[Pkg-ofed-devel] security vulnerability CVE-2011-2

[Guy Coates]

Hi,

A security vulnerability has been found in the ofa-kernel source.
(CVE-2011-3345, local denial-of-service / kernel crash)

http://seclists.org/oss-sec/2011/q3/426

Whilst we do not currently distribute any ofa-kernel packages that are
at risk (it only affects  OFED 1.5.X, not  OFED 1.4.X), if you have
built your own ofa-kernel package from the 1.5.X ofa-kernel source in
our svn tree, you may be at risk. You should update your ofa-kernel
source from:

svn://svn.debian.org/svn/pkg-ofed/trunk/ofa-kernel/

and rebuild your packages.

Cheers,

Guy

-- 
Dr. Guy Coates, Informatics Systems Group
The Wellcome Trust Sanger Institute, Hinxton, Cambridge, CB10 1HH, UK
Tel: +44 (0)1223 834244 x 6925
Fax: +44 (0)1223 496802


-- 
 The Wellcome Trust Sanger Institute is operated by Genome Research 
 Limited, a charity registered in England with number 1021457 and a 
 company registered in England with number 2742969, whose registered 
 office is 215 Euston Road, London, NW1 2BE.