News for hackers. Stuff that matters.

A comment on Udp.c in Linux kernel pre-4.5 allows remote attackers to execute arbitrary code. Parent comment

Re:Udp.c in Linux kernel pre-4.5 allows remote attackers to ... by Ndymium on Thursday April 13, 2017 @07:50AM (#14105995)
Huh? I'm running Arch Linux on kernel 4.8 (latest in repos is 4.10). Ubuntu 16.10 has kernel 4.8.
[ Parent | on HN ]
Re:Udp.c in Linux kernel pre-4.5 allows remote attackers to ... by pmontra on Thursday April 13, 2017 @08:19AM (#14106140)
Servers are usually on LTS versions. Ubuntu 16.04 is on 4.4 last time I checked. My Android 7.0 phone is on 3.10.84, last updated in February.

Edit: Ubuntu's tracker is at https://people.canonical.com/~ubuntu-security/cve/2016/CVE-2...

[ Parent | on HN ]
Re:Udp.c in Linux kernel pre-4.5 allows remote attackers to ... by jbbarth on Thursday April 13, 2017 @08:22AM (#14106161)
Patches from upstream are regularly backported by distribution vendors, including Redhat, Debian, Ubuntu (though I don't know if Ubuntu do this themselves or base on Debian). Anyway, looking at the version number is not enough, you should refer your vendor security advisories.
[ Parent | on HN ]