Dirty Cow - LMDE Advice please

All Gurus once were Newbies
Locked
WhatUsernameIsFree?
Level 4
Level 4
Posts: 217
Joined: Wed Oct 19, 2011 1:32 pm

Dirty Cow - LMDE Advice please

Post by WhatUsernameIsFree? » Sun Oct 23, 2016 4:52 am

I've searched the internet high and low. I cannot find the answer to this question: Am I affected by Dirty Cow. I found one website giving lots of different Kernel numbers but none of those applied to LMDE. System is fully updated - says there's no more updates. I don't have a "Kernal Information" under view like Mint Forums say to check.

Am I affected? It appears not to be able to be remotely executed; so for my personal laptop, should I care? I'm rather be patched but if it involves downloading patches, trying to apply them and then trying to work out why it won't work then I'll wait for updates in the official channels.

Currently running 3.16.0-4-amd64 #1 SMP Debian 3.16.7-ckt25-2+deb8u3 (2016-07-02)

Thanks! :mrgreen:

User avatar
killer de bug
Level 14
Level 14
Posts: 5415
Joined: Tue Jul 08, 2008 1:49 pm
Location: Leuven, Belgium

Re: Dirty Cow - LMDE Advice please

Post by killer de bug » Sun Oct 23, 2016 9:48 am

If you have applied all updates, you should be safe: https://security-tracker.debian.org/tra ... -2016-5195

Code: Select all

linux-headers-3.16.0-4-amd64:
  Installé : 3.16.36-1+deb8u2
  Candidat : 3.16.36-1+deb8u2
 Table de version :
 *** 3.16.36-1+deb8u2 0
        500 http://security.debian.org/ jessie/updates/main amd64 Packages
        100 /var/lib/dpkg/status
     3.16.36-1+deb8u1 0
        500 http://ftp.debian.org/debian/ jessie/main amd64 Packages
     3.16.7-ckt25-2 0
        500 http://ftp.debian.org/debian/ jessie-updates/main amd64 Packages

But I have a different result from you, so I think you are not applying some level 5 updates. Security updates :wink:

Code: Select all

~ $ uname -a
Linux KDB-laptop 3.16.0-4-amd64 #1 SMP Debian 3.16.36-1+deb8u2 (2016-10-19) x86_64 GNU/Linux
If it ain't broke, fix it until it is.

WhatUsernameIsFree?
Level 4
Level 4
Posts: 217
Joined: Wed Oct 19, 2011 1:32 pm

Re: Dirty Cow - LMDE Advice please

Post by WhatUsernameIsFree? » Sun Oct 23, 2016 11:30 am

Did the GUI of apt-update in the update manager; the update manager said "Your system is up to date". I switched from my local mirror to the main server. Gosh a kernel update. That teaches me for using mirrors. :evil:

Code: Select all

3.16.0-4-amd64 #1 SMP Debian 3.16.36-1+deb8u2 (2016-10-19) x86_64 GNU/Linux

axisofevil
Level 3
Level 3
Posts: 110
Joined: Mon Nov 14, 2011 12:22 pm

Re: Dirty Cow - LMDE Advice please

Post by axisofevil » Thu Oct 27, 2016 8:33 pm

But should a security fix ever be labelled as a level 5?

I never apply (until 5 minutes ago) level 5 updates as they are "Dangerous updates" :x :x :x

User avatar
killer de bug
Level 14
Level 14
Posts: 5415
Joined: Tue Jul 08, 2008 1:49 pm
Location: Leuven, Belgium

Re: Dirty Cow - LMDE Advice please

Post by killer de bug » Fri Oct 28, 2016 4:38 am

Security fixes are labeled as security fixes in addition to their update level.
Even if you hide level 5 updates, you can still display all the security fixes. There is an option for this in the settings.
If it ain't broke, fix it until it is.

Locked

Return to “Newbie Questions”