Status of Kernel updates in no-sub repo?

[danmac]

Hi everyone, first post, currently playing with Proxmox.

The kernel installed on my test box (4.4.24-72, compiled Nov 14) appears to be the latest available via the "pve-no-subscription" repo.

How long does the pve-kernel usually lag behind upstream? I ask because a particularly relevant security flaw was found in the kernel CVE-2016-8655 and I assume the currently available pve-kernel is vulnerable to this.

Do any of you guys roll your own kernels or use the one straight from Ubuntu etc?

Cheers

 

[fabian]

updated packages are in the works and will hit pvetest soon

 

[danmac]

Thanks very much for your quick response

 

[fabian]

http://download.proxmox.com/debian/...4/pve-kernel-4.4.35-1-pve_4.4.35-75_amd64.deb
http://download.proxmox.com/debian/...4/pve-kernel-4.4.35-1-pve_4.4.35-75.changelog

and related packages with -75

 

[danmac]

When you said this was "in the works" you weren't joking ...

Installed without any problem on my test machine. I didn't have the headers etc installed so this was sufficient:

# wget http://download.proxmox.com/debian/dists/jessie/pvetest/binary-amd64/pve-kernel-4.4.35-1-pve_4.4.35-75_amd64.deb http://download.proxmox.com/debian/dists/jessie/pvetest/binary-amd64/proxmox-ve_4.3-75_all.deb
# dpkg -i *.deb
# shutdown -r now

Many thanks