lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date:   Wed, 9 Jan 2019 07:05:29 +0100
From:   Greg Kroah-Hartman <gregkh@...uxfoundation.org>
To:     Dmitrii Tcvetkov <demfloro@...floro.ru>
Cc:     stable@...r.kernel.org, linux-kernel@...r.kernel.org
Subject: Re: [PATCH 4.20 000/145] 4.20.1-stable review

On Tue, Jan 08, 2019 at 07:39:44PM +0000, Dmitrii Tcvetkov wrote:
> Hello, 
> 
> Don't have anything against listed patches, just curious: doesn't upstream commit 
> 574823bfab82d9d8fa47f422778043fbb4b4f50e 
> (Change mincore() to count "mapped" pages rather than "cached" pages) 
> need to be backported as a security fix for CVE-2019-5489[1] to stable kernels?
> 
> [1] https://www.openwall.com/lists/oss-security/2019/01/07/2

Please read the email thread for that patch on the linux kernel mailing
list as to why it is not to be applied at this point in time.

If you are worried about this issue, please weigh in on that thread.

thanks,

greg k-h

Powered by blists - more mailing lists