[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20170516052009.GA17400@1wt.eu>
Date: Tue, 16 May 2017 07:20:09 +0200
From: Willy Tarreau <w@....eu>
To: Steven Pease <spease@...tabletech.com>
Cc: linux-kernel@...r.kernel.org
Subject: Re: CVE-2016-10229 in 4.4.x series
On Mon, May 15, 2017 at 06:09:53PM -0700, Steven Pease wrote:
> Hi,
>
> This is my first post - not currently subscribed so please CC me. :) I
> searched a bit for this question, but couldn't find an answer (Googled
> '2016-10229 site:lkml.org').
>
> Does CVE-2016-10229 affect the newest version of the 4.4.x kernel
> series (currently 4.4.68) and are there any plans to fix this in the
> 4.4 kernel series?
This one was fixed by upstream commit 197c949 ("udp: properly support
MSG_PEEK with truncated buffers"), which was backported in 4.4 as
commit dfe2042d96 in 4.4.21. So in short, 4.4.68 is safe.
Willy
Powered by blists - more mailing lists