linux-kernel - Re: [stable] [patch 00/50] -stable review

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <45CCCE51.8090103@linuxtv.org>
Date:	Fri, 09 Feb 2007 14:41:05 -0500
From:	Michael Krufky <mkrufky@...uxtv.org>
To:	Greg KH <greg@...ah.com>
CC:	Chris Wright <chrisw@...s-sol.org>, stable@...nel.org,
	v4l-dvb maintainer list <v4l-dvb-maintainer@...uxtv.org>,
	linux-kernel <linux-kernel@...r.kernel.org>
Subject: Re: [stable] [patch 00/50] -stable review

Michael Krufky wrote:
> Greg KH wrote:
> 
>>>> I'll go through the archives and see if there's enough to do a .18
>>>> release (and the patches are serious enough to warrent it.)
>>> Actually, I have a few more -stable patches for both 2.6.18.y and 2.6.19.y, if
>>> you don't mind holding off a day or two (wont have time to prepare these until
>>> tomorrow evening)...  One of them is a security fix, that allows a non-root user
>>> to hang the kernel given the correct circumstances.
>> Ok, that's serious enough :)
>>
>> I'll wait for your patches.
>>
>> thanks,
>>
>> greg k-h
> 
> I've uploaded the remaining pending v4l/dvb -stable patches for both 2.6.18.y
> and 2.6.19.y to the following locations:
> 
> http://linuxtv.org/~mkrufky/stable/2.6.18.y/ (8 patches)
> 
> and
> 
> http://linuxtv.org/~mkrufky/stable/2.6.19.y/ (5 patches)
> 
> Using the mailer at my current location, I am unable to send patches inline, and
> I won't have the time for it this evening.  In the interest of saving time, I
> figured that sending them to you in this method is good enough.  If you still
> need for me to send them via email inline, please let me know.

Greg & Chris,

I haven't heard from either of you about these patches, nor have I seen any
update to the stable-queue.

Just for clarification, the security fix patch, that prevents a non-root user
from hanging the kernel is the patch entitled,

"V4L: buf_qbuf: fix videobuf_queue->stream corruption and lockup"

...as per Mauro's description, here:

http://www.mail-archive.com/linux-kernel@vger.kernel.org/msg113820.html

Regards,

Michael Krufky

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/