linux-kernel - [GIT PULL] Keys fixes for v4.15

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Date:   Thu, 2 Nov 2017 21:21:00 +1100 (AEDT)
From:   James Morris <james.l.morris@...cle.com>
To:     Linus Torvalds <torvalds@...ux-foundation.org>
cc:     linux-kernel@...r.kernel.org, David Howells <dhowells@...hat.com>,
        keyrings@...r.kernel.org, linux-security-module@...r.kernel.org
Subject: [GIT PULL] Keys fixes for v4.15

Hi Linus,

Please pull these fixes for the Keys subsystem by Eric Biggers.

The following changes since commit 3a99df9a3d14cd866b5516f8cba515a3bfd554ab:

  Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace (2017-11-01 16:04:27 -0700)

are available in the git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security.git fixes-v4.14-rc7

Eric Biggers (3):
      KEYS: return full count in keyring_read() if buffer is too small
      KEYS: trusted: fix writing past end of buffer in trusted_read()
      KEYS: fix out-of-bounds read during ASN.1 parsing

 lib/asn1_decoder.c      |    3 +++
 security/keys/keyring.c |   39 +++++++++++++++++++--------------------
 security/keys/trusted.c |   23 ++++++++++++-----------
 3 files changed, 34 insertions(+), 31 deletions(-)