On Tue, Feb 12, 2008 at 09:58:52PM -0600, Vicm3 wrote: > Package: nvidia-kernel-2.6.18-5-486
Eh? None of the CVEs you mention in your subject have anything to do with the nvidia graphics modules. > I tested the current exploits published on securityfocus and all get me > a root shell from non privileged account. I would be glad if you can > patch this package. The problems described in the CVEs you mentioned were both fixed in DSA 1494 (http://www.debian.org/security/2008/dsa-1494) To clarify, since I suspect that the source of your confusion is the package name, nvidia-kernel-2.6.18-5-486 doesn't actually contain a kernel at all. Since the vulnerabilities you mention were kernel vulnerabilities, they can't possibly be present in nvidia-kernel-2.6.18-5-486. The nvidia-kernel-* packages contain a module for your kernel, not an actual kernel. You need to install linux-image-2.6.18-6-486 and reboot. noah
signature.asc
Description: Digital signature
