netdev - Re: CVE-2019-11683

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <c22a5cdf-c752-c03a-a9ed-d3f8f4b25b98@thelounge.net>
Date:   Sat, 4 May 2019 18:47:46 +0200
From:   Reindl Harald <h.reindl@...lounge.net>
To:     Eric Dumazet <eric.dumazet@...il.com>, netdev@...r.kernel.org
Subject: Re: CVE-2019-11683



Am 04.05.19 um 18:43 schrieb Eric Dumazet:
> In any case, this discussion has nothing to do with netdev@
> 
> Are you suggesting that we should not fix bugs at given period of times,
> just because a 'release of some stable kernel' happened one day before?

sorry to get cynical but that's likely the reason the fix for conncount
panics (https://bugzilla.kernel.org/show_bug.cgi?id=202065) took from
2018-12-28 to 2019-01-29 making it in any release while every kernel
from 4.19.0 to 4.20.4 was just fucked up terrible