* [stable] netfilter fixes for CVE-2016-3134
@ 2016-06-21 23:41 Ben Hutchings
2016-06-22 5:07 ` Greg KH
2016-06-22 6:02 ` Willy Tarreau
0 siblings, 2 replies; 3+ messages in thread
From: Ben Hutchings @ 2016-06-21 23:41 UTC (permalink / raw)
To: stable; +Cc: netfilter-devel, Florian Westphal
[-- Attachment #1: Type: text/plain, Size: 779 bytes --]
Please cherry-pick these for all branches older than 4.6:
commit bdf533de6968e9686df777dc178486f600c6e617
Author: Florian Westphal
<fw@strlen.de>
Date: Tue Mar 22 18:02:49 2016 +0100
netfilter: x_tables: validate e->target_offset early
commit 6e94e0cfb0887e4013b3b930fa6ab1fe6bb6ba91
Author: Florian Westphal <fw@strlen.de>
Date: Tue Mar 22 18:02:50 2016 +0100
netfilter: x_tables: make sure e->next_offset covers remaining blob size
commit 54d83fc74aa9ec72794373cb47432c5f7fb1a309
Author: Florian Westphal <fw@strlen.de>
Date: Tue Mar 22 18:02:52 2016 +0100
netfilter: x_tables: fix unconditional helper
Ben.
--
Ben Hutchings
Nothing is ever a complete failure; it can always serve as a bad
example.
[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 819 bytes --]
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: [stable] netfilter fixes for CVE-2016-3134
2016-06-21 23:41 [stable] netfilter fixes for CVE-2016-3134 Ben Hutchings
@ 2016-06-22 5:07 ` Greg KH
2016-06-22 6:02 ` Willy Tarreau
1 sibling, 0 replies; 3+ messages in thread
From: Greg KH @ 2016-06-22 5:07 UTC (permalink / raw)
To: Ben Hutchings; +Cc: stable, netfilter-devel, Florian Westphal
On Wed, Jun 22, 2016 at 12:41:11AM +0100, Ben Hutchings wrote:
> Please cherry-pick these for all branches older than 4.6:
>
> commit bdf533de6968e9686df777dc178486f600c6e617
> Author: Florian Westphal
> <fw@strlen.de>
> Date: Tue Mar 22 18:02:49 2016 +0100
>
> netfilter: x_tables: validate e->target_offset early
>
> commit 6e94e0cfb0887e4013b3b930fa6ab1fe6bb6ba91
> Author: Florian Westphal <fw@strlen.de>
> Date: Tue Mar 22 18:02:50 2016 +0100
>
> netfilter: x_tables: make sure e->next_offset covers remaining blob size
>
> commit 54d83fc74aa9ec72794373cb47432c5f7fb1a309
> Author: Florian Westphal <fw@strlen.de>
> Date: Tue Mar 22 18:02:52 2016 +0100
>
> netfilter: x_tables: fix unconditional helper
>
> Ben.
Thanks, now applied where relevant.
greg k-h
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: [stable] netfilter fixes for CVE-2016-3134
2016-06-21 23:41 [stable] netfilter fixes for CVE-2016-3134 Ben Hutchings
2016-06-22 5:07 ` Greg KH
@ 2016-06-22 6:02 ` Willy Tarreau
1 sibling, 0 replies; 3+ messages in thread
From: Willy Tarreau @ 2016-06-22 6:02 UTC (permalink / raw)
To: Ben Hutchings; +Cc: stable, netfilter-devel, Florian Westphal
On Wed, Jun 22, 2016 at 12:41:11AM +0100, Ben Hutchings wrote:
> Please cherry-pick these for all branches older than 4.6:
>
> commit bdf533de6968e9686df777dc178486f600c6e617
> Author: Florian Westphal
> <fw@strlen.de>
> Date: Tue Mar 22 18:02:49 2016 +0100
>
> netfilter: x_tables: validate e->target_offset early
>
> commit 6e94e0cfb0887e4013b3b930fa6ab1fe6bb6ba91
> Author: Florian Westphal <fw@strlen.de>
> Date: Tue Mar 22 18:02:50 2016 +0100
>
> netfilter: x_tables: make sure e->next_offset covers remaining blob size
>
> commit 54d83fc74aa9ec72794373cb47432c5f7fb1a309
> Author: Florian Westphal <fw@strlen.de>
> Date: Tue Mar 22 18:02:52 2016 +0100
>
> netfilter: x_tables: fix unconditional helper
>
> Ben.
Queued for 3.10, thanks Ben.
Willy
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2016-06-22 6:02 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2016-06-21 23:41 [stable] netfilter fixes for CVE-2016-3134 Ben Hutchings
2016-06-22 5:07 ` Greg KH
2016-06-22 6:02 ` Willy Tarreau
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).