MandrakeSoft has released an updated kernel for Mandrake Linux 9.0, 9.1, 9.2, 9.2/AMD64, Multi Network Firewall 8.2, and Corporate Server 2.1.

A flaw in bounds checking in mremap() in the Linux kernel versions 2.4.23 and previous was discovered by Paul Starzetz. This flaw may be used to allow a local attacker to obtain root privilege.

Another minor information leak in the RTC (real time clock) routines was fixed as well.

Read more