All of lore.kernel.org
 help / color / mirror / Atom feed
* [stable] netfilter fixes for CVE-2016-3134
@ 2016-06-21 23:41 Ben Hutchings
  2016-06-22  5:07   ` Greg KH
  2016-06-22  6:02   ` Willy Tarreau
  0 siblings, 2 replies; 5+ messages in thread
From: Ben Hutchings @ 2016-06-21 23:41 UTC (permalink / raw)
  To: stable; +Cc: netfilter-devel, Florian Westphal

[-- Attachment #1: Type: text/plain, Size: 779 bytes --]

Please cherry-pick these for all branches older than 4.6:

commit bdf533de6968e9686df777dc178486f600c6e617
Author: Florian Westphal
<fw@strlen.de>
Date:   Tue Mar 22 18:02:49 2016 +0100

    netfilter: x_tables: validate e->target_offset early

commit 6e94e0cfb0887e4013b3b930fa6ab1fe6bb6ba91
Author: Florian Westphal <fw@strlen.de>
Date:   Tue Mar 22 18:02:50 2016 +0100

    netfilter: x_tables: make sure e->next_offset covers remaining blob size

commit 54d83fc74aa9ec72794373cb47432c5f7fb1a309
Author: Florian Westphal <fw@strlen.de>
Date:   Tue Mar 22 18:02:52 2016 +0100

    netfilter: x_tables: fix unconditional helper

Ben.

-- 

Ben Hutchings
Nothing is ever a complete failure; it can always serve as a bad
example.

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 819 bytes --]

^ permalink raw reply	[flat|nested] 5+ messages in thread

* Re: [stable] netfilter fixes for CVE-2016-3134
  2016-06-21 23:41 [stable] netfilter fixes for CVE-2016-3134 Ben Hutchings
@ 2016-06-22  5:07   ` Greg KH
  2016-06-22  6:02   ` Willy Tarreau
  1 sibling, 0 replies; 5+ messages in thread
From: Greg KH @ 2016-06-22  5:07 UTC (permalink / raw)
  To: Ben Hutchings; +Cc: stable, netfilter-devel, Florian Westphal

On Wed, Jun 22, 2016 at 12:41:11AM +0100, Ben Hutchings wrote:
> Please cherry-pick these for all branches older than 4.6:
> 
> commit bdf533de6968e9686df777dc178486f600c6e617
> Author: Florian Westphal
> <fw@strlen.de>
> Date:���Tue Mar 22 18:02:49 2016 +0100
> 
> ����netfilter: x_tables: validate e->target_offset early
> 
> commit 6e94e0cfb0887e4013b3b930fa6ab1fe6bb6ba91
> Author: Florian Westphal <fw@strlen.de>
> Date:���Tue Mar 22 18:02:50 2016 +0100
> 
> ����netfilter: x_tables: make sure e->next_offset covers remaining blob size
> 
> commit 54d83fc74aa9ec72794373cb47432c5f7fb1a309
> Author: Florian Westphal <fw@strlen.de>
> Date:���Tue Mar 22 18:02:52 2016 +0100
> 
> ����netfilter: x_tables: fix unconditional helper
> 
> Ben.

Thanks, now applied where relevant.

greg k-h

^ permalink raw reply	[flat|nested] 5+ messages in thread

* Re: [stable] netfilter fixes for CVE-2016-3134
@ 2016-06-22  5:07   ` Greg KH
  0 siblings, 0 replies; 5+ messages in thread
From: Greg KH @ 2016-06-22  5:07 UTC (permalink / raw)
  To: Ben Hutchings; +Cc: stable, netfilter-devel, Florian Westphal

On Wed, Jun 22, 2016 at 12:41:11AM +0100, Ben Hutchings wrote:
> Please cherry-pick these for all branches older than 4.6:
> 
> commit bdf533de6968e9686df777dc178486f600c6e617
> Author: Florian Westphal
> <fw@strlen.de>
> Date:   Tue Mar 22 18:02:49 2016 +0100
> 
>     netfilter: x_tables: validate e->target_offset early
> 
> commit 6e94e0cfb0887e4013b3b930fa6ab1fe6bb6ba91
> Author: Florian Westphal <fw@strlen.de>
> Date:   Tue Mar 22 18:02:50 2016 +0100
> 
>     netfilter: x_tables: make sure e->next_offset covers remaining blob size
> 
> commit 54d83fc74aa9ec72794373cb47432c5f7fb1a309
> Author: Florian Westphal <fw@strlen.de>
> Date:   Tue Mar 22 18:02:52 2016 +0100
> 
>     netfilter: x_tables: fix unconditional helper
> 
> Ben.

