Quoting "Eugen Leitl" <email@example.com>:
> helium:~# uname -a
> Linux helium 2.6.26-2-vserver-amd64 #1 SMP Fri Aug 14 09:21:21 UTC
> 2009 x86_64 GNU/Linux
> should I a) upgrade b) from which depository? I'm on stock lenny.
That depends on what you want. Debian Security Advisory DSA-1862-1 I
think covers the privilege escalation bug. If you have
security.debian.org in you sources.list and have fully upgraded your
Lenny system you are covered against the vulnerability I reckon.
2.6.26-17lenny2 is the version number of the latest one.
If you choose to go for kernels outside of the stock Debian Lenny one
check out this and read carefully:
There are issues moving from and to the current Lenny kernel.
http://kernels.bristolwireless.net has instructions for the kernels I
compiled for Lenny. There's absolutely no warranty with these, or any
guarantee that I'm going to quickly solve all the security bugs that
pop up, though if it's in my interest and/or people help out it might
happen. It has less vserver related bugs that the stock Debian kernel
and more vserver related features.
From Ben Green
Received on Wed Aug 19 09:49:40 2009