OpenVZ Forum: Users » 2.6.16 patch

Home » Mailing lists » Users » 2.6.16 patch

Show: Today's Messages :: Show Polls :: Message Navigator
E-mail to friend

Re: 2.6.16 patch [message #3012 is a reply to message #3010]

Sun, 07 May 2006 11:02

dev
Messages: 1693
Registered: September 2005
Location: Moscow

Senior Member

026test009 kernel includes mainstream patches up to 2.6.16.8. What is
inside our kernels you can check on git (http://git.openvz.org). On Git
we already have more recent 026test011 kernel which will be released soon.

If you care for security, I must note that 026test009 has lack for these
2 patches only:
[PATCH] smbfs chroot issue (CVE-2006-1864)
[PATCH] i386/x86-64: Fix x87 information leak between processes
(CVE-2006-1056)

The first one is relevant only if you do chroot on smbfs, which is
unlikely :) The second one is minor and is a small information leak (1
bit from FPU AFAIR).

So you need to apply a patch 2.6.16.8 -> 2.6.16.14 if you want.

Kirill

John Kelly wrote:
> Hello all,
>
> patch-026test009-combined does not apply cleanly to 2.6.16.14, but
> does to 2.6.16.
>
> The date on the patch file is April 20, so presumably it does not have
> all the -stable updates. Does anyone know which ones are missing?
>
> I suppose I could find out the hard way, by attempting to apply each
> one, but if someone else already knows ...
>
>

Report message to a moderator