CVE-2016-10229 and older releases

Hello,

There is much fuss recently in the web on the severe remote vulnerability CVE-2016-10229: https://www.theregister.co.uk/2017/0...x_kernel_flaw/

It seems to be fixed with latest Slackware kernels. What about the older ones? Is there a chance that there will be a patch released by the Slackware team for older releases?

Regards

It's been long fixed in Slackware 14.0 and newer.

What about 13.1? Does it mean the Slackware team does not release security patches for older releases? I thought they do.

EDIT: I can see that kernel 2.6 is no longer supported. Is there a chance that I can just install kernel packages from Slackware 14 into 13.1, and add them to lilo? May it work or it will be a waste of time?

Originally Posted by witek Is there a chance that I can just install kernel packages from Slackware 14 into 13.1, and add them to lilo?

There is a very good chance that this will be ok, linux-3.2.83 from Slackware 14.0 is probably your best choice, but there's a good chance even 4.4.38 from -current will be ok.

It works with current kernel. Thanks