Bug 505860 – <sys-kernel/openvz-sources-2.6.32.85.20 : DCCP Packets Handling Memory Corruption Vulnerabilities

• Status: RESOLVED FIXED
• Product: Gentoo Security

[Description Agostino Sarubbo 2014-03-26 10:20:05 UTC]

From ${URL} :

Description

OpenVZ has issued an update for kernel. This fixes multiple vulnerabilities, which can be exploited by 
malicious people to potentially compromise a vulnerable system.

For more information:
SA57446


Solution:
Update kernel branch RHEL6 to 042stab085.20.

Original Advisory:
OpenVZ:
http://wiki.openvz.org/Download/kernel/rhel6/042stab085.20


@maintainer(s): after the bump, in case we need to stabilize the package, please let us know if it is ready for the stabilization or not.

[Comment 1 Alexander Vershilov (RETIRED) 2014-03-31 09:48:19 UTC]

Bumped new version, old unstable were dropped.

[Comment 2 Mikle Kolyada (RETIRED) 2014-04-02 10:54:48 UTC]

Arches, please test and mark stable:

=sys-kernel/openvz-sources-2.6.32.85.2

target KEYWORDS="amd64 x86"

[Comment 3 Agostino Sarubbo 2014-04-30 13:59:56 UTC]

amd64 stable

[Comment 4 Agostino Sarubbo 2014-04-30 14:21:30 UTC]

x86 stable.

Maintainer(s), please cleanup.
Security, please vote.

[Comment 5 Maxim Koltsov (RETIRED) 2014-04-30 15:11:56 UTC]

Versions <2.6.32.85.20 are cleaned from tree.

[Comment 6 Mikle Kolyada (RETIRED) 2014-04-30 15:14:07 UTC]

No glsa for kernel *-sources.

Closing as [noglsa].