[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#845564: jessie-pu: package lxc/1:1.0.6-6+deb8u5



Control: tags -1 + confirmed

On Thu, 2016-11-24 at 17:59 +0100, Evgeni Golov wrote:
> even if lxc/1:1.0.6-6+deb8u4 did not reach stable yet (see #844150),
> we would like to fix another bug in stable:
>  #845465 aka CVE-2016-8649: attach: do not send procfd to attached process
> it was marked as non-dsa by the security team as it is not exploitable
> in the default config we ship in Jessie, yet it would be nice to have it fixed.

Please go ahead.

Regards,

Adam


Reply to: