Re: [DSA 1494-1] Still vulnerable?

[Martin Spinassi <mylists@itcom.com.ar>]

On Wed, 2008-02-13 at 14:38 -0500, Noah Meyerhans wrote:
> [....] 
> > I'm using stack kernel in debian etch, upgraded daily, and still vulnerable.
> > 
> > $ uname -a
> > Linux kr0sty 2.6.22-3-486 #1 Mon Nov 12 07:53:08 UTC 2007 i686 GNU/Linux
> 
> Eh?  2.6.22 isn't in etch at all.  Etch includes 2.6.18.
> 
> noah
> 

Looks like I've messed up my apt sources trying to update it quickly.

# uname -a
Linux kr0sty 2.6.22-3-486 #1 Mon Nov 12 07:53:08 UTC 2007 i686 GNU/Linux

# cat /proc/version 
Linux version 2.6.22-3-486 (Debian 2.6.22-6) (maks@debian.org) (gcc
version 4.1.3 20071019 (prerelease) (Debian 4.1.2-17)) #1 Mon Nov 12
07:53:08 UTC 2007

# cat /etc/debian_version 
lenny/sid  <---- OMG!!


Let's look....

deb http://security.debian.org/ etch/updates main contrib
deb-src http://security.debian.org/ etch/updates main contrib

deb ftp://ftp.es.debian.org/debian/ testing main contrib     } Here is
deb-src ftp://ftp.es.debian.org/debian/ testing main contrib } ....


Trying to change "testing" to "etch" doesn't work...


Thanks for the advice anyway


Martín S. Spinassi