Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 505860

Summary: <sys-kernel/openvz-sources-2.6.32.85.20 : DCCP Packets Handling Memory Corruption Vulnerabilities
Product: Gentoo Security Reporter: Agostino Sarubbo <ago>
Component: VulnerabilitiesAssignee: Gentoo Security <security>
Status: RESOLVED FIXED    
Severity: minor CC: andreis.vinogradovs, proxy-maint, pva
Priority: Normal    
Version: unspecified   
Hardware: All   
OS: Linux   
URL: https://secunia.com/advisories/57573/
Whiteboard: B3 [noglsa]
Package list:
Runtime testing required: ---

Description Agostino Sarubbo gentoo-dev 2014-03-26 10:20:05 UTC
From ${URL} :

Description

OpenVZ has issued an update for kernel. This fixes multiple vulnerabilities, which can be exploited by 
malicious people to potentially compromise a vulnerable system.

For more information:
SA57446


Solution:
Update kernel branch RHEL6 to 042stab085.20.

Original Advisory:
OpenVZ:
http://wiki.openvz.org/Download/kernel/rhel6/042stab085.20


@maintainer(s): after the bump, in case we need to stabilize the package, please let us know if it is ready for the stabilization or not.
Comment 1 Alexander Vershilov (RETIRED) gentoo-dev 2014-03-31 09:48:19 UTC
Bumped new version, old unstable were dropped.
Comment 2 Mikle Kolyada (RETIRED) archtester Gentoo Infrastructure gentoo-dev Security 2014-04-02 10:54:48 UTC
Arches, please test and mark stable:

=sys-kernel/openvz-sources-2.6.32.85.2

target KEYWORDS="amd64 x86"
Comment 3 Agostino Sarubbo gentoo-dev 2014-04-30 13:59:56 UTC
amd64 stable
Comment 4 Agostino Sarubbo gentoo-dev 2014-04-30 14:21:30 UTC
x86 stable.

Maintainer(s), please cleanup.
Security, please vote.
Comment 5 Maxim Koltsov (RETIRED) gentoo-dev 2014-04-30 15:11:56 UTC
Versions <2.6.32.85.20 are cleaned from tree.
Comment 6 Mikle Kolyada (RETIRED) archtester Gentoo Infrastructure gentoo-dev Security 2014-04-30 15:14:07 UTC
No glsa for kernel *-sources.

Closing as [noglsa].