On Sat, Dec 10, 2016 at 09:46:38PM +0000, Adam D. Barratt wrote: > Control: tags -1 + confirmed > > On Thu, 2016-11-24 at 17:59 +0100, Evgeni Golov wrote: > > even if lxc/1:1.0.6-6+deb8u4 did not reach stable yet (see #844150), > > we would like to fix another bug in stable: > > #845465 aka CVE-2016-8649: attach: do not send procfd to attached process > > it was marked as non-dsa by the security team as it is not exploitable > > in the default config we ship in Jessie, yet it would be nice to have it fixed. > > Please go ahead. Just uploaded.
Attachment:
signature.asc
Description: PGP signature