Em 20-04-2017 09:32, Salvatore Bonaccorso escreveu:
Hi
According to the documentation I should have sent this to
netdev@vger.kernel.org rather than sta...@vger.kernel.org.
Rationale: Whilst 00eff2ebbd229758e90659907724c14dd5a18339 went to
stable, the dfcb9f4f99f1e9a49e43398a7bfbf56927544af1 commit is
missing.
Cc'ing Greg too.
This is probably because I noticed this commit was missing when Greg
posted the commits being considered for backports, then I raised the
concern and Greg decided to pull it too before David replied.
Not sure if this caused some out-of-the-process stuff.
Full quoting, my original misleaded mail:
On Thu, Apr 20, 2017 at 01:44:05PM +0200, Salvatore Bonaccorso wrote:
Hi
Apparently the following commit
dfcb9f4f99f1e9a49e43398a7bfbf56927544af1 (sctp: deny peeloff operation
on asocs with threads sleeping on it)
(was not CC'ed sta...@vger.kernel.org, but was already applied in
3.2.87 and 3.16.42) is missing from 4.9:
2dcab598484185dea7ec22219c76dcdd59e3cb90 was included in 4.9.11 via
00eff2ebbd229758e90659907724c14dd5a18339 . But
dfcb9f4f99f1e9a49e43398a7bfbf56927544af1 is missing from 4.9.
This was assigned CVE-2017-6353.
Reference:
https://marc.info/?l=linux-netdev&m=148785309416337&w=2
http://www.openwall.com/lists/oss-security/2017/02/27/2
Regards,
Salvatore
Regards,
Salvatore
