linux-kernel - Re: [stable] [patch 00/50] -stable review

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Tue, 20 Feb 2007 15:12:23 -0800
From:	Greg KH <greg@...ah.com>
To:	Michael Krufky <mkrufky@...uxtv.org>
Cc:	Chris Wright <chrisw@...s-sol.org>,
	v4l-dvb maintainer list <v4l-dvb-maintainer@...uxtv.org>,
	stable@...nel.org, linux-kernel <linux-kernel@...r.kernel.org>
Subject: Re: [stable] [patch 00/50] -stable review

On Fri, Feb 09, 2007 at 11:51:56AM -0800, Greg KH wrote:
> On Fri, Feb 09, 2007 at 02:41:05PM -0500, Michael Krufky wrote:
> > Michael Krufky wrote:
> > > Greg KH wrote:
> > > 
> > >>>> I'll go through the archives and see if there's enough to do a .18
> > >>>> release (and the patches are serious enough to warrent it.)
> > >>> Actually, I have a few more -stable patches for both 2.6.18.y and 2.6.19.y, if
> > >>> you don't mind holding off a day or two (wont have time to prepare these until
> > >>> tomorrow evening)...  One of them is a security fix, that allows a non-root user
> > >>> to hang the kernel given the correct circumstances.
> > >> Ok, that's serious enough :)
> > >>
> > >> I'll wait for your patches.
> > >>
> > >> thanks,
> > >>
> > >> greg k-h
> > > 
> > > I've uploaded the remaining pending v4l/dvb -stable patches for both 2.6.18.y
> > > and 2.6.19.y to the following locations:
> > > 
> > > http://linuxtv.org/~mkrufky/stable/2.6.18.y/ (8 patches)
> > > 
> > > and
> > > 
> > > http://linuxtv.org/~mkrufky/stable/2.6.19.y/ (5 patches)
> > > 
> > > Using the mailer at my current location, I am unable to send patches inline, and
> > > I won't have the time for it this evening.  In the interest of saving time, I
> > > figured that sending them to you in this method is good enough.  If you still
> > > need for me to send them via email inline, please let me know.
> > 
> > Greg & Chris,
> > 
> > I haven't heard from either of you about these patches, nor have I seen any
> > update to the stable-queue.
> > 
> > Just for clarification, the security fix patch, that prevents a non-root user
> > from hanging the kernel is the patch entitled,
> > 
> > "V4L: buf_qbuf: fix videobuf_queue->stream corruption and lockup"
> > 
> > ...as per Mauro's description, here:
> > 
> > http://www.mail-archive.com/linux-kernel@vger.kernel.org/msg113820.html
> 
> Thanks, I'll be flushing out the stable queue later on tonight and will
> pick up all of these patches.

Ok, I've now gotten all of these for .19 and .18.

If I've missed anything, please let me know.

thanks for your patience.

greg k-h
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/