On Wed, Nov 4, 2009 at 10:55 AM, Justin Smith <[email protected]> wrote: > "By default, Ubuntu 8.04 and later with a non-zero > /proc/sys/vm/mmap_min_addr setting were not vulnerable." > > Ubuntu 8.04 released in 2008 april.
Ubuntu 8 also ships with a setuid pulseaudio by default, which renders the mmap_min_addr protection useless.
