Path: csiph.com!aioe.org!news.servidellagleba.it!bofh.it!news.nic.it!robomod
From: Julien Aubin <julien.aubin@gmail.com>
Newsgroups: linux.debian.bugs.dist,linux.debian.kernel
Subject: Bug#858122: Upgrade linux kernel to 4.9.15 in sid and stretch
Date: Sat, 18 Mar 2017 17:10:02 +0100
Message-ID: <tmp5v-pH-9@gated-at.bofh.it>
Old-Return-Path: <debbugs@buxtehude.debian.org>
Reply-To: Julien Aubin <julien.aubin@gmail.com>, 858122@bugs.debian.org
Resent-To: debian-bugs-dist@lists.debian.org
Resent-Cc: Debian Kernel Team <debian-kernel@lists.debian.org>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=001a11411480e56011054b0369eb
Approved: robomod@news.nic.it
Lines: 64
Organization: linux.* mail to news gateway
Sender: robomod@news.nic.it
Xref: csiph.com linux.debian.bugs.dist:813976 linux.debian.kernel:57270

--001a11411480e56011054b0369eb
Content-Type: text/plain; charset=UTF-8

Source: linux
Severity: critical
Tags: security
Justification: root security hole

Hi,

Security issue CVE-2017-2636 (severity 7.8) has been disclosed and the fix
has
been provided for Jessie and Wheezy. The problem is that there's as of now
no
fix available for sid and stretch while things become more and more critical
due to the severity of the issue.

Kernel 4.9.15 contains a fix for this. Could you please integrate it ASAP on
Stretch ?

Thanks in advance.

More info at :
https://www.ptsecurity.com/ww-en/about/news/199636/



-- System Information:
Debian Release: 9.0
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.9.0-2-amd64 (SMP w/8 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

--001a11411480e56011054b0369eb
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>Source: linux</div><div>Severity: critical</div><div>=
Tags: security</div><div>Justification: root security hole</div><div><br></=
div><div>Hi,</div><div><br></div><div>Security issue CVE-2017-2636 (severit=
y 7.8) has been disclosed and the fix has</div><div>been provided for Jessi=
e and Wheezy. The problem is that there&#39;s as of now no</div><div>fix av=
ailable for sid and stretch while things become more and more critical</div=
><div>due to the severity of the issue.</div><div><br></div><div>Kernel 4.9=
.15 contains a fix for this. Could you please integrate it ASAP on</div><di=
v>Stretch ?</div><div><br></div><div>Thanks in advance.</div><div><br></div=
><div>More info at :</div><div><a href=3D"https://www.ptsecurity.com/ww-en/=
about/news/199636/">https://www.ptsecurity.com/ww-en/about/news/199636/</a>=
</div><div><br></div><div><br></div><div><br></div><div>-- System Informati=
on:</div><div>Debian Release: 9.0</div><div>=C2=A0 APT prefers testing</div=
><div>=C2=A0 APT policy: (500, &#39;testing&#39;)</div><div>Architecture: a=
md64 (x86_64)</div><div>Foreign Architectures: i386</div><div><br></div><di=
v>Kernel: Linux 4.9.0-2-amd64 (SMP w/8 CPU cores)</div><div>Locale: LANG=3D=
fr_FR.UTF-8, LC_CTYPE=3Dfr_FR.UTF-8 (charmap=3DUTF-8)</div><div>Shell: /bin=
/sh linked to /bin/dash</div><div>Init: systemd (via /run/systemd/system)</=
div></div>

--001a11411480e56011054b0369eb--