oss-security - Kernel 4.1.y might not contain patches for CVE-2016-10229

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Sat, 13 May 2017 22:44:44 -0400
From: Yury German <yury@...hnologysecure.com>
To: oss-security@...ts.openwall.com
Subject: Kernel 4.1.y might not contain patches for CVE-2016-10229

This is just a small notice that Linux Kernel 4.1.y might not contain patches to CVE-2016-10229 [1]. This is a reference to the Vanilla Linux sources without any distribution specific patching. Typically a number of distributions apply their own patches to the standard vanilla Kernel. 

The patches might also not be needed for 4.1.y sources as were discussed on the mailing list [see [2]]. 

Please check with the distribution you are using to see if the patches for CVE-2016-10229 have been applied to the kernel 4.1.y tree for the distribution that you are using. 

[1] http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10229
[2] https://www.spinics.net/lists/stable/msg167674.html

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.