On 01/29/2015 11:18 AM, Ovidiu Calbajos wrote:
Hello,

Today one of our customers informed us that his container was not able to upgrade to the latest libc6 in order to avoid the GHOST vulnerability CVE-2015-0235. Searching the internet was without any positive result. What I found out was that libc-bin, libc6, libc6-dev and libc-dev-bin were configured to be downloaded from a PPA( http://ppa.launchpad.net/izx/ovz-libc/ubuntu ) and not from the Canonical's update servers. So what was to remove the files /etc/apt/sources.list.d/izx-ovz-libc-precise.list and /etc/apt/preferences.d/99ovz-libc-pin and do an update/upgrade to the VPS which resulted in updating the libc6 to the latest version available for Ubuntu 12.04 which is 2.15-0ubuntu10.10. Hopefully this message will help other users update the libc6 library on their containers or customer's containers.

Best regards,
Ovidiu Calbajos


Interesting. Where did you get that template? Official OpenVZ template
doesn't have this PPA configured, using standard glibc from the default repo.

Kir.
_______________________________________________
Users mailing list
Users@openvz.org
https://lists.openvz.org/mailman/listinfo/users

Reply via email to