A couple of unpleasant local kernel vulnerabilities

Posted Jun 27, 2016 2:40 UTC (Mon) by kenmoffat (subscriber, #4807)
Parent article: A couple of unpleasant local kernel vulnerabilities

If they were fixed in 4.6-rc then all 4.6 releases, not just 4.6.3, surely contain them ?

I'm not treating this as a typo because the link specifically mentions 4.6.3. Or is the statement that they were committed in 4.6-rc wrong ?

Googling for the (start of) the SHA of that third commit indicated it went into the 3.12 tree in April, so 4.6-rc seems to be correct - at least for that commit.

A couple of unpleasant local kernel vulnerabilities

Posted Jun 27, 2016 20:37 UTC (Mon) by BenHutchings (subscriber, #37955) [Link]

So far as I can see, the fixes for these issues went into 4.7-rc1.

For 3.14.73 Greg also picked several earlier netfilter fixes, also covering CVE-2016-3134.