On 12/08/16 17:56, Barry Brimer wrote:>> [root at vps ~]# uname -r >> 2.6.32-042stab108.7 > > Not needed. This affects 3.6+ kernels. You don't have one of those.It affects RHEL6 which runs 2.6.32, they backported the features that it affects. If the above openvz kernel was based on a RHEL6 kernel (and I'd guess it was) then it's affected. Peter
On Fri, 12 Aug 2016, Peter wrote:> On 12/08/16 17:56, Barry Brimer wrote: >>> [root at vps ~]# uname -r >>> 2.6.32-042stab108.7 >> >> Not needed. This affects 3.6+ kernels. You don't have one of those. > > It affects RHEL6 which runs 2.6.32, they backported the features that it > affects. If the above openvz kernel was based on a RHEL6 kernel (and > I'd guess it was) then it's affected.If this feature was backported, then it surely may be the case although I've not seen any reference indicating that. If you wouldn't mind including a link that indicates this, that would be appreciated. Thanks, Barry
On 08/11/2016 11:07 PM, Barry Brimer wrote:> > On Fri, 12 Aug 2016, Peter wrote: > >> On 12/08/16 17:56, Barry Brimer wrote: >>>> [root at vps ~]# uname -r >>>> 2.6.32-042stab108.7 >>> >>> Not needed. This affects 3.6+ kernels. You don't have one of those. >> >> It affects RHEL6 which runs 2.6.32, they backported the features that it >> affects. If the above openvz kernel was based on a RHEL6 kernel (and >> I'd guess it was) then it's affected. > > If this feature was backported, then it surely may be the case although > I've not seen any reference indicating that.https://access.redhat.com/security/cve/cve-2016-5696 says CentOS 6 is affected.