Kernel Update Day

New kernel releases have been released by both the Ubuntu and Debian teams. Both address CVE-2008-0600 which could allow an attacker to escalate their privileges. The Debian vserver kernels have also been updated to address CVE-2008-0163 which allows users in one vserver to access information in another. For Ubuntu this comes just a week after the last Linux kernel security update.

• DSA-1494-1 linux-2.6 — missing access checks
• USN-577-1: Linux kernel vulnerability
• USN-574-1: Linux kernel vulnerabilities
• Patching CVE-2008-0600, Local Root Exploit