IMPORTANT: Upgrade Linux kernel to fix possible root exploit

Its rare but sometimes it *can* happen. This is an important one to fix! If your running a GNU/Linux server (or desktop), running kernels from 2.6.17 - 2.6.24.1, it is HIGHLY recommended that you update the system using what ever package management system your distro provided, IMMEDIATELY.

If not updated, your system could be at risk allowing a normal shell user to gain root access (i.e root exploit).

A technical overview of the exploit and links to POC code and source code patch can be found here.

Comments

Post a Comment

Popular posts from this blog

Why KDE4 (might) suck!

Image
I've been a kde user for very long time, since from before version 3.0. I vaguely remember being excited with version 3.0 to the point I was using the beta releases on a daily basis. Similarly I have been anticipating kde 4.0, the next major release since 3.0 I suppose. But it seems that is just its problem! Its too much of a major release to be pushing out in such a hurry. I have been following kde 4 from time to time by reading some of the discussions on the panel-devel list, trying out the alpha releases via the SUSE live cd and of course discussing with Siraj , our local kde developer, on the internals (technology and community wise). While things have improved a bit, with each release of kde 4, its far from ready. We are now at RC1 and the announcement says its ready for prime time testing. Building on this, the majority of applications included in KDE 4.0 are now usable for day to day use. The KDE Release Team has recently underlined this by calling on the community to par...
Read more

Track Your New Year Resolutions With ii.do

Image
I know, I know, it’s a bit of a cheesy title to promote my Open Source project but here me out - it really does work. Though I didn’t really write it to track my new year resolutions (I’ve never found them effective beyond a week), I did write it out of constant frustration with not finding a TODO productivity tool that stuck with me. Let me explain… I’ve tried EVERYTHING! Google Calendar & tasks Sending myself Emails Wiki (Dokuwiki, Mediwiki, Twiki etc.) Tomboy Tomboy with UbuntuOne & Android App EverNote Remember the Milk Gedit notes on my desktop Post-it notes widget Actual Post-it notes Old-skool diary Pieces of paper including backs of payment receipts From the above list, if anything came remotely to sticking as a habit, then it’d be the sticky notes & pieces of paper. I’m not suggesting the other methods suck, but I wouldn’t use it beyond a couple of weeks. Why was it that despite me spending hours on a computer, the best thing that had a chance of r...
Read more

I want my CDMA! How my rights were violated.

Last Wednesday, I went to pick up a CDMA phone from Bell after hearing all good about it and how fast it was. I had been using Bell for now over 5 years, primarily to surf the Internet. Sure it wasn't fast at 33.6, but atleast it was the next best economical thing until ADSL shows up. Naturally when CDMA came along with a lower rental and a 5x claimed speed, it did raise my eye browse. But I had already invested 15,000/- on my current phone, which included paying the old owner his phone deposit of 7500 and another 7500 for the phone transfer. Still, I was paying 600+ on rental alone and wasn't using the two lines that came with it that much. After waiting and rethinking for about two months and checking on ADSL, I decided to bite the bullet and go for CDMA, while disconnecting the old line. Boy! was I in for a surprise as I left to the Bell head office It seemed as if I had committed the ultimate sin, by asking that they disconnect the old phone, while I buy another brand new ...
Read more