Ubuntu vulnerable against "h00lyshit" exploit?

[Alexander Skwar]

· Christofer C. Bell <christofer.c.bell at gmail.com>:

> On 7/15/06, Alexander Skwar <listen at alexander.skwar.name> wrote:
>> Hi!
>>
>> Is the current Dapper kernel vulnerable against the kernel exploit
>> posted yesterday on full-disclosure "Linux kernel 0day - dynamite
>> inside, don't burn your fingers", see
>> <http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047907.html>?
> 
> When I run this exploit against my own machine, 

You like to live risky, don't you? :) I'm too much of a chicken to run
malware on my machine.

>> If so, when can we expect a patched kernel? Ie. a kernel 2.6.17.5
>> or 2.6.16.25 or a backport of those fixes?
> 
> You won't get a 2.6.17 kernel on Ubuntu 6.06 from an offical update.

As long as all the security fixes are backported, that's fine.
Wouldn't it be easier though, if Ubuntu used the current kernel, ie.
2.6.17.5 or at least 2.6.16.25? This way, no backporting would be
required.

Alexander Skwar
-- 
Wie man sein Kind nicht nennen sollte: 
  Bernhard Diener