From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mx6-phx2.redhat.com ([209.132.183.39]:60994 "EHLO mx6-phx2.redhat.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1750925AbcDKMDe (ORCPT ); Mon, 11 Apr 2016 08:03:34 -0400 Date: Mon, 11 Apr 2016 08:03:20 -0400 (EDT) From: Vladis Dronov To: Yuki Machida Cc: sasha levin , linux-media@vger.kernel.org, stable@vger.kernel.org, hverkuil@xs4all.nl, oneukum@suse.com, mchehab@osg.samsung.com, ralf@spenneberg.net Message-ID: <573811194.2583282.1460376200290.JavaMail.zimbra@redhat.com> In-Reply-To: <570B33E6.40705@jp.fujitsu.com> References: <570B33E6.40705@jp.fujitsu.com> Subject: Re: Backport a Security Fix for CVE-2015-7833 to v4.1 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Sender: stable-owner@vger.kernel.org List-ID: Hello, I apologize for intercepting, but I believe commit 588afcc1 should not be accepted and reverted in the trees where it was. Reasons: https://patchwork.linuxtv.org/patch/32798/ or https://www.spinics.net/lists/linux-media/msg96936.html Best regards, Vladis Dronov | Red Hat, Inc. | Product Security Engineer ----- Original Message ----- From: "Yuki Machida" To: "sasha levin" Cc: linux-media@vger.kernel.org, stable@vger.kernel.org, hverkuil@xs4all.nl, oneukum@suse.com, vdronov@redhat.com, mchehab@osg.samsung.com, ralf@spenneberg.net Sent: Monday, April 11, 2016 7:19:34 AM Subject: Backport a Security Fix for CVE-2015-7833 to v4.1 Hi Sasha, I conformed that these patches for CVE-2015-7833 not applied at v4.1.21. 588afcc1c0e45358159090d95bf7b246fb67565 fa52bd506f274b7619955917abfde355e3d19ff Could you please apply this CVE-2015-7833 fix for 4.1-stable ? References: https://security-tracker.debian.org/tracker/CVE-2015-7833 https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=588afcc1c0e45358159090d95bf7b246fb67565f https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fa52bd506f274b7619955917abfde355e3d19ffe Regards, Yuki Machida