linux-kernel - Re: [stable] [patch 00/50] -stable review

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Fri, 9 Feb 2007 11:51:56 -0800
From:	Greg KH <greg@...ah.com>
To:	Michael Krufky <mkrufky@...uxtv.org>
Cc:	Chris Wright <chrisw@...s-sol.org>,
	v4l-dvb maintainer list <v4l-dvb-maintainer@...uxtv.org>,
	stable@...nel.org, linux-kernel <linux-kernel@...r.kernel.org>
Subject: Re: [stable] [patch 00/50] -stable review

On Fri, Feb 09, 2007 at 02:41:05PM -0500, Michael Krufky wrote:
> Michael Krufky wrote:
> > Greg KH wrote:
> > 
> >>>> I'll go through the archives and see if there's enough to do a .18
> >>>> release (and the patches are serious enough to warrent it.)
> >>> Actually, I have a few more -stable patches for both 2.6.18.y and 2.6.19.y, if
> >>> you don't mind holding off a day or two (wont have time to prepare these until
> >>> tomorrow evening)...  One of them is a security fix, that allows a non-root user
> >>> to hang the kernel given the correct circumstances.
> >> Ok, that's serious enough :)
> >>
> >> I'll wait for your patches.
> >>
> >> thanks,
> >>
> >> greg k-h
> > 
> > I've uploaded the remaining pending v4l/dvb -stable patches for both 2.6.18.y
> > and 2.6.19.y to the following locations:
> > 
> > http://linuxtv.org/~mkrufky/stable/2.6.18.y/ (8 patches)
> > 
> > and
> > 
> > http://linuxtv.org/~mkrufky/stable/2.6.19.y/ (5 patches)
> > 
> > Using the mailer at my current location, I am unable to send patches inline, and
> > I won't have the time for it this evening.  In the interest of saving time, I
> > figured that sending them to you in this method is good enough.  If you still
> > need for me to send them via email inline, please let me know.
> 
> Greg & Chris,
> 
> I haven't heard from either of you about these patches, nor have I seen any
> update to the stable-queue.
> 
> Just for clarification, the security fix patch, that prevents a non-root user
> from hanging the kernel is the patch entitled,
> 
> "V4L: buf_qbuf: fix videobuf_queue->stream corruption and lockup"
> 
> ...as per Mauro's description, here:
> 
> http://www.mail-archive.com/linux-kernel@vger.kernel.org/msg113820.html

Thanks, I'll be flushing out the stable queue later on tonight and will
pick up all of these patches.

greg k-h
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/