Bug#845564: jessie-pu: package lxc/1:1.0.6-6+deb8u5
Control: tags -1 + pending
On Mon, 2016-12-12 at 11:25 -0200, Antonio Terceiro wrote:
> On Sat, Dec 10, 2016 at 09:46:38PM +0000, Adam D. Barratt wrote:
> > Control: tags -1 + confirmed
> >
> > On Thu, 2016-11-24 at 17:59 +0100, Evgeni Golov wrote:
> > > even if lxc/1:1.0.6-6+deb8u4 did not reach stable yet (see #844150),
> > > we would like to fix another bug in stable:
> > > #845465 aka CVE-2016-8649: attach: do not send procfd to attached process
> > > it was marked as non-dsa by the security team as it is not exploitable
> > > in the default config we ship in Jessie, yet it would be nice to have it fixed.
> >
> > Please go ahead.
>
> Just uploaded.
Flagged for acceptance.
Regards,
Adam
Reply to: