lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Date: Wed, 9 Jan 2019 07:05:29 +0100 From: Greg Kroah-Hartman <gregkh@...uxfoundation.org> To: Dmitrii Tcvetkov <demfloro@...floro.ru> Cc: stable@...r.kernel.org, linux-kernel@...r.kernel.org Subject: Re: [PATCH 4.20 000/145] 4.20.1-stable review On Tue, Jan 08, 2019 at 07:39:44PM +0000, Dmitrii Tcvetkov wrote: > Hello, > > Don't have anything against listed patches, just curious: doesn't upstream commit > 574823bfab82d9d8fa47f422778043fbb4b4f50e > (Change mincore() to count "mapped" pages rather than "cached" pages) > need to be backported as a security fix for CVE-2019-5489[1] to stable kernels? > > [1] https://www.openwall.com/lists/oss-security/2019/01/07/2 Please read the email thread for that patch on the linux kernel mailing list as to why it is not to be applied at this point in time. If you are worried about this issue, please weigh in on that thread. thanks, greg k-h
Powered by blists - more mailing lists