linux-kernel - Re: [PATCH 4.20 000/145] 4.20.1-stable review

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20190109060529.GA5961@kroah.com>
Date:   Wed, 9 Jan 2019 07:05:29 +0100
From:   Greg Kroah-Hartman <gregkh@...uxfoundation.org>
To:     Dmitrii Tcvetkov <demfloro@...floro.ru>
Cc:     stable@...r.kernel.org, linux-kernel@...r.kernel.org
Subject: Re: [PATCH 4.20 000/145] 4.20.1-stable review

On Tue, Jan 08, 2019 at 07:39:44PM +0000, Dmitrii Tcvetkov wrote:
> Hello, 
> 
> Don't have anything against listed patches, just curious: doesn't upstream commit 
> 574823bfab82d9d8fa47f422778043fbb4b4f50e 
> (Change mincore() to count "mapped" pages rather than "cached" pages) 
> need to be backported as a security fix for CVE-2019-5489[1] to stable kernels?
> 
> [1] https://www.openwall.com/lists/oss-security/2019/01/07/2

Please read the email thread for that patch on the linux kernel mailing
list as to why it is not to be applied at this point in time.

If you are worried about this issue, please weigh in on that thread.

thanks,

greg k-h