linux-kernel - Re: [PATCH] X.509: Fix the time validation [ver #3]

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <5669BDCE.9010703@ahsoftware.de>
Date:	Thu, 10 Dec 2015 19:00:46 +0100
From:	Alexander Holler <holler@...oftware.de>
To:	Greg Kroah-Hartman <gregkh@...uxfoundation.org>,
	David Howells <dhowells@...hat.com>
Cc:	jmorris@...ei.org, David Woodhouse <David.Woodhouse@...el.com>,
	linux-kernel@...r.kernel.org, stable@...r.kernel.org,
	linux-security-module@...r.kernel.org, keyrings@...r.kernel.org,
	Mimi Zohar <zohar@...ux.vnet.ibm.com>
Subject: Re: [PATCH] X.509: Fix the time validation [ver #3]

Am 10.12.2015 um 16:34 schrieb Alexander Holler:
> Am 10.12.2015 um 16:26 schrieb Greg Kroah-Hartman:
>> On Thu, Dec 10, 2015 at 04:15:22PM +0100, Alexander Holler wrote:
>
>>> Just in case of, I would suggest to quickly push out 4.3.2 (only 4.3
>>> seems
>>> to be affected) which contains at least the patch mentioned in the
>>> subject
>>> (58585c1fc301a36625db41ac7078c4dd0a218d84 in mainline).
>>
>> 58585c1fc301a36625db41ac7078c4dd0a218d84 doesn't reference anything in
>> Linus's tree, where did you get that git commit id?
>
> Uh, hmm, maybe I've picked the wrong commit number when I've used git
> gui blame to find the original commit. Might have been one from my own
> trees which are based on mainline. Sorry, having had a second look, the
> one I've cherry-picked from mainline was
> cc25b994acfbc901429da682d0f73c190e960206

To give my motivation for that mail (and that "quickly"): it's highly 
annoying to end up with a box which does not have network and, as in my 
case, even without working input devices because modules weren't loaded. 
And other people don't might be able to find the problem (and existing 
patch) as quick as I did and might end up even more annoyed than I was 
for a short period of time. ;)

> Regards,
>
> Alexander Holler

--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/