Debian Machines has been Compromised

Last week, it was reveal that some Debian project machines has been compromised.

Today, I received the investigation report from debian-announce mailing list. The root cause is the local exploit from 2.4.18 kernel. Luckily, it is not a remote exploit.

The flaw has been fixed in the newest 2.4.23 kernel. That also hints me to upgrade kernel.