Linux 7.0.8 Released & LTS Kernels Updated For ssh-keysign-pwn
Following yesterday's disclosure of the ssh-keysign-pwn vulnerability that allows unprivileged users to read root-owned files, a slew of new stable kernel releases are out today to address this latest Linux security issue.
Today's release round-up is led by the Linux 7.0.8 stable release that incorporates the patch from Linus Torvalds for ptrace as a "slightly saner" get_dumpable() logic. This patch is what gets the ssh-keysign-pwn vulnerability.
In addition to Linux 7.0.8, Linux 6.18.31 is out today for that latest Long Term Support version and with the only change being this security patch.
Similarly, Linux 6.12.89, Linux 6.6.139, Linux 6.1.173, Linux 5.15.207, and Linux 5.10.256 are all out today as well for patching those older LTS kernels.
Today's release round-up is led by the Linux 7.0.8 stable release that incorporates the patch from Linus Torvalds for ptrace as a "slightly saner" get_dumpable() logic. This patch is what gets the ssh-keysign-pwn vulnerability.
In addition to Linux 7.0.8, Linux 6.18.31 is out today for that latest Long Term Support version and with the only change being this security patch.
Similarly, Linux 6.12.89, Linux 6.6.139, Linux 6.1.173, Linux 5.15.207, and Linux 5.10.256 are all out today as well for patching those older LTS kernels.
