Mike Pagano's Weblog

gentoo-sources-2.6.30-r3 contains a fix for a security flaw that also comes complete with some exploit code.

Apparently, it only affects 2.6.30 so if you gentoo-sources-2.6.30 please upgrade to r3.

I just committed it, so it should hit the mirrors soon after I post this.

Thanks to everyone who brought to my attention and thanks kerframil for the links below that provide additional information.

http://isc.sans.org/diary.html?storyid=6820
http://lists.immunitysec.com/pipermail/dailydave/2009-July/005810.html
http://www.youtube.com/watch?v=UdkpJ13e6Z0

I just released a separately masked version of portpeek. It contains a new feature to handle the ~ (tilde) in the package.* files.

If specified with the -t argument, the code will retrieve the tilde indicated line, and look to see if a later version is stabilized.

If it is, the ~tilde package is removed.

I recommend backing up your files before trying this, as it’s new and WFM(tm) but I don’t want to hose anyone’s files.

If you do encounter any errors, please open a bug in bugzilla and attach the backup of file you made previous to running the command.

Thanks