Arch Linux Security Advisory ASA-201612-11 ========================================= Severity: High Date : 2016-12-10 CVE-ID  : CVE-2016-9919 Package : linux-grsec Type: denial of service Remote : Yes Link : https://wiki.archlinux.org/index.php/CVE Description The package linux-grsec before version 1:4.8.12.r201612062306-2 is vulnerable to denial of service. Resolution ========= Upgrade to 1:4.8.12.r201612062306-2. # pacman -Syu "linux-grsec>=1:4.8.12.r201612062306-2" The problem has been fixed upstream but no release is available yet. Note that while this isn't fixed in upstream 4.8.12 / 4.8.13, it's fixed in 4.8.13-201612082118.patch so 4.8.13.r201612082118-1 no longer carries the patch in the downstream package.

ArchLinux: 201612-11: linux-grsec: denial of service

December 10, 2016

Summary

The package linux-grsec before version 1:4.8.12.r201612062306-2 is vulnerable to denial of service.

Resolution

Upgrade to 1:4.8.12.r201612062306-2. # pacman -Syu "linux-grsec>=1:4.8.12.r201612062306-2"
The problem has been fixed upstream but no release is available yet.
Note that while this isn't fixed in upstream 4.8.12 / 4.8.13, it's fixed in 4.8.13-201612082118.patch so 4.8.13.r201612082118-1 no longer carries the patch in the downstream package.

References

Severity
Package : linux-grsec
Type: denial of service
Remote : Yes
Link : https://wiki.archlinux.org/index.php/CVE

Workaround

Related News