Subject: Re: [vserver] CVE-2014-0196
From: Corey Wright <undefined@pobox.com>
Date: Tue, 20 May 2014 01:37:27 -0500

On Mon, 19 May 2014 15:05:45 -0600
Dan Urist <durist@ucar.edu> wrote:

> Is there any chance the vserver patch will get updated for the kernels
> that fix CVE-2014-0196?

i know you specifically reference 3.2.y later in the email thread, but for
the record, 3.10.40 contains the patch for CVE-2014-0196 [1] and
patch-3.10.37-vs2.3.6.8.diff applies (though i see herbert released patch for
3.10.40 just today).

[1]
https://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/?h=linux-3.10.y&id=abb5100737bba3f82b5514350fea89ca361ac66c

corey
--
undefined@pobox.com

> -- 
> Dan Urist
> durist@ucar.edu
> 303-497-2459