Groups > linux.debian.user > #190813

Re: CVE-2017-5754 - ETA?

From	Sven Joachim <svenjoac@gmx.de>
Newsgroups	linux.debian.user
Subject	Re: CVE-2017-5754 - ETA?
Date	2018-01-08 18:40 +0100
Message-ID	<v5JyW-rn-17@gated-at.bofh.it> (permalink)
References	<v4edP-6iy-7@gated-at.bofh.it> <v4kCC-2bg-11@gated-at.bofh.it> <v5HGN-7D4-9@gated-at.bofh.it> <v5J5U-ha-5@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

On 2018-01-08 17:04 +0000, Tixy wrote:

> On Mon, 2018-01-08 at 11:36 -0400, francis picabia wrote:
>> > The DSA has been (will be shortly?) released for stable. Unstable,
>> > testing, and likely oldstable will probably follow soon.
>> > https://security-tracker.debian.org/tracker/DSA-4078-1
>> >
>> >
>> >
>> Thanks for the response.  I'm looking now and I see stretch and wheezy
>> are
>> addressed, but not jessie.  Odd.  Why would old-stable be a challenge?
>
> It's a major set of changes that needs to be ported and tested. Perhaps
> there we're more companies and distro's working on the 3.2 kernel in
> Wheezy compared to 3.16 as used in Jessie.

I doubt that, both 3.2 and 3.16 are maintained by Ben Hutchings and are
not used by any major distro except Debian AFAIK.

> Or perhaps the latter port hit problems, who knows.

Definitely, both Ben and testers/reviewers hit showstopper bugs
including failure to boot at all.  See the thread on the stable@vger
list at https://www.spinics.net/lists/stable/index.html#209049.

Cheers,
       Sven

Thread

CVE-2017-5754 - ETA? francis picabia <fpicabia@gmail.com> - 2018-01-04 15:00 +0100
  Re: CVE-2017-5754 - ETA? Don Armstrong <don@debian.org> - 2018-01-04 21:50 +0100
    Re: CVE-2017-5754 - ETA? francis picabia <fpicabia@gmail.com> - 2018-01-08 16:40 +0100
      Re: CVE-2017-5754 - ETA? Jeroen Mathon <jeroenmathonmac@gmail.com> - 2018-01-08 17:20 +0100
      Re: CVE-2017-5754 - ETA? Tixy <tixy@yxit.co.uk> - 2018-01-08 18:10 +0100
        Re: CVE-2017-5754 - ETA? Sven Joachim <svenjoac@gmx.de> - 2018-01-08 18:40 +0100
      Re: CVE-2017-5754 - ETA? Richard Hector <richard@walnut.gen.nz> - 2018-01-08 22:30 +0100
        Re: CVE-2017-5754 - ETA? francis picabia <fpicabia@gmail.com> - 2018-01-10 13:50 +0100
    Re: CVE-2017-5754 - ETA? Vincent Lefevre <vincent@vinc17.net> - 2018-01-12 14:40 +0100
      Re: CVE-2017-5754 - ETA? bw <bwtnguy@yahoo.com> - 2018-01-12 16:10 +0100
        Re: CVE-2017-5754 - ETA? Jack Dangler <tdldev@gmail.com> - 2018-01-12 17:00 +0100
          Re: CVE-2017-5754 - ETA? Roberto C. Sánchez <roberto@debian.org> - 2018-01-12 17:00 +0100
        Re: CVE-2017-5754 - ETA? Vincent Lefevre <vincent@vinc17.net> - 2018-01-12 22:10 +0100
          Re: CVE-2017-5754 - ETA? Roberto C. Sánchez <roberto@debian.org> - 2018-01-12 22:20 +0100
            Re: CVE-2017-5754 - ETA? Vincent Lefevre <vincent@vinc17.net> - 2018-01-12 22:20 +0100
          Re: CVE-2017-5754 - ETA? Nick <debuser@acrasis.net> - 2018-01-12 22:30 +0100
            Re: CVE-2017-5754 - ETA? Vincent Lefevre <vincent@vinc17.net> - 2018-01-12 22:50 +0100
              Re: CVE-2017-5754 - XEN silent_disable? bw <bwtnguy@yahoo.com> - 2018-01-13 02:10 +0100
                Re: CVE-2017-5754 - XEN silent_disable? <tomas@tuxteam.de> - 2018-01-13 08:30 +0100
                Re: CVE-2017-5754 - XEN silent_disable? Vincent Lefevre <vincent@vinc17.net> - 2018-01-13 10:50 +0100
                Re: CVE-2017-5754 - XEN silent_disable? <tomas@tuxteam.de> - 2018-01-13 12:30 +0100
              Re: CVE-2017-5754 - ETA? Tixy <tixy@yxit.co.uk> - 2018-01-13 09:10 +0100
                Re: CVE-2017-5754 - ETA? Tixy <tixy@yxit.co.uk> - 2018-01-13 09:50 +0100

csiph-web