CVE-2016-8655 fix needed

[apmuthu]

CVE-2016-8655

Race Condition Error Exploit

https://security-tracker.debian.org/tracker/CVE-2016-8655

https://git.kernel.org/cgit/linux/k.../?id=84ac7260236a49c79eede91617700174c2c19b0c

Has this been patched for PVE 3.x / 4.x ?

 

[tom]

See http://download.proxmox.com/debian/...4/pve-kernel-4.4.35-1-pve_4.4.35-75.changelog

 

[apmuthu]

Thanks Tom.

The following do not appear to have the said update but have the DIRTY COW update:

http://download.proxmox.com/debian/dists/wheezy/pve-no-subscription/binary-amd64/pve-kernel-2.6.32-48-pve_2.6.32-184.changelog

http://download.proxmox.com/debian/dists/wheezy/pve-no-subscription/binary-amd64/pve-kernel-3.10.0-21-pve_3.10.0-50.changelog

Are there going to be no more updates to these kernels?