Thanks, now applied where relevant.

greg k-h
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

^ permalink raw reply	[flat|nested] 5+ messages in thread

* Re: [stable] netfilter fixes for CVE-2016-3134
  2016-06-21 23:41 [stable] netfilter fixes for CVE-2016-3134 Ben Hutchings
@ 2016-06-22  6:02   ` Willy Tarreau
  2016-06-22  6:02   ` Willy Tarreau
  1 sibling, 0 replies; 5+ messages in thread
From: Willy Tarreau @ 2016-06-22  6:02 UTC (permalink / raw)
  To: Ben Hutchings; +Cc: stable, netfilter-devel, Florian Westphal

On Wed, Jun 22, 2016 at 12:41:11AM +0100, Ben Hutchings wrote:
> Please cherry-pick these for all branches older than 4.6:
> 
> commit bdf533de6968e9686df777dc178486f600c6e617
> Author: Florian Westphal
> <fw@strlen.de>
> Date:���Tue Mar 22 18:02:49 2016 +0100
> 
> ����netfilter: x_tables: validate e->target_offset early
> 
> commit 6e94e0cfb0887e4013b3b930fa6ab1fe6bb6ba91
> Author: Florian Westphal <fw@strlen.de>
> Date:���Tue Mar 22 18:02:50 2016 +0100
> 
> ����netfilter: x_tables: make sure e->next_offset covers remaining blob size
> 
> commit 54d83fc74aa9ec72794373cb47432c5f7fb1a309
> Author: Florian Westphal <fw@strlen.de>
> Date:���Tue Mar 22 18:02:52 2016 +0100
> 
> ����netfilter: x_tables: fix unconditional helper
> 
> Ben.

Queued for 3.10, thanks Ben.

Willy

^ permalink raw reply	[flat|nested] 5+ messages in thread

* Re: [stable] netfilter fixes for CVE-2016-3134
@ 2016-06-22  6:02   ` Willy Tarreau
  0 siblings, 0 replies; 5+ messages in thread
From: Willy Tarreau @ 2016-06-22  6:02 UTC (permalink / raw)
  To: Ben Hutchings; +Cc: stable, netfilter-devel, Florian Westphal

On Wed, Jun 22, 2016 at 12:41:11AM +0100, Ben Hutchings wrote:
> Please cherry-pick these for all branches older than 4.6:
> 
> commit bdf533de6968e9686df777dc178486f600c6e617
> Author: Florian Westphal
> <fw@strlen.de>
> Date:   Tue Mar 22 18:02:49 2016 +0100
> 
>     netfilter: x_tables: validate e->target_offset early
> 
> commit 6e94e0cfb0887e4013b3b930fa6ab1fe6bb6ba91
> Author: Florian Westphal <fw@strlen.de>
> Date:   Tue Mar 22 18:02:50 2016 +0100
> 
>     netfilter: x_tables: make sure e->next_offset covers remaining blob size
> 
> commit 54d83fc74aa9ec72794373cb47432c5f7fb1a309
> Author: Florian Westphal <fw@strlen.de>
> Date:   Tue Mar 22 18:02:52 2016 +0100
> 
>     netfilter: x_tables: fix unconditional helper
> 
> Ben.

Queued for 3.10, thanks Ben.

Willy
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

^ permalink raw reply	[flat|nested] 5+ messages in thread

end of thread, other threads:[~2016-06-22  6:02 UTC | newest]

Thread overview: 5+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2016-06-21 23:41 [stable] netfilter fixes for CVE-2016-3134 Ben Hutchings
2016-06-22  5:07 ` Greg KH
2016-06-22  5:07   ` Greg KH
2016-06-22  6:02 ` Willy Tarreau
2016-06-22  6:02   ` Willy Tarreau

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.