Peppermint OS Community Forum

General => General Discussion => Topic started by: alynur on December 06, 2016, 10:15:37 pm

Title: Canonical Patches addressing Critical Security Vulnerabilities
Post by: alynur on December 06, 2016, 10:15:37 pm
Hello Peppermint people. I ran accross this article and I was wondering if this would affect us?
http://news.softpedia.com/news/canonical-patches-important-kernel-vulnerability-in-all-supported-ubuntu-oses-510768.shtml?utm_content=buffer404f9&utm_medium=social&utm_source=facebook.com&utm_campaign=buffer (http://news.softpedia.com/news/canonical-patches-important-kernel-vulnerability-in-all-supported-ubuntu-oses-510768.shtml?utm_content=buffer404f9&utm_medium=social&utm_source=facebook.com&utm_campaign=buffer)
 :-\
Title: Re: Canonical Patches addressing Critical Security Vulnerabilities
Post by: Slim.Fatz on December 06, 2016, 11:48:03 pm
Hi alynur,

There has just recently been a kernel update available to fix this. Run the Synaptic package manager to get and install the update.

Regards,

-- Slim
Title: Re: Canonical Patches addressing Critical Security Vulnerabilities
Post by: berliner58 on December 07, 2016, 03:50:10 am
I ran the Synaptic package manager but have no clue how to get and install the update.
Title: Re: Canonical Patches addressing Critical Security Vulnerabilities
Post by: Pjotr on December 07, 2016, 06:15:32 am
For Peppermint 7:

Update Manager - panel: View - Linux kernels
Install the latest kernel from the 4.4 series
(if necessary, use the slider to make it visible: currently it's the 4.4.0-53)

Then reboot.
Title: Re: Canonical Patches addressing Critical Security Vulnerabilities
Post by: berliner58 on December 07, 2016, 06:28:25 am
Thanks, Pjotr.

I am still confused.
Found the Update manager and there I see  kernel  4.4.0-53  installed and loaded  ( others are installed too, many checks everywhere).

But in this security warning from Ubuntu
http://news.softpedia.com/news/canonical-patches-important-kernel-vulnerability-in-all-supported-ubuntu-oses-510768.shtml?utm_content=buffer404f9&utm_medium=social&utm_source=facebook.com&utm_campaign=buffer (http://news.softpedia.com/news/canonical-patches-important-kernel-vulnerability-in-all-supported-ubuntu-oses-510768.shtml?utm_content=buffer404f9&utm_medium=social&utm_source=facebook.com&utm_campaign=buffer)
they say:
Quote
The security flaw can be corrected if you update your Ubuntu Linux system to ....  linux-image 4.4.0.53.56 for Ubuntu 16.04 LTS

For me as a noob my installed  kernel  4.4.0-53  is not identical with  4.4.0.53.56 .

What can I do to get the security update ?
Title: Re: Canonical Patches addressing Critical Security Vulnerabilities
Post by: PCNetSpec on December 07, 2016, 09:16:42 am
If your system is up to date, you ARE already covered.

Running:
Code: [Select]
dpkg -l | grep linux-image-generic
will show you the FULL version number of the 4.4.0-53 kernel is 4.4.0.53.56  .. but rest assured, if updates says you have 4.4.0-53, you DO have the patched kernel .. there was NO earlier minor version of 4.4.0-53 ;)

We use the standard Ubuntu repos for kernel updates .. so if Ubuntu have released a new kernel in 16.04, you WILL have that new kernel in Peppermint 7.
Title: Re: Canonical Patches addressing Critical Security Vulnerabilities
Post by: berliner58 on December 07, 2016, 09:48:16 am
Code: [Select]
dpkg -l | grep linux-image-generic
ii  linux-image-generic                         4.4.0.53.56                                     amd64        Generic Linux kernel image

Thank you very much.
I am feeling good now.
Title: Re: Canonical Patches addressing Critical Security Vulnerabilities
Post by: PCNetSpec on December 07, 2016, 12:06:36 pm
You're welcome :)
Title: Re: Canonical Patches addressing Critical Security Vulnerabilities
Post by: alynur on December 07, 2016, 08:47:28 pm
If your system is up to date, you ARE already covered.

Running:
Code: [Select]
dpkg -l | grep linux-image-generic
will show you the FULL version number of the 4.4.0-53 kernel is 4.4.0.53.56  .. but rest assured, if updates says you have 4.4.0-53, you DO have the patched kernel .. there was NO earlier minor version of 4.4.0-53 ;)

We use the standard Ubuntu repos for kernel updates .. so if Ubuntu have released a new kernel in 16.04, you WILL have that new kernel in Peppermint 7.

So we are already covered, great. Thanks guys.  :)