linux-kernel - Linux 3.10.y: backport b04c46190219a4f845e46a459e3102137b7f6cac

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <535D3AA8.5030306@florian-kaiser.net>
Date:	Sun, 27 Apr 2014 19:13:12 +0200
From:	Florian Kaiser <fk@...rian-kaiser.net>
To:	stable@...r.kernel.org
CC:	linux-kernel@...r.kernel.org
Subject: Linux 3.10.y: backport b04c46190219a4f845e46a459e3102137b7f6cac

Hello,

Not sure if you did not include this for a reason in the latest 3.10.y
(3.10.38, released 16 hours ago) or if you just missed it. In the latter case,
please backport it.

Patch from commit b04c46190219a4f845e46a459e3102137b7f6cac should apply with
some offsets but otherwise work as expected. We tested with 3.10.37 and did
not find any regressions or other unexpected behavior.

As for now, 3.10.y LTS would still be vulnerable to CVE-2014-2851.

TIA
Florian

Download attachment "signature.asc" of type "application/pgp-signature" (820 bytes)