Re: vulnerability in 8.6

From	Eduardo M KALINOWSKI <eduardo@kalinowski.com.br>
Newsgroups	linux.debian.security
Subject	Re: vulnerability in 8.6
Date	2016-11-07 18:20 +0100
Message-ID	<sAVKq-6d8-23@gated-at.bofh.it> (permalink)
References	<sAUuZ-52M-1@gated-at.bofh.it> <sAUOl-5sm-9@gated-at.bofh.it> <sAVho-5CE-5@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

On Seg, 07 Nov 2016, Ozgur wrote:
> I updated the Debian system and again exploit it successful.

No, you didn't. (Well, kinda)

> $ uname -ar
> Linux x 3.16.0-4-amd64 #1 SMP Debian 3.16.36-1+deb8u1 (2016-09-03) x86_64
> GNU/Linux

That's not the latest version, and specifically is not the one in  
which that vulnerability was fixed. You should have version  
3.16.36-1+deb8u2 .

> ~$ cat /etc/apt/sources.list
>
> deb http://security.debian.org/ jessie/updates main contrib
> deb-src http://security.debian.org/ jessie/updates main contrib
>
> deb http://ftp.debian.org/debian/ jessie-updates main contrib
> deb-src http://ftp.debian.org/debian/ jessie-updates main contrib
>
> deb http://ftp.debian.org/debian/ jessie main contrib
> deb-src http://ftp.debian.org/debian/ jessie main contrib

Your sources seem correct, though. What does "apt-cache policy  
linux-image-3.16.0-4-amd64" says?

-- 
Eduardo M KALINOWSKI
eduardo@kalinowski.com.br

Thread

vulnerability in 8.6 Ozgur <okaratas@member.fsf.org> - 2016-11-07 17:00 +0100
  Re: vulnerability in 8.6 Richard van den Berg <richard@vdberg.org> - 2016-11-07 17:20 +0100
  Re: vulnerability in 8.6 Salvatore Bonaccorso <carnil@debian.org> - 2016-11-07 17:20 +0100
    Re: vulnerability in 8.6 Ozgur <okaratas@member.fsf.org> - 2016-11-07 17:50 +0100
      Re: vulnerability in 8.6 Nicholas Luedtke <nicholas.luedtke@hpe.com> - 2016-11-07 18:00 +0100
        Re: vulnerability in 8.6 Ozgur <okaratas@member.fsf.org> - 2016-11-07 18:10 +0100
          Re: vulnerability in 8.6 Matias Mucciolo <mmucciolo@suteba.org.ar> - 2016-11-07 18:10 +0100
          Re: vulnerability in 8.6 Andrew Deck <andrew.hastings.deck@gmail.com> - 2016-11-07 18:20 +0100
      Re: vulnerability in 8.6 Matias Mucciolo <mmucciolo@suteba.org.ar> - 2016-11-07 18:00 +0100
      Re: vulnerability in 8.6 Eduardo M KALINOWSKI <eduardo@kalinowski.com.br> - 2016-11-07 18:20 +0100
        Re: vulnerability in 8.6 Mike Oliver <mike@mopmeat.net> - 2016-11-07 18:30 +0100
          Re: vulnerability in 8.6 Ozgur <okaratas@member.fsf.org> - 2016-11-07 20:00 +0100
        Re: vulnerability in 8.6 Eduardo M KALINOWSKI <eduardo@kalinowski.com.br> - 2016-11-07 20:00 +0100
    Re: vulnerability in 8.6 Richard Waterbeek <richardwbb@versatel.nl> - 2016-11-10 03:40 +0100
      Re: vulnerability in 8.6 Vladislav Kurz <vladislav.kurz@webstep.net> - 2016-11-10 10:30 +0100
        Re: vulnerability in 8.6 Richard Waterbeek <richardwbb@versatel.nl> - 2016-11-16 21:30 +0100
          Re: vulnerability in 8.6 Salvatore Bonaccorso <carnil@debian.org> - 2016-11-16 21:40 +0100
      Re: vulnerability in 8.6 advocatux <advocatux@gmail.com> - 2016-11-10 10:50 +0100
        Re: vulnerability in 8.6 Tino <tinolin2010@gmail.com> - 2016-11-10 14:00 +0100
    Re: vulnerability in 8.6 Richard Waterbeek <richardwbb@versatel.nl> - 2016-11-22 19:20 +0100
      Re: vulnerability in 8.6 Riku Valli <riku.valli@vallit.fi> - 2016-11-22 20:30 +0100

csiph-web