Re: vulnerability in 8.6

[Richard Waterbeek <richardwbb@versatel.nl>]

Hi,

I wrote that I searched for a '686' image but that was meant for this
VirtualBox I have, my 64Bit processor only can emulate 32Bit.

uname -ar gave; Linux <hostname> 3.16.0-4-amd64 #1 SMP Debian 3.16.36-1
+deb8u1 (2016-09-03) x86_64 GNU/Linux

dpkg -l | grep linux-image gave; linux-image-3.16.0-4-amd64
3.16.36-1+deb8u1

I ran; sudo apt-get update, followed by sudo apt-get upgrade and that
gave;

The following packages will be upgraded:
  tzdata tzdata-java
2 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
Need to get 268 kB of archives.
After this operation, 16.4 kB of additional disk space will be used.

This seems a little unexpected to me. A real long time ago I update just
the kernel once on a Slackware machine and finished that with;
update-grub.

I thought a sudo apt-get install linux-image-3.16.0-4-amd64 followed by
update-grub is sufficient to upgrade the kernel. 

So I did; sudo apt-get install, preceded by sudo apt-get upgrade and
that gave;

linux-image-3.16.0-4-amd64 is already the newest version.

And just now it is clear to me that something must be wrong, so thank
you for helping enabling me to clarify my questions.

Hoping to hear from you what to do now.

-- 
Richard Waterbeek <richardwbb@versatel.nl>



Vladislav Kurz schreef op do 10-11-2016 om 10:28 [+0100]:
> On 11/10/16 04:20, Richard Waterbeek wrote:
> > Hi Salvatore, Ozgur,
> > 
> > You posted this url; https://www.debian.org/security/2016/dsa-3696
> > 
> > But, I have looked for a update and I went to Debian package search and
> > searched for; 'kernel image 686
> > pae' [https://packages.debian.org/search?suite=stable&section=all&arch=any&searchon=names&keywords=kernel+image+686+pae]
> > 
> > This gave one result, which is; 'kernel-image-3.16.0-4-686-pae-di' and
> > written with that, 'Linux kernel binary image for the Debian installer
> > 3.16.36-1+deb8u1: i386'
> 
> Check what kernel is your system running:
> 
> # uname -a
> Linux hostname 3.16.0-4-amd64 #1 SMP Debian 3.16.36-1+deb8u2
> (2016-10-19) x86_64 GNU/Linux
> 
> The kernel packages for running system (not installer) are:
> linux-image-*** not kernel-image-***
> 
> You can chek what is installed by: dpkg -l|grep linux
> 
> > And I read that I need a '+deb8u2' kernel?
> > 
> > Can someone explain to me what to do next? I have the assumption that a
> > 'apt-get install "name-of-required-kerne-package"' would be sufficient?
> 
> apt-get update; apt-get upgrade
> 
> followed by reboot should be sufficient.
>