Subject: Re: [vserver] VS 2.3 Listen to 0.0.0.0 not possible
From: ben@bristolwireless.net
Date: Wed, 19 Aug 2009 09:49:19 +0100

 Wed, 19 Aug 2009 09:49:19 +0100
Quoting "Eugen Leitl" <eugen@leitl.org>:


> helium:~# uname -a
> Linux helium 2.6.26-2-vserver-amd64 #1 SMP Fri Aug 14 09:21:21 UTC  
> 2009 x86 64 GNU/Linux
>
> should I a) upgrade b) from which depository? I'm on stock lenny.
>

That depends on what you want. Debian Security Advisory DSA-1862-1 I  
think covers the privilege escalation bug. If you have  
security.debian.org in you sources.list and have fully upgraded your  
Lenny system you are covered against the vulnerability I reckon.  
2.6.26-17lenny2 is the version number of the latest one.

If you choose to go for kernels outside of the stock Debian Lenny one  
check out this and read carefully:

http://linux-vserver.org/Installation on Debian#Issues with the current 2.6.26 Kernel

There are issues moving from and to the current Lenny kernel.

http://kernels.bristolwireless.net has instructions for the kernels I  
compiled for Lenny. There's absolutely no warranty with these, or any  
guarantee that I'm going to quickly solve all the security bugs that  
pop up, though if it's in my interest and/or people help out it might  
happen. It has less vserver related bugs that the stock Debian kernel  
and more vserver related features.

Cheers,
==
 From Ben Green