On 01/19/2016 03:37 PM, Johnny Hughes wrote:
> On 01/19/2016 03:27 PM, Phill Bandelow wrote:
>> I presume this addresses CVE-2016-0728?
>>
>
> Actually it does not .. they have not rolled that patch into the LTS
> 3.18 branch at kernel.org yet.
>
> As soon as it hits the LTS tree I will build a new kernel though.

OK .. supposedly, this patch fixes the issue:

http://bit.ly/1Sv1Llu

I have made this patch apply to the xen kernel sources:

http://bit.ly/23d5JmD

Let's verify that what I am applying is the only real meat to the first
patch.

I will build and test this locally to verify that we have the issue
before and not after applying that patch.

Then we can test it as a group.

SO .. hold off on testing kernel-3.18.25-17 and I will create a
kernel-3.18.25-18 if this fixes the CVE-2016-0728 issue.

Thanks,
Johnny Hughes


_______________________________________________
CentOS-virt mailing list
CentOS-virt@centos.org
https://lists.centos.org/mailman/listinfo/centos-virt