Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.security > #5326 > unrolled thread
| Started by | P P <pz10000@yahoo.com> |
|---|---|
| First post | 2017-11-28 21:50 +0100 |
| Last post | 2017-11-28 22:40 +0100 |
| Articles | 3 — 3 participants |
Back to article view | Back to linux.debian.security
This discussion starts older than the indexed window; earlier articles aren't shown. The article labeled Started by
below is the oldest one visible, not the original post.
What patches/packages to install for specific bugs. P P <pz10000@yahoo.com> - 2017-11-28 21:50 +0100
Re: What patches/packages to install for specific bugs. Davide Prina <davide.prina@gmail.com> - 2017-11-28 22:10 +0100
Re: What patches/packages to install for specific bugs. Keith Edmunds <kae@midnighthax.com> - 2017-11-28 22:40 +0100
| From | P P <pz10000@yahoo.com> |
|---|---|
| Date | 2017-11-28 21:50 +0100 |
| Subject | What patches/packages to install for specific bugs. |
| Message-ID | <uQUZj-82V-5@gated-at.bofh.it> |
Hi, All, We found bugs of DSA 3503, DSA 3511, DSA 3514, DSA 3548 and more on our Debian systems. Debian has site for each bug, for example https://www.debian.org/security/2016/dsa-3503 for DSA 3503. But the link doesn't tell which patch to install to fix the bug of DSA 3503. I am looking for the specific patches/package names to fix these bugs. So we can use apt-get to install them. But Debian website doesn't have clear instructions about this. Any help will be appreciated! Regards, Patty
[toc] | [next] | [standalone]
| From | Davide Prina <davide.prina@gmail.com> |
|---|---|
| Date | 2017-11-28 22:10 +0100 |
| Message-ID | <uQViG-5M-7@gated-at.bofh.it> |
| In reply to | #5326 |
On 28/11/2017 21:40, P P wrote: > for example https://www.debian.org/security/2016/dsa-3503 for DSA 3503. But the link doesn't tell which patch to install to fix the bug of DSA 3503. if you look in the CVE link you find if there is a patch and where is it, ... for example if you open the first CVE: https://security-tracker.debian.org/tracker/CVE-2013-4312 you can see that it is fixed in: * stretch in the version 4.9.51-1 * stretch (security) in the version 4.9.30-2+deb9u5 * ... > So we can use apt-get to install them. no, you can apply the patch with three command: $ apt-get update $ apt-get -u upgrade $ apt-get -u dist-upgrade if you have a proper /etc/apt/sources.list file I suggest you to use the deb.debian.org with https protocol Read here for more details: https://deb.debian.org/ I suggest you to have at least these two line in the sources.list Note: replace the "testing" with your Debian distro deb https://deb.debian.org/debian testing main contrib non-free deb https://deb.debian.org/debian-security testing/updates main contrib non-free Ciao Davide -- Dizionari: http://linguistico.sourceforge.net/wiki What happened in 2013 couldn't have happened without free software (He credited free software for his ability to help disclose the U.S. government's far-reaching surveillance projects). Edward Snowden
[toc] | [prev] | [next] | [standalone]
| From | Keith Edmunds <kae@midnighthax.com> |
|---|---|
| Date | 2017-11-28 22:40 +0100 |
| Message-ID | <uQVLJ-vq-43@gated-at.bofh.it> |
| In reply to | #5326 |
Look at the very bottom of the page you cited: "For the stable
distribution (jessie), these problems have been fixed in version
3.16.7-ckt20-1+deb8u4. CVE-2013-4312, CVE-2015-7566, CVE-2015-8767 and
CVE-2016-0723 were already fixed in DSA-3448-1. CVE-2016-0774 does not
affect the stable distribution."
--
"Laughter is the best medicine, though it tends not to work in the case
of impotence" - Jo Brand
[toc] | [prev] | [standalone]
Back to top | Article view | linux.debian.security
csiph-web