On 1/05/2017 8:17 PM, Herbert Poetzl wrote:
> On Mon, May 01, 2017 at 11:12:52AM +0930, Mike O'Connor wrote:
>> Hi All
> Hey Mike,
>
>> I'm running 3.18.44-vs2.3.7.5-beng which is vulnerable to
>> CVE-2016-10229. I checked the code again the details in
>> this link
>> http://ewen.mcneill.gen.nz/blog/entry/2017-04-17-cve-2016-10229-msg-peek/
>> A patch is mentioned
>> https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=197c949e7798fbf28cfadc69d9ca0c2abbf93191
>> and I checked the source code and the issue is there.
>> I'm hoping that Ben can release patched kernel.
> And patching it yourself is not an option why?
>
No reason other than it would be good for everyone to have it and I'm
not sure how to create the Deb files like you do.
Regards
Mike
Received on Tue May 2 02:30:26 2017