netdev - Re: xen-netback stable backports request (regression fixes)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date:	Thu, 13 Jun 2013 03:38:49 +0100
From:	Ben Hutchings <ben@...adent.org.uk>
To:	Ian Campbell <Ian.Campbell@...rix.com>
Cc:	stable@...r.kernel.org, "David S. Miller" <davem@...emloft.net>,
	xen-devel <xen-devel@...ts.xen.org>, netdev@...r.kernel.org,
	Wei Liu <wei.liu2@...rix.com>
Subject: Re: xen-netback stable backports request (regression fixes)

On Tue, 2013-05-28 at 10:47 +0100, Ian Campbell wrote:
> Hi Dave, stable folks,
> 
> The following set of patches fix a xen netback regression caused by the
> fixes for CVE-2013-0216 / CVE-2013-0217 / XSA-39 (the original change
> was several patches starting at 48856286b64e), we'd like to see them
> backported to stable branches if possible. I think the fixups have now
> been in Linus tree since around the start of May.
> 
> Wei and I are happy to help with backports if necessary. Some of the
> patches are cleanups which make backports easier but if you would prefer
> we could produce backports without them.

For 3.2, I've picked:

> 27f85228 xen-netback: remove skb in xen_netbk_alloc_page

  16ecba26 netback: remove redundant assignment
  9eaee8be xen-netback: fix sparse warning

> 2810e5b9 xen-netback: coalesce slots in TX path and fix regressions
> 03393fd5 xen-netback: don't disconnect frontend when seeing oversize packet
> ac69c26e xen-netback: remove redundent parameter in netbk_count_requests
> 59ccb4eb xen-netback: avoid allocating variable size array on stack
> 37641494 xen-netback: better names for thresholds
> 
> In addition there are some useful related (but not security relevant)
> fixes to netfront:

[Omitted the 3 cosmetic changes]

  3a3bfb61 net: Add net_ratelimited_function and net_<level>_ratelimited macros

> 9ecd1a75 xen-netfront: reduce gso_max_size to account for max TCP header

I just fixed up context for this.

Ben.

-- 
Ben Hutchings
friends: People who know you well, but like you anyway.

Download attachment "signature.asc" of type "application/pgp-signature" (829 bytes)