netdev - Re: Request for -stable inclusion (xt

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20170616105211.7byovh3uxlgozyle@alphalink.fr>
Date:   Fri, 16 Jun 2017 12:52:11 +0200
From:   Guillaume Nault <g.nault@...halink.fr>
To:     Pablo Neira Ayuso <pablo@...filter.org>
Cc:     David Miller <davem@...emloft.net>,
        Eric Dumazet <eric.dumazet@...il.com>,
        Denys Fedoryshchenko <nuclearcat@...learcat.com>,
        netdev@...r.kernel.org
Subject: Re: Request for -stable inclusion (xt_TCPMSS)

On Fri, Jun 16, 2017 at 11:59:12AM +0200, Pablo Neira Ayuso wrote:
> Hi Guillaume,
> 
> On Fri, Jun 16, 2017 at 09:45:17AM +0200, Guillaume Nault wrote:
> > Hi David,
> > 
> > Please queue 2638fd0f92d4 ("netfilter: xt_TCPMSS: add more sanity tests on tcph->doff")
> > for -stable.
> > It fixes hard to debug crashes in production, that can be triggered by
> > remote peers.
> 
> What stable kernels you want this in? Does this apply cleanly to them
> all?
> 
I need it (and reviewed/tested it) for 4.9. But the patch applies
cleanly and looks necessary for all stable versions >= 3.16 (not
tested though).

> I can route this for you directly to stable@...r.kernel.org once we
> sort out these questions.
> 
> Thanks!
Great, thanks Pablo. But do you mean I should have Cc-ed
stable@...r.kernel.org directly?