lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Date: Thu, 28 May 2015 20:41:52 -0700 (PDT) From: David Miller <davem@...emloft.net> To: steffen.klassert@...unet.com Cc: herbert@...dor.apana.org.au, netdev@...r.kernel.org Subject: Re: pull request (net): ipsec 2015-05-28 From: Steffen Klassert <steffen.klassert@...unet.com> Date: Thu, 28 May 2015 09:28:03 +0200 > 1) Fix a race in xfrm_state_lookup_byspi, we need to take > the refcount before we release xfrm_state_lock. > From Li RongQing. > > 2) Fix IV generation on ESN state. We used just the > low order sequence numbers for IV generation on > ESN, as a result the IV can repeat on the same > state. Fix this by using the high order sequence > number bits too and make sure to always initialize > the high order bits with zero. These patches are > serious stable candidates. Fixes from Herbert Xu. > > 3) Fix the skb->mark handling on vti. We don't > reset skb->mark in skb_scrub_packet anymore, > so vti must care to restore the original > value back after it was used to lookup the > vti policy and state. Fixes from Alexander Duyck. > > Please pull or let me know if there are problems. Pulled, thanks Steffen. -- To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
Powered by blists - more mailing lists