Summary: | openvz-sources version bump to fix CVEs and other issues | ||||||
---|---|---|---|---|---|---|---|
Product: | Gentoo Security | Reporter: | Jeff Mitchell <funtoo> | ||||
Component: | Kernel | Assignee: | Gentoo Security <security> | ||||
Status: | RESOLVED FIXED | ||||||
Severity: | critical | CC: | drobbins, pva | ||||
Priority: | High | ||||||
Version: | unspecified | ||||||
Hardware: | All | ||||||
OS: | Linux | ||||||
Whiteboard: | |||||||
Package list: | Runtime testing required: | --- | |||||
Attachments: |
|
Description
Jeff Mitchell
2009-09-22 18:34:56 UTC
Created attachment 204959 [details, diff]
Patch with updated ebuild and patches as described.
Thank you for report Jeff. But we already dropped 2.6.18 kernels from the tree. Is here anything left for us to do? You hadn't when I wrote this. But I'll repeat my comment from bug 279260: The RHEL/OpenVZ-patch 2.6.18 kernel is the only supported OpenVZ kernel by upstream, and the only one supporting resource limits. Dropping it from the tree would be a large mistake for OpenVZ-on-Gentoo users. Jeff, updated kernel is in the tree. And follow up bug 279260. Fell free to report new version bumps or whatever patches you want. Since you use this kernel more I believe you here more ) Anyway this bug is fixed since it affects ~arch. |