Debian Installer 6.0 Release Candidate 1 release

I’m curios how this Debian installer will look. The features are amazing:

Live Installer
Grub 2
Kernel 2.6.32
Xen support
UserMode Linux Support
Ext4

This are just several features. For more just check:

1. http://wiki.debian.org/DebianInstaller/Team
2. http://www.debian.org/devel/debian-installer/errata
3. http://www.debian.org/devel/debian-installer

New local kernel exploit

This is a little bit old, but is worth to mention it because on a lot of system is still working. The proof of concept code and a lot of details you will find here: http://bit.ly/fYpOtx . This exploit is based on 3 vulnerabilities found by Nelson Elhage (probably because of that exploit is named full-nelson). As I said the exploit is based on 3 vulnerabilities CVE-2010-4258, CVE-2010-3849 and CVE-2010-3850. The last 2 vulnerabilities are based on Econet protocol driver. If you don’t have this driver loaded exploit will not work. The first vulnerability was founded on 2.6.36.2 and is based on do_exit function which doesn’t handle properly a KERNEL_DS get_fs value.

Anyway the last 2 vulnerabilities were fixed on Debian Security Advisory 2126-1 and without them exploit is not working, so upgrade your computers.