Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.security > #5204 > unrolled thread
| Started by | Jan Lühr <jan@jluehr.de> |
|---|---|
| First post | 2017-04-04 01:30 +0200 |
| Last post | 2017-04-04 10:40 +0200 |
| Articles | 3 — 2 participants |
Back to article view | Back to linux.debian.security
Details on CVE-2016-10229: Remote code execution vulnerability in kernel networking subsystem Jan Lühr <jan@jluehr.de> - 2017-04-04 01:30 +0200
Re: Details on CVE-2016-10229: Remote code execution vulnerability in kernel networking subsystem Salvatore Bonaccorso <carnil@debian.org> - 2017-04-04 08:20 +0200
Re: Details on CVE-2016-10229: Remote code execution vulnerability in kernel networking subsystem Jan Lühr <jan@jluehr.de> - 2017-04-04 10:40 +0200
| From | Jan Lühr <jan@jluehr.de> |
|---|---|
| Date | 2017-04-04 01:30 +0200 |
| Subject | Details on CVE-2016-10229: Remote code execution vulnerability in kernel networking subsystem |
| Message-ID | <tsjA5-585-1@gated-at.bofh.it> |
[Multipart message — attachments visible in raw view] — view raw
Hei folks, android recently patched CVE-2016-10229: Remote code execution vulnerability in kernel networking subsystem. Since https://security-tracker.debian.org/tracker/CVE-2016-10229 is rather blank ... does this problem exists in debian, too? Thanks, Jan -- There's a ripped off cord To my TV screen With a note saying: "Im not afraid to dream" -- Donkey Boy, Crazy Something Normal
[toc] | [next] | [standalone]
| From | Salvatore Bonaccorso <carnil@debian.org> |
|---|---|
| Date | 2017-04-04 08:20 +0200 |
| Subject | Re: Details on CVE-2016-10229: Remote code execution vulnerability in kernel networking subsystem |
| Message-ID | <tspYR-130-3@gated-at.bofh.it> |
| In reply to | #5204 |
Hi On Tue, Apr 04, 2017 at 12:52:41AM +0200, Jan Lühr wrote: > Hei folks, > > android recently patched CVE-2016-10229: Remote code execution > vulnerability in kernel networking subsystem. > > Since https://security-tracker.debian.org/tracker/CVE-2016-10229 is > rather blank ... does this problem exists in debian, too? The problem has been fixed in Debian stable already with 3.16.7-ckt20-1+deb8u2. I have updated the tracker. Unfortunately that is one of the CVE assigned by Android and assigned only later on. I guess most distributions have the fixes already in their releases (without CVE references). Regards, Salvatore
[toc] | [prev] | [next] | [standalone]
| From | Jan Lühr <jan@jluehr.de> |
|---|---|
| Date | 2017-04-04 10:40 +0200 |
| Message-ID | <tssam-2oD-17@gated-at.bofh.it> |
| In reply to | #5205 |
Hello, Am 04/04/2017 um 08:11 AM schrieb Salvatore Bonaccorso: > Hi > > On Tue, Apr 04, 2017 at 12:52:41AM +0200, Jan Lühr wrote: >> Hei folks, >> >> android recently patched CVE-2016-10229: Remote code execution >> vulnerability in kernel networking subsystem. >> >> Since https://security-tracker.debian.org/tracker/CVE-2016-10229 is >> rather blank ... does this problem exists in debian, too? > > The problem has been fixed in Debian stable already with > 3.16.7-ckt20-1+deb8u2. I have updated the tracker. Unfortunately that > is one of the CVE assigned by Android and assigned only later on. I > guess most distributions have the fixes already in their releases > (without CVE references). Thanks! Greetz, Jan -- There's a ripped off cord To my TV screen With a note saying: "Im not afraid to dream" -- Donkey Boy, Crazy Something Normal
[toc] | [prev] | [standalone]
Back to top | Article view | linux.debian.security
csiph-web