Bug#875881: linux: CVE-2017-1000251

2017-09-20 Thread Julien Aubin
On Sat, 16 Sep 2017 16:40:24 +0200 Julien Aubin wrote: > 2017-09-15 21:03 GMT+02:00 Christoph Anton Mitterer : > > > On Fri, 2017-09-15 at 19:18 +0100, Ben Hutchings wrote: > > > Probably less critical than you think, since we enable > > > CONFIG_CC_STACKPROTECTOR. > > > > Well... yes, but it woul

Bug#875881: linux: CVE-2017-1000251

2017-09-16 Thread Julien Aubin
2017-09-15 21:03 GMT+02:00 Christoph Anton Mitterer : > On Fri, 2017-09-15 at 19:18 +0100, Ben Hutchings wrote: > > Probably less critical than you think, since we enable > > CONFIG_CC_STACKPROTECTOR. > > Well... yes, but it wouldn't be the first time in history, that such > defence could then als

Bug#875881: linux: CVE-2017-1000251

2017-09-15 Thread Christoph Anton Mitterer
On Fri, 2017-09-15 at 19:18 +0100, Ben Hutchings wrote: > Probably less critical than you think, since we enable > CONFIG_CC_STACKPROTECTOR. Well... yes, but it wouldn't be the first time in history, that such defence could then also be circumvented in the next evolution of an exploit :-) But of

Bug#875881: linux: CVE-2017-1000251

2017-09-15 Thread Julien Aubin
Still, it can lead to system crashes from a remote device. See https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/BlueBorne 2017-09-15 20:18 GMT+02:00 Ben Hutchings : > On Fri, 15 Sep 2017 16:31:13 +0200 Christoph Anton Mitterer > wrote: > > Source: linux > > Version: 4.12.12-2 > > Severity: cr

Bug#875881: linux: CVE-2017-1000251

2017-09-15 Thread Ben Hutchings
On Fri, 15 Sep 2017 16:31:13 +0200 Christoph Anton Mitterer wrote: > Source: linux > Version: 4.12.12-2 > Severity: critical > Tags: security > Justification: root security hole > > > Hi. > > Any chance to get CVE-2017-1000251, which seems to be quite critical fixed > anytime soon? :-) > > htt

Bug#875881: linux: CVE-2017-1000251

2017-09-15 Thread Julien Aubin
On Fri, 15 Sep 2017 16:31:13 +0200 Christoph Anton Mitterer < cales...@scientia.net> wrote: > Source: linux > Version: 4.12.12-2 > Severity: critical > Tags: security > Justification: root security hole > > > Hi. > > Any chance to get CVE-2017-1000251, which seems to be quite critical fixed > anyti

Bug#875881: linux: CVE-2017-1000251

2017-09-15 Thread Christoph Anton Mitterer
Source: linux Version: 4.12.12-2 Severity: critical Tags: security Justification: root security hole Hi. Any chance to get CVE-2017-1000251, which seems to be quite critical fixed anytime soon? :-) https://security-tracker.debian.org/tracker/CVE-2017-1000251 Thx, Chris