Mail archive
alpine-aports

Re: [alpine-aports] [PATCH] main/lxc: update to 1.1.5

From: IT Developer <developer_at_it-offshore.co.uk>
Date: Fri, 13 Nov 2015 12:15:01 +0000

CVE-2015-1335 is already part of LXC 1.1.4
https://linuxcontainers.org/lxc/news/ (scroll down a little)

I proposed the tmpfs patch upstream a while ago but the issue is still
open https://github.com/lxc/lxc/issues/516

Will send a patch to remove CVE-2015-1335.patch

Stuart.

On 13/11/15 07:36, Natanael Copa wrote:
> On Fri, 13 Nov 2015 05:37:47 +0000
> Stuart Cardall <developer_at_it-offshore.co.uk> wrote:
>
>> This is the fifth bugfix release for LXC 1.1.
>> https://linuxcontainers.org/lxc/news/
>>
>> setproctile patch is already commited upstream:
>> https://github.com/lxc/lxc/commit/2681c0e7eae2c4008fc6bc79a4c128cbaca8beab
>>
>> download-template patch fixes the download directory if /tmp is mounted separately
>> (& is therefore probably either a tmpfs / zram or mounted noexec).
> I pushed without realizing that there were custom patches added.
>
> Is the download-template problem reported upstream?
>
> Seems also like you forgot to git rm CVE-2015-1335.patch
>
> -nc




---
Unsubscribe:  alpine-aports+unsubscribe_at_lists.alpinelinux.org
Help:         alpine-aports+help_at_lists.alpinelinux.org
---
Received on Fri Nov 13 2015 - 12:15:01 GMT