A couple of unpleasant local kernel vulnerabilities

The just-released 4.6.3, 4.4.14, and 3.14.73 stable kernels contain a setof netfilter fixes that, it has just been disclosed, fix a couple of severelocal privilege-escalation vulnerabilities. Anybody who is running a sitewith user and network namespaces enabled will want to update their kernelsin short order. The fixes were originally committed into 4.6-rc2 in Aprilwith no comment regarding their implications.