linux-kernel - Re: Linux 3.10.y: backport b04c46190219a4f845e46a459e3102137b7f6cac

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20140427173440.GA11217@kroah.com>
Date:	Sun, 27 Apr 2014 10:34:40 -0700
From:	Greg KH <greg@...ah.com>
To:	Florian Kaiser <fk@...rian-kaiser.net>
Cc:	stable@...r.kernel.org, linux-kernel@...r.kernel.org
Subject: Re: Linux 3.10.y: backport b04c46190219a4f845e46a459e3102137b7f6cac

On Sun, Apr 27, 2014 at 07:13:12PM +0200, Florian Kaiser wrote:
> Hello,
> 
> Not sure if you did not include this for a reason in the latest 3.10.y
> (3.10.38, released 16 hours ago) or if you just missed it. In the latter case,
> please backport it.
> 
> Patch from commit b04c46190219a4f845e46a459e3102137b7f6cac should apply with
> some offsets but otherwise work as expected. We tested with 3.10.37 and did
> not find any regressions or other unexpected behavior.
> 
> As for now, 3.10.y LTS would still be vulnerable to CVE-2014-2851.

I take networking patches from the networking maintainer, and don't
apply them on my own.  So please ask about this on the netdev list,
after checking that the netdev stable patchwork queue doesn't already
have the patch in it (sorry, I don't have the link to that at the
moment...)

thanks,

greg k-h
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/