linux-kernel - [STABLE] find missing bug fixes in a stable kernel

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date:	Mon, 13 Jan 2014 15:28:11 +0800
From:	Li Zefan <lizefan@...wei.com>
To:	stable <stable@...r.kernel.org>
CC:	Greg Kroah-Hartman <gregkh@...uxfoundation.org>,
	LKML <linux-kernel@...r.kernel.org>
Subject: [STABLE] find missing bug fixes in a stable kernel

We have several long-term and extended stable kernels, and it's possible
that a bug fix is in some stable versions but is missing in some other
versions, so I've written a script to find out those fixes.

Take 3.4.xx and 3.2.xx for example. If a bug fix was merged into upstream
kernel after 3.4, and then it was backported to 3.2.xx, then it probably
needs to be backported to 3.4.xx.

The result is, there're ~430 bug fixes in 3.2.xx that probably need to be
backported to 3.4.xx. Given there're about 4500 commits in 3.2.xx, that
is ~10%, which is quite a big number for stable kernels.

We (our team in Huawei) are going to go through the whole list to filter
out fixes that're applicable for 3.4.xx.

I've attached the lists for 3.4 and 3.10.

If a commit ID appears more than once in changelogs, it's possible that's
because the commit was reverted later, so I tagged this kind of commits
in the lists.

View attachment "commits_3_4.txt" of type "text/plain" (11382 bytes)

View attachment "commits_3_10.txt" of type "text/plain" (2265 bytes)