Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.security > #5205

Re: Details on CVE-2016-10229: Remote code execution vulnerability in kernel networking subsystem

Show all headers | View raw

Hi

On Tue, Apr 04, 2017 at 12:52:41AM +0200, Jan Lühr wrote:
> Hei folks,
> 
> android recently patched CVE-2016-10229: Remote code execution
> vulnerability in kernel networking subsystem.
> 
> Since https://security-tracker.debian.org/tracker/CVE-2016-10229 is
> rather blank ... does this problem exists in debian, too?

The problem has been fixed in Debian stable already with
3.16.7-ckt20-1+deb8u2. I have updated the tracker. Unfortunately that
is one of the CVE assigned by Android and assigned only later on. I
guess most distributions have the fixes already in their releases
(without CVE references).

Regards,
Salvatore

Back to linux.debian.security | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Details on CVE-2016-10229: Remote code execution vulnerability in  kernel networking subsystem Jan Lühr <jan@jluehr.de> - 2017-04-04 01:30 +0200
  Re: Details on CVE-2016-10229: Remote code execution vulnerability  in kernel networking subsystem Salvatore Bonaccorso <carnil@debian.org> - 2017-04-04 08:20 +0200
    Re: Details on CVE-2016-10229: Remote code execution vulnerability in  kernel networking subsystem Jan Lühr <jan@jluehr.de> - 2017-04-04 10:40 +0200

csiph-web