Secunia

Debian has issued updates for kernel-patch-vserver and util-vserver. This fixes two security issues, which can be exploited by malicious programs to bypass certain security restrictions.

1) The 2.4 kernel patch included in the kernel-patch-vserver package does not properly setup the chroot barrier when used with util-vserver. This may result in unauthorised escapes from a vserver to the host system.

2) The default policy of util-vserver is set to trust all unknown capabilities instead of considering them as insecure.

For more information:
SA19333

Solution
Apply updated packages.
Further details available in Customer Area

Provided and/or discovered by
The vendor credits Bjørn Steinbrink.

Original Advisory
http://www.debian.org/security/2006/dsa-1011

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area