of 218 comments (clear)

  1. Re:Why still 2.4? by 0racle · · Score: 5, Informative

    Stability. Not every linux installation is on some geeks desk, some applications and installations require absolute stability, or as close as you can get, that means nothing but bug fixes. 2.6 might be called the stable branch, but its relatively untested compared to 2.4. Other then that, give me one good reason to move my 486 to 2.6.

    --
    "I use a Mac because I'm just better than you are."
  2. Re:Why still 2.4? by Eudial · · Score: 5, Informative

    2.6 is alot bigger than 2.4, so if you are running on a slow computer, or perhaps a low-memory computer built into something (fridge or car?) you might want to use 2.4 or maybe 2.2

    And we've always got the really conservative "in my days the kernel was 200 Kb of sourcecode"-people.

    --
    GAAH! MY PRINTER IS ON FIRE!!! PUT IT OUT! PUT IT OUT!
  3. Not mremap(), but these! by fifirebel · · Score: 5, Informative
    <KARMA TYPE="whoring">

    Okay... This is the result of a cursory check, do your homework folks!

    • CAN-2004-0003

      The R128 DRI bounds checking bug is a potential local root exploit.
      According to this patch 2.4.26 contains the fix.

    • CAN-2004-0109

      The isofs bug. It is locally exploitable iff you have hardware access or if you can induce someone to mount a compromised medium.

    • CAN-2004-0177

      The ext3 information leak. It cannot lead to any exploit and has only the tiniest chances of giving an attacker any usable information.

    • CAN-2004-0178

      The SoundBlaster Denial of Service.

    But no, no mremap issues...

    </KARMA>

  4. Summary Changelog by rimu+guy · · Score: 4, Informative

    For those who don't like 1000 line changelogs, here are the changes that Marcello specifically mentioned on his -pre and -rc lkml postings:

    • NFS client fixes
    • Bluetooth fixes
    • IDE update (fixes for AMD chipset driver)
    • Inclusion of Medley software RAID driver by Thomas Horsten http://www.infowares.com/linux/#medley_intro
    • XFS update
    • Big SCTP (http://www.sctp.org) merge (to match 2.6 API)
    • Network driver updates (including the addition of nVidia Force driver).
    • ACPI upstream merge

    - Run Your own Linux Server on The Latest and Greatest 2.4 or 2.6 Kernel