Re: Details on CVE-2016-10229: Remote code execution vulnerability in kernel networking subsystem

From	Jan Lühr <jan@jluehr.de>
Newsgroups	linux.debian.security
Subject	Re: Details on CVE-2016-10229: Remote code execution vulnerability in kernel networking subsystem
Date	2017-04-04 10:40 +0200
Message-ID	<tssam-2oD-17@gated-at.bofh.it> (permalink)
References	<tsjA5-585-1@gated-at.bofh.it> <tspYR-130-3@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

Hello,


Am 04/04/2017 um 08:11 AM schrieb Salvatore Bonaccorso:
> Hi
> 
> On Tue, Apr 04, 2017 at 12:52:41AM +0200, Jan Lühr wrote:
>> Hei folks,
>>
>> android recently patched CVE-2016-10229: Remote code execution
>> vulnerability in kernel networking subsystem.
>>
>> Since https://security-tracker.debian.org/tracker/CVE-2016-10229 is
>> rather blank ... does this problem exists in debian, too?
> 
> The problem has been fixed in Debian stable already with
> 3.16.7-ckt20-1+deb8u2. I have updated the tracker. Unfortunately that
> is one of the CVE assigned by Android and assigned only later on. I
> guess most distributions have the fixes already in their releases
> (without CVE references).

Thanks!

Greetz, Jan

-- 
There's a ripped off cord
To my TV screen
With a note saying:
"Im not afraid to dream"
-- Donkey Boy, Crazy Something Normal

Back to linux.debian.security | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

Details on CVE-2016-10229: Remote code execution vulnerability in  kernel networking subsystem Jan Lühr <jan@jluehr.de> - 2017-04-04 01:30 +0200
  Re: Details on CVE-2016-10229: Remote code execution vulnerability  in kernel networking subsystem Salvatore Bonaccorso <carnil@debian.org> - 2017-04-04 08:20 +0200
    Re: Details on CVE-2016-10229: Remote code execution vulnerability in  kernel networking subsystem Jan Lühr <jan@jluehr.de> - 2017-04-04 10:40 +0200

csiph-web