[UCI-Linux] New exploitable kernel bug

[Mike Iglesias]

A new bug in the Linux kernel has been revealed that allows a user to get root 
access.  This bug was used to compromise a system owned by Debian (see 
http://www.debian.org/News/2006/20060713 for details).

Kernel versions 2.6.13-2.6.23 and 2.6.17-2.6.17.3 are affected.  If you roll 
your own kernel, you should get 2.6.16.24 or 2.6.17.4 and rebuild.  Vendors 
are working on updates or have released them already, so keep an eye out for 
the updates and install it ASAP.


-- 
Mike Iglesias                          Email:       iglesias at uci.edu
University of California, Irvine       phone:       949-824-6926
Network & Academic Computing Services  FAX:         949-824-2069