Re: [SECURITY] [DSA 1565-1] New Linux 2.6.18 packages fix several vulnerabilities


Re: [SECURITY] [DSA 1565-1] New Linux 2.6.18 pa...
\ Mike Gerber (3 May 2008)
. \ Dominic Hargreaves (3 May 2008)
. . \ Peter Palfrader (4 May 2008)
. . . \ Bernd Eckenfels (5 May 2008)
. . . . \ Peter Palfrader (5 May 2008)
. . . . . \ Noah Meyerhans (5 May 2008)
. . . . . . \ Stephen Gran (5 May 2008)
. . . . . . . \ Mike Gerber (13 May 2008)
. . . . \ Peter Palfrader (5 May 2008)
. . . . . \ Peter Palfrader (5 May 2008)

15 msg	apt-get may accept inconsistent data
1 msg	ins
3 msg	'unprivileged users may hijack forwarded X conn...
4 msg	Re: [SECURITY] [DSA 1550-1] New suphp packages ...
2 msg	ia32-lib plans and security support for same
1 msg	Contents.gz files in security repositories
2 msg	Re: [SECURITY] [DSA 1534-2] New iceape packages...
1 msg	Re: [SECURITY] [DSA 1557-1] New phpmyadmin pack...
2 msg	Re: [SECURITY] [DSA 1556-1] New perl packages f...
1 msg	Re: [SECURITY] [DSA 1555-1] New iceweasel packa...
3 msg	pam_unix2 and xscreensaver password to restrictive
1 msg	Re: [SECURITY] [DSA 1554-1] New roundup package...
11 msg	Kernel upgrade for 3Ware Driver issues?
2 msg	Missing sparc binaries for DSA 1551-1 (python2.4)
3 msg	Request a security audit for my xiterm+thai pac...
1 msg	Augmentez votre pouvoir d achat - Etude en lign...
3 msg	Re: [SECURITY] [DSA 1548-1] New xpdf packages f...
2 msg	Re: [SECURITY] [DSA 1553-1] New ikiwiki package...
7 msg	ClamAV concerns

Subject:	Re: [SECURITY] [DSA 1565-1] New Linux 2.6.18 packages fix several vulnerabilities
Group:	Debian-security
From:	Mike Gerber
Date:	3 May 2008

Hi,

> Package : linux-2.6
> Vulnerability : several vulnerabilities
> Problem type : local
> Debian-specific: no
> CVE Id(s) : CVE-2007-6694 CVE-2008-0007 CVE-2008-1294 CVE-2008-1375
> [...]
> For the stable distribution (etch), this problem has been fixed in version
> 2.6.18.dfsg.1-18etch3.

Given a system with the package "linux-image-2.6.18-6-686" installed,
version "2.6.18.dfsg.1-18etch3" and:

# uname -r
2.6.18-6-686

How do I decide that the fixed kernel is actually booted? Other than by
uptime?

Cheers,
Mike

--
To UNSUBSCRIBE, email to debian-security-REQUEST
with a subject of "unsubscribe". Trouble? Contact listmaster