netdev - Re: pull request (net): ipsec 2015-05-28

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-Id: <20150528.204152.723928818590100061.davem@davemloft.net>
Date:	Thu, 28 May 2015 20:41:52 -0700 (PDT)
From:	David Miller <davem@...emloft.net>
To:	steffen.klassert@...unet.com
Cc:	herbert@...dor.apana.org.au, netdev@...r.kernel.org
Subject: Re: pull request (net): ipsec 2015-05-28

From: Steffen Klassert <steffen.klassert@...unet.com>
Date: Thu, 28 May 2015 09:28:03 +0200

> 1) Fix a race in xfrm_state_lookup_byspi, we need to take
>    the refcount before we release xfrm_state_lock.
>    From Li RongQing.
> 
> 2) Fix IV generation on ESN state. We used just the
>    low order sequence numbers for IV generation on
>    ESN, as a result the IV can repeat on the same
>    state. Fix this by using the  high order sequence
>    number bits too and make sure to always initialize
>    the high order bits with zero. These patches are
>    serious stable candidates. Fixes from Herbert Xu.
> 
> 3) Fix the skb->mark handling on vti. We don't
>    reset skb->mark in skb_scrub_packet anymore,
>    so vti must care to restore the original
>    value back after it was used to lookup the
>    vti policy and state. Fixes from Alexander Duyck.
> 
> Please pull or let me know if there are problems.

Pulled, thanks Steffen.
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html